last executing test programs: 4m9.573782457s ago: executing program 2 (id=2690): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200100200001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4m9.301185236s ago: executing program 2 (id=2692): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0x1d, &(0x7f0000000800)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xd}, @jmp={0x5, 0x0, 0x8, 0x5, 0x5, 0xffffffffffffffc0, 0xfffffffffffffffc}], &(0x7f0000000900)='GPL\x00', 0x5, 0x82, &(0x7f0000000940)=""/130, 0x40f00, 0x2, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x2537e, 0xffffffffffffffff, 0x4, &(0x7f0000000a80)=[0x1, 0x1, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000ac0)=[{0x5, 0x5, 0x8, 0x9}, {0x0, 0x3, 0x10, 0x1a}, {0x4, 0x2, 0xe, 0x3}, {0x2, 0x2, 0x3}], 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x7c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdf4) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x6a, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xffff}]}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000002c0)={0x7, 0xfffffffffffffffe, 0x1, 0x6, 0x1, 0x0, [{0x1e96c213, 0x838c, 0x8000000000000001, '\x00', 0x888}]}) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f00000001c0)=0x7, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r5, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002200)=""/4097, 0x1001}], 0x1}, 0x81}, {{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f00000039c0)=""/16, 0x10}], 0x1}, 0xd4}], 0x2, 0x40008020, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000140)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r9) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040) sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000227bd700581dbfbb8f3a4b3f8df252500000006000400a0aa00000a0001007770616e34000000059cc500020000000c0005000202aaaaaaaaaaaa05002b00021eafa58aa8b626b4b41e00"], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f00000003c0)={0x7, 0x3}) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r12 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r12, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000c0016"], 0x34}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r13], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000280)=0x14) 4m8.263088457s ago: executing program 2 (id=2706): mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x8a6e1000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x44011, &(0x7f0000000040)={0x11, 0x0, r0, 0x0, 0x0, 0x0}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000006c0)={'syztnl0\x00', r0, 0x2f, 0xd, 0x7, 0x8, 0x48, @loopback, @private1, 0x700, 0x7, 0xfffffffd, 0x8}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xd, 's'}}}}}, 0x0) 4m7.97252221s ago: executing program 2 (id=2712): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) 4m7.762198352s ago: executing program 2 (id=2714): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) pselect6(0x40, &(0x7f00000005c0)={0xc, 0xe, 0x80000000, 0x1, 0x6, 0x0, 0xfffffffffffffffb, 0xc8d1}, &(0x7f0000000640)={0x2, 0x8, 0x0, 0xfffffffffffffff2, 0x7, 0x2, 0x8}, 0x0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0x2020) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000240)={0x0, 0xb, 0xfe, {0xfe, 0xb, "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"}}, 0x0}, &(0x7f0000000800)={0x1c, &(0x7f0000000680)={0x0, 0x1, 0x75, "159a3e79336ed082589f13d13faa4c28528750f344a97f7e85d7fe4e6e59a4a35d1845258225b346d4fdd9d8bdaf902922d25a5b3c96daf334d4a72dcd6c13ed0fd9b186c0704d1d8b9b904add2b9a25c24f587a5f3c4b0d3ddf9c531017bacc2274602a6e2ed02a93916cb89971229a8fb3fe9fbf"}, 0x0, 0x0}) socket(0x10, 0x3, 0x0) 4m5.64161464s ago: executing program 2 (id=2727): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x38}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x2700, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 3m51.575916265s ago: executing program 32 (id=2717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x7683d6006549a1f9, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) 3m50.020555303s ago: executing program 33 (id=2726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x5, 0x4}, {}, {0x8, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x30008014}, 0x4004810) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) 3m49.898002958s ago: executing program 34 (id=2727): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x38}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x2700, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 3m3.520156097s ago: executing program 5 (id=2935): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002580)={{r5}, &(0x7f0000002500), &(0x7f0000002540)='%pI4 \x00'}, 0x20) 3m3.28607398s ago: executing program 5 (id=2936): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000faffffff000000000300000085000000360000006700000007"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r0, r2, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xe, 0x6, @mcast1}}}}}}, 0x0) 3m3.099659522s ago: executing program 5 (id=2939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, 0x0, 0x4000) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 3m2.896214722s ago: executing program 5 (id=2942): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0x8001}, {}, {0x6, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) 3m2.47059292s ago: executing program 6 (id=2946): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000500)=0xd79d, 0x4) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x7fff}, &(0x7f0000000200)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a440000000c0a010100000000000000000a0000060900020073797a3100000000090087bf485a2b903cc71542f23742f79a0171c5797a31000000008014000080040001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="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"], 0x270}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 3m2.375651451s ago: executing program 4 (id=2947): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="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", 0x118}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r3}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r5, &(0x7f00000003c0)={@void, @val={0x3, 0x3, 0x8, 0x3, 0x16, 0xc}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x15, 0x5c, 0x67, 0x0, 0x6, 0x11, 0x0, @local, @empty=0x2000000}, {0x4e23, 0x4e24, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "615929421e06c3e74ce3e054a077fd19cfd314b18df4fe12", "bccd605d3028483bd2adaf37455d1e3148f215a4412be1a95097aa4a38fc2f4d"}}}}, 0x66) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x100) socket(0x1d, 0x2, 0x6) 3m2.031565782s ago: executing program 7 (id=2949): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="240000001800090400fff400000000000a080000000000060000000008001e0001"], 0x24}}, 0x80) 3m1.973025779s ago: executing program 7 (id=2950): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@empty, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x5e}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0x0, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 3m1.836402284s ago: executing program 7 (id=2951): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xfff1, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x3}}]}, 0x40}}, 0xc4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 3m0.698255037s ago: executing program 5 (id=2952): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4, 0x7f, 0x4, 0x4000000}, 0x18) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff110002000200", 0x1b) 3m0.693959832s ago: executing program 6 (id=2953): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x1b4}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f00000002c0)="d54b62caa2113e1def1525e62d7ed10ad4cd1006ebed2bf098693351ac9aa6e44024a9569d7180beb7fee83b2490321f098b8b5328d5fc87755ae27301a91fddb46a8aa9ce37c1ac15610a4db4c40c5b5f907a338f439dbe23645575c959f82a1fa885c7c7e1a80f1e2cd9e07436b722572a1623c6de942917661b30014bbef685", 0x81}, {0x0}, {&(0x7f0000003300)="0f39718278d17c9398d5da3c70daed6a76bd457357efb3703316a154231426f03799911b83c7a12778dfa783e010f5d1bd6b237cea15644963535f923fc54b0dab23540bba7f40407791f155fcbd8ec39631cb77b816d962209c91276d53a04112761b35", 0x64}, {&(0x7f0000003400)="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", 0xc52}], 0x4}}], 0x2, 0x2090) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000180)="398b25", 0x3}], 0x1) 3m0.574624216s ago: executing program 6 (id=2954): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) 3m0.507678706s ago: executing program 5 (id=2955): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 3m0.400917009s ago: executing program 6 (id=2956): socket$nl_route(0x10, 0x3, 0x0) getresgid(&(0x7f0000000040), 0x0, &(0x7f00000000c0)) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8991, &(0x7f0000000340)={'bond_slave_1\x00'}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x82a00000, 0x0, 0xffffffffffffffd4, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) r1 = mq_open(&(0x7f0000000980)='&\x00\x12|\xd6hJ\x1e\xc6\xea\xc3\xe5\xa3\xf9\xb8Bmp\x9e\xdb \x86\x11NLd\xe8\x8b\xacg\xf4\xd9L+\x95.\xf8\x00\x16sS\xef\x15\x9eii%\x7f\xba}MO\xb3\x82\xb4\xe8d-P\x99!\x84<,\xc0\xc2\xf4\xe4\x81\x80\xe4Y\xa9l\xf3\x7ff\x96\xc0d\xd7x$\x83\xb8\x80Xh\xe4g\xcdA\x8c\x83`^De\'\xd8\x18\x99\xaf\x95\xcd+\xa6\xa7\xda\x9bmT\x96&\x93\\\x93\xca0\x88\xb5Iq\x91?\xda\xc9]>K\xf4G9\x00\x00\x00\x00\xc4\x0e\x9e\xd3\xb5\x9d]\xabe\xef%\xb9\xf6Q\xc2\xb1\"r\x1d\x11\x81\xf7\xa0\x87T\xb0\x86\xcaw\xdb\xfe8J\x86,\xaa\x0e\a\xc1ac\xf3\xddf\xa4\x05\v\xe9\xf0d\n\x00\a\xdc\xea\x87\x00\xfc^/\xbcdD\x87\xa7C\xef\x85\xdd\x95\xca\a\x87\x16\x90/\n\x14\xb9e\x15\xc4\x8f\xe7\xfd\xb6y,~\x1c\xf7\xb7\x84\x02\x82T!\xd2\x8eWL\xeb\xdd\xe4\r/\xb3M\x00\rd\xdc\x944\xdc\xb3\xbb:|\xd3\xc8\xfb<\x9c\xc3\t\xc6M\xf9\f\x8c.\xde\xf3\x16_\xc9\x15Ua)\xf2\xbe\t\xc3\xa9\xc7\xee5{\x8f\xa8Y>\b\xfco\xab\x9b\x9f\xae7\xa2\xe0\x95pVl\x914\x86\xe0\xc3\xc2\x90\x9e\x9f%\xf3^\x107\xe6\xbd}\xfazE\x85\x91Lk\xb5O\xffK\xc9\xc8\x8eo\xeb)I\xaf\xf5\xd9\xbe\xba\'\xdb{wQS\xb0&\x92W\xb0\x87\x93\xf2\n\xc8U\xe5O\x1a\xfc&\xe2\xe4g.\x00&Z:\xec\xacp\x9a1n\xa6\t\xd3uc\xad\x0f\xd2\xc7\x0e\xc13J\x9cZ\xff\xdf\x8b\xd9\x8b\xcb\xe9\x90Gc\xd4\x83\x9a@\x86_\b\x00\x00\x00\xfd\xce\xa9\xe6hjU\xb3Qt\xc5\xf4\xd0\xf3\xec\xf8\x14LH\xfa\x13\xb5\b\xbek\xd5\x04\x8f3xC\x0e\xd2\xfe\xd8\xa1\xdb\xd4\xdak3\x9a\xb1\xcfX3\xfc_\xae\xd8\xe7aRa/\xf5\xdc^\xfa\xf3\xdd\x1a\x00\x00\x00\x00\x00\x00\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00(\xdfJoa\x81\xaen\x88Z\x86\xc0\x05\xa8?\x86\xe9\xd2\xb43eA\x14\x01\x0f\x85Y5\xe5\xfb2\xa6\xbd{\x1d|P\x14\x82M\n\xcf\xa3\bfk\v\xb1Y\xa3\x16AE\xc6\x11>\x93\x05w\x87\xed\xb9\xd2\xb6\xa4\xfaT\xfa\xda\x91\x11\xb1*B\x17\x03\\{\xa0\xc8\xf3\xf7\xefYOs\xf7\xdc>\xd9,\xbe\x9dL\xdf\x0f\xd9\x8a~D\vU\\5\xee\xb8:\xf7\x01\xb7\xd1y\x83\x8c\xe6\xb4\xa3KY\xf1\xc5\xaf\xf2\x8dW\xaf\xf2\xae\xed\x01\xa0\x00\x87)A\x05\xdae\x9c;/\xf4/\xe4\xe9\xec\xb1ga4\xf9f\x1d*\x9aX\xff\xb7\x96t$\x05\x11y\xef\xb4+\x88db\x1a\x1e\x1f\x00\x00\x00\x00\x00\x00\x00\x00', 0x40, 0x80, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$kvm(0xffffffffffffff9c, 0x0, 0x141, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d05, 0x0, 0x1}]}) mq_notify(r1, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) mq_notify(r1, 0x0) 3m0.283144685s ago: executing program 4 (id=2957): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x40046) sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) 3m0.018134727s ago: executing program 6 (id=2958): bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.events\x00', 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 2m59.743421587s ago: executing program 7 (id=2959): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="240000001800090400fff400000000000a080000000000060000000008001e0001"], 0x24}}, 0x80) 2m59.617177051s ago: executing program 7 (id=2960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m59.545821622s ago: executing program 6 (id=2961): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200100200001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m59.130782429s ago: executing program 7 (id=2962): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0x8001}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xb}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) 2m58.884569203s ago: executing program 4 (id=2963): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x1b4}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e", 0x7f}], 0x2}}, {{0x0, 0x0, &(0x7f0000004400)=[{&(0x7f00000002c0)="d54b62caa2113e1def1525e62d7ed10ad4cd1006ebed2bf098693351ac9aa6e44024a9569d7180beb7fee83b2490321f098b8b5328d5fc87755ae27301a91fddb46a8aa9ce37c1ac15610a4db4c40c5b5f907a338f439dbe23645575c959f82a1fa885c7c7e1a80f1e2cd9e07436b722572a1623c6de942917661b30014bbef685", 0x81}, {0x0}, {&(0x7f0000003300)="0f39718278d17c9398d5da3c70daed6a76bd457357efb3703316a154231426f03799911b83c7a12778dfa783e010f5d1bd6b237cea15644963535f923fc54b0dab23540bba7f40407791f155fcbd8ec39631cb77b816d962209c91276d53a04112761b35", 0x64}, {&(0x7f0000003400)="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", 0xc52}], 0x4}}], 0x2, 0x2090) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000180)="398b25", 0x3}], 0x1) 2m57.841003028s ago: executing program 4 (id=2964): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4, 0x7f, 0x4, 0x4000000}, 0x18) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000ff110002000200", 0x1b) 2m57.762025825s ago: executing program 4 (id=2965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) 2m57.403463665s ago: executing program 4 (id=2966): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="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", 0x118}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r3}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r5, &(0x7f00000003c0)={@void, @val={0x3, 0x3, 0x8, 0x3, 0x16, 0xc}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x15, 0x5c, 0x67, 0x0, 0x6, 0x11, 0x0, @local, @empty=0x2000000}, {0x4e23, 0x4e24, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "615929421e06c3e74ce3e054a077fd19cfd314b18df4fe12", "bccd605d3028483bd2adaf37455d1e3148f215a4412be1a95097aa4a38fc2f4d"}}}}, 0x66) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x100) socket(0x1d, 0x2, 0x6) 2m44.983164228s ago: executing program 35 (id=2955): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 2m44.467269525s ago: executing program 36 (id=2961): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1}, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200100200001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m43.381469444s ago: executing program 37 (id=2962): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0x8001}, {}, {0x6, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1, 0xb}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) 2m41.835510637s ago: executing program 38 (id=2966): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="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", 0x118}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r2, r3}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2720, 0x0, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r10 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r5, &(0x7f00000003c0)={@void, @val={0x3, 0x3, 0x8, 0x3, 0x16, 0xc}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x15, 0x5c, 0x67, 0x0, 0x6, 0x11, 0x0, @local, @empty=0x2000000}, {0x4e23, 0x4e24, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "615929421e06c3e74ce3e054a077fd19cfd314b18df4fe12", "bccd605d3028483bd2adaf37455d1e3148f215a4412be1a95097aa4a38fc2f4d"}}}}, 0x66) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x100) socket(0x1d, 0x2, 0x6) 54.690338532s ago: executing program 9 (id=3331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, 0x0, 0x20044010) 54.384176127s ago: executing program 9 (id=3333): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000380)=ANY=[], 0x0) 54.139513948s ago: executing program 9 (id=3336): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/nullb1/zone_size\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)="34d698c004be3e", 0x7) 53.896114307s ago: executing program 9 (id=3337): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x5ea, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14) 52.262647576s ago: executing program 0 (id=3345): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000780)={0xfffffffffffffffb, 0x8f5, 0xb, 0x9, 0x2, 0x0, [{0x0, 0x69aa, 0x6, '\x00', 0x2000}, {0xf11, 0xffffffffffffff67, 0x7435c90, '\x00', 0x2c80}]}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r5 = socket(0x2, 0x3, 0x6) bind$inet(r5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002900)=ANY=[@ANYRES32=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$sock_int(r5, 0x1, 0x6, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x48890, 0x0, 0x0) r7 = socket(0xa, 0x3, 0x87) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r10 = socket$inet6(0xa, 0x3, 0x88) connect$inet6(r10, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000480)={@private2, 0x18, r9}) clock_adjtime(0xffffffd3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x2e, 0x1000, 0x4}, 0x9c) 50.846699521s ago: executing program 9 (id=3348): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000003c80)={0xbd, 0x3ba4, 0xfff5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 'pim6reg1\x00'}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c8d4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 50.140739539s ago: executing program 0 (id=3350): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffffffd}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x107040, 0x0, 0x3, &(0x7f0000000100)={@_ha_fsid}, 0x0}, {[0xffffffff, 0x8c, 0x0, 0x1]}, 0x0, 0x50, &(0x7f0000000180)=""/80}) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4040821}, 0x24044880) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req={0x9, 0x2, 0xa32a}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0xf) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x19, 0x25, 0x0, &(0x7f0000001500)='syzkaller\x00', 0x547fb8f2, 0x11, &(0x7f0000001540)=""/17, 0x41000, 0x30, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000015c0)={0x1, 0x1, 0x10000, 0x5}, 0x10, 0x0, r2, 0x0, &(0x7f0000001640)=[r2, r0, r0], 0x0, 0x10, 0xd}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000001240)=""/181, &(0x7f0000001340)=0xb5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r6, &(0x7f0000003800), 0x0) write$cgroup_int(r7, &(0x7f0000000140), 0xfffffdef) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00"/36], 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 48.423171506s ago: executing program 9 (id=3351): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 47.600059115s ago: executing program 0 (id=3353): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x21, [0x8, 0x1, 0x4, 0xc, 0x9, 0xf94, 0x4000f1, 0x37, 0x405, 0x6, 0x1, 0x6, 0x1, 0x5, 0x80, 0x2, 0x80000000, 0x2, 0x0, 0xc, 0x8, 0x5, 0x7, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x4, 0x4107a2b1, 0x358827d1, 0x6, 0x2, 0x1, 0x80000001, 0x3, 0x9c, 0x4, 0x2, 0x5, 0x3, 0xfffffffc, 0x200, 0x50, 0x4, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4928, 0x3, 0x4, 0x7, 0x4, 0x5, 0x80000004, 0x20000000, 0x9733, 0x6, 0x80000001, 0x8, 0x6, 0x5, 0x9, 0x8, 0x8, 0x4, 0x101, 0x9, 0x71, 0x20000000, 0x6, 0x8, 0x3, 0x5, 0x165, 0x9, 0x6, 0x4, 0x9, 0x4000008, 0x840, 0x6, 0x1000, 0x7, 0x0, 0x3, 0x2, 