last executing test programs: 1m45.076834122s ago: executing program 4 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, r3, 0x1, 0x3000000, 0x25dfdbff, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0xf000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 1m34.289248391s ago: executing program 3 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x22, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x201b3324}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) close(r0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x22, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x201b3324}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 1m31.305567291s ago: executing program 4 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, r3, 0x1, 0x3000000, 0x25dfdbff, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0xf000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 1m19.190100452s ago: executing program 3 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x22, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x201b3324}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) close(r0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x22, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x201b3324}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 1m12.236337789s ago: executing program 4 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, r3, 0x1, 0x3000000, 0x25dfdbff, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0xf000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 1m3.743397892s ago: executing program 3 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x22, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x201b3324}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) close(r0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x22, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x201b3324}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 56.358232572s ago: executing program 4 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, r3, 0x1, 0x3000000, 0x25dfdbff, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0xf000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 49.38268147s ago: executing program 3 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x22, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x201b3324}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) close(r0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x22, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x201b3324}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 41.827902896s ago: executing program 4 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, r3, 0x1, 0x3000000, 0x25dfdbff, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0xf000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 35.791624372s ago: executing program 3 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x22, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x201b3324}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) close(r0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x22, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x201b3324}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 27.853999521s ago: executing program 4 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x20, r3, 0x1, 0x3000000, 0x25dfdbff, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0xf000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x20, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x4}]}, 0x20}}, 0x0) 21.725099704s ago: executing program 3 (id=604): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x22, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x201b3324}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) close(r0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x22, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x201b3324}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0xd}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc000}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 17.88795091s ago: executing program 0 (id=1101): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x25dfdbfe, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0xfffffffffffffd97}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) shutdown(r0, 0x1) (async) 17.335269145s ago: executing program 0 (id=1105): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r3, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0xff00) socket(0x5, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000280)={'macvtap0\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4c, 0x6, 0x9, 0x7, 0x6, 0x5, 0x4, 0x2, 0x18, 0x8, [0x8, 0x40, 0xfffffbff, 0x4, 0x44a, 0x9ee4, 0x0, 0x6bee]}}) sendmsg$can_j1939(r4, 0x0, 0x800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 17.024248756s ago: executing program 0 (id=1108): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000007b113400000000008510000002000000850000000000000095003300000000009500a5660e0000009f3be7f40752ed289350a3b5257dfc7e5429619ce459a63169ccb691d1a8f1ab83013d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) read$alg(r3, &(0x7f0000000040)=""/136, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000002c0)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r6, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x14, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, &(0x7f00000001c0), 0x41000, 0x32, '\x00', r4, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x4, 0xb, 0x9}, 0x10, r6, r0, 0x3, &(0x7f0000000500)=[r7], &(0x7f0000000540)=[{0x5, 0x5, 0xa, 0x5}, {0x3, 0x3, 0xa, 0x5}, {0x2, 0x3, 0x7, 0xa}], 0x10, 0x1, @void, @value}, 0x94) 17.015490761s ago: executing program 1 (id=1109): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendto$rxrpc(r1, &(0x7f00000003c0)="e3710f00217c24965647c62556fdfd5a1c8fa69473fa99bc3dc851c71da76d5b70edf18e3d94a3c2d0f4fdf0765a30bb", 0x30, 0x4000, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000100)=""/40, 0x28}, {&(0x7f0000000480)=""/102, 0x66}], 0x2}, 0x2041) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004e00010000006ed06dbb2f8b58e9"], 0x14}}, 0x0) 16.836038163s ago: executing program 0 (id=1111): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f0000000140)={0x80, 0x8, '\x00', 0x0, &(0x7f00000000c0)=[0x0]}) connect$netrom(r0, &(0x7f0000000000)={{0x6, @default}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000080)=0x6, 0x4) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000500)={[{0x2d, 'pids'}]}, 0x6) sendmsg$alg(r3, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="a79fc2128ff09db4d393cfd4e5caac7eeb7a930a80da0e900f0d91dd4d1b987e5aec717f5a47b96cef1262722a2af8e64b3cad2a628b0e5edbea281f05684aa2dfb6681b47a90c1884fd8b219ef84e0b6a4997473f154b6f6eb8275ec82b810380951484d34f5bb0915a053ca3c3165615f2dae37a062e5eb03a608ba9aef99ce240f339378f943cbd802de4cff4cc0b85e0a5c5260fa850", 0x98}, {&(0x7f0000001840)="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", 0x122}, {&(0x7f0000000500)="38c5014e5b9639", 0x7}, {0x0}], 0x4}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r8, &(0x7f0000000540)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x5c, 0x10, 0x401, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x5c}}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000000700)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x6, "6e515d062013e6"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000001700)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001900)={r10, r11, "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", "2e7dbd65db2d9d9b6c5dfe33f3d23fa4820dd6686f601c8d9819320c07cf53003c4a2ae99e520f91ad8f257af4402df98bdcdeb44e7c931c4033a1ed9b966d99e4b96283e4baffe26a2351d362d5f24c08902da328cabcc1724cf130106d5c6648dcb351412566f45473fd455775257532efc91534ce5d1b6e6a13c40cd95ea45992b36b6405099f25d86fea80114409ca847a1af09735c208a8d08ac94beb794db9507aeef99eb8b22687e2f7a3c98b132bdc8d3ead92e4d542ee0a172b68ad044375fc0e0e57ff572311f9aa440d7ee5f3b7aba92376583e35e6e16d5feaba17326c411ac525fe6e468480252aee58496024e2dda9da5a238f130e2b1e4b87146dcce656d51aba937c0d3bb0b143440a910b5124ad4c987150570651a9c450871d9565e918a7d98b070eb5653ce8f7ab8879883d3d0706b0f52093cc51464d0c7114b69c221e151bb60e03f53eddd784fca1ff0508cd93e0e958c422c01ebc8ea96eed50eb0c06561f1efa431d524158d1155233f47cd4e9fe316b9a7a54cd100bf867dc380ba7f2174d82ede1f5e42f7d5716cf6296a52f448f4778b6a6cc0d484909eeffb8329473160041eaf6c1f38efe5ca15f64b6dc6bc61718d672bf3ce3b12914283e890934a18b696ab9c29e4c8a5f03fa30059cc84493ded039beedd70738c2a7f55dcb2fdc56793808329ee684dc6b60e609a37edd8ca5e0906eec5020574d73a049dcdb0effd063b8566f69b3d5b4350cc3b403d664e4a7abc4f899d413c8e8b9744d1c0e1bb02bb59584c30d9f8cfb5b4885ad4e640d8dc7ce36a8eaf070fac413e14b70bdeb019277b7b9f5d0358b0a1d4ce94e9897e5140b5442627c2ca2a33af0df1d4c976264a1ca6412de4e6c78a520892c26ca961e8e8b82bbb3a4428529640e7825abc774dfa9eebf47e46f544bdb9305e9195b7bda9d92003cd1cf4500c88017f21d6b02ae5c3aec72d4aac02a7f86a4276d9d513f9da7e03f820753b829d9b11d8d3e4ba5ae05f8e6f87244adf31df8ad65c70e135451b7ef640d9a56de0bb2c5a522da044368f1f7d0f769fd059cbaa5a264b155ebef6173d60a18992f2a61d5306e6ca399c8de5e05df57768ccae6252b3810bd9ae465c1e40c3463e6c5fd81a8f12590b8b0457e373e41f7a933fe7c7a9ae6cdc7f0052765b2f9ca8f0a2d748efbe6112e5a8bc8994b54e8a2f4599bdc3788a6e483a04ba54f469e995924fe4ada2a1f9c6094862a793a148a48e56ef55bb2ecbe60cafbf6f54604ac2e3e9162b38eca16050bf8f0ac48361e84a24477f2158151bda45c6a02846f02e996fa27f63200d63e9105449e6225e921453ab33c289158cb283c5ee0b1174a9e81e744bfdfa911b3f91334fedb3cb75b444b98e10b5bb0a76cd41e031936c5419fe68f5bab3d90ac688751fab2ca9a6d532b7b4befe74d8d71e0f6882afd711c9cfb909826a5e4ea4b02d23ac0f404f6427aaba32da8864bf2f287436961aa2d564f8fe4fbae09244469bc1511d12c2b59db51e2af1367bfe807252d9c0d26858977b583cd84b34bcc70884cbb9c486d96d3541f69d2624fb2d83c3a9530c3b1f32aff948df80f98595581b112faa270be09a5f59f22b971735d6fe3ed87319963959aabf037afcc0056f7523eccb2fb934b1f2981c47301f67bf2b4bf2a818f428e460969cc3a468ddae77420d05950822edf3c02874238bbbea7e7d95304076ddc9d17ddf3f56aaa77a9d686d2a076c44b7e634e6b2ccc669d56b9283f4b2f80f0130dc1b54a70ee5043734ff5c9ca2ab8410a3549d090e8395696fa7b4bb26071967ef94c2239ff458ab7b3a98416430a99e1d8c34dc429cd0926f3e9ceb613cfb8f648dcad7f32eb65cbf15d7fa3dbbc179ef74f00c114a876576befdcdef0fefe2ce6f37b59b6b8fe8f2ba2a9e12b2bdc66d8b97314bfa37aa0e5ebc7aa42c741c0c3039a40adb7b894b021fba9d61e63105227dd74593d61b615f9c09ff266facb8557d2fef0ab9bb1db97ba2f16de308078b827b4f46509f01ccdd6e06f2247053bb01ffec98fc6469d621edb2b1ec5ceb04e50db9232292d13ba2a7e4fcc09095b9ee7d7bfe538e2fb649bea75633750039b53c066a06cf0db3301de0726fe0d2d647137c4574a9ff047c4ed74f8e3288e1272efcc5853c8e351df60c452af740a0b8861962cd8b8bce49d90ed13adbf0f52184b765d263ccffd4705fd88ca798be97646d85ecce463aa451302acb1c452f9831a5450ef7f01b69e1f896a17c3dc87fc684865a22921065d300a6c49ed133380ed39ad41288d9dbe46dcbcc4030cbda3bf1691dd3b95eae10a24ee6a6e684a4e8d3334fb22f65b4f52f966035ebf5b4c21dd165272874124197a4449aadeed16bb0615d938be011d44a7cb61fd052c04f4257cb2c48d653a6db3c441b0d79dffd2d705c95b77601312062ab353c7bfe6a93013e43c28b62ae887f5c1a82c14105b342fc9256a2dfefe7f0f0e2887b36853165df3abbc8d2e942a275080d2a16667b3b70c0ac972d6067cba024cf5c95900c9b4cd73993da2618ea48eb1fb4d44431f3e13b20bc1eb0a6d8a2a8ab205bcc2c21f34ad0f6f740c507ceb18e4b8b6dde42e18f424aedac60415ba72799c69726b98c43e74cb80c9d8ca744c0dac18e4a29efc9da46cb8bda1a1ea433a366d8033c465f4d211b30250769e9dc65981cd8d20b7d12564a0f5dadce5b24b16ca807898ffec7f75fe2a0e1105fbaebf1c60ca546ebe626320141779702f9d5947cd7405a404da68e2487084323ab67841c397a01c97af550f7d34f48505b472ddac8990997a7d720aea30693a057aa53440e791cafa35e9551d4f81c047ffff130006d0e1a4bd255c14ddb09086e0ae685cb91f4d1079936d9eb6712c8b30f19f2ff67afda96ce84e02244189b29b46a4eb33f3e2e12dc3bcf12e97aeea50e224042957200f16a7ac616ea5da2e2605c522632f1010e0104e7b324f89197d55f07b352ece083be99c4fbee73e4885ec8c36cbbe60a890532b451c873e7f58950daf117a57b98241fda6d04e60fa955281e3de590134f11a16b08a1aef29873da0592b59051b7c6a77a3a18ba137acce301ed1671701a21e94889525d5e183ab2864c66c7d8fc4bf932b81616784631d47807bb52e31a199aebf0535873ef75a38585475dbb282905f336b9e63ee5002ff10e185b290d6cdc5045134c8fa60c7c611563904513c5a03d062982c9e3516bb1a16df08a0a6da6904df3ead95b3e5a38ed86be4db75b4002063f822042930c37735c0d6740a80fa542cd894507281f0d5ff182f0b9758ac43e6f040dbff613d5933f27d8a3d14a62b717cce61e28f59dc8056dacc9d0fa478a283cf5bbae3bda4324139977b12ef1909c1343311deec55eb9932f9e532b5baeaab383acc9cd82ded242d637b6e4c6a30fbd913ff52144403120710a36626662c7633d4e23d1b8488434d29c957307bb85bfe1ad416419cb696a58bcd23e86c530a72e28e9b8fcb03c20a22fc7d7d34cd6ca5a1bad09d7a45e0a90042549bff35a3d24d987827c5780c46011623853a105051ae041a8377a8e1713205d5f8d316562f77b97d279066c4f767b45d6e1a4ad3c8c9f87ce42f1fbae4e2088923d9881179640ef4a83a2ef503933085313415e8fed67606dd4d07cf3a54e7156b2bbe67dd0ff5a6c1d767c91265f4ed76fcc5a73840da1361442915963bb0992983dc0203ae104beb12fcce67545f0bad5be9cf0f004c5a13b41e2feaa67fc914145a9273cf79b6ca2048ce7a5fbda123e4529895881cf1a101840e34430a27cfba100b2a0019c47578731323e720f2e159b6b690b12ad2b850b3564c891266a6ef62f6a48307604d0c5a173e36dff86904f49289ca779b4aa1465a7c8c64f9234d832e663bf43cb47bd446159b1a5805261a25cd598b38d2521e7d27c36b8ec627c5b288fd7d353855debfe21451995d8df9eb38b222e2e1edfde354bc264888f07cb1572ce640fd60e44deb857bb748290f0f5070be464cfdaf0aa8852490b89dd378d64ed97617bed2ba5f1121ad19bc5f86623ed7bcb818116c1b4fbff7bed895f1466d57962d772432b53d15199e08c28a97b694b3d9c47ee0a9dc08602c11540cd3383010d14974f5a4f526791e41ecefe3e550698cca3878d912b86ae50ad4937395e95a4bd5f402997158b0534137de6d0d8f72a0f5cf4ee0c0f6c56a84dc85114a95e776ea91eceec79c027fb0b0972ab562f4b538a58c11236895b353b02ccc56664fc938c673bdf8fab06453495d41658d0881b78edb56b90141bf329d4ef9af96a7bc5b956ca7f11a9c097e83c4cd5c14bed1efeb844bb0383906b0976bcdc64eb2ade5b008055139a47d555c215212fc84bb42408e4d2eda17b77ecce15de8e9e50bc40af60bbfa9aacac9ee2527da685deebf9f44ec65e619802f138efd1cbbfe4d1edc09d3cfac2e1208ac5dbb3fea3bc54c320814bec639f326193beea5aa3cee07b98174da613a9541f952e24a3e0d5ed918af498c0a92a4dca9caffd98b1141f3944bdecd002f66abb10dd34ea84b9f75ea8b3d490b81332f433a8d7d587b859cc336a240cca4215453ec855ea5a89b951a7c936d91b116da432466a36c2c14fe0720eccfc58c7906ec45b5e94808514e46fab7c71fca6b755e745d5a290381f4cbb1c377abe39a75e82dff23824ff770b1e1f6ba58c18b6c752747d4bc61ca2c0629ba2ba9a13efa42213545629853f43f2d94694a5cf20183c25c464fb1008f89562a6887e03ed1a4993ae920bc382a4231ba764d6fd1907b7723a410a0b2cd7f82583dff43a67a1a4c4120fe9dec4b0231c5fa18351f8eb9048aa17fe89baa991e8e90760f6202356aabadecf73a9d116107986b1ad868bacfa0bcc156cc309378c06a39234e04630b08d69543295260af9a9ec5bf07fc9df77b2ae4d5c3c3a79fc85362a98af6badbf12131313f047d6d12aba1f8b575602724b66e77f1108abe71b9e7aff303ca2609b60df8f74d77e032a539aa964e9960da9f4393dd4550df6c1077730ca353cc81edcdcaf85043ac72ba3d166877fbf978940af839895ca0a993bdd8713b039fdda9c8729970b9174d23c05cf5ee270e789c942cd01967fc258f1aafaf3b5ec528ea4fd0698e6be00f2caa4613db1f9d49d190dd17cd97ea23d41256ee555448d33763e1909d52cb32917705f33ee5e8138fd2ac829c530782fe9e968b7bb00c1787263a2bdc38e74c69a82d8e2fe392529593f8bc44941c20b04236e4c68ee1aa0819af166c7580dda783ba5362936127c4d5e362065b347f47cdd7c7b45958366566aa21f5ccbc5e8e8d56cfa431a8809c5e1f39f886f14874e53639afc7437263c3cc"}) 16.812474961s ago: executing program 1 (id=1112): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) splice(r0, 0x0, r4, 0x0, 0x400000008000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bb00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 16.592334765s ago: executing program 0 (id=1114): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000004000ffffffff0200000008000300", @ANYRES32=r3, @ANYBLOB="080002002e"], 0x24}, 0x1, 0x6c00, 0x0, 0x4d080}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl0\x00', r5, 0x2f, 0xf7, 0x8, 0x2000000, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x796, 0x700, 0xf7d9, 0x9}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000210001002dbd7000fedbdf210a205b3a987cae2475864880ff080000020300000000000200ff011b0000000001"], 0x1c}, 0x1, 0x0, 0x0, 0x4054}, 0x14000) 16.545560331s ago: executing program 1 (id=1115): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x5, 0x8, 0x5, 0x13, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d2, 0x85, 0xc, 0x6a, 0x2, 0xc0000001}, @sadb_ident={0x2, 0xa, 0x4, 0x0, 0x9}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_address={0x5, 0x17, 0x6c, 0x20, 0x0, @in6={0xa, 0x4e23, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffff7f}}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @local, 0x96800}}, @sadb_ident={0x2, 0xb, 0x200, 0x0, 0x4}]}, 0x98}}, 0x4004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)={0x28, r2, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x20000000) 16.4877523s ago: executing program 0 (id=1116): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, r1, 0x7175543557143ec1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x50}}, 0x4000000) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) close(r2) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x20044002) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4001) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) write$cgroup_devices(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="249ac98f0000000093eca3be5342f3135311ef4a12207db0ad46465e23b4db4a04a047cf6396e60a3067927c4c87a0331e9fadae19374c83"], 0x8) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x578}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 15.170570155s ago: executing program 1 (id=1117): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000180), 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) socket(0x29, 0x5, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f00000012c0)=@ethtool_gstrings={0x1b, 0x6}}) syz_emit_ethernet(0x4e, &(0x7f0000000400)={@multicast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, 'h{-', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x1c}, {[@routing={0x0, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}]}]}}}}}, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000000040)={@empty, @empty}, 0x8) 15.17000826s ago: executing program 2 (id=1118): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x140c, 0x20, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008040}, 0x4040800) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)={0x18, 0x140c, 0x20, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008040}, 0x4040800) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000080)={0x0, 0xffffffffffffff81, 0x8bd9}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b9400200", 0x3a}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendto$packet(r4, &(0x7f0000000340)="f2d5bd2d8c02548c4c934e09d0ecdd16c7bd413233245ddd3257967cff8d3169f5630da723983d4474a4ba83941467c12202b1daffa454843219c072cfe77f046e4719fd4d6836871774c4193da2bd137ec600a967a548de25f351eaa7a940f3db", 0x61, 0x0, &(0x7f0000000140)={0x11, 0x10, r3, 0x1, 0x80}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400000000fddbdf2500000400", @ANYRES32=r3, @ANYBLOB="60bc010034a705001c00128009000100626f6e64000000000c000280080007"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8010) (async) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400000000fddbdf2500000400", @ANYRES32=r3, @ANYBLOB="60bc010034a705001c00128009000100626f6e64000000000c000280080007"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8010) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580100001000010000000000000000007f0000010000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f0000010000000000000000000000000000000033000000fc0100000000000000000000000000000000000000000000000000000000000005000000000000000000003a67bbc68e396da90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c000400"/272], 0x158}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x404000, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x404000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'erspan0\x00', 