0x2, 0x0, 0x2, 0xffffffff, 0x470, 0x4, 0x0, 0x7, 0x3, 0xe, 0x1000, 0x3, 0x2, 0xb, 0xffff, 0x80, 0x4, 0x4, 0x2, 0x40, 0xb, 0xfffffffd, 0x5, 0x7, 0x0, 0x2, 0x2, 0x0, 0x7, 0x5, 0x8000, 0x1, 0xa, 0x2010002, 0x400, 0x6, 0x100009]}}) sendmsg$nl_route(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) 46.961040432s ago: executing program 0 (id=3356): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20044010) 45.955286739s ago: executing program 0 (id=3359): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r2 = accept$alg(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 45.711421642s ago: executing program 0 (id=3360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x4, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x200, 0x8, 0x2, 0x0, 0x7, 0x8, 0x61d6e0b8, 0x3, 0x6, 0xe, 0x1, 0xe9, 0x7, 0x10000, 0x5, 0x8, 0x3800000, 0x2, 0x2, 0x59b, 0x2, 0x7, 0x8, 0x7, 0x8001, 0x40, 0x401, 0x8, 0x0, 0x9, 0x6, 0x9, 0x9, 0x80000001, 0xa, 0x1ff, 0xffff7fff, 0x1, 0x8, 0xfffffffb, 0x2, 0xa05, 0x46e, 0x6, 0x1e6, 0x400, 0x6, 0x5, 0x8f, 0x0, 0x8, 0x3, 0x0, 0x9, 0x10, 0x9, 0x0, 0xd, 0x80000000, 0x10000, 0x10, 0x9, 0x200, 0x8001, 0x9, 0x800, 0x0, 0x1, 0xffffff81, 0x2, 0x400, 0x5, 0x4, 0x76, 0x1, 0x2, 0x96, 0x0, 0xffff, 0xc8de, 0xe851, 0xe29f, 0x0, 0x4, 0x2, 0x5, 0xff, 0x7, 0x2, 0x9, 0xb, 0x80, 0x1, 0x6c5, 0xe7, 0xd5a, 0x7, 0x5, 0xf663, 0x8, 0x4, 0x6, 0xc, 0x5, 0x3, 0x0, 0xd, 0x7, 0x6, 0x8, 0x8001, 0x3, 0xce, 0x6aa, 0x511, 0x8, 0x900000, 0x8, 0x8, 0x10, 0x3, 0x621b902a, 0x2, 0x8, 0x43, 0x3, 0x69, 0x4, 0x8f, 0xee, 0x800, 0xa22, 0x74, 0x0, 0x1, 0x6, 0xfffffff8, 0xa000000, 0x8, 0x2, 0x3b, 0xffff, 0xffffffbd, 0x3, 0x0, 0x200, 0x2, 0x1, 0x8000, 0xf87, 0x8, 0xfb24, 0x2, 0x5, 0x1, 0x6, 0x101, 0x855, 0x1, 0xeac, 0x4, 0x6, 0x2, 0x3, 0xffff, 0xd, 0x7d6, 0x6, 0x1, 0x2, 0x1, 0x4, 0xb, 0x7, 0x28000, 0x6, 0xa, 0x2, 0x9, 0x8, 0x4af, 0x3, 0x0, 0x2, 0x8001, 0x8, 0x7, 0xa4, 0x0, 0x7, 0x2ab0, 0x7ff, 0x1, 0x5, 0x440b, 0x11, 0x2, 0x1, 0x7, 0xc9, 0x9, 0x8, 0x200, 0x80000000, 0x9, 0x9, 0x87b3, 0x9, 0x1, 0x4, 0x400, 0x7fffffff, 0x88, 0x2, 0x3, 0x4, 0x6a0, 0x3, 0x4, 0x2, 0x0, 0x6, 0x4, 0xfffffffe, 0xffffa274, 0x0, 0x2, 0x7, 0xf, 0x3, 0x10000, 0x4, 0x7a, 0x1, 0x8, 0xed0, 0x80000000, 0x4, 0x8, 0x3, 0x8b9, 0x9, 0x5, 0x80, 0x8, 0x7, 0x8, 0x1, 0xfffff826, 0x7ff, 0x1, 0x9, 0x0, 0x6, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 42.273073681s ago: executing program 1 (id=3363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc4}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r2, &(0x7f0000000080)="0b000300010001", 0x7) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x1) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf092000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b700000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) socket$nl_route(0x10, 0x3, 0x0) 40.205448157s ago: executing program 1 (id=3368): setrlimit(0x40000000000008, &(0x7f0000000000)={0x5, 0x7}) capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x80000001, 0x6}) r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xa, 0x11, r0, 0x0) mlock2(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 39.64246152s ago: executing program 1 (id=3369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20044010) 37.969904239s ago: executing program 1 (id=3372): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffffffd}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x107040, 0x0, 0x3, &(0x7f0000000100)={@_ha_fsid}, 0x0}, {[0xffffffff, 0x8c, 0x0, 0x1]}, 0x0, 0x50, &(0x7f0000000180)=""/80}) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4040821}, 0x24044880) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req={0x9, 0x2, 0xa32a}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0xf) bind$bt_hci(r3, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x19, 0x25, 0x0, &(0x7f0000001500)='syzkaller\x00', 0x547fb8f2, 0x11, &(0x7f0000001540)=""/17, 0x41000, 0x30, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000015c0)={0x1, 0x1, 0x10000, 0x5}, 0x10, 0x0, r2, 0x0, &(0x7f0000001640)=[r2, r0, r0], 0x0, 0x10, 0xd}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000001240)=""/181, &(0x7f0000001340)=0xb5) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r6, &(0x7f0000003800), 0x0) write$cgroup_int(r7, &(0x7f0000000140), 0xfffffdef) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYBLOB="05072bbd7000ffdbdf250100000018000180140002006c6f00"/36], 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) 36.509038033s ago: executing program 1 (id=3374): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000680)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0x0, @local}, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x0, 0x0, 0x3ff}}}, 0x118) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) 33.955913937s ago: executing program 8 (id=3378): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc4}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r2, &(0x7f0000000080)="0b000300010001", 0x7) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x1) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf092000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b700000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) socket$nl_route(0x10, 0x3, 0x0) 32.30696904s ago: executing program 39 (id=3351): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x7, 0x6776, 0x4}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x100000000) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 31.172788111s ago: executing program 8 (id=3381): socket(0x400000000010, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) socket$netlink(0x10, 0x3, 0x14) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000740)=ANY=[], 0x12) 30.243038881s ago: executing program 40 (id=3360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x4, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x200, 0x8, 0x2, 0x0, 0x7, 0x8, 0x61d6e0b8, 0x3, 0x6, 0xe, 0x1, 0xe9, 0x7, 0x10000, 0x5, 0x8, 0x3800000, 0x2, 0x2, 0x59b, 0x2, 0x7, 0x8, 0x7, 0x8001, 0x40, 0x401, 0x8, 0x0, 0x9, 0x6, 0x9, 0x9, 0x80000001, 0xa, 0x1ff, 0xffff7fff, 0x1, 0x8, 0xfffffffb, 0x2, 0xa05, 0x46e, 0x6, 0x1e6, 0x400, 0x6, 0x5, 0x8f, 0x0, 0x8, 0x3, 0x0, 0x9, 0x10, 0x9, 0x0, 0xd, 0x80000000, 0x10000, 0x10, 0x9, 0x200, 0x8001, 0x9, 0x800, 0x0, 0x1, 0xffffff81, 0x2, 0x400, 0x5, 0x4, 0x76, 0x1, 0x2, 0x96, 0x0, 0xffff, 0xc8de, 0xe851, 0xe29f, 0x0, 0x4, 0x2, 0x5, 0xff, 0x7, 0x2, 0x9, 0xb, 0x80, 0x1, 0x6c5, 0xe7, 0xd5a, 0x7, 0x5, 0xf663, 0x8, 0x4, 0x6, 0xc, 0x5, 0x3, 0x0, 0xd, 0x7, 0x6, 0x8, 0x8001, 0x3, 0xce, 0x6aa, 0x511, 0x8, 0x900000, 0x8, 0x8, 0x10, 0x3, 0x621b902a, 0x2, 0x8, 0x43, 0x3, 0x69, 0x4, 0x8f, 0xee, 0x800, 0xa22, 0x74, 0x0, 0x1, 0x6, 0xfffffff8, 0xa000000, 0x8, 0x2, 0x3b, 0xffff, 0xffffffbd, 0x3, 0x0, 0x200, 0x2, 0x1, 0x8000, 0xf87, 0x8, 0xfb24, 0x2, 0x5, 0x1, 0x6, 0x101, 0x855, 0x1, 0xeac, 0x4, 0x6, 0x2, 0x3, 0xffff, 0xd, 0x7d6, 0x6, 0x1, 0x2, 0x1, 0x4, 0xb, 0x7, 0x28000, 0x6, 0xa, 0x2, 0x9, 0x8, 0x4af, 0x3, 0x0, 0x2, 0x8001, 0x8, 0x7, 0xa4, 0x0, 0x7, 0x2ab0, 0x7ff, 0x1, 0x5, 0x440b, 0x11, 0x2, 0x1, 0x7, 0xc9, 0x9, 0x8, 0x200, 0x80000000, 0x9, 0x9, 0x87b3, 0x9, 0x1, 0x4, 0x400, 0x7fffffff, 0x88, 0x2, 0x3, 0x4, 0x6a0, 0x3, 0x4, 0x2, 0x0, 0x6, 0x4, 0xfffffffe, 0xffffa274, 0x0, 0x2, 0x7, 0xf, 0x3, 0x10000, 0x4, 0x7a, 0x1, 0x8, 0xed0, 0x80000000, 0x4, 0x8, 0x3, 0x8b9, 0x9, 0x5, 0x80, 0x8, 0x7, 0x8, 0x1, 0xfffff826, 0x7ff, 0x1, 0x9, 0x0, 0x6, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 28.949301931s ago: executing program 8 (id=3385): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 26.309267103s ago: executing program 8 (id=3387): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'bond_slave_0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/41, 0xfffffffffffffcbb}, 0x5}], 0x1, 0x40000020, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000080)=0x6, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001440), r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r6, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0}}, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000007c0)={0x58, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20001040}, 0x2004c010) 25.604869407s ago: executing program 3 (id=3388): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getpid() fcntl$setownex(r0, 0xf, 0x0) fcntl$notify(r0, 0x402, 0x80000027) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 24.980724167s ago: executing program 3 (id=3389): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="0100000082"], 0x48}}, 0x4008000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r0, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r1, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 23.032841354s ago: executing program 3 (id=3390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc4}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0xfffffffffffffd6a) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r2, &(0x7f0000000080)="0b000300010001", 0x7) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x1) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf092000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b700000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) socket$nl_route(0x10, 0x3, 0x0) 21.532840926s ago: executing program 1 (id=3391): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000055c0)='devices.allow\x00', 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20100, 0x8900}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x20008045}, 0x20000000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000980)={{{@in=@remote, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x80000000, 0x200000004, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5, 0x0, 0x2}, 0x5, 0x6e6bb1, 0x1, 0x1, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x3501, 0x4, 0x8, 0x0, 0x9075, 0x7, 0x9}}, 0xe8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x44}}, 0x0) connect$inet6(r5, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r8, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x64008000) 21.021683729s ago: executing program 3 (id=3392): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) pwritev(r2, &(0x7f00000002c0)=[{&(0x7f0000000200)}], 0x1, 0xd, 0x2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r1, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES32], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) getpgid(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002000)={'vcan0\x00'}) setuid(0xee01) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="580000005400e501000000000000000007000000", @ANYRES32, @ANYBLOB="350001"], 0x58}}, 0x20044050) syz_clone(0x1000200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='task\x00') read$eventfd(r4, &(0x7f0000000040), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/file0\x00', 0x162) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper/dir\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000300)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt/dir\x00', 0x0, 0x0) name_to_handle_at(r5, &(0x7f0000000500)='\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="80000000010000000000000000f5ff008c561f72619aefd33eef58e79b0acb28cbd8f2"], &(0x7f0000000700), 0x1000) 17.576756989s ago: executing program 3 (id=3393): r0 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100ffef0000000000000300000a440000000c0a010100000000000000000a0000060900020073797a3100000000090087bf485a2b903cc71542f23742f79a0171c5797a31000000008014000080040001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[], 0x270}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 16.650111865s ago: executing program 8 (id=3394): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x54}}, 0x20044010) 16.023601573s ago: executing program 3 (id=3395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x141042, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000e"], 0xffdd) 15.731851422s ago: executing program 8 (id=3396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000640)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, {0x306, @random="27c152c923aa"}, 0x20, {0x2, 0x4e20, @rand_addr=0x64010101}, 'pimreg0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x800, 0x0, r3, 0x7, '\x00', r2, 0xffffffffffffffff, 0x7, 0x3, 0x2}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r5, 0x5170c560dce29b81, 0x44, 0x25dfdbfe}, 0x14}, 0x1, 0xffa6, 0x0, 0x8000}, 0x40408c4) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r7 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000740)) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, 0x0) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r8, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x8000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r4, 0x0, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 5.281162497s ago: executing program 41 (id=3391): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0xfffffffffffffffe, 0xfe9c) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000055c0)='devices.allow\x00', 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x20100, 0x8900}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0xd, 0x0, 0x20008045}, 0x20000000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000980)={{{@in=@remote, @in=@local, 0xee24, 0x0, 0x0, 0x3, 0x2}, {0x80000000, 0x200000004, 0x40000000007, 0xffffffff, 0x100000000, 0x0, 0x200000003, 0x9}, {0x5, 0x0, 0x2}, 0x5, 0x6e6bb1, 0x1, 0x1, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x16}, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x3501, 0x4, 0x8, 0x0, 0x9075, 0x7, 0x9}}, 0xe8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @mcast2}]}, 0x44}}, 0x0) connect$inet6(r5, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r8, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x64008000) 314.808335ms ago: executing program 42 (id=3395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x141042, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000e"], 0xffdd) 0s ago: executing program 43 (id=3396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x11}, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000640)={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, {0x306, @random="27c152c923aa"}, 0x20, {0x2, 0x4e20, @rand_addr=0x64010101}, 'pimreg0\x00'}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x800, 0x0, r3, 0x7, '\x00', r2, 0xffffffffffffffff, 0x7, 0x3, 0x2}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r4) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r5, 0x5170c560dce29b81, 0x44, 0x25dfdbfe}, 0x14}, 0x1, 0xffa6, 0x0, 0x8000}, 0x40408c4) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r7 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000740)) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, 0x0) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r8, &(0x7f00000000c0)={0x27, 0x0, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000840}, 0x8000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_DEV_DOWN(r4, 0x0, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): 57.987775][ T1308] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.990140][T12845] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.990171][T12845] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.990220][T12845] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.990244][T12845] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.990278][T12845] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 357.990302][T12845] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.139987][T12974] 8021q: VLANs not supported on ip6gre0 [ 359.291049][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2662'. [ 359.391177][T13011] 8021q: VLANs not supported on nlmon0 [ 359.819856][T13026] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 360.036471][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2676'. [ 360.238589][ T36] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 360.266032][T13041] 8021q: VLANs not supported on nlmon0 [ 360.310529][T13046] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2678'. [ 360.310560][T13046] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2678'. [ 360.397562][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 360.403825][ T36] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 360.405407][ T36] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.405439][ T36] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 360.405463][ T36] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 360.405484][ T36] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 360.406968][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 360.407049][ T36] usb 4-1: SerialNumber: syz [ 360.489858][T13034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.490096][T13034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.506247][ T36] hub 4-1:1.0: bad descriptor, ignoring hub [ 360.512280][ T36] hub 4-1:1.0: probe with driver hub failed with error -5 [ 360.713228][T13034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.713424][T13034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 360.726946][T13061] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 361.026662][T13072] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2687'. [ 361.113948][T13076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2690'. [ 361.115657][T13076] 8021q: VLANs not supported on nlmon0 [ 361.154648][ T36] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 361.597958][T13090] netlink: 'syz.1.2696': attribute type 2 has an invalid length. [ 361.661008][ T5716] usb 4-1: USB disconnect, device number 7 [ 361.683124][ T5716] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 361.787920][T13093] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 362.112715][T13108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2702'. [ 362.113231][T13108] 8021q: VLANs not supported on nlmon0 [ 362.449075][T13126] netlink: 'syz.0.2708': attribute type 2 has an invalid length. [ 363.047767][ T5715] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 363.100135][T13156] syzkaller0: entered promiscuous mode [ 363.100161][T13156] syzkaller0: entered allmulticast mode [ 363.159165][ T4915] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 363.160333][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 363.217656][ T5715] usb 3-1: Using ep0 maxpacket: 16 [ 363.218567][ T5715] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 363.220123][ T5715] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.220324][ T5715] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 363.220349][ T5715] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 363.220372][ T5715] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 363.221911][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 363.221934][ T5715] usb 3-1: SerialNumber: syz [ 363.237175][T13144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.238498][T13144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.256233][ T5715] hub 3-1:1.0: bad descriptor, ignoring hub [ 363.256272][ T5715] hub 3-1:1.0: probe with driver hub failed with error -5 [ 363.483132][T13144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.483257][T13144] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 363.757128][T13171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2718'. [ 363.910088][T13171] 8021q: VLANs not supported on nlmon0 [ 363.937323][ T5715] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 363.955236][T13177] lo: entered promiscuous mode [ 363.995331][T13177] tunl0: entered promiscuous mode [ 364.055998][T13182] netlink: 'syz.0.2721': attribute type 2 has an invalid length. [ 364.060203][T13177] gre0: entered promiscuous mode [ 364.139687][T13177] gretap0: entered promiscuous mode [ 364.219139][T13177] erspan0: entered promiscuous mode [ 364.251948][T13177] ip_vti0: entered promiscuous mode [ 364.322967][T13177] ip6_vti0: entered promiscuous mode [ 364.343880][T13177] sit0: entered promiscuous mode [ 364.370211][T13177] ip6tnl0: entered promiscuous mode [ 364.379832][T13177] ip6gre0: entered promiscuous mode [ 364.447963][ T5999] usb 3-1: USB disconnect, device number 6 [ 364.459602][ T5999] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 364.470143][T13177] ip6gretap0: entered promiscuous mode [ 364.475876][T13177] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.476724][T13177] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.482924][T13177] bridge0: entered promiscuous mode [ 364.496188][T13177] vcan0: entered promiscuous mode [ 364.537672][T13177] bond0: entered promiscuous mode [ 364.537730][T13177] bond_slave_0: entered promiscuous mode [ 364.537963][T13177] bond_slave_1: entered promiscuous mode [ 364.580108][T13177] team0: entered promiscuous mode [ 364.580634][T13177] team_slave_0: entered promiscuous mode [ 364.580855][T13177] team_slave_1: entered promiscuous mode [ 364.602411][T13177] dummy0: entered promiscuous mode [ 364.688220][T13177] nlmon0: entered promiscuous mode [ 364.722768][T13177] vxcan0: entered promiscuous mode [ 364.730379][T13177] vxcan1: entered promiscuous mode [ 364.736180][T13177] veth0: entered promiscuous mode [ 364.744619][T13177] veth1: entered promiscuous mode [ 364.788030][T13177] wg0: entered promiscuous mode [ 364.828557][T13177] wg1: entered promiscuous mode [ 364.867955][T13177] wg2: entered promiscuous mode [ 364.876223][T13177] veth0_to_bridge: entered promiscuous mode [ 364.928074][T13177] veth1_to_bridge: entered promiscuous mode [ 364.978973][T13177] veth0_to_bond: entered promiscuous mode [ 365.034988][T13177] veth1_to_bond: entered promiscuous mode [ 365.064536][T13177] veth0_to_team: entered promiscuous mode [ 365.093559][T13177] veth1_to_team: entered promiscuous mode [ 365.120835][T13177] veth0_to_batadv: entered promiscuous mode [ 365.132670][T13177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.144267][T13177] batadv_slave_0: entered promiscuous mode [ 365.155674][T13177] veth1_to_batadv: entered promiscuous mode [ 365.167135][T13177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.167233][T13177] batadv_slave_1: entered promiscuous mode [ 365.189798][T13177] xfrm0: entered promiscuous mode [ 365.199868][T13177] veth0_to_hsr: entered promiscuous mode [ 365.226379][T13177] veth1_to_hsr: entered promiscuous mode [ 365.239465][T13177] hsr0: entered promiscuous mode [ 365.243744][T13177] veth1_virt_wifi: entered promiscuous mode [ 365.249307][T13177] veth0_virt_wifi: entered promiscuous mode [ 365.288438][T13177] virt_wifi0: entered promiscuous mode [ 365.301445][T13177] vlan0: entered promiscuous mode [ 365.306015][T13177] vlan1: entered promiscuous mode [ 365.329468][T13177] macvlan0: entered promiscuous mode [ 365.387996][T13177] macvlan1: entered promiscuous mode [ 365.395273][T13177] ipvlan0: entered promiscuous mode [ 365.398506][T13177] ipvlan1: entered promiscuous mode [ 365.488925][T13177] macvtap0: entered promiscuous mode [ 365.497037][T13177] macsec0: entered promiscuous mode [ 365.502043][T13177] geneve0: entered promiscuous mode [ 365.506634][T13177] geneve1: entered promiscuous mode [ 365.587927][T13177] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 365.648258][T13177] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 365.727830][T13177] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 365.807915][T13177] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 365.971239][T13177] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 366.114064][T13177] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 366.125146][T13177] sit1: entered promiscuous mode [ 366.208093][T13177] bond1: entered promiscuous mode [ 366.248237][T13177] ip6erspan0: entered promiscuous mode [ 366.368972][T13177] mac80211_hwsim hwsim13 wlan2: entered promiscuous mode [ 366.378908][T13177] gtp0: entered promiscuous mode [ 366.514017][T13177] mac80211_hwsim hwsim16 wlan3: entered promiscuous mode [ 366.616197][T13177] mac80211_hwsim hwsim24 wlan4: entered promiscuous mode [ 366.617391][T13177] ipip0: entered promiscuous mode [ 366.745035][T13177] mac80211_hwsim hwsim25 wlan5: entered promiscuous mode [ 366.748238][T13177] bridge1: entered promiscuous mode [ 366.756853][T13177] bridge2: entered promiscuous mode [ 366.762656][T13177] bridge3: entered promiscuous mode [ 366.882931][T13177] mac80211_hwsim hwsim28 wlan6: entered promiscuous mode [ 366.885230][T13177] geneve2: entered promiscuous mode [ 366.891683][T13177] dvmrp8: entered promiscuous mode [ 366.949540][T13175] syzkaller0: entered promiscuous mode [ 366.949626][T13175] syzkaller0: entered allmulticast mode [ 368.844903][T13221] netlink: 'syz.4.2732': attribute type 2 has an invalid length. [ 378.690795][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.690934][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.114337][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.156976][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.177037][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 379.184345][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 379.216718][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.681165][ T3347] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.681268][ T3347] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.681301][ T3347] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.681335][ T3347] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.067606][ T36] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 381.221144][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 381.232027][ T36] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.250721][ T36] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.261820][ T36] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 381.261854][ T36] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 381.261877][ T36] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 381.264362][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 381.264390][ T36] usb 1-1: SerialNumber: syz [ 381.398072][ T59] Bluetooth: hci5: command tx timeout [ 381.413649][T13241] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 381.414166][T13241] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 381.425300][ T4915] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 381.481961][ T4915] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 381.498964][ T4915] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 381.506453][ T4915] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 381.517924][ T36] hub 1-1:1.0: bad descriptor, ignoring hub [ 381.523956][ T36] hub 1-1:1.0: probe with driver hub failed with error -5 [ 381.549787][ T4915] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 381.699469][T13241] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 381.707153][T13241] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 381.848666][ T5609] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 381.903633][ T5609] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 381.914182][ T5609] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 381.958998][ T5609] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 381.960622][ T5609] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 382.224832][ T36] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 382.798894][ T5720] usb 1-1: USB disconnect, device number 4 [ 382.833445][ T5720] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 383.174655][T13165] bond0: (slave syz_tun): Releasing backup interface [ 383.218451][T13165] syz_tun (unregistering): left allmulticast mode [ 383.479912][ T4915] Bluetooth: hci5: command tx timeout [ 383.519556][T13195] syz_tun (unregistering): left allmulticast mode [ 383.637767][ T4915] Bluetooth: hci6: command tx timeout [ 383.769280][ T5611] syz_tun (unregistering): left allmulticast mode [ 384.179746][T13307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 384.198470][ T4915] Bluetooth: hci7: command tx timeout [ 384.725723][ T3310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.739843][ T3310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.826831][T13318] syzkaller0: entered promiscuous mode [ 384.827655][T13318] syzkaller0: entered allmulticast mode [ 385.322500][ T3310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.341445][ T3310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.505765][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2753'. [ 385.557554][ T4915] Bluetooth: hci5: command tx timeout [ 385.632890][T13356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2753'. [ 385.739962][ T4915] Bluetooth: hci6: command tx timeout [ 385.806237][T13357] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2753'. [ 386.033080][ T3310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.048741][ T3310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.127340][T13374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.277899][ T4915] Bluetooth: hci7: command tx timeout [ 386.523287][ T3310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.523364][ T3310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.585899][T13228] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.586147][T13228] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.586336][T13228] bridge_slave_0: entered allmulticast mode [ 386.590037][T13228] bridge_slave_0: entered promiscuous mode [ 386.636356][T13228] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.636507][T13228] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.636695][T13228] bridge_slave_1: entered allmulticast mode [ 386.649373][T13228] bridge_slave_1: entered promiscuous mode [ 386.812782][T13228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.852684][T13228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.081002][T13228] team0: Port device team_slave_0 added [ 387.115455][T13228] team0: Port device team_slave_1 added [ 387.199048][T13401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.491773][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2766'. [ 387.619155][T13228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.626451][T13228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.626484][T13228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.637716][ T4915] Bluetooth: hci5: command tx timeout [ 387.720112][T13228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.727650][T13228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 387.727701][T13228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.810707][ T4915] Bluetooth: hci6: command tx timeout [ 388.049421][T13425] netlink: 'syz.4.2770': attribute type 2 has an invalid length. [ 388.168714][ T3310] bridge_slave_1: left allmulticast mode [ 388.170487][ T3310] bridge_slave_1: left promiscuous mode [ 388.181427][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.334142][ T3310] bridge_slave_0: left allmulticast mode [ 388.334212][ T3310] bridge_slave_0: left promiscuous mode [ 388.334475][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.368116][ T4915] Bluetooth: hci7: command tx timeout [ 389.049094][ T3310] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 389.877642][ T4915] Bluetooth: hci6: command tx timeout [ 389.884163][ T3310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.958414][ T3310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.002220][ T3310] bond0 (unregistering): Released all slaves [ 390.013560][ T3310] bond1 (unregistering): Released all slaves [ 390.159849][T13228] hsr_slave_0: entered promiscuous mode [ 390.165640][T13228] hsr_slave_1: entered promiscuous mode [ 390.166733][T13228] debugfs: 'hsr0' already exists in 'hsr' [ 390.166759][T13228] Cannot create hsr debugfs directory [ 390.368752][ T3310] : left promiscuous mode [ 390.438001][ T4915] Bluetooth: hci7: command tx timeout [ 390.667531][ T3310] tipc: Left network mode [ 390.845591][T13254] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.856498][T13254] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.856684][T13254] bridge_slave_0: entered allmulticast mode [ 390.872180][T13254] bridge_slave_0: entered promiscuous mode [ 390.905888][T13259] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.906048][T13259] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.906254][T13259] bridge_slave_0: entered allmulticast mode [ 390.911730][T13259] bridge_slave_0: entered promiscuous mode [ 390.955349][T13254] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.957029][T13254] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.957270][T13254] bridge_slave_1: entered allmulticast mode [ 390.977752][T13254] bridge_slave_1: entered promiscuous mode [ 391.033352][T13259] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.033505][T13259] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.033703][T13259] bridge_slave_1: entered allmulticast mode [ 391.041036][T13259] bridge_slave_1: entered promiscuous mode [ 391.670960][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2775'. [ 391.972733][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 391.987912][T13254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.992708][T13259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.055570][T13471] netlink: 'syz.4.2778': attribute type 2 has an invalid length. [ 392.093692][T13254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.138708][T13259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.261908][T13254] team0: Port device team_slave_0 added [ 392.269973][T13259] team0: Port device team_slave_0 added [ 392.281353][T13254] team0: Port device team_slave_1 added [ 392.290892][T13259] team0: Port device team_slave_1 added [ 392.889070][T13254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.889148][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.889171][T13254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.891013][T13259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.891028][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 392.891043][T13259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.147328][T13254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.147392][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.147419][T13254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.158573][T13259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.158586][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 393.158601][T13259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.855575][T13254] hsr_slave_0: entered promiscuous mode [ 393.856850][T13254] hsr_slave_1: entered promiscuous mode [ 393.858422][T13254] debugfs: 'hsr0' already exists in 'hsr' [ 393.858449][T13254] Cannot create hsr debugfs directory [ 393.908457][T13259] hsr_slave_0: entered promiscuous mode [ 393.916374][T13259] hsr_slave_1: entered promiscuous mode [ 393.916986][T13259] debugfs: 'hsr0' already exists in 'hsr' [ 393.917020][T13259] Cannot create hsr debugfs directory [ 393.936071][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 394.159094][T13228] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 394.182293][T13228] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 394.316489][T13512] netlink: 'syz.4.2786': attribute type 2 has an invalid length. [ 394.367188][T13228] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 394.390879][T13228] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 394.482961][T13228] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 394.542365][T13228] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 394.575382][T13228] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 394.606439][T13228] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 395.803048][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 396.124784][ T3310] hsr_slave_0: left promiscuous mode [ 396.157887][ T3310] hsr_slave_1: left promiscuous mode [ 396.168960][ T3310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.169119][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.291759][ T3310] veth1_macvtap: left promiscuous mode [ 396.293437][ T3310] veth0_macvtap: left promiscuous mode [ 396.293663][ T3310] veth1_vlan: left promiscuous mode [ 396.293991][ T3310] veth0_vlan: left promiscuous mode [ 397.012168][ T3310] team0 (unregistering): Port device team_slave_1 removed [ 397.068140][ T3310] team0 (unregistering): Port device team_slave_0 removed [ 397.430018][T13564] netlink: 'syz.0.2794': attribute type 2 has an invalid length. [ 397.767970][T13254] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 397.802843][T13254] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.932673][T13254] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 397.998957][T13254] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.035746][T13254] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 398.123939][T13254] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.609360][T13254] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 398.659854][T13254] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.725947][T13228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.739832][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 399.263154][T13228] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.377634][ T3366] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.377838][ T3366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.469448][T13259] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 399.536045][T13259] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.544382][ T3366] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.544577][ T3366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.558960][T13611] netlink: 'syz.0.2801': attribute type 1 has an invalid length. [ 399.559165][T13259] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 399.589072][T13614] netlink: 'syz.4.2803': attribute type 2 has an invalid length. [ 399.641507][T13259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.672128][T13259] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 399.711613][T13259] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.969832][T13259] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 400.022283][T13259] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.231218][T13629] syzkaller0: entered promiscuous mode [ 400.236883][T13629] syzkaller0: entered allmulticast mode [ 400.920546][ T3310] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.089841][T13254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.215385][T13254] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.252300][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.269778][ T3392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.494140][ T3310] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.600311][ T3392] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.600561][ T3392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.654974][T13259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.771633][T13652] netlink: 'syz.0.2811': attribute