0x2}) syz_emit_ethernet(0x56, &(0x7f0000000440)={@multicast, @empty, @void, {@canfd={0xd, {{0x0, 0x1, 0x0, 0x1}, 0x31, 0x3, 0x0, 0x0, "aa0219e84d8bdcf27ed3e4227b2c68246d9d9bf73cd7dbc9b1ef8dced4e8f9fc45a022bedcd83bd39ce2c787d37ccc5250ce7c5b668a0fb421ea97b3ae653bde"}}}}, 0x0) 15.156372654s ago: executing program 1 (id=1119): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0xc, @remote, 0x10001}], 0x1c) 15.146544433s ago: executing program 2 (id=1120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x8, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa000000000000000008001200000000000000000000000000060000000000009e7395f38a19dd90000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000005000600000000000a00"/160], 0xa0}}, 0x0) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0b0400000000000000000200000048000480440001800c0001007061796c6f616400340002800800054000000000080002400000000008000440000000000800034000000000080008400400000008000740000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) 15.134684292s ago: executing program 1 (id=1121): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001a040)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x12, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@delsa={0x3c, 0x11, 0x421, 0x0, 0x0, {}, [@srcaddr={0x14, 0xd, @in=@multicast2}]}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0xed6550a0e7e18b1c, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000080)=@ethtool_eee={0x45, 0x67, 0xb2, 0x9, 0x0, 0x27a9, 0x0, 0x4ecc00a9, [0x6, 0xffffffff]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0) 15.133739705s ago: executing program 2 (id=1122): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, &(0x7f0000000280)) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10, 0x80800) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @broadcast}}}, 0x84) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0x2, 0x4, 0x3f8, 0xffffffff, 0x0, 0x0, 0x1a0, 0xfeffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, @remote}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114900000000008510000002000000b7000000000000009500c20000002c459500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffee0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x70) 15.133356378s ago: executing program 2 (id=1123): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000040)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x0, 0x0, 0x2}}, @CGW_CS_CRC8={0x11e, 0x6, {0x2, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "5bf6ad242712a12236ec1625ac06613fc5f12f67"}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0xfc, 0x0, 0x0, 0x0, "2d2fd7ac2612dea2"}, 0x1}}]}, 0x154}}, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="c1807fc86d1bf965b809be916ac3ab5486c280dbc7c2ae9b78f0a0ed4c68999d5f03a6944577ee059180082b16e425e0724f23bcb7cda029c63cfb2fd97a993c23e2e157cd1623bfe7c668dab1015b285a3269eb67efb43cf220bf0c9cc5567876e66aad196b36a355a8ebc78f6db40201376f32c44667f57fdde10eaf17ddd76517660b8e4c8ea48ba8584417aebd784b39e5ae9dfcce992dc6961209a5a315c6d5e91d0e8e3d811a2cece4d36df74c746cb63f16f79b0eeb2774c20b2e95fcc814401880eea9486f40d136a2", 0xcd, 0x40040, &(0x7f0000000000)={0xa, 0x4e23, 0xfffff0d3, @mcast2, 0x6}, 0x1c) 15.133085538s ago: executing program 2 (id=1124): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a00802020", @ANYRES32=0x0, @ANYBLOB="00040000"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @empty, 0xa}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000200)={0x3a, 0xa, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x3, 0x800, [0x1ff, 0x0, 0x4, 0xb77, 0x6, 0x9, 0xa0, 0x1]}}, @enc_lim={0x4, 0x1, 0x5}, @ra={0x5, 0x2, 0xfffa}]}, 0x60) 15.13129235s ago: executing program 2 (id=1125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000017001c000380180003801400010076657468315f766972745f7769666900"], 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000040000009c08000008000300", @ANYRES32=r3], 0x1c}}, 0xc0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r5, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x2, 0x3, 0x5, 0x4, 0x9, 0x1, 0x401, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xfffff2eb, 0x4, 0x1, 0xfffffff4, 0x498}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={r7, 0x7, 0x10}, 0xc) 1.092408122s ago: executing program 32 (id=1116): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x50, r1, 0x7175543557143ec1, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_SOCKETS={0x4}]}, 0x50}}, 0x4000000) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) close(r2) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x20044002) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4001) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}, [], [], 'wg1\x00', 'gre0\x00', {0xff}}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) write$cgroup_devices(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="249ac98f0000000093eca3be5342f3135311ef4a12207db0ad46465e23b4db4a04a047cf6396e60a3067927c4c87a0331e9fadae19374c83"], 0x8) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x578}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.048978724s ago: executing program 33 (id=1121): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001a100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001a040)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x12, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000003800010325bd700035effd9006"], 0x14}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=@delsa={0x3c, 0x11, 0x421, 0x0, 0x0, {}, [@srcaddr={0x14, 0xd, @in=@multicast2}]}, 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r3, 0xed6550a0e7e18b1c, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x34}}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000a00)={'tunl0\x00', &(0x7f0000000080)=@ethtool_eee={0x45, 0x67, 0xb2, 0x9, 0x0, 0x27a9, 0x0, 0x4ecc00a9, [0x6, 0xffffffff]}}) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e0040"], 0x44}}, 0x0) 0s ago: executing program 34 (id=1125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x70}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000017001c000380180003801400010076657468315f766972745f7769666900"], 0x70}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000040000009c08000008000300", @ANYRES32=r3], 0x1c}}, 0xc0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000540)={r5, 0x8, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff27, 0x0, 0x0}, 0x19) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x2, 0x3, 0x5, 0x4, 0x9, 0x1, 0x401, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xfffff2eb, 0x4, 0x1, 0xfffffff4, 0x498}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={r7, 0x7, 0x10}, 0xc) kernel console output (not intermixed with test programs): g VLAN 0 to HW filter on device team0 [ 175.424666][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.432330][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.508638][ T8325] lo speed is unknown, defaulting to 1000 [ 175.684639][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.692012][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.893293][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.0.676'. [ 176.007242][ T8344] netlink: 44 bytes leftover after parsing attributes in process `syz.0.676'. [ 176.138817][ T5836] Bluetooth: hci3: command 0x041b tx timeout [ 176.246231][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'. [ 176.387270][ T8352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.677'. [ 176.414766][ T8352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.677'. [ 176.511064][ T8170] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 176.545150][ T8170] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 176.647103][ T8170] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 176.666070][ T8170] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 176.728932][ T8364] netlink: 36 bytes leftover after parsing attributes in process `syz.0.681'. [ 176.738727][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.681'. [ 176.833484][ T8100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.839076][ T8367] netlink: 'syz.1.682': attribute type 1 has an invalid length. [ 176.870464][ T8367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.872295][ T8364] Bluetooth: MGMT ver 1.23 [ 177.015164][ T8170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.036013][ T8100] veth0_vlan: entered promiscuous mode [ 177.062579][ T8100] veth1_vlan: entered promiscuous mode [ 177.086300][ T8371] tipc: Started in network mode [ 177.091756][ T8371] tipc: Node identity , cluster identity 4711 [ 177.122243][ T8170] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.159180][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.166503][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.186888][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.194177][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.281846][ T8100] veth0_macvtap: entered promiscuous mode [ 177.312798][ T8100] veth1_macvtap: entered promiscuous mode [ 177.337640][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 177.380231][ T8100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.427112][ T8100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.533222][ T8100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.566900][ T8100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.584397][ T8100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.598017][ T8100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.913149][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.945878][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.101208][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.115941][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.217668][ T5836] Bluetooth: hci3: command 0x041b tx timeout [ 178.296213][ T8170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.426060][ T1783] IPVS: starting estimator thread 0... [ 178.548375][ T8421] IPVS: using max 23 ests per chain, 55200 per kthread [ 178.895285][ T8441] netlink: 'syz.2.702': attribute type 1 has an invalid length. [ 178.994432][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.069193][ T8441] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 179.154909][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.304023][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.641956][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.831083][ T8170] veth0_vlan: entered promiscuous mode [ 179.866121][ T8476] veth0: entered promiscuous mode [ 179.932859][ T8475] veth0: left promiscuous mode [ 179.976738][ T8481] __nla_validate_parse: 8 callbacks suppressed [ 179.976760][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.710'. [ 180.001280][ T8170] veth1_vlan: entered promiscuous mode [ 180.057269][ T8482] netlink: 44 bytes leftover after parsing attributes in process `syz.0.711'. [ 180.102485][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.116408][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.126853][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.143020][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.151327][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.320356][ T8490] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 180.345307][ T8482] 0· (unregistering): left promiscuous mode [ 180.386601][ T8490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.471361][ T8494] veth3: entered promiscuous mode [ 180.503702][ T8494] bond2: (slave veth3): Enslaving as an active interface with a down link [ 180.521096][ T36] bridge_slave_1: left allmulticast mode [ 180.526821][ T36] bridge_slave_1: left promiscuous mode [ 180.533716][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.549064][ T36] bridge_slave_0: left allmulticast mode [ 180.554845][ T36] bridge_slave_0: left promiscuous mode [ 180.561223][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.890992][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.904311][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.915794][ T36] bond0 (unregistering): Released all slaves [ 181.060289][ T8170] veth0_macvtap: entered promiscuous mode [ 181.215724][ T8483] lo speed is unknown, defaulting to 1000 [ 181.220816][ T8170] veth1_macvtap: entered promiscuous mode [ 181.462154][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.659849][ T36] hsr_slave_0: left promiscuous mode [ 181.700498][ T36] hsr_slave_1: left promiscuous mode [ 181.716711][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.724534][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.753339][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.775788][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.871277][ T36] veth1_macvtap: left promiscuous mode [ 181.876916][ T36] veth0_macvtap: left promiscuous mode [ 181.891290][ T36] veth1_vlan: left promiscuous mode [ 181.896807][ T36] veth0_vlan: left promiscuous mode [ 182.218109][ T55] Bluetooth: hci0: command tx timeout [ 182.411621][ T36] team0 (unregistering): Port device team_slave_1 removed [ 182.452121][ T36] team0 (unregistering): Port device team_slave_0 removed [ 182.851051][ T8170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.969346][ T8542] erspan0: entered allmulticast mode [ 183.001027][ T8170] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.016374][ T8170] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.026894][ T8170] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.035851][ T8170] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.162710][ T8552] netlink: 224 bytes leftover after parsing attributes in process `syz.1.730'. [ 183.174290][ T8553] netlink: 'syz.1.730': attribute type 11 has an invalid length. [ 183.191143][ T8553] netlink: 64 bytes leftover after parsing attributes in process `syz.1.730'. [ 183.217032][ T8483] chnl_net:caif_netlink_parms(): no params data found [ 183.343534][ T8561] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 183.359916][ T8563] netlink: 20 bytes leftover after parsing attributes in process `syz.2.732'. [ 183.795079][ T8571] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.735'. [ 183.824306][ T8571] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.735'. [ 183.856016][ T8571] netlink: 69 bytes leftover after parsing attributes in process `syz.1.735'. [ 184.297681][ T55] Bluetooth: hci0: command tx timeout [ 184.616281][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.629129][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.656900][ T8483] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.666146][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.679674][ T8483] bridge_slave_0: entered allmulticast mode [ 184.689690][ T8483] bridge_slave_0: entered promiscuous mode [ 184.749520][ T8483] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.761948][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.774368][ T8483] bridge_slave_1: entered allmulticast mode [ 184.790601][ T8483] bridge_slave_1: entered promiscuous mode [ 184.902017][ T8483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.914928][ T8581] ipt_rpfilter: unknown options [ 184.967893][ T8483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.979485][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.991429][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.162395][ T8483] team0: Port device team_slave_0 added [ 185.199247][ T8483] team0: Port device team_slave_1 added [ 185.322108][ T8593] netlink: 'syz.2.743': attribute type 13 has an invalid length. [ 185.331447][ T8593] netlink: 'syz.2.743': attribute type 58 has an invalid length. [ 185.344320][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.352461][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.381338][ T8593] netlink: 152 bytes leftover after parsing attributes in process `syz.2.743'. [ 185.438064][ T8483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.514250][ T8483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.527711][ T8483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.562265][ T8483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.611260][ T8603] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.746'. [ 185.654110][ T8603] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.746'. [ 185.688446][ T8603] netlink: 69 bytes leftover after parsing attributes in process `syz.1.746'. [ 185.901683][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.950311][ T8483] hsr_slave_0: entered promiscuous mode [ 185.957173][ T8483] hsr_slave_1: entered promiscuous mode [ 186.004628][ T8483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.019717][ T8483] Cannot create hsr debugfs directory [ 186.061339][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.138215][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.152449][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.223070][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.378009][ T55] Bluetooth: hci0: command tx timeout [ 186.414964][ T53] bridge_slave_1: left allmulticast mode [ 186.421381][ T53] bridge_slave_1: left promiscuous mode [ 186.427155][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.436988][ T53] bridge_slave_0: left allmulticast mode [ 186.445675][ T53] bridge_slave_0: left promiscuous mode [ 186.452292][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.104539][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.114353][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.124630][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.150969][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.162861][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.190253][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.215839][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.226796][ T53] bond0 (unregistering): Released all slaves [ 187.439716][ T8633] lo speed is unknown, defaulting to 1000 [ 187.792847][ T8647] xt_CT: No such helper "snmp_trap" [ 187.962722][ T53] hsr_slave_0: left promiscuous mode [ 187.994321][ T53] hsr_slave_1: left promiscuous mode [ 188.008648][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.016156][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.019056][ T8661] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.760'. [ 188.033456][ T8661] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.760'. [ 188.043068][ T8661] netlink: 69 bytes leftover after parsing attributes in process `syz.1.760'. [ 188.067735][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.080594][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.113283][ T53] veth1_macvtap: left promiscuous mode [ 188.119371][ T53] veth0_macvtap: left promiscuous mode [ 188.125189][ T53] veth1_vlan: left promiscuous mode [ 188.130952][ T53] veth0_vlan: left promiscuous mode [ 188.199708][ T8663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.761'. [ 188.291070][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 188.461730][ T5836] Bluetooth: hci0: command tx timeout [ 188.662871][ T53] team0 (unregistering): Port device team_slave_1 removed [ 188.703909][ T53] team0 (unregistering): Port device team_slave_0 removed [ 189.134555][ T8483] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.241200][ T8483] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.257902][ T5836] Bluetooth: hci3: command tx timeout [ 189.334093][ T8679] netlink: 24 bytes leftover after parsing attributes in process `syz.2.763'. [ 189.373332][ T8483] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.409566][ T8483] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.778403][ T8633] chnl_net:caif_netlink_parms(): no params data found [ 189.811825][ T8696] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.157164][ T8715] netlink: 'syz.2.773': attribute type 7 has an invalid length. [ 190.165341][ T8715] netlink: 'syz.2.773': attribute type 8 has an invalid length. [ 190.235877][ T8633] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.246116][ T8633] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.254101][ T8633] bridge_slave_0: entered allmulticast mode [ 190.283883][ T8633] bridge_slave_0: entered promiscuous mode [ 190.340270][ T8483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.359406][ T8633] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.373318][ T8633] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.382756][ T8633] bridge_slave_1: entered allmulticast mode [ 190.392200][ T8633] bridge_slave_1: entered promiscuous mode [ 190.423335][ T8483] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.561858][ T8633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.584343][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.591638][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.616859][ T8724] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 190.649813][ T8633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.892134][ T8633] team0: Port device team_slave_0 added [ 190.943088][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.950359][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.972561][ T8633] team0: Port device team_slave_1 added [ 191.046528][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.054129][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.081495][ T8633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.095500][ T8633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.103562][ T8633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.130162][ T8633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.153142][ T8732] syzkaller0: entered promiscuous mode [ 191.158854][ T8732] syzkaller0: entered allmulticast mode [ 191.275246][ T8633] hsr_slave_0: entered promiscuous mode [ 191.285013][ T8633] hsr_slave_1: entered promiscuous mode [ 191.296231][ T8633] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.304693][ T8633] Cannot create hsr debugfs directory [ 191.339680][ T55] Bluetooth: hci3: command tx timeout [ 191.503252][ T8746] netlink: 'syz.2.780': attribute type 18 has an invalid length. [ 191.610306][ T8746] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.619522][ T8746] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.628793][ T8746] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.638156][ T8746] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.694017][ T8753] netlink: 'syz.1.782': attribute type 12 has an invalid length. [ 191.706004][ T8753] __nla_validate_parse: 4 callbacks suppressed [ 191.706022][ T8753] netlink: 132 bytes leftover after parsing attributes in process `syz.1.782'. [ 191.808620][ T8755] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.783'. [ 191.835294][ T8755] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.783'. [ 191.867662][ T8755] netlink: 69 bytes leftover after parsing attributes in process `syz.2.783'. [ 192.087770][ T8764] xt_ecn: cannot match TCP bits for non-tcp packets [ 192.267236][ T8483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.300719][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'. [ 192.327602][ T8772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'. [ 192.372551][ T8772] netlink: 92 bytes leftover after parsing attributes in process `syz.2.788'. [ 192.531886][ T8483] veth0_vlan: entered promiscuous mode [ 192.546883][ T8786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.792'. [ 192.570971][ T8483] veth1_vlan: entered promiscuous mode [ 192.733429][ T8483] veth0_macvtap: entered promiscuous mode [ 192.784100][ T8483] veth1_macvtap: entered promiscuous mode [ 192.801213][ T8793] netlink: 256 bytes leftover after parsing attributes in process `syz.1.794'. [ 192.813720][ T8793] unsupported nlmsg_type 40 [ 192.844199][ T8633] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.884055][ T8483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.909749][ T8633] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 192.932641][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.794'. [ 192.976196][ T8633] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 192.996747][ T8633] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.016910][ T8483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.049872][ T8483] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.062878][ T8483] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.072841][ T8483] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.083319][ T8483] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.105875][ T8801] xt_cgroup: path and classid specified [ 193.172862][ T8801] netlink: 'syz.0.797': attribute type 1 has an invalid length. [ 193.282950][ T8806] netlink: zone id is out of range [ 193.301287][ T8806] netlink: zone id is out of range [ 193.328351][ T8806] netlink: zone id is out of range [ 193.333580][ T8806] netlink: zone id is out of range [ 193.350336][ T8809] netlink: 'syz.2.799': attribute type 1 has an invalid length. [ 193.374608][ T8806] netlink: zone id is out of range [ 193.401621][ T8806] netlink: zone id is out of range [ 193.406826][ T8806] netlink: zone id is out of range [ 193.422587][ T55] Bluetooth: hci3: command 0x040f tx timeout [ 193.465835][ T8806] netlink: zone id is out of range [ 193.472496][ T8806] netlink: zone id is out of range [ 193.486121][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.530298][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.630906][ T8633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.722098][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.754943][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.773928][ T8633] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.868255][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.875523][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.927858][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.935112][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.276122][ T1013] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.472860][ T8633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 194.496198][ T8633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.665223][ T1013] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.752827][ T8836] netlink: 'syz.2.809': attribute type 1 has an invalid length. [ 194.790440][ T1013] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.844525][ T8838] netlink: 'syz.2.809': attribute type 1 has an invalid length. [ 195.066162][ T1013] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.118883][ T8845] xt_cluster: you have exceeded the maximum number of cluster nodes (257 > 32) [ 195.497970][ T5836] Bluetooth: hci3: command 0x040f tx timeout [ 195.609029][ T1013] bridge_slave_1: left allmulticast mode [ 195.614766][ T1013] bridge_slave_1: left promiscuous mode [ 195.641071][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.658351][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.685065][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.691228][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.721615][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.731739][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 195.779832][ T1013] bridge_slave_0: left allmulticast mode [ 195.794796][ T1013] bridge_slave_0: left promiscuous mode [ 195.824491][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.163756][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.175723][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.186304][ T1013] bond0 (unregistering): Released all slaves [ 196.506799][ T8857] lo speed is unknown, defaulting to 1000 [ 196.587098][ T8633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.707437][ T8889] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.922512][ T8900] __nla_validate_parse: 13 callbacks suppressed [ 196.922536][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.822'. [ 196.949393][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.822'. [ 197.088852][ T1013] hsr_slave_0: left promiscuous mode [ 197.123194][ T1013] hsr_slave_1: left promiscuous mode [ 197.143011][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.180920][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.203681][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.227938][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.308698][ T1013] veth1_macvtap: left promiscuous mode [ 197.314428][ T1013] veth0_macvtap: left promiscuous mode [ 197.321405][ T1013] veth1_vlan: left promiscuous mode [ 197.326898][ T1013] veth0_vlan: left promiscuous mode [ 197.581625][ T55] Bluetooth: hci3: command 0x040f tx timeout [ 197.682521][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 197.819634][ T55] Bluetooth: hci0: command tx timeout [ 197.987718][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 198.030980][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 198.676885][ T8945] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.830'. [ 198.710919][ T8945] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.830'. [ 198.738777][ T8945] netlink: 69 bytes leftover after parsing attributes in process `syz.2.830'. [ 198.781830][ T8948] netlink: 'syz.0.833': attribute type 49 has an invalid length. [ 198.915222][ T8857] chnl_net:caif_netlink_parms(): no params data found [ 198.943955][ T8633] veth0_vlan: entered promiscuous mode [ 198.952057][ T8952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.834'. [ 198.993496][ T8952] bridge0: port 1(vlan2) entered blocking state [ 199.000424][ T8952] bridge0: port 1(vlan2) entered disabled state [ 199.007100][ T8952] vlan2: entered allmulticast mode [ 199.013371][ T8952] bridge0: entered allmulticast mode [ 199.023042][ T8952] vlan2: left allmulticast mode [ 199.028420][ T8952] bridge0: left allmulticast mode [ 199.051510][ T8633] veth1_vlan: entered promiscuous mode [ 199.145116][ T5844] hid-generic 0005:046D:0A0E.0001: item fetching failed at offset 0/1 [ 199.168739][ T5844] hid-generic 0005:046D:0A0E.0001: probe with driver hid-generic failed with error -22 [ 199.225771][ T8956] netlink: 32 bytes leftover after parsing attributes in process `syz.0.836'. [ 199.291122][ T8857] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.307560][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.314902][ T8857] bridge_slave_0: entered allmulticast mode [ 199.348131][ T8857] bridge_slave_0: entered promiscuous mode [ 199.389992][ T8857] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.400151][ T8857] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.409053][ T8857] bridge_slave_1: entered allmulticast mode [ 199.418937][ T8857] bridge_slave_1: entered promiscuous mode [ 199.554579][ T8633] veth0_macvtap: entered promiscuous mode [ 199.575696][ T8976] netlink: 'syz.1.841': attribute type 11 has an invalid length. [ 199.581843][ T8857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.599012][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.611546][ T8633] veth1_macvtap: entered promiscuous mode [ 199.626836][ T8976] netlink: 224 bytes leftover after parsing attributes in process `syz.1.841'. [ 199.649550][ T8857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.816421][ T8633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.847246][ T8633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.903545][ T55] Bluetooth: hci0: command tx timeout [ 199.924862][ T8985] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.844'. [ 199.960928][ T8857] team0: Port device team_slave_0 added [ 199.982618][ T8857] team0: Port device team_slave_1 added [ 200.015332][ T8633] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.037512][ T8633] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.058898][ T8633] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.077439][ T8633] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.269540][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.276990][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.343203][ T8857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.378439][ T8857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.402443][ T8857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.432107][ T8857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.634917][ T8857] hsr_slave_0: entered promiscuous mode [ 200.641904][ T8857] hsr_slave_1: entered promiscuous mode [ 200.649971][ T8857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.658399][ T8857] Cannot create hsr debugfs directory [ 200.674383][ T9010] net_ratelimit: 16 callbacks suppressed [ 200.674402][ T9010] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 200.703455][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.726925][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.736420][ T9009] netlink: 'syz.1.852': attribute type 29 has an invalid length. [ 200.840877][ T9016] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 200.897197][ T9009] netlink: 'syz.1.852': attribute type 29 has an invalid length. [ 200.929761][ T9020] netlink: ct family unspecified [ 200.934811][ T9020] openvswitch: netlink: Actions may not be safe on all matching packets [ 201.038887][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.060245][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.297033][ T9030] ªªªªªª†³?ÂHº: renamed from lo [ 201.721585][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.840423][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.908288][ T9046] xt_CT: No such helper "snmp" [ 201.969952][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.980573][ T55] Bluetooth: hci0: command tx timeout [ 202.060336][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.074452][ T8857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.084960][ T8857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.096482][ T8857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.107829][ T8857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.191585][ T12] bridge_slave_1: left allmulticast mode [ 202.197510][ T12] bridge_slave_1: left promiscuous mode [ 202.203269][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.212706][ T12] bridge_slave_0: left allmulticast mode [ 202.218974][ T12] bridge_slave_0: left promiscuous mode [ 202.224757][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.584843][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.599989][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.619143][ T9055] __nla_validate_parse: 10 callbacks suppressed [ 202.619166][ T9055] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.867'. [ 202.636227][ T12] bond0 (unregistering): Released all slaves [ 202.651529][ T9055] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.867'. [ 202.661227][ T9055] netlink: 69 bytes leftover after parsing attributes in process `syz.1.867'. [ 202.946866][ T9061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.870'. [ 202.971366][ T9065] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 203.065801][ T8857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.373225][ T8857] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.417544][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 203.418605][ T97] block nbd0: Possible stuck request ffff888024a57000: control (read@0,4096B). Runtime 90 seconds [ 203.482974][ T12] hsr_slave_0: left promiscuous mode [ 203.495116][ T12] hsr_slave_1: left promiscuous mode [ 203.513575][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.523027][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.532604][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.532629][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.571675][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.577697][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.586765][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.633806][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.648842][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.713174][ T12] veth1_macvtap: left promiscuous mode [ 203.719415][ T12] veth0_macvtap: left promiscuous mode [ 203.725255][ T12] veth1_vlan: left promiscuous mode [ 203.730880][ T12] veth0_vlan: left promiscuous mode [ 204.067971][ T55] Bluetooth: hci0: command tx timeout [ 204.224248][ T12] team0 (unregistering): Port device team_slave_1 removed [ 204.265170][ T12] team0 (unregistering): Port device team_slave_0 removed [ 204.685980][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.693253][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.784778][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.792030][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.956458][ T9083] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 205.189089][ T9116] netlink: 88 bytes leftover after parsing attributes in process `syz.0.884'. [ 205.219030][ T9116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.884'. [ 205.251583][ T9116] netlink: 24 bytes leftover after parsing attributes in process `syz.0.884'. [ 205.536962][ T9083] chnl_net:caif_netlink_parms(): no params data found [ 205.624709][ T8857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.657713][ T55] Bluetooth: hci3: command tx timeout [ 205.772177][ T9083] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.782896][ T9083] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.791073][ T9083] bridge_slave_0: entered allmulticast mode [ 205.799614][ T9083] bridge_slave_0: entered promiscuous mode [ 205.820530][ T9083] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.831258][ T9083] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.838715][ T9083] bridge_slave_1: entered allmulticast mode [ 205.846162][ T9083] bridge_slave_1: entered promiscuous mode [ 205.937916][ T9083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.981358][ T9083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.103774][ T9083] team0: Port device team_slave_0 added [ 206.131316][ T9083] team0: Port device team_slave_1 added [ 206.224745][ T9083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.233456][ T9083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.277888][ T9083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.295028][ T9083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.304160][ T9083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.331454][ T9083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.430606][ T8857] veth0_vlan: entered promiscuous mode [ 206.502369][ T9083] hsr_slave_0: entered promiscuous mode [ 206.512108][ T9083] hsr_slave_1: entered promiscuous mode [ 206.562780][ T9083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.587526][ T9083] Cannot create hsr debugfs directory [ 206.604133][ T9168] netlink: 'syz.1.896': attribute type 29 has an invalid length. [ 206.613357][ T9165] netlink: 'syz.1.896': attribute type 29 has an invalid length. [ 206.711313][ T9165] netlink: 'syz.1.896': attribute type 29 has an invalid length. [ 206.741647][ T8857] veth1_vlan: entered promiscuous mode [ 206.856870][ T9179] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 207.129959][ T8857] veth0_macvtap: entered promiscuous mode [ 207.165854][ T8857] veth1_macvtap: entered promiscuous mode [ 207.262288][ T8857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.292933][ T9197] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 207.324941][ T8857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.355248][ T8857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.379663][ T8857] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.397686][ T8857] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.408462][ T8857] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.492811][ T9207] netlink: 'syz.2.912': attribute type 4 has an invalid length. [ 207.550170][ T9207] netlink: 'syz.2.912': attribute type 4 has an invalid length. [ 207.638074][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.649076][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.720507][ T9214] netlink: 188 bytes leftover