type 2 has an invalid length. [ 401.903893][T13657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2812'. [ 402.122319][ T3310] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.208088][T13259] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.311126][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.313726][ T3299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.969385][ T3347] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.969861][ T3347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.042771][T13228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.263402][T13713] netlink: 'syz.4.2819': attribute type 2 has an invalid length. [ 404.552520][ T3310] bridge_slave_1: left allmulticast mode [ 404.552592][ T3310] bridge_slave_1: left promiscuous mode [ 404.552841][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.738772][ T3310] bridge_slave_0: left allmulticast mode [ 404.738840][ T3310] bridge_slave_0: left promiscuous mode [ 404.741173][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.775292][T13727] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 405.768297][ T3310] syzkaller0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.850260][ T3310] syzkaller0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.889652][ T3310] syzkaller0 (unregistering): Released all slaves [ 406.061385][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2821'. [ 406.193391][ T3310] : left promiscuous mode [ 406.376317][T13741] syzkaller0: entered promiscuous mode [ 406.376951][T13741] syzkaller0: entered allmulticast mode [ 406.544827][T13254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.695330][T13753] netlink: 'syz.0.2827': attribute type 2 has an invalid length. [ 407.732482][T13228] veth0_vlan: entered promiscuous mode [ 407.952089][T13228] veth1_vlan: entered promiscuous mode [ 407.995129][T13259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.613208][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 408.655853][T13228] veth0_macvtap: entered promiscuous mode [ 408.716923][T13228] veth1_macvtap: entered promiscuous mode [ 408.734507][T13254] veth0_vlan: entered promiscuous mode [ 409.069744][T13254] veth1_vlan: entered promiscuous mode [ 409.075864][T13228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.104237][T13228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.339603][T13254] veth0_macvtap: entered promiscuous mode [ 409.635259][T13254] veth1_macvtap: entered promiscuous mode [ 409.821424][T13259] veth0_vlan: entered promiscuous mode [ 409.867963][ T3392] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.894061][T13259] veth1_vlan: entered promiscuous mode [ 409.916330][T13254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.935907][T13254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.613589][T13259] veth0_macvtap: entered promiscuous mode [ 410.724111][T13259] veth1_macvtap: entered promiscuous mode [ 410.780252][ T3299] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.810719][ T1308] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.954833][T13797] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.102813][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2840'. [ 411.237094][T13259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.412249][T13259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.494072][T12844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.494138][T12844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.001723][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 412.053911][T12844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.053999][T12844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.327315][T13861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2845'. [ 412.444481][T13865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2845'. [ 412.786548][ T3392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.787686][ T3392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.437340][T13876] netlink: 8664 bytes leftover after parsing attributes in process `syz.4.2848'. [ 413.527951][ T3310] hsr_slave_0: left promiscuous mode [ 413.569928][ T3310] hsr_slave_1: left promiscuous mode [ 413.571174][ T3310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.571199][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.614124][ T3310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.614184][ T3310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.717111][ T3310] veth1_macvtap: left promiscuous mode [ 413.717239][ T3310] veth0_macvtap: left promiscuous mode [ 413.729785][ T3310] veth1_vlan: left promiscuous mode [ 413.730131][ T3310] veth0_vlan: left promiscuous mode [ 413.750780][T13881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2850'. [ 414.680079][ T3310] team0 (unregistering): Port device team_slave_1 removed [ 414.718197][ T3310] team0 (unregistering): Port device team_slave_0 removed [ 414.926014][T13881] vlan2: entered promiscuous mode [ 415.016369][T12844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.016434][T12844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.126202][ T1032] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.126681][ T1032] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.212145][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.214762][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.215009][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.215198][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.438699][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.477833][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.491130][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.732084][T13894] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2851'. [ 416.150158][T13868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.640674][ T3347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.648676][ T3347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.725934][T13924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2860'. [ 416.860026][T13924] vlan2: entered promiscuous mode [ 417.305429][ T1308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.305497][ T1308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.889149][ T3310] IPVS: stop unused estimator thread 0... [ 418.793491][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 419.828773][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 419.837181][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 419.848639][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 419.952440][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 419.975486][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 420.600256][ T5597] syz_tun (unregistering): left allmulticast mode [ 420.737926][T14036] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2883'. [ 420.947102][T14036] vlan2: entered promiscuous mode [ 420.947126][T14036] batadv0: entered promiscuous mode [ 422.277713][ T5609] Bluetooth: hci0: command tx timeout [ 423.193834][T14015] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 424.361639][ T5609] Bluetooth: hci0: command tx timeout [ 426.447635][ T5609] Bluetooth: hci0: command tx timeout [ 427.816404][ T3299] bridge_slave_1: left allmulticast mode [ 427.816707][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.026885][ T3299] bridge_slave_0: left allmulticast mode [ 428.059879][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.522127][ T5609] Bluetooth: hci0: command tx timeout [ 428.849252][ T3299] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 429.572549][ T3299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.648899][ T3299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.691925][ T3299] bond0 (unregistering): Released all slaves [ 429.701861][ T3299] bond1 (unregistering): Released all slaves [ 431.144364][T14001] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.144538][T14001] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.144711][T14001] bridge_slave_0: entered allmulticast mode [ 431.147221][T14001] bridge_slave_0: entered promiscuous mode [ 431.225741][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2961'. [ 440.131714][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.131917][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.746482][ T4915] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 445.781349][ T4915] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 445.785692][ T4915] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 445.787013][ T4915] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 445.792183][ T4915] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.215222][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 446.260986][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 446.282670][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 446.286921][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 446.299328][ T5609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 447.364195][ T5609] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 447.382968][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 447.394435][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 447.440941][ T5609] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 447.454636][ T5609] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 447.760052][T14001] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.760292][T14001] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.760501][T14001] bridge_slave_1: entered allmulticast mode [ 447.763066][T14001] bridge_slave_1: entered promiscuous mode [ 447.776235][T14320] vlan2: entered promiscuous mode [ 447.776258][T14320] batadv0: entered promiscuous mode [ 447.957706][ T4915] Bluetooth: hci1: command tx timeout [ 448.454318][ T4915] Bluetooth: hci3: command tx timeout [ 449.111912][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 449.154231][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 449.176521][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 449.260879][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 449.261784][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 449.320205][T14001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.637677][ T4915] Bluetooth: hci4: command tx timeout [ 450.047673][ T4915] Bluetooth: hci1: command tx timeout [ 450.410327][T14001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.547660][ T4915] Bluetooth: hci3: command tx timeout [ 450.608535][ T5598] syz_tun (unregistering): left allmulticast mode [ 450.856236][T14001] team0: Port device team_slave_0 added [ 450.865316][T14001] team0: Port device team_slave_1 added [ 451.297062][T14001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.297142][T14001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.297168][T14001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.339515][ T4915] Bluetooth: hci6: command tx timeout [ 451.383561][T14001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.383646][T14001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.383673][T14001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.555186][ T5261] 8021q: adding VLAN 0 to HW filter on device eth8 [ 451.741227][ T4915] Bluetooth: hci4: command tx timeout [ 451.826799][T14001] hsr_slave_0: entered promiscuous mode [ 451.834130][T14001] hsr_slave_1: entered promiscuous mode [ 452.117604][ T4915] Bluetooth: hci1: command tx timeout [ 452.368694][ T3299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.411430][ T3299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.597617][ T4915] Bluetooth: hci3: command tx timeout [ 453.079070][ T3299] team0 (unregistering): Port device team_slave_1 removed [ 453.128151][ T3299] team0 (unregistering): Port device team_slave_0 removed [ 453.398171][ T4915] Bluetooth: hci6: command tx timeout [ 453.797662][ T4915] Bluetooth: hci4: command tx timeout [ 454.197710][ T4915] Bluetooth: hci1: command tx timeout [ 454.677739][ T4915] Bluetooth: hci3: command tx timeout [ 454.816677][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 455.091618][T14339] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.091841][T14339] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.092027][T14339] bridge_slave_0: entered allmulticast mode [ 455.094630][T14339] bridge_slave_0: entered promiscuous mode [ 455.118531][T14345] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.125769][T14345] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.125914][T14345] bridge_slave_0: entered allmulticast mode [ 455.128284][T14345] bridge_slave_0: entered promiscuous mode [ 455.151264][T14339] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.152307][T14339] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.152491][T14339] bridge_slave_1: entered allmulticast mode [ 455.155103][T14339] bridge_slave_1: entered promiscuous mode [ 455.177617][T14345] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.179244][T14345] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.179412][T14345] bridge_slave_1: entered allmulticast mode [ 455.198738][ T3299] IPVS: stop unused estimator thread 0... [ 455.200936][T14345] bridge_slave_1: entered promiscuous mode [ 455.202856][T14351] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.202993][T14351] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.203493][T14351] bridge_slave_0: entered allmulticast mode [ 455.206209][T14351] bridge_slave_0: entered promiscuous mode [ 455.304820][T14351] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.304977][T14351] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.305150][T14351] bridge_slave_1: entered allmulticast mode [ 455.308697][T14351] bridge_slave_1: entered promiscuous mode [ 455.368742][T14339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.408588][T14345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.430325][T14339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.453052][T14345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.456340][T14351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.489876][ T4915] Bluetooth: hci6: command tx timeout [ 455.739004][T14368] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.739236][T14368] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.739439][T14368] bridge_slave_0: entered allmulticast mode [ 455.741916][T14368] bridge_slave_0: entered promiscuous mode [ 455.772082][T14351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.877758][ T4915] Bluetooth: hci4: command tx timeout [ 455.949229][T14368] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.949395][T14368] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.949594][T14368] bridge_slave_1: entered allmulticast mode [ 455.952140][T14368] bridge_slave_1: entered promiscuous mode [ 455.991555][T14339] team0: Port device team_slave_0 added [ 456.187375][ T3299] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.263422][T14345] team0: Port device team_slave_0 added [ 456.283046][T14339] team0: Port device team_slave_1 added [ 456.301000][T14345] team0: Port device team_slave_1 added [ 456.311238][T14351] team0: Port device team_slave_0 added [ 456.354330][T14368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.377022][T14351] team0: Port device team_slave_1 added [ 456.412168][T14368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.457620][T14339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.459157][T14339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.459186][T14339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.545216][T14345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.548150][T14345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.548185][T14345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.744628][ T3299] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.800911][T14339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.801017][T14339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.801042][T14339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.857034][T14345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.864580][T14345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.864617][T14345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.867275][T14351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.867299][T14351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.867326][T14351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.910761][T14368] team0: Port device team_slave_0 added [ 457.135753][T14351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.135825][T14351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.135852][T14351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.142227][T14368] team0: Port device team_slave_1 added [ 457.351129][ T3299] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.419553][T14368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.421626][T14368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.421657][T14368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.480619][T14339] hsr_slave_0: entered promiscuous mode [ 457.481912][T14339] hsr_slave_1: entered promiscuous mode [ 457.482859][T14339] debugfs: 'hsr0' already exists in 'hsr' [ 457.482883][T14339] Cannot create hsr debugfs directory [ 457.515271][T14368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.515332][T14368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.515358][T14368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.547161][T14345] hsr_slave_0: entered promiscuous mode [ 457.548941][T14345] hsr_slave_1: entered promiscuous mode [ 457.549871][T14345] debugfs: 'hsr0' already exists in 'hsr' [ 457.549895][T14345] Cannot create hsr debugfs directory [ 457.558237][ T4915] Bluetooth: hci6: command tx timeout [ 457.731562][ T3299] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.794818][T14351] hsr_slave_0: entered promiscuous mode [ 457.796091][T14351] hsr_slave_1: entered promiscuous mode [ 457.797086][T14351] debugfs: 'hsr0' already exists in 'hsr' [ 457.797111][T14351] Cannot create hsr debugfs directory [ 457.980227][T14368] hsr_slave_0: entered promiscuous mode [ 457.981627][T14368] hsr_slave_1: entered promiscuous mode [ 457.982461][T14368] debugfs: 'hsr0' already exists in 'hsr' [ 457.982484][T14368] Cannot create hsr debugfs directory [ 457.999123][T14001] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 458.030561][T14001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 458.220627][T14001] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 458.250667][T14001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.284363][T14001] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 458.312470][T14001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.375437][T14001] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 458.400949][T14001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.274443][ T3299] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.550640][T14339] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 459.599967][T14339] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.822605][ T3299] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.864284][T14339] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 459.901374][T14339] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.906051][ T5261] 8021q: adding VLAN 0 to HW filter on device eth12 [ 460.163023][T14351] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.163903][T14351] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.216707][T14339] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 460.251672][T14339] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 460.274994][T14339] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 460.300549][T14339] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 460.461282][ T3299] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.715017][T14351] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.720250][T14351] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.024522][ T3299] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.103158][T14001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.394926][T14351] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.409030][T14351] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.547124][T14001] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.579301][ T3367] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.586671][ T3367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.626619][ T3367] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.627626][ T3367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.915839][T14351] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.920887][T14351] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.086473][T14339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.209017][T14339] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.312520][ T3347] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.316965][ T3347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.353340][ T3347] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.356635][ T3347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.086674][ T3299] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.543261][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 464.564805][T14001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.796947][ T3299] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.383608][ T3299] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.567921][T14001] veth0_vlan: entered promiscuous mode [ 465.835230][ T3299] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.898346][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 465.910166][T14001] veth1_vlan: entered promiscuous mode [ 465.949406][T14339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.332878][T14001] veth0_macvtap: entered promiscuous mode [ 466.365534][T14001] veth1_macvtap: entered promiscuous mode [ 466.672373][T14001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.682015][T14345] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 466.745830][T14345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 466.901954][T14345] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 466.934803][T14345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 466.945535][ T5261] 8021q: adding VLAN 0 to HW filter on device eth11 [ 466.981035][T14345] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 467.029057][T14345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.035282][T14001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.145311][T14345] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 467.171317][T14345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.299830][T14339] veth0_vlan: entered promiscuous mode [ 467.448102][ T3299] bridge_slave_1: left allmulticast mode [ 467.448192][ T3299] bridge_slave_1: left promiscuous mode [ 467.448467][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.568681][ T3299] bridge_slave_0: left allmulticast mode [ 467.568751][ T3299] bridge_slave_0: left promiscuous mode [ 467.569002][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.768032][ T3299] bridge_slave_1: left allmulticast mode [ 467.768104][ T3299] bridge_slave_1: left promiscuous mode [ 467.768414][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.888579][ T3299] bridge_slave_0: left allmulticast mode [ 467.888654][ T3299] bridge_slave_0: left promiscuous mode [ 467.888886][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.128031][ T3299] bridge_slave_1: left allmulticast mode [ 468.128101][ T3299] bridge_slave_1: left promiscuous mode [ 468.128365][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.238604][ T3299] bridge_slave_0: left allmulticast mode [ 468.238678][ T3299] bridge_slave_0: left promiscuous mode [ 468.238930][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.198170][ T3299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.278261][ T3299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.299564][ T3299] bond0 (unregistering): Released all slaves [ 469.848462][ T3299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.908536][ T3299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.930261][ T3299] bond0 (unregistering): Released all slaves [ 470.498164][ T3299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.558707][ T3299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.599621][ T3299] bond0 (unregistering): Released all slaves [ 470.965875][T14351] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 471.024854][T14351] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.032746][T14339] veth1_vlan: entered promiscuous mode [ 471.059630][T14351] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 471.125693][T14351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.140713][T14351] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 471.266705][T14351] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 471.895862][T14351] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 471.930464][T14351] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.761510][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.770410][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.770664][T14368] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.820758][T14368] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 473.092032][T14368] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 473.130258][T14368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 473.191254][T14368] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 473.260792][T14368] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 473.275776][T14368] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 473.302565][T14368] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 473.568760][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.568834][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.609279][T14339] veth0_macvtap: entered promiscuous mode [ 473.727004][T14339] veth1_macvtap: entered promiscuous mode [ 474.295598][T14339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.485813][T14345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.492273][T14339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.817036][T14650] Bluetooth: MGMT ver 1.23 [ 474.848501][ T5261] 8021q: adding VLAN 0 to HW filter on device eth13 [ 474.885329][T14647] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 474.885553][T14647] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 474.902592][T14647] veth0_virt_wifi: entered allmulticast mode [ 474.909137][T14647] veth0_virt_wifi: entered promiscuous mode [ 474.911164][T14647] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 474.911291][T14647] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 475.036238][T14345] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.113761][T14351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.530112][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.530404][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.623589][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.637037][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.894871][T14351] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.972038][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.972109][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.015494][T12844] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.023390][T12844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.284467][ T3299] hsr_slave_0: left promiscuous mode [ 476.318979][ T3299] hsr_slave_1: left promiscuous mode [ 476.325620][ T3299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.325647][ T3299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.352468][ T3299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.364841][ T3299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.548998][ T3299] hsr_slave_0: left promiscuous mode [ 476.587867][ T3299] hsr_slave_1: left promiscuous mode [ 476.594483][ T3299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.594513][ T3299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.641565][ T3299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.649643][ T3299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.857647][ T3299] hsr_slave_0: left promiscuous mode [ 476.897622][ T3299] hsr_slave_1: left promiscuous mode [ 476.898811][ T3299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.898838][ T3299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.920781][ T3299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.920858][ T3299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.050860][ T3299] veth1_macvtap: left promiscuous mode [ 477.050996][ T3299] veth0_macvtap: left promiscuous mode [ 477.051295][ T3299] veth1_vlan: left promiscuous mode [ 477.051442][ T3299] veth0_vlan: left promiscuous mode [ 477.188073][ T3299] veth1_macvtap: left promiscuous mode [ 477.188188][ T3299] veth0_macvtap: left promiscuous mode [ 477.188370][ T3299] veth1_vlan: left promiscuous mode [ 477.188519][ T3299] veth0_vlan: left promiscuous mode [ 477.310733][ T3299] veth1_macvtap: left promiscuous mode [ 477.316696][ T3299] veth0_macvtap: left promiscuous mode [ 477.316806][ T3299] veth1_vlan: left promiscuous mode [ 477.316905][ T3299] veth0_vlan: left promiscuous mode [ 478.339222][ T3299] team0 (unregistering): Port device team_slave_1 removed [ 478.379308][ T3299] team0 (unregistering): Port device team_slave_0 removed [ 479.018933][ T3299] team0 (unregistering): Port device team_slave_1 removed [ 479.058877][ T3299] team0 (unregistering): Port device team_slave_0 removed [ 479.751407][ T3299] team0 (unregistering): Port device team_slave_1 removed [ 479.818899][ T3299] team0 (unregistering): Port device team_slave_0 removed [ 480.031857][T14368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.046170][ T5261] 8021q: adding VLAN 0 to HW filter on device eth14 [ 480.051390][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.051605][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.192387][ T3347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.192460][ T3347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.315493][T14368] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.384718][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.384890][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.458540][ T1308] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.464576][ T1308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.249170][T14713] process 'syz.8.2985' launched '/dev/fd/5' with NULL argv: empty string added [ 481.780018][T12844] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.809231][ T3367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.089954][ T3284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.377505][ T3347] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.377988][ T3347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.694017][T14345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.842198][ T5261] 8021q: adding VLAN 0 to HW filter on device eth15 [ 482.999849][T12844] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.060851][ T1032] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.071699][ T1032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.406781][T14351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.921577][T14351] veth0_vlan: entered promiscuous mode [ 484.061348][T14351] veth1_vlan: entered promiscuous mode [ 484.332865][T14368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.440791][T14345] veth0_vlan: entered promiscuous mode [ 484.497382][T14351] veth0_macvtap: entered promiscuous mode [ 484.508949][T14345] veth1_vlan: entered promiscuous mode [ 484.638277][T14351] veth1_macvtap: entered promiscuous mode [ 484.834208][T14351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.959294][T14351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.969543][T14368] veth0_vlan: entered promiscuous mode [ 485.080537][T14345] veth0_macvtap: entered promiscuous mode [ 485.177900][T14368] veth1_vlan: entered promiscuous mode [ 485.255682][T14345] veth1_macvtap: entered promiscuous mode [ 485.621211][T14345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.949527][T14345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 486.024796][T14368] veth0_macvtap: entered promiscuous mode [ 486.202602][T12845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.202678][T12845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.221692][T14368] veth1_macvtap: entered promiscuous mode [ 486.482897][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.482969][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.659699][T14368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.702294][T14368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.700503][T12844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.700572][T12844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.222309][ T3310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.230322][ T3310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.681032][T12844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.681098][T12844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.116371][ T3310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.119534][ T3310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.661183][ T3310] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.661281][ T3310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.661319][ T3310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.661364][ T3310] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.661400][ T3310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.661437][ T3310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.661472][ T3310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.661507][ T3310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.661542][ T3310] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.814265][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.820038][ T3299] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.820519][ T3299] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.743892][T14943] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 493.893085][ T37] audit: type=1800 audit(1787743916.971:2): pid=14999 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.3045" name="file1" dev="tmpfs" ino=54 res=0 errno=0 [ 494.203400][T15012] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.495751][T15018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3048'. [ 494.622383][T15018] vlan2: entered promiscuous mode [ 494.631162][T15018] syz_tun: entered promiscuous mode [ 495.399367][T15056] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.736265][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 501.080367][T15232] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3098'. [ 501.563007][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.563142][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.771479][T15251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3103'. [ 501.874816][T15251] vlan2: entered promiscuous mode [ 501.874873][T15251] syz_tun: entered promiscuous mode [ 503.076919][T15296] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3111'. [ 503.245625][T15299] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.694450][T15348] syzkaller0: entered promiscuous mode [ 504.694536][T15348] syzkaller0: entered allmulticast mode [ 504.706412][T15357] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.002370][T15371] capability: warning: `syz.9.3131' uses 32-bit capabilities (legacy support in use) [ 505.205940][T15379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3133'. [ 505.345230][T15379] vlan2: entered promiscuous mode [ 505.345325][T15379] syz_tun: entered promiscuous mode [ 506.135288][T15414] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.385114][T15425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3146'. [ 506.520282][T15430] syzkaller0: entered promiscuous mode [ 506.525918][T15430] syzkaller0: entered allmulticast mode [ 508.035240][T15467] tc action pedit unable to extract header offset for header type (0x4) [ 508.052812][T15467] tc action pedit unable to extract header offset for header type (0x4) [ 508.052838][T15467] tc action pedit unable to extract header offset for header type (0x4) [ 508.052854][T15467] tc action pedit unable to extract header offset for header type (0x4) [ 508.052869][T15467] tc action pedit unable to extract header offset for header type (0x4) [ 508.052884][T15467] tc action pedit unable to extract header offset for header type (0x4) [ 508.052900][T15467] tc action pedit unable to extract header offset for header type (0x4) [ 508.052916][T15467] tc action pedit unable to extract header offset for header type (0x4) [ 508.052932][T15467] tc action pedit unable to extract header offset for header type (0x4) [ 508.052947][T15467] tc action pedit unable to extract header offset for header type (0x4) [ 508.052989][T15467] 0: reclassify loop, rule prio 0, protocol 800 [ 509.820283][T15494] syzkaller0: entered promiscuous mode [ 509.826268][T15494] syzkaller0: entered allmulticast mode [ 510.138278][T15525] Bluetooth: MGMT ver 1.23 [ 510.979563][T15550] ======================================================= [ 510.979563][T15550] WARNING: The mand mount option has been deprecated and [ 510.979563][T15550] and is ignored by this kernel. Remove the mand [ 510.979563][T15550] option from the mount to silence this warning. [ 510.979563][T15550] ======================================================= [ 510.983443][T15550] overlayfs: conflicting options: nfs_export=on,index=off [ 511.963916][T15553] vlan3: entered promiscuous mode [ 512.011492][T15567] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3180'. [ 512.335459][T15555] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5 [ 513.312612][T15590] syzkaller0: entered promiscuous mode [ 513.312677][T15590] syzkaller0: entered allmulticast mode [ 515.601273][T15648] binder: BINDER_SET_CONTEXT_MGR already set [ 515.602460][T15648] binder: 15641:15648 ioctl 4018620d 200000001000 returned -16 [ 515.630754][T15638] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3196'. [ 516.206046][T15659] syzkaller0: entered promiscuous mode [ 516.206952][T15659] syzkaller0: entered allmulticast mode [ 517.130657][T15685] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3210'. [ 517.257003][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 518.861116][T15723] syzkaller0: entered promiscuous mode [ 518.861218][T15723] syzkaller0: entered allmulticast mode [ 519.296223][T15747] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3223'. [ 521.655765][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 521.850233][T15799] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3237'. [ 