after parsing attributes in process `syz.2.914'. [ 207.737994][ T55] Bluetooth: hci3: command tx timeout [ 207.800688][ T9211] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 207.914919][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.925935][ T9083] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.934553][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.949975][ T9219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.915'. [ 207.987237][ T9083] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.079023][ T9083] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.200338][ T9083] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 208.981505][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.001426][ T9238] syzkaller1: entered promiscuous mode [ 209.006970][ T9238] syzkaller1: entered allmulticast mode [ 209.070922][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.110549][ T9083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.139052][ T9083] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.152873][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.160153][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.194024][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.215159][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.222469][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.285008][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.314510][ T9083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.657269][ T13] bridge_slave_1: left allmulticast mode [ 209.669938][ T13] bridge_slave_1: left promiscuous mode [ 209.675791][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.730704][ T13] bridge_slave_0: left allmulticast mode [ 209.747116][ T13] bridge_slave_0: left promiscuous mode [ 209.764811][ T9262] netlink: 'syz.1.922': attribute type 16 has an invalid length. [ 209.767738][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.772911][ T9262] netlink: 'syz.1.922': attribute type 17 has an invalid length. [ 209.817769][ T55] Bluetooth: hci3: command tx timeout [ 209.835824][ T9265] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 209.861719][ T9265] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 209.891910][ T9265] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 210.142601][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.155573][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.165855][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.175708][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.184818][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.421679][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.433674][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.444957][ T13] bond0 (unregistering): Released all slaves [ 210.623895][ T9083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.657972][ T9267] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 211.359496][ T13] hsr_slave_0: left promiscuous mode [ 211.366043][ T13] hsr_slave_1: left promiscuous mode [ 211.384540][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.397401][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.455079][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.470085][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.512818][ T13] veth1_macvtap: left promiscuous mode [ 211.520489][ T13] veth0_macvtap: left promiscuous mode [ 211.526407][ T13] veth1_vlan: left promiscuous mode [ 211.534727][ T13] veth0_vlan: left promiscuous mode [ 211.897502][ T5836] Bluetooth: hci3: command tx timeout [ 212.217768][ T5836] Bluetooth: hci0: command tx timeout [ 212.810515][ T13] team0 (unregistering): Port device team_slave_1 removed [ 212.851734][ T13] team0 (unregistering): Port device team_slave_0 removed [ 213.515862][ T9083] veth0_vlan: entered promiscuous mode [ 213.554550][ T9083] veth1_vlan: entered promiscuous mode [ 213.626348][ T9267] chnl_net:caif_netlink_parms(): no params data found [ 213.727979][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.940'. [ 213.812834][ T9342] bond0: (slave bond_slave_1): Releasing backup interface [ 213.822701][ T9342] bond_slave_1 (unregistering): left allmulticast mode [ 213.936798][ T9083] veth0_macvtap: entered promiscuous mode [ 213.978877][ T9083] veth1_macvtap: entered promiscuous mode [ 214.046478][ T9267] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.052574][ T9356] validate_nla: 2 callbacks suppressed [ 214.052599][ T9356] netlink: 'syz.2.944': attribute type 10 has an invalid length. [ 214.068381][ T9267] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.075957][ T9267] bridge_slave_0: entered allmulticast mode [ 214.090076][ T9267] bridge_slave_0: entered promiscuous mode [ 214.100553][ T9267] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.108171][ T9267] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.115443][ T9267] bridge_slave_1: entered allmulticast mode [ 214.123032][ T9267] bridge_slave_1: entered promiscuous mode [ 214.162565][ T9356] veth0_vlan: entered allmulticast mode [ 214.170176][ T9356] veth0_vlan: left promiscuous mode [ 214.180050][ T9356] veth0_vlan: entered promiscuous mode [ 214.188184][ T9356] team0: Device veth0_vlan failed to register rx_handler [ 214.213777][ T9267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.239631][ T9267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.307839][ T5836] Bluetooth: hci0: command tx timeout [ 214.349759][ T9267] team0: Port device team_slave_0 added [ 214.368358][ T9083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.389130][ T9267] team0: Port device team_slave_1 added [ 214.461741][ T9083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.487509][ T9267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.494620][ T9267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.521974][ T9267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.576512][ T9267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.585966][ T9267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.616088][ T9267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.642064][ T9083] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.664200][ T9083] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.673338][ T9083] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.682280][ T9083] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.830364][ T9267] hsr_slave_0: entered promiscuous mode [ 214.846137][ T9267] hsr_slave_1: entered promiscuous mode [ 214.859640][ T9267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.877503][ T9267] Cannot create hsr debugfs directory [ 215.031421][ T9383] netlink: 'syz.2.954': attribute type 1 has an invalid length. [ 215.092552][ T9384] veth7: entered promiscuous mode [ 215.150183][ T9383] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 215.262401][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.297362][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.596463][ T9307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.631956][ T9307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.895677][ T9406] netlink: 156 bytes leftover after parsing attributes in process `syz.1.957'. [ 216.248777][ T9414] netlink: 76 bytes leftover after parsing attributes in process `syz.0.960'. [ 216.250441][ T1152] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.362476][ T1152] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.377629][ T5141] Bluetooth: hci0: command tx timeout [ 216.420212][ T9416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.961'. [ 216.544514][ T1152] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.582553][ T9267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.601410][ T9267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.632788][ T9267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.665576][ T1152] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.680239][ T9267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.786187][ T9267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.823158][ T9267] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.865161][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.872570][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.882563][ T1152] bridge_slave_1: left allmulticast mode [ 216.888765][ T1152] bridge_slave_1: left promiscuous mode [ 216.894647][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.906231][ T1152] bridge_slave_0: left allmulticast mode [ 216.912719][ T1152] bridge_slave_0: left promiscuous mode [ 216.918722][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.017708][ T5141] Bluetooth: hci2: command 0x0406 tx timeout [ 217.023876][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 217.255953][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.272081][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.293044][ T1152] bond0 (unregistering): Released all slaves [ 217.355743][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.363060][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.852717][ T9440] netlink: 100 bytes leftover after parsing attributes in process `syz.0.967'. [ 218.001694][ T9448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.969'. [ 218.052980][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.061559][ T1152] hsr_slave_0: left promiscuous mode [ 218.074218][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.077771][ T9451] netlink: 'syz.2.969': attribute type 39 has an invalid length. [ 218.095299][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.098944][ T1152] hsr_slave_1: left promiscuous mode [ 218.118724][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.127831][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.135559][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.146173][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.154485][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.161806][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.224812][ T1152] veth1_macvtap: left promiscuous mode [ 218.233175][ T1152] veth0_macvtap: left promiscuous mode [ 218.242808][ T1152] veth1_vlan: left promiscuous mode [ 218.250314][ T1152] veth0_vlan: left promiscuous mode [ 218.461182][ T5836] Bluetooth: hci0: command tx timeout [ 218.824267][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 218.874626][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 219.170621][ T9459] netlink: 36 bytes leftover after parsing attributes in process `syz.0.972'. [ 219.444937][ T9449] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 219.765968][ T9476] netlink: 'syz.2.977': attribute type 1 has an invalid length. [ 219.966465][ T9476] bond3: entered promiscuous mode [ 219.972665][ T9476] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.984533][ T9486] netlink: 32 bytes leftover after parsing attributes in process `syz.2.977'. [ 219.993482][ T9489] netlink: 20 bytes leftover after parsing attributes in process `syz.0.979'. [ 219.993661][ T9488] netlink: 20 bytes leftover after parsing attributes in process `syz.0.979'. [ 220.028343][ T9489] netlink: 72 bytes leftover after parsing attributes in process `syz.0.979'. [ 220.070116][ T9488] netlink: 72 bytes leftover after parsing attributes in process `syz.0.979'. [ 220.098054][ T9449] chnl_net:caif_netlink_parms(): no params data found [ 220.208528][ T9267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.217918][ T5836] Bluetooth: hci3: command tx timeout [ 220.330658][ T9449] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.339659][ T9449] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.347870][ T9449] bridge_slave_0: entered allmulticast mode [ 220.356052][ T9449] bridge_slave_0: entered promiscuous mode [ 220.365274][ T9449] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.373374][ T9449] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.381585][ T9449] bridge_slave_1: entered allmulticast mode [ 220.389785][ T9449] bridge_slave_1: entered promiscuous mode [ 220.407053][ T9509] netlink: 36 bytes leftover after parsing attributes in process `syz.0.982'. [ 220.476416][ T9449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.497530][ T9449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.552105][ T9449] team0: Port device team_slave_0 added [ 220.571530][ T9449] team0: Port device team_slave_1 added [ 220.583957][ T9267] veth0_vlan: entered promiscuous mode [ 220.626724][ T9449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.634506][ T9449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.661006][ T9449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.674471][ T9449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.682095][ T9449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.708513][ T9449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.735692][ T9267] veth1_vlan: entered promiscuous mode [ 220.783496][ T9449] hsr_slave_0: entered promiscuous mode [ 220.790687][ T9449] hsr_slave_1: entered promiscuous mode [ 220.797133][ T9449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.805611][ T9449] Cannot create hsr debugfs directory [ 220.981105][ T9267] veth0_macvtap: entered promiscuous mode [ 220.992637][ T9267] veth1_macvtap: entered promiscuous mode [ 221.032538][ T9267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.050850][ T9267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.071713][ T9267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.080877][ T9267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.090091][ T9267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.098926][ T9267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.393972][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.421436][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.536783][ T9307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.539610][ T9449] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.557117][ T9307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.609915][ T9449] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.662328][ T9449] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.719921][ T9449] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.755009][ T9536] batadv_slave_1: left promiscuous mode [ 221.787370][ T9536] batadv_slave_1: entered allmulticast mode [ 222.044502][ T9449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.091450][ T9449] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.256045][ T9307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.288248][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.295490][ T9310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.307393][ T5836] Bluetooth: hci3: command tx timeout [ 222.329988][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.337189][ T9310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.365705][ T9307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.481946][ T9307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.570722][ T9307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.785119][ T9307] bridge_slave_1: left allmulticast mode [ 222.795728][ T9307] bridge_slave_1: left promiscuous mode [ 222.802085][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.813417][ T9307] bridge_slave_0: left allmulticast mode [ 222.819532][ T9307] bridge_slave_0: left promiscuous mode [ 222.825322][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.164573][ T9570] netlink: 64 bytes leftover after parsing attributes in process `syz.1.997'. [ 223.424280][ T9307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.450105][ T9307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.470185][ T9307] bond0 (unregistering): Released all slaves [ 223.604866][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.619942][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.628119][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.636269][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.648265][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.763388][ T9580] xt_l2tp: v2 tid > 0xffff: 150994944 [ 223.763541][ T9582] netlink: 'syz.0.1000': attribute type 12 has an invalid length. [ 223.814082][ T9582] ipt_ECN: cannot use operation on non-tcp rule [ 223.850938][ T9449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.045472][ T9575] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 224.078821][ T9578] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 224.083047][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 224.207878][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1003'. [ 224.243002][ T9307] hsr_slave_0: left promiscuous mode [ 224.253844][ T9307] hsr_slave_1: left promiscuous mode [ 224.264556][ T9307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.275996][ T9307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.294599][ T9307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.310454][ T9307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.385986][ T9307] veth1_macvtap: left promiscuous mode [ 224.392402][ T55] Bluetooth: hci3: command tx timeout [ 224.398390][ T9307] veth0_macvtap: left promiscuous mode [ 224.404271][ T9307] veth1_vlan: left promiscuous mode [ 224.409984][ T9307] veth0_vlan: left promiscuous mode [ 224.880897][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1007'. [ 225.315830][ T9307] team0 (unregistering): Port device team_slave_1 removed [ 225.371828][ T9307] team0 (unregistering): Port device team_slave_0 removed [ 225.739188][ T55] Bluetooth: hci0: command tx timeout [ 226.365361][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1011'. [ 226.383678][ T9630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1011'. [ 226.403332][ T9630] netlink: 'syz.0.1011': attribute type 3 has an invalid length. [ 226.433352][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1012'. [ 226.468045][ T55] Bluetooth: hci3: command tx timeout [ 226.550340][ T9575] chnl_net:caif_netlink_parms(): no params data found [ 226.795202][ T9449] veth0_vlan: entered promiscuous mode [ 227.027615][ T9575] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.050389][ T9575] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.066787][ T9575] bridge_slave_0: entered allmulticast mode [ 227.081312][ T9575] bridge_slave_0: entered promiscuous mode [ 227.101542][ T9575] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.119330][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.126681][ T9575] bridge_slave_1: entered allmulticast mode [ 227.155720][ T9575] bridge_slave_1: entered promiscuous mode [ 227.165129][ T9449] veth1_vlan: entered promiscuous mode [ 227.186422][ T9651] bond0: (slave netdevsim0): Releasing backup interface [ 227.198667][ T9651] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 227.484726][ T9671] netlink: 'syz.0.1021': attribute type 1 has an invalid length. [ 227.516625][ T9671] netlink: 'syz.0.1021': attribute type 2 has an invalid length. [ 227.827571][ T55] Bluetooth: hci0: command tx timeout [ 227.879994][ T9575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.946755][ T9675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 227.959252][ T9676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'. [ 227.999279][ T9575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.134430][ T9678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 228.135223][ T9575] team0: Port device team_slave_0 added [ 228.162996][ T9575] team0: Port device team_slave_1 added [ 228.170280][ T9449] veth0_macvtap: entered promiscuous mode [ 228.193502][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1023'. [ 228.324158][ T9679] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.347912][ T9449] veth1_macvtap: entered promiscuous mode [ 228.357087][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.367581][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.422012][ T9575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.436137][ T9575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.469679][ T9575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.504536][ T9575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.538279][ T55] Bluetooth: hci3: command tx timeout [ 228.544423][ T9684] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1025'. [ 228.662356][ T9575] hsr_slave_0: entered promiscuous mode [ 228.680719][ T9575] hsr_slave_1: entered promiscuous mode [ 228.690965][ T9575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.712041][ T9575] Cannot create hsr debugfs directory [ 228.723429][ T9449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.802119][ T9449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.949558][ T9449] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.969452][ T9449] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.994257][ T9449] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.003663][ T9449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.130742][ T9705] tipc: Enabled bearer , priority 10 [ 229.199610][ T9708] tipc: Enabling of bearer rejected, already enabled [ 229.362088][ T9716] bond0: entered promiscuous mode [ 229.367200][ T9716] bond_slave_0: entered promiscuous mode [ 229.432623][ T9307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.444174][ T9307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.652329][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.680253][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.897893][ T55] Bluetooth: hci0: command tx timeout [ 230.008098][ T9575] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 230.021063][ T9575] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 230.041305][ T9748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.067481][ T9747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.094271][ T9575] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 230.115017][ T9575] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 230.190813][ T1139] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.226045][ T9751] syz.1.1046 uses old SIOCAX25GETINFO [ 230.296792][ T1139] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.414993][ T1139] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.494230][ T1139] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.515865][ T9575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.538489][ T9575] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.556755][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.563934][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.580859][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.588045][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.742001][ T1139] bridge_slave_1: left allmulticast mode [ 230.748185][ T1139] bridge_slave_1: left promiscuous mode [ 230.754152][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.766730][ T1139] bridge_slave_0: left allmulticast mode [ 230.773373][ T1139] bridge_slave_0: left promiscuous mode [ 230.782510][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.114760][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.162786][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.199401][ T1139] bond0 (unregistering): Released all slaves [ 231.399155][ T9765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.667073][ T9575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.706150][ T9776] netlink: 'syz.2.1052': attribute type 1 has an invalid length. [ 231.836527][ T9778] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.884384][ T1139] hsr_slave_0: left promiscuous mode [ 231.898675][ T1139] hsr_slave_1: left promiscuous mode [ 231.905150][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.913488][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.932707][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.946491][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.021652][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.032689][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.041797][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.052555][ T1139] veth1_macvtap: left promiscuous mode [ 232.068602][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.071508][ T1139] veth0_macvtap: left promiscuous mode [ 232.084107][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.101895][ T1139] veth1_vlan: left promiscuous mode [ 232.121823][ T1139] veth0_vlan: left promiscuous mode [ 232.431674][ T9773] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 232.928640][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 232.970399][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 233.362435][ T9791] batadv_slave_0: entered promiscuous mode [ 233.369022][ T9791] batadv_slave_0: entered allmulticast mode [ 233.387140][ T9783] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 233.499176][ T97] block nbd0: Possible stuck request ffff888024a57000: control (read@0,4096B). Runtime 120 seconds [ 233.683850][ T9575] veth0_vlan: entered promiscuous mode [ 233.761073][ T9813] pim6reg1: entered promiscuous mode [ 233.773720][ T9813] pim6reg1: entered allmulticast mode [ 233.793878][ T9575] veth1_vlan: entered promiscuous mode [ 233.907487][ T9822] x_tables: duplicate underflow at hook 4 [ 234.066479][ T9575] veth0_macvtap: entered promiscuous mode [ 234.101652][ T9783] chnl_net:caif_netlink_parms(): no params data found [ 234.135245][ T9575] veth1_macvtap: entered promiscuous mode [ 234.141815][ T5836] Bluetooth: hci3: command tx timeout [ 234.223422][ T9828] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 234.341871][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.387231][ T9783] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.394662][ T9783] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.402752][ T9783] bridge_slave_0: entered allmulticast mode [ 234.411086][ T9783] bridge_slave_0: entered promiscuous mode [ 234.430373][ T9783] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.441525][ T9783] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.449413][ T9783] bridge_slave_1: entered allmulticast mode [ 234.462097][ T9783] bridge_slave_1: entered promiscuous mode [ 234.493872][ T9575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.535298][ T9783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.551758][ T9783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.660103][ T9575] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.677823][ T9575] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.694048][ T9575] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.703352][ T9575] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.725589][ T9783] team0: Port device team_slave_0 added [ 234.741524][ T9783] team0: Port device team_slave_1 added [ 234.813522][ T9783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.828493][ T9783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.857535][ T9783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.872093][ T9783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.879874][ T9783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.906714][ T9783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.064300][ T9783] hsr_slave_0: entered promiscuous mode [ 235.080997][ T9783] hsr_slave_1: entered promiscuous mode [ 235.092230][ T9783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.101074][ T9783] Cannot create hsr debugfs directory [ 235.229385][ T9859] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 235.267460][ T9310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.275439][ T9310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.478018][ T9874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.494018][ T9875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.536991][ T9879] netlink: 'syz.1.1077': attribute type 1 has an invalid length. [ 235.552471][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.566960][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.630394][ T9879] bond3: entered promiscuous mode [ 235.636130][ T9879] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.663641][ T9885] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.1079'. [ 235.673536][ T9885] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.1079'. [ 235.682862][ T9885] netlink: 69 bytes leftover after parsing attributes in process `syz.2.1079'. [ 235.703332][ T9881] 8021q: adding VLAN 0 to HW filter on device bond3 [ 235.712100][ T9881] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 235.722672][ T9881] bond3: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 235.738719][ T9881] bond3: (slave vxcan5): making interface the new active one [ 235.746388][ T9881] vxcan5: entered promiscuous mode [ 235.754866][ T9881] bond3: (slave vxcan5): Enslaving as an active interface with an up link [ 236.217447][ T5836] Bluetooth: hci3: command tx timeout [ 236.373475][ T1139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.452064][ T1139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.545883][ T1139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.582730][ T9783] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 236.595083][ T9783] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 236.605543][ T9783] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 236.632449][ T1139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.650660][ T9783] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 236.776466][ T1139] bridge_slave_1: left allmulticast mode [ 236.782590][ T1139] bridge_slave_1: left promiscuous mode [ 236.789015][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.799187][ T1139] bridge_slave_0: left allmulticast mode [ 236.804859][ T1139] bridge_slave_0: left promiscuous mode [ 236.811227][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.204987][ T9909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1087'. [ 237.224956][ T9910] netlink: 'syz.0.1086': attribute type 1 has an invalid length. [ 237.274178][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.293785][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.305149][ T1139] bond0 (unregistering): Released all slaves [ 237.334125][ T9783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.363672][ T9910] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 237.405899][ T9783] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.538803][ T9918] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.1090'. [ 237.553112][ T9918] netlink: 4560 bytes leftover after parsing attributes in process `syz.0.1090'. [ 237.582873][ T9918] netlink: 69 bytes leftover after parsing attributes in process `syz.0.1090'. [ 237.619551][ T9920] FAULT_INJECTION: forcing a failure. [ 237.619551][ T9920] name failslab, interval 1, probability 0, space 0, times 1 [ 237.635066][ T9310] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.642360][ T9310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.653497][ T9919] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 237.681459][ T9310] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.688765][ T9310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.702369][ T9920] CPU: 0 UID: 0 PID: 9920 Comm: syz.0.1090 Not tainted 6.15.0-rc6-syzkaller-00173-g9e89db3d847f #0 PREEMPT(full) [ 237.702421][ T9920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.702447][ T9920] Call Trace: [ 237.702464][ T9920] [ 237.702474][ T9920] dump_stack_lvl+0x189/0x250 [ 237.702528][ T9920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.702561][ T9920] ? __pfx__printk+0x10/0x10 [ 237.702581][ T9920] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 237.702623][ T9920] should_fail_ex+0x414/0x560 [ 237.702654][ T9920] should_failslab+0xa8/0x100 [ 237.702688][ T9920] kmem_cache_alloc_noprof+0x73/0x3c0 [ 237.702716][ T9920] ? dst_alloc+0x105/0x170 [ 237.702756][ T9920] dst_alloc+0x105/0x170 [ 237.702785][ T9920] ? ip_check_mc_rcu+0x4c7/0x680 [ 237.702818][ T9920] ip_route_output_key_hash_rcu+0x140d/0x2330 [ 237.702873][ T9920] ? ip_route_output_key_hash+0xde/0x2e0 [ 237.702909][ T9920] ip_route_output_key_hash+0x1b9/0x2e0 [ 237.702944][ T9920] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 237.702998][ T9920] ip_route_output_flow+0x2a/0x150 [ 237.703025][ T9920] ? security_sk_classify_flow+0x70/0x180 [ 237.703063][ T9920] raw_sendmsg+0x1030/0x18a0 [ 237.703114][ T9920] ? __pfx_raw_sendmsg+0x10/0x10 [ 237.703165][ T9920] ? aa_sk_perm+0x81e/0x950 [ 237.703197][ T9920] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 237.703232][ T9920] ? sock_rps_record_flow+0x19/0x400 [ 237.703269][ T9920] ? inet_sendmsg+0x2f4/0x370 [ 237.703300][ T9920] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.703331][ T9920] __sock_sendmsg+0x19c/0x270 [ 237.703359][ T9920] __sys_sendto+0x3bd/0x520 [ 237.703390][ T9920] ? __pfx___sys_sendto+0x10/0x10 [ 237.703415][ T9920] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 237.703463][ T9920] ? __fget_files+0x3a0/0x420 [ 237.703508][ T9920] ? ksys_write+0x1f0/0x250 [ 237.703533][ T9920] ? rcu_is_watching+0x15/0xb0 [ 237.703565][ T9920] __x64_sys_sendto+0xde/0x100 [ 237.703599][ T9920] do_syscall_64+0xf6/0x210 [ 237.703631][ T9920] ? clear_bhb_loop+0x60/0xb0 [ 237.703660][ T9920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.703681][ T9920] RIP: 0033:0x7f690b38e969 [ 237.703707][ T9920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.703726][ T9920] RSP: 002b:00007f690c19f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 237.703750][ T9920] RAX: ffffffffffffffda RBX: 00007f690b5b6080 RCX: 00007f690b38e969 [ 237.703766][ T9920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 237.703779][ T9920] RBP: 00007f690c19f090 R08: 00002000000000c0 R09: 000000000000006e [ 237.703793][ T9920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.703805][ T9920] R13: 0000000000000000 R14: 00007f690b5b6080 R15: 00007fffe9c863a8 [ 237.703840][ T9920] [ 237.977575][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.085221][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.111480][ T9930] netlink: 'syz.0.1092': attribute type 3 has an invalid length. [ 238.139832][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.162415][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.174532][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.186628][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.299081][ T55] Bluetooth: hci3: command tx timeout [ 238.526412][ T9927] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 238.633473][ T1139] hsr_slave_0: left promiscuous mode [ 238.644668][ T1139] hsr_slave_1: left promiscuous mode [ 238.662957][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.671868][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.686290][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.695774][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.734227][ T1139] veth1_macvtap: left promiscuous mode [ 238.740650][ T1139] veth0_macvtap: left promiscuous mode [ 238.746367][ T1139] veth1_vlan: left promiscuous mode [ 238.751924][ T1139] veth0_vlan: left promiscuous mode [ 239.363287][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 239.407253][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 239.887592][ T9967] bond0: option mode: unable to set because the bond device has slaves [ 240.090077][ T9978] netlink: 'syz.0.1101': attribute type 3 has an invalid length. [ 240.103492][ T9978] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1101'. [ 240.132630][ T9981] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.1102'. [ 240.154102][ T9981] netlink: 4560 bytes leftover after parsing attributes in process `syz.2.1102'. [ 240.173191][ T9981] FAULT_INJECTION: forcing a failure. [ 240.173191][ T9981] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 240.187926][ T9981] CPU: 1 UID: 0 PID: 9981 Comm: syz.2.1102 Not tainted 6.15.0-rc6-syzkaller-00173-g9e89db3d847f #0 PREEMPT(full) [ 240.187955][ T9981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.187966][ T9981] Call Trace: [ 240.187973][ T9981] [ 240.187981][ T9981] dump_stack_lvl+0x189/0x250 [ 240.188011][ T9981] ? __lock_acquire+0xaac/0xd20 [ 240.188040][ T9981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.188066][ T9981] ? __pfx__printk+0x10/0x10 [ 240.188084][ T9981] ? __might_fault+0xb0/0x130 [ 240.188118][ T9981] should_fail_ex+0x414/0x560 [ 240.188141][ T9981] _copy_from_user+0x2d/0xb0 [ 240.188168][ T9981] kstrtouint_from_user+0xc4/0x170 [ 240.188192][ T9981] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 240.188228][ T9981] proc_fail_nth_write+0x88/0x240 [ 240.188255][ T9981] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 240.188286][ T9981] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 240.188314][ T9981] vfs_write+0x27b/0xa90 [ 240.188344][ T9981] ? __pfx_vfs_write+0x10/0x10 [ 240.188375][ T9981] ? __fget_files+0x2a/0x420 [ 240.188404][ T9981] ? __fget_files+0x3a0/0x420 [ 240.188426][ T9981] ? __fget_files+0x2a/0x420 [ 240.188458][ T9981] ksys_write+0x145/0x250 [ 240.188478][ T9981] ? rcu_is_watching+0x15/0xb0 [ 240.188495][ T9981] ? __pfx_ksys_write+0x10/0x10 [ 240.188519][ T9981] ? do_syscall_64+0xba/0x210 [ 240.188547][ T9981] do_syscall_64+0xf6/0x210 [ 240.188571][ T9981] ? clear_bhb_loop+0x60/0xb0 [ 240.188594][ T9981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.188612][ T9981] RIP: 0033:0x7fc2a8f8d41f [ 240.188629][ T9981] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 240.188644][ T9981] RSP: 002b:00007fc2a9dd5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 240.188663][ T9981] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc2a8f8d41f [ 240.188675][ T9981] RDX: 0000000000000001 RSI: 00007fc2a9dd50a0 RDI: 0000000000000007 [ 240.188686][ T9981] RBP: 00007fc2a9dd5090 R08: 0000000000000000 R09: 000000000000006e [ 240.188697][ T9981] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 240.188707][ T9981] R13: 0000000000000000 R14: 00007fc2a91b5fa0 R15: 00007ffdd3c6b948 [ 240.188735][ T9981] [ 240.418776][ T55] Bluetooth: hci0: command tx timeout [ 240.425589][ T55] Bluetooth: hci3: command tx timeout [ 240.444275][ T9783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.703457][ T9927] chnl_net:caif_netlink_parms(): no params data found [ 240.707699][ T9997] __nla_validate_parse: 1 callbacks suppressed [ 240.707722][ T9997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1106'. [ 240.774889][ T9997] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 240.788651][ T9997] gretap2: entered promiscuous mode [ 240.794257][ T9997] gretap2: entered allmulticast mode [ 241.090771][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1110'. [ 241.140872][ T9927] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.149946][ T9927] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.158096][ T9927] bridge_slave_0: entered allmulticast mode [ 241.166123][ T9927] bridge_slave_0: entered promiscuous mode [ 241.203672][ T9927] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.217790][ T9927] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.239176][ T9927] bridge_slave_1: entered allmulticast mode [ 241.251889][ T9927] bridge_slave_1: entered promiscuous mode [ 241.298611][T10030] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1112'. [ 241.396156][ T9927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.438261][ T9927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.542179][ T9927] team0: Port device team_slave_0 added [ 241.564322][ T9927] team0: Port device team_slave_1 added [ 241.650153][ T9927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.657445][ T9927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.715753][ T9927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.737034][ T9927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.752116][ T9927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.783455][ T9927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.855049][ T9783] veth0_vlan: entered