521.926820][T15805] syzkaller0: entered promiscuous mode [ 521.932722][T15805] syzkaller0: entered allmulticast mode [ 522.591146][T15826] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3243'. [ 522.857306][T15835] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3245'. [ 523.550682][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 524.066739][T15857] netlink: 'syz.3.3250': attribute type 3 has an invalid length. [ 524.066826][T15857] netlink: 'syz.3.3250': attribute type 1 has an invalid length. [ 525.057362][T15865] syzkaller0: entered promiscuous mode [ 525.057627][T15865] syzkaller0: entered allmulticast mode [ 525.457911][T15878] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3254'. [ 525.751366][T15888] syzkaller0: entered promiscuous mode [ 525.751451][T15888] syzkaller0: entered allmulticast mode [ 525.769470][T15896] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3256'. [ 527.328284][T15897] 0x000000000006-0x000000020000 : "" [ 527.380357][T15920] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3262'. [ 527.467034][ T5261] 8021q: adding VLAN 0 to HW filter on device eth16 [ 527.525992][T15897] ftl_cs: FTL header corrupt! [ 527.996299][T15933] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3267'. [ 528.301816][T15940] syzkaller0: entered promiscuous mode [ 528.304542][T15940] syzkaller0: entered allmulticast mode [ 528.310906][T15940] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 65487 [ 548.314667][T16259] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3289'. [ 548.572800][T16264] 9p: Bad value for 'rfdno' [ 550.220580][T16291] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3300'. [ 551.635961][T16325] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3311'. [ 563.027732][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.035972][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.627941][T16468] 9p: Bad value for 'wfdno' [ 570.197564][T16488] Bluetooth: hci1: command 0x0406 tx timeout [ 570.253761][T16488] Bluetooth: hci4: command 0x0406 tx timeout [ 570.256631][T16488] Bluetooth: hci3: command 0x0406 tx timeout [ 579.526022][ T4915] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 579.587193][ T4915] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 579.715226][ T4915] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 579.753203][ T4915] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 579.761508][ T4915] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 581.877539][ T5609] Bluetooth: hci2: command tx timeout [ 583.957616][ T5609] Bluetooth: hci2: command tx timeout [ 584.239417][ T4915] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 584.333646][ T4915] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 584.414506][ T4915] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 584.445465][ T4915] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 584.452193][ T4915] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 586.038143][ T5609] Bluetooth: hci2: command tx timeout [ 586.781307][ T5609] Bluetooth: hci5: command tx timeout [ 588.117704][ T4915] Bluetooth: hci2: command tx timeout [ 589.114653][ T5609] Bluetooth: hci5: command tx timeout [ 590.038984][T16604] netlink: 'syz.1.3391': attribute type 3 has an invalid length. [ 590.039019][T16604] netlink: 'syz.1.3391': attribute type 1 has an invalid length. [ 591.161789][ T5609] Bluetooth: hci5: command tx timeout [ 591.213383][T16605] netlink: 276 bytes leftover after parsing attributes in process `syz.3.3392'. [ 593.247567][ T5609] Bluetooth: hci5: command tx timeout [ 603.089918][T16542] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.090181][T16542] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.090385][T16542] bridge_slave_0: entered allmulticast mode [ 603.096886][T16542] bridge_slave_0: entered promiscuous mode [ 603.724329][T16542] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.724599][T16542] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.724810][T16542] bridge_slave_1: entered allmulticast mode [ 603.731643][T16542] bridge_slave_1: entered promiscuous mode [ 604.453042][T16542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.585346][T16542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.504628][T16542] team0: Port device team_slave_0 added [ 606.530805][T16542] team0: Port device team_slave_1 added [ 607.182405][T16542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.182524][T16542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.182546][T16542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.308041][T16542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.308120][T16542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.308147][T16542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.223084][ T4915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 608.272505][ T4915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 608.276825][ T4915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 608.333856][ T4915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 608.334587][ T4915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 610.021742][T16542] hsr_slave_0: entered promiscuous mode [ 610.023113][T16542] hsr_slave_1: entered promiscuous mode [ 610.033651][T16542] debugfs: 'hsr0' already exists in 'hsr' [ 610.033679][T16542] Cannot create hsr debugfs directory [ 610.438364][ T5609] Bluetooth: hci0: command tx timeout [ 612.677483][ T5609] Bluetooth: hci0: command tx timeout [ 613.815045][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 613.833976][T16506] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 613.907865][T16506] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 613.922376][T16506] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 613.942369][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 613.948217][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 613.951159][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 613.951994][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 614.026957][ T59] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 614.757776][ T59] Bluetooth: hci0: command tx timeout [ 615.024414][T16568] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.024644][T16568] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.024891][T16568] bridge_slave_0: entered allmulticast mode [ 615.033239][T16568] bridge_slave_0: entered promiscuous mode [ 615.083994][ T59] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 615.932934][T16568] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.933127][T16568] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.933303][T16568] bridge_slave_1: entered allmulticast mode [ 615.980267][T16568] bridge_slave_1: entered promiscuous mode [ 616.437497][ T4915] Bluetooth: hci7: command tx timeout [ 616.838590][ T4915] Bluetooth: hci0: command tx timeout [ 617.237840][ T4915] Bluetooth: hci8: command tx timeout [ 617.428834][T16568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.512643][T16568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.973448][T16568] team0: Port device team_slave_0 added [ 618.319813][T16568] team0: Port device team_slave_1 added [ 618.613923][ T4915] Bluetooth: hci7: command tx timeout [ 619.324276][ T4915] Bluetooth: hci8: command tx timeout [ 620.411615][T16568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.469508][T16568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.469544][T16568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.633258][T16568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.633278][T16568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.633306][T16568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.713753][ T59] Bluetooth: hci7: command tx timeout [ 621.405360][ T4915] Bluetooth: hci8: command tx timeout [ 622.781725][ T4915] Bluetooth: hci7: command tx timeout [ 623.504045][ T4915] Bluetooth: hci8: command tx timeout [ 624.618068][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.618218][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.426939][T16568] hsr_slave_0: entered promiscuous mode [ 629.430013][T16568] hsr_slave_1: entered promiscuous mode [ 629.430917][T16568] debugfs: 'hsr0' already exists in 'hsr' [ 629.430941][T16568] Cannot create hsr debugfs directory [ 634.913918][ T3310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.593693][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 638.655285][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 638.665657][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 638.678347][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 638.680992][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 639.781983][T16640] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.789384][T16640] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.791427][T16640] bridge_slave_0: entered allmulticast mode [ 639.807568][T16640] bridge_slave_0: entered promiscuous mode [ 639.881636][T16640] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.889162][T16640] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.896564][T16640] bridge_slave_1: entered allmulticast mode [ 639.905324][T16640] bridge_slave_1: entered promiscuous mode [ 639.991754][T16640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.012004][T16640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.576723][ T4915] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 640.594538][ T4915] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 640.602127][ T4915] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 640.648167][ T4915] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 640.651150][ T4915] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 640.768515][T16640] team0: Port device team_slave_0 added [ 640.838263][ T59] Bluetooth: hci1: command tx timeout [ 640.855942][T16640] team0: Port device team_slave_1 added [ 641.084682][T16640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.092083][T16640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.092116][T16640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.213912][T16640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.221012][T16640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.221046][T16640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 641.631769][T16654] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.640573][T16654] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.640822][T16654] bridge_slave_0: entered allmulticast mode [ 641.643852][T16654] bridge_slave_0: entered promiscuous mode [ 641.702368][T16654] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.710047][T16654] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.710270][T16654] bridge_slave_1: entered allmulticast mode [ 641.716096][T16654] bridge_slave_1: entered promiscuous mode [ 642.025994][T16640] hsr_slave_0: entered promiscuous mode [ 642.033269][T16640] hsr_slave_1: entered promiscuous mode [ 642.034243][T16640] debugfs: 'hsr0' already exists in 'hsr' [ 642.034268][T16640] Cannot create hsr debugfs directory [ 642.078265][T16654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.098602][T16655] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.105976][T16655] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.106172][T16655] bridge_slave_0: entered allmulticast mode [ 642.125534][T16655] bridge_slave_0: entered promiscuous mode [ 642.141543][T16654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.153387][T16655] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.160686][T16655] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.168737][T16655] bridge_slave_1: entered allmulticast mode [ 642.177975][T16655] bridge_slave_1: entered promiscuous mode [ 642.399585][T16654] team0: Port device team_slave_0 added [ 642.411554][T16655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.554916][T16654] team0: Port device team_slave_1 added [ 642.562758][T16655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.757525][ T59] Bluetooth: hci3: command tx timeout [ 642.918252][ T59] Bluetooth: hci1: command tx timeout [ 643.358885][T16654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.365980][T16654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.366012][T16654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.424652][T16655] team0: Port device team_slave_0 added [ 643.485282][T16654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.492992][T16654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.493027][T16654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.542595][T16655] team0: Port device team_slave_1 added [ 644.047806][T16655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.054916][T16655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.054950][T16655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.160602][T16655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.167681][T16655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 644.167713][T16655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.278086][T16654] hsr_slave_0: entered promiscuous mode [ 644.285101][T16654] hsr_slave_1: entered promiscuous mode [ 644.285882][T16654] debugfs: 'hsr0' already exists in 'hsr' [ 644.285903][T16654] Cannot create hsr debugfs directory [ 644.558810][T16655] hsr_slave_0: entered promiscuous mode [ 644.566907][T16655] hsr_slave_1: entered promiscuous mode [ 644.574997][T16655] debugfs: 'hsr0' already exists in 'hsr' [ 644.580852][T16655] Cannot create hsr debugfs directory [ 644.837504][ T59] Bluetooth: hci3: command tx timeout [ 644.998130][ T59] Bluetooth: hci1: command tx timeout [ 645.209378][T16741] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.216807][T16741] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.217034][T16741] bridge_slave_0: entered allmulticast mode [ 645.246415][T16741] bridge_slave_0: entered promiscuous mode [ 645.300994][T16741] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.308315][T16741] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.308530][T16741] bridge_slave_1: entered allmulticast mode [ 645.311278][T16741] bridge_slave_1: entered promiscuous mode [ 645.596484][T16741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.716208][T16741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.357122][T16741] team0: Port device team_slave_0 added [ 646.394245][T16741] team0: Port device team_slave_1 added [ 646.563513][T16741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.574237][T16741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.574272][T16741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.665484][T16741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.678364][T16741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.678399][T16741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.906151][T16761] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.916252][T16761] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.916485][T16761] bridge_slave_0: entered allmulticast mode [ 646.917853][ T59] Bluetooth: hci3: command tx timeout [ 646.944989][T16761] bridge_slave_0: entered promiscuous mode [ 647.078054][ T59] Bluetooth: hci1: command tx timeout [ 647.133505][T16761] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.142278][T16761] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.142506][T16761] bridge_slave_1: entered allmulticast mode [ 647.146445][T16761] bridge_slave_1: entered promiscuous mode [ 647.182782][T16741] hsr_slave_0: entered promiscuous mode [ 647.189985][T16741] hsr_slave_1: entered promiscuous mode [ 647.190934][T16741] debugfs: 'hsr0' already exists in 'hsr' [ 647.190960][T16741] Cannot create hsr debugfs directory [ 647.275621][T16761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.301436][T16761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.396833][T16761] team0: Port device team_slave_0 added [ 647.428622][T16761] team0: Port device team_slave_1 added [ 647.577933][T16761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 647.585240][T16761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.585266][T16761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.642704][T16761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.650529][T16761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.650561][T16761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.860660][T16761] hsr_slave_0: entered promiscuous mode [ 647.874550][T16761] hsr_slave_1: entered promiscuous mode [ 647.881329][T16761] debugfs: 'hsr0' already exists in 'hsr' [ 647.890216][T16761] Cannot create hsr debugfs directory [ 648.997750][ T59] Bluetooth: hci3: command tx timeout [ 665.632445][ T3310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.619790][ T4915] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 666.722286][ T4915] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 666.752601][ T4915] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 666.784611][ T4915] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 666.836907][ T4915] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 669.000026][ T4915] Bluetooth: hci4: command tx timeout [ 669.327742][T16827] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.335116][T16827] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.335348][T16827] bridge_slave_0: entered allmulticast mode [ 669.351515][T16827] bridge_slave_0: entered promiscuous mode [ 669.361403][T16827] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.361666][T16827] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.361874][T16827] bridge_slave_1: entered allmulticast mode [ 669.364545][T16827] bridge_slave_1: entered promiscuous mode [ 669.436680][T16827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.453976][T16827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.510119][T16827] team0: Port device team_slave_0 added [ 669.519855][T16827] team0: Port device team_slave_1 added [ 669.568251][T16827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.575325][T16827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.575358][T16827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.618012][T16827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.625076][T16827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.625108][T16827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.739323][T16827] hsr_slave_0: entered promiscuous mode [ 669.746477][T16827] hsr_slave_1: entered promiscuous mode [ 669.753440][T16827] debugfs: 'hsr0' already exists in 'hsr' [ 669.759286][T16827] Cannot create hsr debugfs directory [ 670.605954][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 670.622915][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 670.672168][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 670.706072][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 670.707002][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 671.077921][ T4915] Bluetooth: hci4: command tx timeout [ 671.801764][ T59] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 671.875282][ T59] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 671.882538][ T59] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 671.884420][ T59] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 671.885175][ T59] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 672.925147][ T4915] Bluetooth: hci6: command tx timeout [ 673.157596][ T4915] Bluetooth: hci4: command tx timeout [ 673.412978][T16872] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.420586][T16872] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.420853][T16872] bridge_slave_0: entered allmulticast mode [ 673.423768][T16872] bridge_slave_0: entered promiscuous mode [ 673.427146][T16872] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.455044][T16872] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.462577][T16872] bridge_slave_1: entered allmulticast mode [ 673.465264][T16872] bridge_slave_1: entered promiscuous mode [ 673.548433][T16872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.562208][T16872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.615139][T16872] team0: Port device team_slave_0 added [ 673.626196][T16872] team0: Port device team_slave_1 added [ 673.705482][T16872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.713454][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.713489][T16872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.822837][T16872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.833262][T16872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.833299][T16872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.967798][ T4915] Bluetooth: hci9: command tx timeout [ 674.087597][T16872] hsr_slave_0: entered promiscuous mode [ 674.094882][T16872] hsr_slave_1: entered promiscuous mode [ 674.096076][T16872] debugfs: 'hsr0' already exists in 'hsr' [ 674.096103][T16872] Cannot create hsr debugfs directory [ 674.151840][T16881] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.159284][T16881] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.159869][T16881] bridge_slave_0: entered allmulticast mode [ 674.162731][T16881] bridge_slave_0: entered promiscuous mode [ 674.232235][T16881] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.239658][T16881] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.239906][T16881] bridge_slave_1: entered allmulticast mode [ 674.243348][T16881] bridge_slave_1: entered promiscuous mode [ 674.360168][T16881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.998181][ T59] Bluetooth: hci6: command tx timeout [ 675.244615][ T59] Bluetooth: hci4: command tx timeout [ 675.286498][T16881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.396282][T16881] team0: Port device team_slave_0 added [ 675.441787][T16881] team0: Port device team_slave_1 added [ 675.544337][T16881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.552407][T16881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.552441][T16881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.601558][T16881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.608916][T16881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.608960][T16881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.816745][T16881] hsr_slave_0: entered promiscuous mode [ 675.836521][T16881] hsr_slave_1: entered promiscuous mode [ 675.846494][T16881] debugfs: 'hsr0' already exists in 'hsr' [ 675.855747][T16881] Cannot create hsr debugfs directory [ 676.039594][ T59] Bluetooth: hci9: command tx timeout [ 677.077438][ T59] Bluetooth: hci6: command tx timeout [ 678.117499][ T59] Bluetooth: hci9: command tx timeout [ 679.157535][ T59] Bluetooth: hci6: command tx timeout [ 680.197450][ T59] Bluetooth: hci9: command tx timeout [ 685.882075][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.882208][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.081252][ T3310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.656455][ T4915] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 698.720143][ T4915] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 698.729651][ T4915] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 698.742081][ T4915] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 698.750660][ T4915] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 699.919850][T16963] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.927239][T16963] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.936540][T16963] bridge_slave_0: entered allmulticast mode [ 699.945613][T16963] bridge_slave_0: entered promiscuous mode [ 699.955370][T16963] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.962746][T16963] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.962992][T16963] bridge_slave_1: entered allmulticast mode [ 699.966177][T16963] bridge_slave_1: entered promiscuous mode [ 700.105404][T16963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.129759][T16963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.182687][T16963] team0: Port device team_slave_0 added [ 700.192655][T16963] team0: Port device team_slave_1 added [ 700.240527][T16963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.247710][T16963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.247745][T16963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.250388][T16963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.250404][T16963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.250431][T16963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.426170][T16963] hsr_slave_0: entered promiscuous mode [ 700.439847][T16963] hsr_slave_1: entered promiscuous mode [ 700.446581][T16963] debugfs: 'hsr0' already exists in 'hsr' [ 700.446611][T16963] Cannot create hsr debugfs directory [ 700.837648][ T4915] Bluetooth: hci10: command tx timeout [ 701.081621][ T59] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 701.146834][ T59] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 701.187339][ T59] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 701.203106][ T59] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 701.211837][ T59] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 702.594329][T16982] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.602565][T16982] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.602816][T16982] bridge_slave_0: entered allmulticast mode [ 702.605614][T16982] bridge_slave_0: entered promiscuous mode [ 702.630398][T16982] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.637855][T16982] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.638101][T16982] bridge_slave_1: entered allmulticast mode [ 702.640933][T16982] bridge_slave_1: entered promiscuous mode [ 702.735375][T16982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.755450][T16982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.834286][T16982] team0: Port device team_slave_0 added [ 702.844163][T16982] team0: Port device team_slave_1 added [ 702.896600][T16982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.898182][T16982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.898215][T16982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.917547][ T4915] Bluetooth: hci10: command tx timeout [ 702.966782][T16982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.966849][T16982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.966878][T16982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.142941][T16982] hsr_slave_0: entered promiscuous mode [ 703.152544][T16982] hsr_slave_1: entered promiscuous mode [ 703.153518][T16982] debugfs: 'hsr0' already exists in 'hsr' [ 703.153544][T16982] Cannot create hsr debugfs directory [ 703.319582][ T4915] Bluetooth: hci2: command 0x0406 tx timeout [ 703.399963][ T4915] Bluetooth: hci11: command tx timeout [ 705.000642][ T5609] Bluetooth: hci10: command tx timeout [ 705.477578][ T5609] Bluetooth: hci11: command tx timeout [ 707.078094][ T4915] Bluetooth: hci10: command tx timeout [ 707.567756][ T4915] Bluetooth: hci11: command tx timeout [ 708.443556][ T4915] Bluetooth: hci5: command 0x0406 tx timeout [ 709.637636][ T5609] Bluetooth: hci11: command tx timeout [ 715.113179][ T3310] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.669793][ T4915] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 726.717144][ T4915] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 726.726360][ T4915] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 726.735750][ T4915] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 726.759560][ T4915] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 728.843323][ T5609] Bluetooth: hci12: command tx timeout [ 730.937862][ T5609] Bluetooth: hci12: command tx timeout [ 731.203565][T17061] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.211593][T17061] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.211846][T17061] bridge_slave_0: entered allmulticast mode [ 731.242418][T17061] bridge_slave_0: entered promiscuous mode [ 731.286295][T17061] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.299920][T17061] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.303507][T17061] bridge_slave_1: entered allmulticast mode [ 731.332457][T17061] bridge_slave_1: entered promiscuous mode [ 731.497914][T17061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.530011][T17061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.631079][T17061] team0: Port device team_slave_0 added [ 731.642314][T17061] team0: Port device team_slave_1 added [ 731.715416][T17061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.723141][T17061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.723176][T17061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.776744][T17061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.784318][T17061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.784355][T17061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.213416][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 732.322595][T17061] hsr_slave_0: entered promiscuous mode [ 732.329870][T17061] hsr_slave_1: entered promiscuous mode [ 732.330969][T17061] debugfs: 'hsr0' already exists in 'hsr' [ 732.330996][T17061] Cannot create hsr debugfs directory [ 732.389473][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 732.402828][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 732.423126][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 732.431354][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 733.010562][ T5609] Bluetooth: hci12: command tx timeout [ 733.035953][ T5609] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 733.134593][ T5609] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 733.143957][ T5609] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 733.152695][ T5609] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 733.172238][ T5609] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 734.044167][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 734.597552][ T4915] Bluetooth: hci2: command tx timeout [ 735.077670][ T4915] Bluetooth: hci12: command tx timeout [ 735.239950][ T4915] Bluetooth: hci13: command tx timeout [ 735.671283][T17118] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.678744][T17118] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.679017][T17118] bridge_slave_0: entered allmulticast mode [ 735.681878][T17118] bridge_slave_0: entered promiscuous mode [ 735.726909][T17118] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.734292][T17118] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.734555][T17118] bridge_slave_1: entered allmulticast mode [ 735.752251][T17118] bridge_slave_1: entered promiscuous mode [ 735.912413][T17118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.944246][T17118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.212669][T17128] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.221462][T17128] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.221715][T17128] bridge_slave_0: entered allmulticast mode [ 736.224703][T17128] bridge_slave_0: entered promiscuous mode [ 736.254305][T17118] team0: Port device team_slave_0 added [ 736.260406][T17128] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.260556][T17128] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.260800][T17128] bridge_slave_1: entered allmulticast mode [ 736.264891][T17128] bridge_slave_1: entered promiscuous mode [ 736.324287][T17118] team0: Port device team_slave_1 added [ 736.417063][T17128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.429106][T17118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.436155][T17118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.436188][T17118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.481719][T17128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.492004][T17118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.492021][T17118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.492049][T17118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.597771][T17128] team0: Port device team_slave_0 added [ 736.632949][T17128] team0: Port device team_slave_1 added [ 736.677555][ T4915] Bluetooth: hci2: command tx timeout [ 736.719054][T17118] hsr_slave_0: entered promiscuous mode [ 736.733012][T17118] hsr_slave_1: entered promiscuous mode [ 736.735550][T17118] debugfs: 'hsr0' already exists in 'hsr' [ 736.735577][T17118] Cannot create hsr debugfs directory [ 736.793515][T17128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.800648][T17128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.800688][T17128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.862317][T17128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.870157][T17128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.870190][T17128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.064217][T17128] hsr_slave_0: entered promiscuous mode [ 737.071420][T17128] hsr_slave_1: entered promiscuous mode [ 737.072438][T17128] debugfs: 'hsr0' already exists in 'hsr' [ 737.072463][T17128] Cannot create hsr debugfs directory [ 737.317970][T16506] Bluetooth: hci13: command tx timeout [ 738.757869][T16506] Bluetooth: hci2: command tx timeout [ 739.157576][T16506] Bluetooth: hci7: command 0x0406 tx timeout [ 739.157639][ T5609] Bluetooth: hci8: command 0x0406 tx timeout [ 739.397736][T16506] Bluetooth: hci13: command tx timeout [ 740.837897][ T4915] Bluetooth: hci2: command tx timeout [ 741.479413][ T4915] Bluetooth: hci13: command tx timeout [ 742.648375][ T3310] veth0_virt_wifi: left allmulticast mode [ 742.655775][ T3310] veth0_virt_wifi: left promiscuous mode [ 742.684600][ T3310] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 743.031887][ T3310] bridge_slave_1: left allmulticast mode [ 743.038277][ T3310] bridge_slave_1: left promiscuous mode [ 743.038545][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.269677][ T3310] bridge_slave_0: left allmulticast mode [ 743.275529][ T3310] bridge_slave_0: left promiscuous mode [ 743.275794][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.256557][ T3310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.367370][ T3310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.476585][ T3310] bond0 (unregistering): Released all slaves [ 746.563564][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 747.296984][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 747.325258][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.329077][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.181866][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 749.046758][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 758.805336][ T59] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 758.853841][ T59] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 758.883004][ T59] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 758.895050][ T59] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 758.906008][ T59] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 760.075884][T17291] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.084836][T17291] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.085090][T17291] bridge_slave_0: entered allmulticast mode [ 760.101742][T17291] bridge_slave_0: entered promiscuous mode [ 760.112005][T17291] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.112216][T17291] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.112450][T17291] bridge_slave_1: entered allmulticast mode [ 760.146741][T17291] bridge_slave_1: entered promiscuous mode [ 760.200898][T17291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.214696][T17291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.273793][T17291] team0: Port device team_slave_0 added [ 760.284149][T17291] team0: Port device team_slave_1 added [ 760.335746][T17291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.343056][T17291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.343091][T17291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.345708][T17291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.345724][T17291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.345751][T17291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.500566][T17291] hsr_slave_0: entered promiscuous mode [ 760.512606][T17291] hsr_slave_1: entered promiscuous mode [ 760.519406][T17291] debugfs: 'hsr0' already exists in 'hsr' [ 760.519434][T17291] Cannot create hsr debugfs directory [ 760.997588][ T4915] Bluetooth: hci14: command tx timeout [ 761.775534][ T59] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 761.853107][ T59] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 761.865191][ T59] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 761.889100][ T59] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 761.896872][ T59] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 763.079699][ T4915] Bluetooth: hci14: command tx timeout [ 763.958085][ T4915] Bluetooth: hci15: command tx timeout [ 764.076897][T17311] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.084336][T17311] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.084581][T17311] bridge_slave_0: entered allmulticast mode [ 764.105327][T17311] bridge_slave_0: entered promiscuous mode [ 764.115292][T17311] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.115500][T17311] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.115746][T17311] bridge_slave_1: entered allmulticast mode [ 764.140082][T17311] bridge_slave_1: entered promiscuous mode [ 764.233370][T17311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 764.255331][T17311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.761566][ T4915] Bluetooth: hci3: command 0x0406 tx timeout [ 764.761796][ T4915] Bluetooth: hci1: command 0x0406 tx timeout [ 765.158222][ T59] Bluetooth: hci14: command tx timeout [ 765.338310][T17311] team0: Port device team_slave_0 added [ 765.356716][T17311] team0: Port device team_slave_1 added [ 765.482307][T17311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 765.490887][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.490928][T17311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 765.493595][T17311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.493611][T17311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.493638][T17311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.770489][T17311] hsr_slave_0: entered promiscuous mode [ 765.780162][T17311] hsr_slave_1: entered promiscuous mode [ 765.788689][T17311] debugfs: 'hsr0' already exists in 'hsr' [ 765.788717][T17311] Cannot create hsr debugfs directory [ 766.147520][ T5609] Bluetooth: hci15: command tx timeout [ 767.248401][ T5609] Bluetooth: hci14: command tx timeout [ 768.197593][ T5609] Bluetooth: hci15: command tx timeout [ 770.277611][ T5609] Bluetooth: hci15: command tx timeout [ 786.724799][T16506] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 786.773090][T16506] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 