promiscuous mode [ 241.883669][T10053] ip6t_REJECT: ECHOREPLY is not supported [ 241.893080][ T9927] hsr_slave_0: entered promiscuous mode [ 241.900563][ T9927] hsr_slave_1: entered promiscuous mode [ 241.908045][ T9927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.915674][ T9927] Cannot create hsr debugfs directory [ 241.938817][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'. [ 241.975119][T10055] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 242.023407][ T9783] veth1_vlan: entered promiscuous mode [ 242.177013][ T9783] veth0_macvtap: entered promiscuous mode [ 242.214913][ T9783] veth1_macvtap: entered promiscuous mode [ 242.263770][ T9783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.284456][ T9783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.316831][ T9783] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.326508][ T9783] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.335442][ T9783] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.345028][ T9783] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.467826][ T55] Bluetooth: hci0: command tx timeout [ 244.547515][ T55] Bluetooth: hci0: command tx timeout [ 246.618130][ T55] Bluetooth: hci0: command tx timeout [ 252.867539][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 257.196966][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 257.206441][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 257.215077][ T5141] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 257.216813][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 257.229154][ T5141] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 257.232627][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 257.237941][ T5141] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 257.250565][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 257.263351][ T5141] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 257.271267][ T5141] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.303562][T10065] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 257.336226][T10067] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 257.593255][T10065] chnl_net:caif_netlink_parms(): no params data found [ 257.670794][T10067] chnl_net:caif_netlink_parms(): no params data found [ 257.765603][T10065] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.775140][T10065] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.784401][T10065] bridge_slave_0: entered allmulticast mode [ 257.794124][T10065] bridge_slave_0: entered promiscuous mode [ 257.825666][T10065] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.833257][T10065] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.840543][T10065] bridge_slave_1: entered allmulticast mode [ 257.848363][T10065] bridge_slave_1: entered promiscuous mode [ 257.949929][T10067] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.957243][T10067] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.967881][T10067] bridge_slave_0: entered allmulticast mode [ 257.977203][T10067] bridge_slave_0: entered promiscuous mode [ 257.990022][T10065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.000333][T10067] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.008678][T10067] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.016342][T10067] bridge_slave_1: entered allmulticast mode [ 258.024871][T10067] bridge_slave_1: entered promiscuous mode [ 258.035347][T10065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.130294][T10065] team0: Port device team_slave_0 added [ 258.140488][T10067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.153835][T10065] team0: Port device team_slave_1 added [ 258.164714][T10067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.253910][T10065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.262143][T10065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.291236][T10065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.317254][T10067] team0: Port device team_slave_0 added [ 258.324959][T10065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.333328][T10065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.359839][T10065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.373772][T10067] team0: Port device team_slave_1 added [ 258.403978][ T5141] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 258.417529][ T5141] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 258.426892][ T5141] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 258.441561][ T5141] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 258.450042][ T5141] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 258.473031][T10067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.480376][T10067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.507001][T10067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.520579][T10067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.527629][T10067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.553820][T10067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.587882][T10065] hsr_slave_0: entered promiscuous mode [ 258.594598][T10065] hsr_slave_1: entered promiscuous mode [ 258.601190][T10065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.608974][T10065] Cannot create hsr debugfs directory [ 258.686377][T10067] hsr_slave_0: entered promiscuous mode [ 258.693194][T10067] hsr_slave_1: entered promiscuous mode [ 258.700544][T10067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.708760][T10067] Cannot create hsr debugfs directory [ 258.729998][T10082] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 259.241672][T10082] chnl_net:caif_netlink_parms(): no params data found [ 259.257869][ T5832] Bluetooth: hci5: command tx timeout [ 259.337846][ T5832] Bluetooth: hci6: command tx timeout [ 259.373429][T10082] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.380860][T10082] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.388895][T10082] bridge_slave_0: entered allmulticast mode [ 259.396298][T10082] bridge_slave_0: entered promiscuous mode [ 259.405678][T10082] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.413338][T10082] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.421520][T10082] bridge_slave_1: entered allmulticast mode [ 259.429213][T10082] bridge_slave_1: entered promiscuous mode [ 259.469626][T10082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.483478][T10082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.526401][T10082] team0: Port device team_slave_0 added [ 259.538035][T10082] team0: Port device team_slave_1 added [ 259.574010][T10082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.581593][T10082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.608028][T10082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.621361][T10082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.628599][T10082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.654851][T10082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.724618][T10082] hsr_slave_0: entered promiscuous mode [ 259.731568][T10082] hsr_slave_1: entered promiscuous mode [ 259.738158][T10082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.746388][T10082] Cannot create hsr debugfs directory [ 260.537594][ T5832] Bluetooth: hci7: command tx timeout [ 261.022238][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.337635][ T5832] Bluetooth: hci5: command tx timeout [ 261.417605][ T5832] Bluetooth: hci6: command tx timeout [ 262.618035][ T5832] Bluetooth: hci7: command tx timeout [ 263.417559][ T5832] Bluetooth: hci5: command tx timeout [ 263.507567][ T5832] Bluetooth: hci6: command tx timeout [ 263.588060][ T97] block nbd0: Possible stuck request ffff888024a57000: control (read@0,4096B). Runtime 150 seconds [ 264.707547][ T5832] Bluetooth: hci7: command tx timeout [ 265.497628][ T5832] Bluetooth: hci5: command tx timeout [ 265.577516][ T5832] Bluetooth: hci6: command tx timeout [ 266.778211][ T5832] Bluetooth: hci7: command tx timeout [ 293.037838][ T5141] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 293.046569][ T5141] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 293.058191][ T5141] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 293.067969][ T5141] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 293.076161][ T5141] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 293.124417][T10091] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 293.302583][T10091] chnl_net:caif_netlink_parms(): no params data found [ 293.393626][T10091] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.401336][T10091] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.408800][T10091] bridge_slave_0: entered allmulticast mode [ 293.416230][T10091] bridge_slave_0: entered promiscuous mode [ 293.426452][T10091] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.434600][T10091] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.442093][T10091] bridge_slave_1: entered allmulticast mode [ 293.450302][T10091] bridge_slave_1: entered promiscuous mode [ 293.492967][T10091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.509457][T10091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.553721][T10091] team0: Port device team_slave_0 added [ 293.563906][T10091] team0: Port device team_slave_1 added [ 293.601483][T10091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.608650][T10091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.635890][T10091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.650479][T10091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.660820][T10091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.667496][ T97] block nbd0: Possible stuck request ffff888024a57000: control (read@0,4096B). Runtime 180 seconds [ 293.695911][T10091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.758274][T10091] hsr_slave_0: entered promiscuous mode [ 293.764956][T10091] hsr_slave_1: entered promiscuous mode [ 293.771931][T10091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.779674][T10091] Cannot create hsr debugfs directory [ 293.939602][T10091] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.009904][T10091] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.084862][T10091] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.156830][T10091] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.097767][ T5141] Bluetooth: hci8: command tx timeout [ 297.177579][ T5141] Bluetooth: hci8: command tx timeout [ 298.771807][ T5832] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 298.782280][ T5832] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 298.791066][ T5832] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 298.800469][ T5832] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 298.809789][ T5832] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 298.848333][T10100] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 299.031012][T10100] chnl_net:caif_netlink_parms(): no params data found [ 299.130205][T10100] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.137807][T10100] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.145163][T10100] bridge_slave_0: entered allmulticast mode [ 299.154052][T10100] bridge_slave_0: entered promiscuous mode [ 299.162353][T10100] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.170016][T10100] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.178405][T10100] bridge_slave_1: entered allmulticast mode [ 299.186861][T10100] bridge_slave_1: entered promiscuous mode [ 299.230486][T10100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.244258][T10100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.257944][ T5141] Bluetooth: hci8: command tx timeout [ 299.293386][T10100] team0: Port device team_slave_0 added [ 299.302878][T10100] team0: Port device team_slave_1 added [ 299.343467][T10100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.351177][T10100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.377743][T10100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.391476][T10100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.399077][T10100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.425727][T10100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.485632][T10100] hsr_slave_0: entered promiscuous mode [ 299.492504][T10100] hsr_slave_1: entered promiscuous mode [ 299.499467][T10100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.507059][T10100] Cannot create hsr debugfs directory [ 300.857585][ T5141] Bluetooth: hci9: command tx timeout [ 301.337900][ T5141] Bluetooth: hci8: command tx timeout [ 302.937708][ T5141] Bluetooth: hci9: command tx timeout [ 305.017863][ T5141] Bluetooth: hci9: command tx timeout [ 307.097607][ T5141] Bluetooth: hci9: command tx timeout [ 312.217760][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 317.606667][ T5832] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 317.618322][ T5832] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 317.626610][ T5832] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 317.636620][ T5832] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 317.645853][ T5832] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 317.709097][T10110] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 317.787716][ T5832] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 317.797970][ T5832] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 317.806645][ T5832] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 317.816089][ T5832] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 317.828076][ T5832] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 317.941703][T10112] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 317.990477][T10110] chnl_net:caif_netlink_parms(): no params data found [ 318.156942][T10110] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.164471][T10110] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.172894][T10110] bridge_slave_0: entered allmulticast mode [ 318.181115][T10110] bridge_slave_0: entered promiscuous mode [ 318.198448][T10110] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.205945][T10110] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.214108][T10110] bridge_slave_1: entered allmulticast mode [ 318.222535][T10110] bridge_slave_1: entered promiscuous mode [ 318.280411][T10110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.296742][T10110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.416480][T10110] team0: Port device team_slave_0 added [ 318.429082][T10110] team0: Port device team_slave_1 added [ 318.507674][T10110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.514702][T10110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.541436][T10110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.565353][T10112] chnl_net:caif_netlink_parms(): no params data found [ 318.592795][T10110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.607745][T10110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.646645][T10110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.803673][T10110] hsr_slave_0: entered promiscuous mode [ 318.811450][T10110] hsr_slave_1: entered promiscuous mode [ 318.818284][T10110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.822903][ T5141] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 318.825876][T10110] Cannot create hsr debugfs directory [ 318.844056][ T5141] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 318.853651][ T5141] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 318.864636][ T5141] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 318.874188][ T5141] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 318.998618][T10112] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.005945][T10112] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.013620][T10112] bridge_slave_0: entered allmulticast mode [ 319.022500][T10112] bridge_slave_0: entered promiscuous mode [ 319.044615][T10125] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 319.055445][T10112] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.062858][T10112] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.071009][T10112] bridge_slave_1: entered allmulticast mode [ 319.079553][T10112] bridge_slave_1: entered promiscuous mode [ 319.196447][T10112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.210687][T10112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.316256][T10112] team0: Port device team_slave_0 added [ 319.335940][T10112] team0: Port device team_slave_1 added [ 319.413542][T10112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.420991][T10112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.450111][T10112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.483197][T10112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.492477][T10112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.519212][T10112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.675433][T10112] hsr_slave_0: entered promiscuous mode [ 319.684087][T10112] hsr_slave_1: entered promiscuous mode [ 319.691627][T10112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.699454][T10112] Cannot create hsr debugfs directory [ 319.740393][ T5141] Bluetooth: hci10: command tx timeout [ 319.816569][T10125] chnl_net:caif_netlink_parms(): no params data found [ 319.898140][ T5141] Bluetooth: hci11: command tx timeout [ 320.069987][T10125] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.077217][T10125] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.085750][T10125] bridge_slave_0: entered allmulticast mode [ 320.094248][T10125] bridge_slave_0: entered promiscuous mode [ 320.102918][T10125] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.110707][T10125] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.118501][T10125] bridge_slave_1: entered allmulticast mode [ 320.126020][T10125] bridge_slave_1: entered promiscuous mode [ 320.187420][T10125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.201871][T10125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.266696][T10125] team0: Port device team_slave_0 added [ 320.276021][T10125] team0: Port device team_slave_1 added [ 320.327625][T10125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.334877][T10125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.361531][T10125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.375860][T10125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.383687][T10125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.410384][T10125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.498042][T10125] hsr_slave_0: entered promiscuous mode [ 320.504952][T10125] hsr_slave_1: entered promiscuous mode [ 320.511981][T10125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.519769][T10125] Cannot create hsr debugfs directory [ 320.937998][ T5141] Bluetooth: hci12: command tx timeout [ 321.818033][ T5141] Bluetooth: hci10: command tx timeout [ 321.977652][ T5141] Bluetooth: hci11: command tx timeout [ 322.463499][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.018024][ T5141] Bluetooth: hci12: command tx timeout [ 323.738037][ T97] block nbd0: Possible stuck request ffff888024a57000: control (read@0,4096B). Runtime 210 seconds [ 323.897611][ T5141] Bluetooth: hci10: command tx timeout [ 324.057650][ T5141] Bluetooth: hci11: command tx timeout [ 325.097644][ T5141] Bluetooth: hci12: command tx timeout [ 325.977621][ T5141] Bluetooth: hci10: command tx timeout [ 326.137613][ T5141] Bluetooth: hci11: command tx timeout [ 327.187563][ T5141] Bluetooth: hci12: command tx timeout [ 353.818102][ T97] block nbd0: Possible stuck request ffff888024a57000: control (read@0,4096B). Runtime 240 seconds [ 354.984300][ T55] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 354.994193][ T55] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 355.004454][ T55] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 355.014460][ T55] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 355.023326][ T55] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 355.066530][T10136] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 355.257779][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 355.274295][T10136] chnl_net:caif_netlink_parms(): no params data found [ 355.382364][T10136] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.390717][T10136] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.398203][T10136] bridge_slave_0: entered allmulticast mode [ 355.405792][T10136] bridge_slave_0: entered promiscuous mode [ 355.415683][T10136] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.423398][T10136] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.431891][T10136] bridge_slave_1: entered allmulticast mode [ 355.441119][T10136] bridge_slave_1: entered promiscuous mode [ 355.488940][T10136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.503486][T10136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.550391][T10136] team0: Port device team_slave_0 added [ 355.561915][T10136] team0: Port device team_slave_1 added [ 355.601888][T10136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.609283][T10136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.635671][T10136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.649200][T10136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.656210][T10136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.682514][T10136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.744804][T10136] hsr_slave_0: entered promiscuous mode [ 355.752210][T10136] hsr_slave_1: entered promiscuous mode [ 355.758978][T10136] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.766587][T10136] Cannot create hsr debugfs directory [ 357.097789][ T5141] Bluetooth: hci13: command tx timeout [ 359.177758][ T5832] Bluetooth: hci13: command tx timeout [ 359.818527][ T55] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 359.828015][ T55] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 359.836540][ T55] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 359.847054][ T55] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 359.855274][ T55] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 359.896746][T10145] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 360.106181][T10145] chnl_net:caif_netlink_parms(): no params data found [ 360.222975][T10145] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.232202][T10145] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.241404][T10145] bridge_slave_0: entered allmulticast mode [ 360.250174][T10145] bridge_slave_0: entered promiscuous mode [ 360.260677][T10145] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.268284][T10145] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.275770][T10145] bridge_slave_1: entered allmulticast mode [ 360.284361][T10145] bridge_slave_1: entered promiscuous mode [ 360.331540][T10145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.345905][T10145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.377857][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 360.404233][T10145] team0: Port device team_slave_0 added [ 360.414325][T10145] team0: Port device team_slave_1 added [ 360.459957][T10145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.466984][T10145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.493607][T10145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.508029][T10145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.515039][T10145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.541678][T10145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.606268][T10145] hsr_slave_0: entered promiscuous mode [ 360.614220][T10145] hsr_slave_1: entered promiscuous mode [ 360.621009][T10145] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.629053][T10145] Cannot create hsr debugfs directory [ 361.257632][ T5141] Bluetooth: hci13: command tx timeout [ 361.897945][ T5141] Bluetooth: hci14: command tx timeout [ 363.337764][ T5141] Bluetooth: hci13: command tx timeout [ 363.977674][ T5141] Bluetooth: hci14: command tx timeout [ 366.057586][ T5141] Bluetooth: hci14: command tx timeout [ 368.137740][ T5141] Bluetooth: hci14: command tx timeout [ 378.309167][ T5832] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 378.319602][ T5832] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 378.328831][ T5832] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 378.337356][ T5832] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 378.345406][ T5832] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 378.399496][ T5141] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 378.403842][T10155] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 378.409284][ T5141] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 378.423854][ T5141] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 378.433582][ T5141] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 378.442769][ T5141] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 378.510391][T10157] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 378.746931][T10155] chnl_net:caif_netlink_parms(): no params data found [ 378.956044][T10157] chnl_net:caif_netlink_parms(): no params data found [ 379.031127][T10155] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.047651][T10155] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.055107][T10155] bridge_slave_0: entered allmulticast mode [ 379.076858][T10155] bridge_slave_0: entered promiscuous mode [ 379.147756][T10155] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.155377][T10155] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.177808][T10155] bridge_slave_1: entered allmulticast mode [ 379.186183][T10155] bridge_slave_1: entered promiscuous mode [ 379.356090][ T5842] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 379.366094][ T5842] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 379.376191][ T5842] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 379.385229][ T5842] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 379.393922][ T5842] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 379.413116][T10155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.424048][T10157] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.432221][T10157] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.439864][T10157] bridge_slave_0: entered allmulticast mode [ 379.448926][T10157] bridge_slave_0: entered promiscuous mode [ 379.459673][T10155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.477576][T10157] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.484873][T10157] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.493094][T10157] bridge_slave_1: entered allmulticast mode [ 379.501713][T10157] bridge_slave_1: entered promiscuous mode [ 379.600776][T10157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.618568][T10157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.627928][T10172] ªªªªªª†³?ÂHº speed is unknown, defaulting to 1000 [ 379.633836][T10155] team0: Port device team_slave_0 added [ 379.652960][T10155] team0: Port device team_slave_1 added [ 379.763820][T10155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.771387][T10155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.798193][T10155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.811697][T10155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.819936][T10155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.847502][T10155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.863472][T10157] team0: Port device team_slave_0 added [ 379.875709][T10157] team0: Port device team_slave_1 added [ 379.941997][T10157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.949781][T10157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.976662][T10157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.000531][T10157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.008134][T10157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.035917][T10157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.109863][T10155] hsr_slave_0: entered promiscuous mode [ 380.117626][T10155] hsr_slave_1: entered promiscuous mode [ 380.123990][T10155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.131809][T10155] Cannot create hsr debugfs directory [ 380.259460][T10157] hsr_slave_0: entered promiscuous mode [ 380.266265][T10157] hsr_slave_1: entered promiscuous mode [ 380.273420][T10157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.281481][T10157] Cannot create hsr debugfs directory [ 380.377817][ T5141] Bluetooth: hci15: command tx timeout [ 380.537917][ T5141] Bluetooth: hci16: command tx timeout [ 380.716635][T10172] chnl_net:caif_netlink_parms(): no params data found [ 380.857568][ T5141] Bluetooth: hci7: command 0x0406 tx timeout [ 380.865123][ T5842] Bluetooth: hci6: command 0x0406 tx timeout [ 380.871785][ T5839] Bluetooth: hci5: command 0x0406 tx timeout [ 380.920407][T10172] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.929930][T10172] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.938843][T10172] bridge_slave_0: entered allmulticast mode [ 380.947152][T10172] bridge_slave_0: entered promiscuous mode [ 380.957474][T10172] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.965019][T10172] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.973021][T10172] bridge_slave_1: entered allmulticast mode [ 380.981231][T10172] bridge_slave_1: entered promiscuous mode [ 381.031143][T10172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.063702][T10172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.129325][T10172] team0: Port device team_slave_0 added [ 381.150915][T10172] team0: Port device team_slave_1 added [ 381.214498][T10172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.222030][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.248712][T10172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.262794][T10172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.270032][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.296544][T10172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.403264][T10172] hsr_slave_0: entered promiscuous mode [ 381.411467][T10172] hsr_slave_1: entered promiscuous mode [ 381.417470][ T5836] Bluetooth: hci17: command tx timeout [ 381.424967][T10172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.432990][T10172] Cannot create hsr debugfs directory [ 382.457501][ T5836] Bluetooth: hci15: command tx timeout [ 382.617930][ T5836] Bluetooth: hci16: command tx timeout [ 383.497668][ T5836] Bluetooth: hci17: command tx timeout [ 383.903471][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.904629][ T97] block nbd0: Possible stuck request ffff888024a57000: control (read@0,4096B). Runtime 270 seconds [ 384.537739][ T5836] Bluetooth: hci15: command tx timeout [ 384.697589][ T5836] Bluetooth: hci16: command tx timeout [ 385.578018][ T5836] Bluetooth: hci17: command tx timeout [ 386.617593][ T5836] Bluetooth: hci15: command tx timeout [ 386.778082][ T5836] Bluetooth: hci16: command tx timeout [ 387.657455][ T5836] Bluetooth: hci17: command tx timeout [ 392.857924][ T31] INFO: task syz-executor:9783 blocked for more than 143 seconds. [ 392.866251][ T31] Not tainted 6.15.0-rc6-syzkaller-00173-g9e89db3d847f #0 [ 392.874213][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 392.883069][ T31] task:syz-executor state:D stack:22232 pid:9783 tgid:9783 ppid:1 task_flags:0x400140 flags:0x00004004 [ 392.895278][ T31] Call Trace: [ 392.898686][ T31] [ 392.901766][ T31] __schedule+0x16e2/0x4cd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 392.906375][ T31] ? __lock_acquire+0xaac/0xd20 [ 392.914583][ T31] ? schedule+0x165/0x360 [ 392.927535][ T31] ? __pfx___schedule+0x10/0x10 [ 392.932630][ T31] ? schedule+0x91/0x360 [ 392.936930][ T31] schedule+0x165/0x360 [ 392.977502][ T31] schedule_preempt_disabled+0x13/0x30 [ 392.983306][ T31] __mutex_lock+0x724/0xe80 [ 393.017581][ T31] ? __mutex_lock+0x51b/0xe80 [ 393.022394][ T31] ? genl_rcv_msg+0x10d/0x790 [ 393.042258][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 393.052742][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 393.058235][ T31] ? radix_tree_lookup+0x240/0x290 [ 393.063773][ T31] genl_rcv_msg+0x10d/0x790 [ 393.068454][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.073542][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 393.079050][ T31] ? __copy_skb_header+0xa7/0x550 [ 393.084184][ T31] netlink_rcv_skb+0x219/0x490 [ 393.089265][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.094349][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.099998][ T31] ? down_read+0x1ad/0x2e0 [ 393.104563][ T31] genl_rcv+0x28/0x40 [ 393.108685][ T31] netlink_unicast+0x75b/0x8d0 [ 393.113552][ T31] netlink_sendmsg+0x805/0xb30 [ 393.118581][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.123937][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 393.129273][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.134625][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.140175][ T31] __sock_sendmsg+0x219/0x270 [ 393.144960][ T31] __sys_sendto+0x3bd/0x520 [ 393.149754][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 393.154961][ T31] ? fd_install+0x97/0x540 [ 393.159730][ T31] ? fd_install+0x30d/0x540 [ 393.164346][ T31] __x64_sys_sendto+0xde/0x100 [ 393.169282][ T31] do_syscall_64+0xf6/0x210 [ 393.173934][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 393.180087][ T31] ? clear_bhb_loop+0x60/0xb0 [ 393.184853][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.191284][ T31] RIP: 0033:0x7fd2d57907fc [ 393.195754][ T31] RSP: 002b:00007ffeedc4ec80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 393.204580][ T31] RAX: ffffffffffffffda RBX: 00007fd2d64e4620 RCX: 00007fd2d57907fc [ 393.213240][ T31] RDX: 0000000000000028 RSI: 00007fd2d64e4670 RDI: 0000000000000003 [ 393.221883][ T31] RBP: 0000000000000000 R08: 00007ffeedc4ecd4 R09: 000000000000000c [ 393.230180][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 393.238395][ T31] R13: 00007ffeedc4ed28 R14: 00007fd2d64e4670 R15: 0000000000000000 [ 393.246453][ T31] [ 393.249661][ T31] INFO: task syz-executor:9927 blocked for more than 143 seconds. [ 393.258028][ T31] Not tainted 6.15.0-rc6-syzkaller-00173-g9e89db3d847f #0 [ 393.265718][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.274534][ T31] task:syz-executor state:D stack:22040 pid:9927 tgid:9927 ppid:1 task_flags:0x400140 flags:0x00000004 [ 393.286650][ T31] Call Trace: [ 393.290057][ T31] [ 393.293037][ T31] __schedule+0x16e2/0x4cd0 [ 393.298022][ T31] ? __lock_acquire+0xaac/0xd20 [ 393.303041][ T31] ? schedule+0x165/0x360 [ 393.307522][ T31] ? __pfx___schedule+0x10/0x10 [ 393.312565][ T31] ? schedule+0x91/0x360 [ 393.316857][ T31] schedule+0x165/0x360 [ 393.321249][ T31] schedule_preempt_disabled+0x13/0x30 [ 393.326752][ T31] __mutex_lock+0x724/0xe80 [ 393.331392][ T31] ? __mutex_lock+0x51b/0xe80 [ 393.336151][ T31] ? genl_rcv_msg+0x10d/0x790 [ 393.347656][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 393.352781][ T31] ? stack_depot_save_flags+0x40/0x910 [ 393.358557][ T31] ? radix_tree_lookup+0x240/0x290 [ 393.364192][ T31] genl_rcv_msg+0x10d/0x790 [ 393.368889][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.374002][ T31] ? __lock_acquire+0xaac/0xd20 [ 393.379186][ T31] netlink_rcv_skb+0x219/0x490 [ 393.384253][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.389540][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.395025][ T31] ? down_read+0x1ad/0x2e0 [ 393.399794][ T31] genl_rcv+0x28/0x40 [ 393.403932][ T31] netlink_unicast+0x75b/0x8d0 [ 393.409164][ T31] netlink_sendmsg+0x805/0xb30 [ 393.414006][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.419743][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 393.424743][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.430156][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.435535][ T31] __sock_sendmsg+0x219/0x270 [ 393.440357][ T31] __sys_sendto+0x3bd/0x520 [ 393.444883][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 393.450112][ T31] ? fd_install+0x97/0x540 [ 393.454585][ T31] ? fd_install+0x30d/0x540 [ 393.459391][ T31] __x64_sys_sendto+0xde/0x100 [ 393.464229][ T31] do_syscall_64+0xf6/0x210 [ 393.468973][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 393.474649][ T31] ? clear_bhb_loop+0x60/0xb0 [ 393.479575][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.485523][ T31] RIP: 0033:0x7fcf153907fc [ 393.490093][ T31] RSP: 002b:00007fff3927a4c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 393.498880][ T31] RAX: ffffffffffffffda RBX: 00007fcf160e4620 RCX: 00007fcf153907fc [ 393.506996][ T31] RDX: 0000000000000020 RSI: 00007fcf160e4670 RDI: 0000000000000005 [ 393.515145][ T31] RBP: 0000000000000000 R08: 00007fff3927a514 R09: 000000000000000c [ 393.523634][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 393.531740][ T31] R13: 00007fff3927a568 R14: 00007fcf160e4670 R15: 0000000000000000 [ 393.539943][ T31] [ 393.543056][ T31] INFO: task syz.0.1116:10037 blocked for more than 144 seconds. [ 393.550958][ T31] Not tainted 6.15.0-rc6-syzkaller-00173-g9e89db3d847f #0 [ 393.558816][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.567607][ T31] task:syz.0.1116 state:D stack:26136 pid:10037 tgid:10036 ppid:5833 task_flags:0x480140 flags:0x00000004 [ 393.579894][ T31] Call Trace: [ 393.583216][ T31] [ 393.586170][ T31] __schedule+0x16e2/0x4cd0 [ 393.590825][ T31] ? __lock_acquire+0xaac/0xd20 [ 393.595755][ T31] ? schedule+0x165/0x360 [ 393.600313][ T31] ? __pfx___schedule+0x10/0x10 [ 393.605247][ T31] ? schedule+0x91/0x360 [ 393.609605][ T31] schedule+0x165/0x360 [ 393.613802][ T31] blk_mq_freeze_queue_wait+0xf4/0x170 [ 393.619481][ T31] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 393.625647][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 393.632110][ T31] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 393.638228][ T31] queue_limits_commit_update_frozen+0x5e/0x360 [ 393.644523][ T31] ? nbd_set_size+0x2bd/0x6c0 [ 393.649343][ T31] nbd_set_size+0x496/0x6c0 [ 393.653911][ T31] ? __pfx_nbd_set_size+0x10/0x10 [ 393.659130][ T31] ? __mutex_trylock_common+0x153/0x260 [ 393.664748][ T31] ? __mutex_lock+0x330/0xe80 [ 393.669626][ T31] ? nla_memcpy+0x5b/0xc0 [ 393.674024][ T31] nbd_genl_size_set+0x2eb/0x3c0 [ 393.679204][ T31] ? __pfx_nbd_genl_size_set+0x10/0x10 [ 393.684720][ T31] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 393.690788][ T31] ? bpf_lsm_capable+0x9/0x20 [ 393.695515][ T31] ? security_capable+0x7e/0x2e0 [ 393.700788][ T31] ? radix_tree_lookup+0x240/0x290 [ 393.706043][ T31] nbd_genl_reconfigure+0x409/0x1870 [ 393.711504][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 393.717455][ T31] ? __nla_parse+0x40/0x60 [ 393.722203][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 393.728810][ T31] genl_family_rcv_msg_doit+0x215/0x300 [ 393.734429][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 393.741057][ T31] ? stack_depot_save_flags+0x40/0x910 [ 393.746578][ T31] genl_rcv_msg+0x60e/0x790 [ 393.751243][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.756414][ T31] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 393.762464][ T31] netlink_rcv_skb+0x219/0x490 [ 393.767337][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 393.772430][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 393.777969][ T31] ? down_read+0x1ad/0x2e0 [ 393.782456][ T31] genl_rcv+0x28/0x40 [ 393.786492][ T31] netlink_unicast+0x75b/0x8d0 [ 393.791393][ T31] netlink_sendmsg+0x805/0xb30 [ 393.796245][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.801761][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 393.806770][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 393.812353][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.817925][ T31] __sock_sendmsg+0x219/0x270 [ 393.822661][ T31] ____sys_sendmsg+0x505/0x830 [ 393.827692][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.833051][ T31] ? import_iovec+0x74/0xa0 [ 393.837843][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 393.842591][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.848294][ T31] ? __fget_files+0x2a/0x420 [ 393.852954][ T31] ? __fget_files+0x3a0/0x420 [ 393.857870][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 393.863059][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.868992][ T31] ? do_syscall_64+0xba/0x210 [ 393.873837][ T31] do_syscall_64+0xf6/0x210 [ 393.878647][ T31] ? clear_bhb_loop+0x60/0xb0 [ 393.883407][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.889466][ T31] RIP: 0033:0x7f690b38e969 [ 393.893941][ T31] RSP: 002b:00007f690c1c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.902709][ T31] RAX: ffffffffffffffda RBX: 00007f690b5b5fa0 RCX: 00007f690b38e969 [ 393.910930][ T31] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 393.919134][ T31] RBP: 00007f690b410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 393.927345][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.935371][ T31] R13: 0000000000000000 R14: 00007f690b5b5fa0 R15: 00007fffe9c863a8 [ 393.943591][ T31] [ 393.946683][ T31] INFO: task syz.1.1121:10051 blocked for more than 144 seconds. [ 393.954559][ T31] Not tainted 6.15.0-rc6-syzkaller-00173-g9e89db3d847f #0 [ 393.975153][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 393.984522][ T31] task:syz.1.1121 state:D stack:27592 pid:10051 tgid:10050 ppid:5828 task_flags:0x400140 flags:0x00000004 [ 393.997767][ T31] Call Trace: [ 394.001107][ T31] [ 394.004244][ T31] __schedule+0x16e2/0x4cd0 [ 394.009119][ T31] ? __lock_acquire+0xaac/0xd20 [ 394.014112][ T31] ? schedule+0x165/0x360 [ 394.018988][ T31] ? __pfx___schedule+0x10/0x10 [ 394.024004][ T31] ? schedule+0x91/0x360 [ 394.028472][ T31] schedule+0x165/0x360 [ 394.032688][ T31] schedule_preempt_disabled+0x13/0x30 [ 394.038563][ T31] __mutex_lock+0x724/0xe80 [ 394.044502][ T31] ? __mutex_lock+0x51b/0xe80 [ 394.049876][ T31] ? genl_rcv_msg+0x10d/0x790 [ 394.054606][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 394.060333][ T31] ? stack_depot_save_flags+0x40/0x910 [ 394.065854][ T31] ? radix_tree_lookup+0x240/0x290 [ 394.071147][ T31] genl_rcv_msg+0x10d/0x790 [ 394.075721][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.080918][ T31] ? __lock_acquire+0xaac/0xd20 [ 394.085843][ T31] netlink_rcv_skb+0x219/0x490 [ 394.090793][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.095962][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.101825][ T31] ? down_read+0x1ad/0x2e0 [ 394.106569][ T31] genl_rcv+0x28/0x40 [ 394.110951][ T31] netlink_unicast+0x75b/0x8d0 [ 394.115791][ T31] netlink_sendmsg+0x805/0xb30 [ 394.120742][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.126260][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 394.131770][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.137104][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.165702][ T31] __sock_sendmsg+0x219/0x270 [ 394.171031][ T31] ____sys_sendmsg+0x505/0x830 [ 394.175961][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.196699][ T31] ? import_iovec+0x74/0xa0 [ 394.201952][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 394.207005][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.212876][ T31] ? __fget_files+0x2a/0x420 [ 394.218054][ T31] ? __fget_files+0x3a0/0x420 [ 394.222913][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 394.228035][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.233681][ T31] ? do_syscall_64+0xba/0x210 [ 394.238895][ T31] do_syscall_64+0xf6/0x210 [ 394.243561][ T31] ? clear_bhb_loop+0x60/0xb0 [ 394.248438][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.254467][ T31] RIP: 0033:0x7f9efaf8e969 [ 394.259454][ T31] RSP: 002b:00007f9efbe03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.268437][ T31] RAX: ffffffffffffffda RBX: 00007f9efb1b5fa0 RCX: 00007f9efaf8e969 [ 394.276497][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 394.284677][ T31] RBP: 00007f9efb010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 394.292816][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.309536][ T31] R13: 0000000000000000 R14: 00007f9efb1b5fa0 R15: 00007fff888301b8 [ 394.327663][ T31] [ 394.336057][ T31] INFO: task syz.1.1121:10054 blocked for more than 144 seconds. [ 394.347258][ T31] Not tainted 6.15.0-rc6-syzkaller-00173-g9e89db3d847f #0 [ 394.354966][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.383148][ T31] task:syz.1.1121 state:D stack:28136 pid:10054 tgid:10050 ppid:5828 task_flags:0x400140 flags:0x00000004 [ 394.405417][ T31] Call Trace: [ 394.409039][ T31] [ 394.412181][ T31] __schedule+0x16e2/0x4cd0 [ 394.416846][ T31] ? __lock_acquire+0xaac/0xd20 [ 394.437478][ T31] ? schedule+0x165/0x360 [ 394.441963][ T31] ? __pfx___schedule+0x10/0x10 [ 394.446928][ T31] ? schedule+0x91/0x360 [ 394.466929][ T31] schedule+0x165/0x360 [ 394.471784][ T31] schedule_preempt_disabled+0x13/0x30 [ 394.487364][ T31] __mutex_lock+0x724/0xe80 [ 394.491992][ T31] ? __mutex_lock+0x51b/0xe80 [ 394.496726][ T31] ? genl_rcv_msg+0x10d/0x790 [ 394.515988][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 394.521528][ T31] ? stack_depot_save_flags+0x40/0x910 [ 394.527161][ T31] ? radix_tree_lookup+0x240/0x290 [ 394.547507][ T31] genl_rcv_msg+0x10d/0x790 [ 394.552128][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.567284][ T31] ? __lock_acquire+0xaac/0xd20 [ 394.572254][ T31] netlink_rcv_skb+0x219/0x490 [ 394.577065][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.587395][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.592878][ T31] ? down_read+0x1ad/0x2e0 [ 394.598001][ T31] genl_rcv+0x28/0x40 [ 394.602056][ T31] netlink_unicast+0x75b/0x8d0 [ 394.606854][ T31] netlink_sendmsg+0x805/0xb30 [ 394.612328][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.618144][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 394.623138][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.628573][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.633899][ T31] __sock_sendmsg+0x219/0x270 [ 394.638684][ T31] __sys_sendto+0x3bd/0x520 [ 394.643240][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 394.648374][ T31] ? count_memcg_event_mm+0x92/0x3b0 [ 394.653732][ T31] __x64_sys_sendto+0xde/0x100 [ 394.658601][ T31] do_syscall_64+0xf6/0x210 [ 394.663168][ T31] ? clear_bhb_loop+0x60/0xb0 [ 394.668114][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.674094][ T31] RIP: 0033:0x7f9efaf907fc [ 394.678615][ T31] RSP: 002b:00007f9efbde0ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 394.687118][ T31] RAX: ffffffffffffffda RBX: 00007f9efbde0fc0 RCX: 00007f9efaf907fc [ 394.695578][ T31] RDX: 0000000000000024 RSI: 00007f9efbde1010 RDI: 0000000000000006 [ 394.704101][ T31] RBP: 0000000000000000 R08: 00007f9efbde0f14 R09: 000000000000000c [ 394.712592][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 394.721039][ T31] R13: 00007f9efbde0f68 R14: 00007f9efbde1010 R15: 0000000000000000 [ 394.729387][ T31] [ 394.732477][ T31] INFO: task syz.2.1125:10061 blocked for more than 145 seconds. [ 394.740356][ T31] Not tainted 6.15.0-rc6-syzkaller-00173-g9e89db3d847f #0 [ 394.748407][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.757413][ T31] task:syz.2.1125 state:D stack:28712 pid:10061 tgid:10060 ppid:5843 task_flags:0x400040 flags:0x00000004 [ 394.769716][ T31] Call Trace: [ 394.773041][ T31] [ 394.775999][ T31] __schedule+0x16e2/0x4cd0 [ 394.780988][ T31] ? __lock_acquire+0xaac/0xd20 [ 394.785908][ T31] ? schedule+0x165/0x360 [ 394.790448][ T31] ? __pfx___schedule+0x10/0x10 [ 394.795382][ T31] ? schedule+0x91/0x360 [ 394.800004][ T31] schedule+0x165/0x360 [ 394.804203][ T31] schedule_preempt_disabled+0x13/0x30 [ 394.810066][ T31] __mutex_lock+0x724/0xe80 [ 394.814668][ T31] ? __mutex_lock+0x51b/0xe80 [ 394.819668][ T31] ? genl_rcv_msg+0x10d/0x790 [ 394.824887][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 394.830173][ T31] ? stack_depot_save_flags+0x40/0x910 [ 394.835709][ T31] ? radix_tree_lookup+0x240/0x290 [ 394.840966][ T31] genl_rcv_msg+0x10d/0x790 [ 394.845543][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.850722][ T31] ? __lock_acquire+0xaac/0xd20 [ 394.855631][ T31] netlink_rcv_skb+0x219/0x490 [ 394.860657][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 394.865742][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.871201][ T31] ? down_read+0x1ad/0x2e0 [ 394.875681][ T31] genl_rcv+0x28/0x40 [ 394.879812][ T31] netlink_unicast+0x75b/0x8d0 [ 394.884636][ T31] netlink_sendmsg+0x805/0xb30 [ 394.889518][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.894856][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 394.900040][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.905584][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.911170][ T31] __sock_sendmsg+0x219/0x270 [ 394.915999][ T31] __sys_sendto+0x3bd/0x520 [ 394.920659][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 394.926076][ T31] ? count_memcg_event_mm+0x92/0x3b0 [ 394.931873][ T31] __x64_sys_sendto+0xde/0x100 [ 394.936714][ T31] do_syscall_64+0xf6/0x210 [ 394.941585][ T31] ? clear_bhb_loop+0x60/0xb0 [ 394.946319][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.952534][ T31] RIP: 0033:0x7fc2a8f907fc [ 394.956997][ T31] RSP: 002b:00007fc2a9dd3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 394.965795][ T31] RAX: ffffffffffffffda RBX: 00007fc2a9dd3fc0 RCX: 00007fc2a8f907fc [ 394.974273][ T31] RDX: 0000000000000020 RSI: 00007fc2a9dd4010 RDI: 0000000000000003 [ 394.982405][ T31] RBP: 0000000000000000 R08: 00007fc2a9dd3f14 R09: 000000000000000c [ 394.990747][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 394.999062][ T31] R13: 00007fc2a9dd3f68 R14: 00007fc2a9dd4010 R15: 0000000000000000 [ 395.007120][ T31] [ 395.010395][ T31] [ 395.010395][ T31] Showing all locks held in the system: [ 395.018503][ T31] 1 lock held by khungtaskd/31: [ 395.023415][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 395.033797][ T31] 3 locks held by kworker/u8:5/1013: [ 395.039346][ T31] 2 locks held by getty/5589: [ 395.044061][ T31] #0: ffff88803077d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 395.054204][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 395.065106][ T31] 1 lock held by udevd/5883: [ 395.070128][ T31] #0: ffff88814434c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 395.079525][ T31] 2 locks held by syz-executor/9783: [ 395.084837][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.093199][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.102927][ T31] 2 locks held by syz-executor/9927: [ 395.108529][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.116813][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.125951][ T31] 6 locks held by syz.0.1116/10037: [ 395.131488][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.139939][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.149244][ T31] #2: ffff888024887198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x36f/0x1870 [ 395.159923][ T31] #3: ffff888144315eb8 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x2a4/0x6c0 [ 395.169560][ T31] #4: ffff888144315868 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 395.182112][ T31] #5: ffff8881443158a0 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x5e/0x360 [ 395.194626][ T31] 2 locks held by syz.1.1121/10051: [ 395.200079][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.208850][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.218258][ T31] 2 locks held by syz.1.1121/10054: [ 395.223758][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.232415][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.241839][ T31] 2 locks held by syz.2.1125/10061: [ 395.247116][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.255545][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.265197][ T31] 2 locks held by syz-executor/10065: [ 395.270823][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.279264][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.288579][ T31] 2 locks held by syz-executor/10067: [ 395.294003][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.302409][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.311857][ T31] 2 locks held by syz-executor/10082: [ 395.317560][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.325869][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.335149][ T31] 2 locks held by syz-executor/10091: [ 395.340891][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.349438][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.358752][ T31] 2 locks held by syz-executor/10100: [ 395.364271][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.372630][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.381883][ T31] 2 locks held by syz-executor/10110: [ 395.387563][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.395941][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.405121][ T31] 2 locks held by syz-executor/10112: [ 395.410625][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.419450][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.428681][ T31] 2 locks held by syz-executor/10125: [ 395.434089][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.442666][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.451845][ T31] 2 locks held by syz-executor/10136: [ 395.457315][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.465594][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.474816][ T31] 2 locks held by syz-executor/10145: [ 395.480316][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.488828][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.498230][ T31] 2 locks held by syz-executor/10155: [ 395.503652][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.512152][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.521344][ T31] 2 locks held by syz-executor/10157: [ 395.526741][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.535059][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.544309][ T31] 2 locks held by syz-executor/10172: [ 395.549806][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.558134][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 395.567247][ T31] [ 395.569708][ T31] ============================================= [ 395.569708][ T31] [ 395.578736][ T31] NMI backtrace for cpu 0 [ 395.578767][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00173-g9e89db3d847f #0 PREEMPT(full) [ 395.578814][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 395.578837][ T31] Call Trace: [ 395.578853][ T31] [ 395.578872][ T31] dump_stack_lvl+0x189/0x250 [ 395.578927][ T31] ? __wake_up_klogd+0xd9/0x110 [ 395.578973][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.579006][ T31] ? __pfx__printk+0x10/0x10 [ 395.579054][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 395.579084][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 395.579104][ T31] ? _printk+0xcf/0x120 [ 395.579132][ T31] ? __pfx__printk+0x10/0x10 [ 395.579158][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 395.579186][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 395.579214][ T31] watchdog+0xfee/0x1030 [ 395.579247][ T31] ? watchdog+0x1de/0x1030 [ 395.579288][ T31] kthread+0x711/0x8a0 [ 395.579321][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.579349][ T31] ? __pfx_kthread+0x10/0x10 [ 395.579379][ T31] ? __pfx_kthread+0x10/0x10 [ 395.579406][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.579432][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.579461][ T31] ? __pfx_kthread+0x10/0x10 [ 395.579488][ T31] ret_from_fork+0x4b/0x80 [ 395.579511][ T31] ? __pfx_kthread+0x10/0x10 [ 395.579538][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.579579][ T31] [ 395.579587][ T31] Sending NMI from CPU 0 to CPUs 1: [ 395.728599][ C1] NMI backtrace for cpu 1 [ 395.728619][ C1] CPU: 1 UID: 0 PID: 3529 Comm: kworker/u8:8 Not tainted 6.15.0-rc6-syzkaller-00173-g9e89db3d847f #0 PREEMPT(full) [ 395.728644][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 395.728657][ C1] Workqueue: bat_events batadv_nc_worker [ 395.728685][ C1] RIP: 0010:__lock_acquire+0x4c0/0xd20 [ 395.728717][ C1] Code: 0a 00 00 0f 8d 09 01 00 00 49 63 de 48 8d 04 9b 4c 8d 34 c7 49 81 c6 10 0b 00 00 eb 1d 44 89 e0 48 ff c3 48 63 8f e8 0a 00 00 <49> 83 c6 28 41 89 c4 48 39 cb 0f 8d db 00 00 00 48 83 fb 31 0f 83 [ 395.728734][ C1] RSP: 0018:ffffc9000c1b79a0 EFLAGS: 00000002 [ 395.728750][ C1] RAX: 00000000ffffff05 RBX: 0000000000000002 RCX: 0000000000000002 [ 395.728762][ C1] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880312e0000 [ 395.728774][ C1] RBP: ffff8880312e0af0 R08: 0000000000000000 R09: 0000000000000000 [ 395.728787][ C1] R10: 0000000000000000 R11: ffffffff8b245752 R12: 00000000ffffff05 [ 395.728800][ C1] R13: 0000000000000000 R14: ffff8880312e0b38 R15: ffff8880312e0b40 [ 395.728813][ C1] FS: 0000000000000000(0000) GS:ffff8881261c7000(0000) knlGS:0000000000000000 [ 395.728829][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.728842][ C1] CR2: 000055e3bf13a000 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 395.728860][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 395.728871][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 395.728883][ C1] Call Trace: [ 395.728890][ C1] [ 395.728903][ C1] ? batadv_nc_worker+0xd2/0x610 [ 395.728923][ C1] lock_acquire+0x120/0x360 [ 395.728949][ C1] ? batadv_nc_worker+0xd2/0x610 [ 395.728974][ C1] ? batadv_nc_worker+0xd2/0x610 [ 395.728994][ C1] ? batadv_nc_worker+0xd2/0x610 [ 395.729015][ C1] batadv_nc_worker+0xef/0x610 [ 395.729036][ C1] ? batadv_nc_worker+0xd2/0x610 [ 395.729057][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 395.729077][ C1] process_scheduled_works+0xade/0x17a0 [ 395.729111][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 395.729152][ C1] worker_thread+0x8a0/0xda0 [ 395.729171][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 395.729198][ C1] ? __kthread_parkme+0x7b/0x200 [ 395.729225][ C1] kthread+0x711/0x8a0 [ 395.729248][ C1] ? __pfx_worker_thread+0x10/0x10 [ 395.729267][ C1] ? __pfx_kthread+0x10/0x10 [ 395.729298][ C1] ? __pfx_kthread+0x10/0x10 [ 395.729320][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 395.729341][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 395.729365][ C1] ? __pfx_kthread+0x10/0x10 [ 395.729386][ C1] ret_from_fork+0x4b/0x80 [ 395.729406][ C1] ? __pfx_kthread+0x10/0x10 [ 395.729429][ C1] ret_from_fork_asm+0x1a/0x30 [ 395.729456][ C1] [ 395.729644][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 396.004533][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00173-g9e89db3d847f #0 PREEMPT(full) [ 396.016432][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 396.026561][ T31] Call Trace: [ 396.029886][ T31] [ 396.033033][ T31] dump_stack_lvl+0x99/0x250 [ 396.037689][ T31] ? __asan_memcpy+0x40/0x70 [ 396.042301][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.047561][ T31] ? __pfx__printk+0x10/0x10 [ 396.052301][ T31] panic+0x2db/0x790 [ 396.056280][ T31] ? __pfx_panic+0x10/0x10 [ 396.060746][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 396.066153][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 396.071550][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 396.077836][ T31] watchdog+0x102d/0x1030 [ 396.082221][ T31] ? watchdog+0x1de/0x1030 [ 396.086687][ T31] kthread+0x711/0x8a0 [ 396.090991][ T31] ? __pfx_watchdog+0x10/0x10 [ 396.095742][ T31] ? __pfx_kthread+0x10/0x10 [ 396.100371][ T31] ? __pfx_kthread+0x10/0x10 [ 396.105028][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 396.110280][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.115628][ T31] ? __pfx_kthread+0x10/0x10 [ 396.120263][ T31] ret_from_fork+0x4b/0x80 [ 396.124717][ T31] ? __pfx_kthread+0x10/0x10 [ 396.129362][ T31] ret_from_fork_asm+0x1a/0x30 [ 396.134338][ T31] [ 396.137575][ T31] Kernel Offset: disabled [ 396.142006][ T31] Rebooting in 86400 seconds..