786.780840][T16506] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 786.790248][T16506] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 786.791007][T16506] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 788.003615][T17391] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.011040][T17391] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.011303][T17391] bridge_slave_0: entered allmulticast mode [ 788.015350][T17391] bridge_slave_0: entered promiscuous mode [ 788.042138][T17391] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.049542][T17391] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.049807][T17391] bridge_slave_1: entered allmulticast mode [ 788.052529][T17391] bridge_slave_1: entered promiscuous mode [ 788.125826][T17391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.139812][T17391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.192881][T17391] team0: Port device team_slave_0 added [ 788.203310][T17391] team0: Port device team_slave_1 added [ 788.298723][T17391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.306012][T17391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.306047][T17391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.351082][T17391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.360021][T17391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.360055][T17391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.960590][ T5609] Bluetooth: hci16: command tx timeout [ 790.198407][ T38] INFO: task syz-executor:16640 blocked for more than 143 seconds. [ 790.225865][ T38] Not tainted syzkaller #0 [ 790.225886][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 790.225900][ T38] task:syz-executor state:D stack:19816 pid:16640 tgid:16640 ppid:1 task_flags:0x400140 flags:0x00080002 [ 790.225972][ T38] Call Trace: [ 790.226054][ T38] [ 790.226097][ T38] __schedule+0x16d9/0x5700 [ 790.226338][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 790.226414][ T38] ? __pfx___schedule+0x10/0x10 [ 790.226455][ T38] rt_mutex_schedule+0x76/0xf0 [ 790.226528][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 790.226565][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 790.226589][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 790.226612][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 790.226646][ T38] ? del_device_store+0xd6/0x370 [ 790.226732][ T38] ? del_device_store+0xd6/0x370 [ 790.226757][ T38] ? del_device_store+0xd6/0x370 [ 790.226775][ T38] mutex_lock_nested+0x168/0x1d0 [ 790.226795][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 790.226855][ T38] del_device_store+0xd6/0x370 [ 790.226875][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 790.226902][ T38] ? __pfx_del_device_store+0x10/0x10 [ 790.226924][ T38] ? sysfs_file_kobj+0x1e4/0x230 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 790.226952][ T38] ? sysfs_kf_write+0x166/0x260 [ 790.226983][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 790.227010][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 790.227040][ T38] vfs_write+0x61e/0xbb0 [ 790.227088][ T38] ? __pfx_vfs_write+0x10/0x10 [ 790.227111][ T38] ? do_sys_openat2+0x14e/0x200 [ 790.227136][ T38] ? kmem_cache_free+0x187/0x6d0 [ 790.227187][ T38] ksys_write+0x156/0x270 [ 790.227211][ T38] ? __pfx_ksys_write+0x10/0x10 [ 790.227244][ T38] do_syscall_64+0x166/0x520 [ 790.238915][ T38] ? trace_irq_disable+0x3b/0x140 [ 790.238999][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.239095][ T38] ? clear_bhb_loop+0x70/0xc0 [ 790.239120][ T38] entry_SY ** replaying previous printk message ** [ 790.239120][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.239145][ T38] RIP: 0033:0x7f63d493e90e [ 790.239206][ T38] RSP: 002b:00007ffd44b2a488 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 790.239260][ T38] RAX: ffffffffffffffda RBX: 0000555570ac4500 RCX: 00007f63d493e90e [ 790.239274][ T38] RDX: 0000000000000001 RSI: 00007ffd44b2a510 RDI: 0000000000000005 [ 790.239287][ T38] RBP: 00007f63d4a158a7 R08: 0000000000000000 R09: 0000000000000000 [ 790.239300][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.239312][ T38] R13: 00007ffd44b2a510 R14: 00007f63d5734620 R15: 0000000000000003 [ 790.239343][ T38] [ 790.239356][ T38] INFO: task syz-executor:16654 blocked for more than 143 seconds. [ 790.239371][ T38] Not tainted syzkaller #0 [ 790.239381][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 790.239391][ T38] task:syz-executor state:D stack:22808 pid:16654 tgid:16654 ppid:1 task_flags:0x400140 flags:0x00080002 [ 790.239443][ T38] Call Trace: [ 790.239450][ T38] [ 790.239462][ T38] __schedule+0x16d9/0x5700 [ 790.239503][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 790.239546][ T38] ? __pfx___schedule+0x10/0x10 [ 790.239584][ T38] rt_mutex_schedule+0x76/0xf0 [ 790.239609][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 790.239645][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 790.239669][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 790.239690][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 790.239723][ T38] ? del_device_store+0xd6/0x370 [ 790.239748][ T38] ? del_device_store+0xd6/0x370 [ 790.239772][ T38] ? del_device_store+0xd6/0x370 [ 790.239789][ T38] mutex_lock_nested+0x168/0x1d0 [ 790.239808][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 790.239840][ T38] del_device_store+0xd6/0x370 [ 790.239860][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 790.239886][ T38] ? __pfx_del_device_store+0x10/0x10 [ 790.239906][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 790.239933][ T38] ? sysfs_kf_write+0x166/0x260 [ 790.239964][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 790.239990][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 790.240020][ T38] vfs_write+0x61e/0xbb0 [ 790.240049][ T38] ? __pfx_vfs_write+0x10/0x10 [ 790.240071][ T38] ? do_sys_openat2+0x14e/0x200 [ 790.240096][ T38] ? kmem_cache_free+0x187/0x6d0 [ 790.240135][ T38] ksys_write+0x156/0x270 [ 790.240159][ T38] ? __pfx_ksys_write+0x10/0x10 [ 790.240190][ T38] do_syscall_64+0x166/0x520 [ 790.240215][ T38] ? trace_irq_disable+0x3b/0x140 [ 790.240236][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.240256][ T38] ? clear_bhb_loop+0x70/0xc0 [ 790.240279][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.240299][ T38] RIP: 0033:0x7f5cdddbe90e [ 790.240315][ T38] RSP: 002b:00007ffc7edeea58 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 790.240333][ T38] RAX: ffffffffffffffda RBX: 00005555814b5500 RCX: 00007f5cdddbe90e [ 790.240348][ T38] RDX: 0000000000000001 RSI: 00007ffc7edeeae0 RDI: 0000000000000005 [ 790.240361][ T38] RBP: 00007f5cdde958a7 R08: 0000000000000000 R09: 0000000000000000 [ 790.240373][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.240385][ T38] R13: 00007ffc7edeeae0 R14: 00007f5cdebb4620 R15: 0000000000000003 [ 790.240416][ T38] [ 790.240424][ T38] INFO: task syz-executor:16655 blocked for more than 143 seconds. [ 790.240438][ T38] Not tainted syzkaller #0 [ 790.240448][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 790.240457][ T38] task:syz-executor state:D stack:20488 pid:16655 tgid:16655 ppid:1 task_flags:0x400140 flags:0x00080002 [ 790.240523][ T38] Call Trace: [ 790.240530][ T38] [ 790.240541][ T38] __schedule+0x16d9/0x5700 [ 790.240580][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 790.240615][ T38] ? __pfx___schedule+0x10/0x10 [ 790.240653][ T38] rt_mutex_schedule+0x76/0xf0 [ 790.240675][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 790.240711][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 790.240734][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 790.240755][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 790.240787][ T38] ? del_device_store+0xd6/0x370 [ 790.240810][ T38] ? del_device_store+0xd6/0x370 [ 790.240834][ T38] ? del_device_store+0xd6/0x370 [ 790.240851][ T38] mutex_lock_nested+0x168/0x1d0 [ 790.240870][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 790.240901][ T38] del_device_store+0xd6/0x370 [ 790.240920][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 790.240946][ T38] ? __pfx_del_device_store+0x10/0x10 [ 790.240966][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 790.240994][ T38] ? sysfs_kf_write+0x166/0x260 [ 790.241024][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 790.241050][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 790.241080][ T38] vfs_write+0x61e/0xbb0 [ 790.241108][ T38] ? __pfx_vfs_write+0x10/0x10 [ 790.241130][ T38] ? do_sys_openat2+0x14e/0x200 [ 790.241153][ T38] ? kmem_cache_free+0x187/0x6d0 [ 790.241192][ T38] ksys_write+0x156/0x270 [ 790.241214][ T38] ? __pfx_ksys_write+0x10/0x10 [ 790.241246][ T38] do_syscall_64+0x166/0x520 [ 790.241270][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.241290][ T38] ? clear_bhb_loop+0x70/0xc0 [ 790.241313][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.241333][ T38] RIP: 0033:0x7f874081e90e [ 790.241349][ T38] RSP: 002b:00007ffc672a5bf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 790.241367][ T38] RAX: ffffffffffffffda RBX: 00005555714bc500 RCX: 00007f874081e90e [ 790.241381][ T38] RDX: 0000000000000001 RSI: 00007ffc672a5c80 RDI: 0000000000000005 [ 790.241394][ T38] RBP: 00007f87408f58a7 R08: 0000000000000000 R09: 0000000000000000 [ 790.241406][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.241418][ T38] R13: 00007ffc672a5c80 R14: 00007f8741614620 R15: 0000000000000003 [ 790.241449][ T38] [ 790.241521][ T38] [ 790.241521][ T38] Showing all locks held in the system: [ 790.241543][ T38] locks held by pr/ttyS0/17: 3, last CPU#0: [ 790.241563][ T38] #0: ffffffff8e09d538 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 790.241650][ T38] #1: ffffffff99e8f178 (&port_lock_key){+.+.}-{3:3}, at: nbcon_kthread_func+0x64c/0x880 [ 790.241701][ T38] #2: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 790.241766][ T38] locks held by ksoftirqd/1/30: 4, last CPU#1: [ 790.241779][ T38] #0: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 790.241847][ T38] #1: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: psi_task_switch+0x57/0x790 [ 790.317097][ T38] #2: ffff8880b873c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 790.317153][ T38] #3: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 790.317382][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 790.317397][ T38] #0: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 790.317488][ T38] locks held by kworker/u8:18/3310: 4, on CPU#0: [ 790.317502][ T38] #0: ffff88801aea8938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 790.317562][ T38] #1: ffffc9000ea27c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 790.317612][ T38] #2: ffffffff8f5bf580 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 790.317709][ T38] #3: ffffffff8e1c9cf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 790.317766][ T38] locks held by kworker/u8:20/3347: 4, last CPU#0: [ 790.317780][ T38] #0: ffff888032997138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 790.317831][ T38] #1: ffffc9000eb87c40 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 790.317884][ T38] #2: ffff8880207e91c0 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xcf/0xf90 [ 790.318000][ T38] #3: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: batadv_iv_ogm_schedule+0x3f4/0xf90 [ 790.318051][ T38] locks held by kworker/u8:25/3367: 9, last CPU#1: [ 790.318066][ T38] #0: ffff888061e74138 ((wq_completion)krds_cp_wq#7/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 790.318116][ T38] #1: ffffc9000e9e7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 790.318168][ T38] #2: ffff88805e512d88 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 790.318300][ T38] #3: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 790.318352][ T38] #4: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 790.318455][ T38] #5: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 790.318508][ T38] #6: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 790.318570][ T38] #7: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: nf_log_packet+0xef/0x650 [ 790.318687][ T38] #8: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: nfnl_log_pernet+0x23/0x240 [ 790.318766][ T38] locks held by klogd/4955: 3, last CPU#1: [ 790.318780][ T38] #0: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 790.318831][ T38] #1: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 790.318881][ T38] #2: ffff8880b87396f8 ((bh_lock)){+...}-{3:3}, at: napi_skb_cache_get+0xbf/0x450 [ 790.318959][ T38] locks held by getty/5355: 2, on CPU#0: [ 790.318973][ T38] #0: ffff8880369730a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 790.319098][ T38] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 790.319146][ T38] locks held by syz-executor/5586: 4, last CPU#1: [ 790.319161][ T38] #0: ffff88803541d530 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 790.319213][ T38] #1: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 790.319263][ T38] #2: ffff888039ae31d8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 790.319327][ T38] #3: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 790.319382][ T38] locks held by kworker/1:2/13702: 3, last CPU#1: [ 790.319397][ T38] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 790.319452][ T38] #1: ffffc9001c58fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 790.319506][ T38] #2: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 790.319570][ T38] locks held by dhcpcd/16029: 1, on CPU#0: [ 790.319584][ T38] #0: ffff888067c038b8 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 790.319686][ T38] locks held by kworker/u9:4/16506: 3, on CPU#1: [ 790.319701][ T38] #0: ffff888040ac7138 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 790.346809][ T38] #1: ffffc9000ec87c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 790.346865][ T38] #2: ffff88804fe88f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 790.347021][ T38] locks held by syz-executor/16568: 7, on CPU#0: [ 790.347035][ T38] #0: ffff888035e2c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 790.347086][ T38] #1: ffff8880424d2c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 790.347138][ T38] #2: ffff888029848c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 790.347193][ T38] #3: ffffffff8ee3ebd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 790.347240][ T38] #4: ffff88803806e160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 790.347657][ T38] #5: ffff88803fcb2310 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 790.347743][ T38] #6: ffffffff8e1c9cf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 790.347792][ T38] locks held by syz-executor/16640: 4, on CPU#0: [ 790.347806][ T38] #0: ffff888035e2c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 790.347855][ T38] #1: ffff888025beac78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 790.347905][ T38] #2: ffff888029848c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 790.347960][ T38] #3: ffffffff8ee3ebd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 790.348007][ T38] locks held by syz-executor/16654: 4, on CPU#0: [ 790.348021][ T38] #0: ffff888035e2c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 790.348083][ T38] #1: ffff88806067f878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 790.348134][ T38] #2: ffff888029848c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 790.348189][ T38] #3: ffffffff8ee3ebd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 790.348234][ T38] locks held by syz-executor/16655: 4, on CPU#0: [ 790.348248][ T38] #0: ffff888035e2c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 790.348295][ T38] #1: ffff88802aaaa878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 790.348346][ T38] #2: ffff888029848c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 790.348401][ T38] #3: ffffffff8ee3ebd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 790.348447][ T38] locks held by syz-executor/16741: 4, on CPU#0: [ 790.348461][ T38] #0: ffff888035e2c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 790.348508][ T38] #1: ffff888060a48078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 790.348589][ T38] #2: ffff888029848c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 790.348643][ T38] #3: ffffffff8ee3ebd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 790.348687][ T38] locks held by syz-executor/16761: 4, on CPU#0: [ 790.348701][ T38] #0: ffff888035e2c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 790.348749][ T38] #1: ffff88805e318478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 790.348800][ T38] #2: ffff888029848c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 790.357576][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 790.367889][ T38] #3: ffffffff8ee3ebd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 790.367956][ T38] locks held by syz-executor/16827: 4, on CPU#0: [ 790.367971][ T38] #0: ffff888035e2c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 790.368023][ T38] #1: ffff888034f0bc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 790.368088][ T38] #2: ffff888029848c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 790.368144][ T38] #3: ffffffff8ee3ebd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 790.368189][ T38] locks held by syz-executor/16872: 4, on CPU#0: [ 790.368204][ T38] #0: ffff888035e2c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 790.368253][ T38] #1: ffff888032ac6c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 790.368302][ T38] #2: ffff888029848c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 790.368357][ T38] #3: ffffffff8ee3ebd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 790.368401][ T38] locks held by syz-executor/16881: 4, on CPU#0: [ 790.368415][ T38] #0: ffff888035e2c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 790.368463][ T38] #1: ffff88802a3ff078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 790.368513][ T38] #2: ffff888029848c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 790.368573][ T38] #3: ffffffff8ee3ebd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 790.368620][ T38] locks held by syz-executor/16963: 4, on CPU#0: [ 790.368634][ T38] #0: ffff888035e2c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 790.368682][ T38] #1: ffff88802a3fd878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 790.368732][ T38] #2: ffff888029848c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 790.368787][ T38] #3: ffffffff8ee3ebd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 790.368832][ T38] locks held by syz-executor/16982: 4, on CPU#0: [ 790.368846][ T38] #0: ffff888035e2c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 790.368895][ T38] #1: ffff888088af6c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 790.368945][ T38] #2: ffff888029848c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 790.369000][ T38] #3: ffffffff8ee3ebd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 790.369047][ T38] locks held by syz-executor/17061: 4, on CPU#0: [ 790.369060][ T38] #0: ffff888035e2c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 790.369108][ T38] #1: ffff88807b391c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 790.369159][ T38] #2: ffff888029848c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 790.369213][ T38] #3: ffffffff8ee3ebd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 790.369259][ T38] locks held by syz-executor/17118: 4, on CPU#0: [ 790.369273][ T38] #0: ffff888035e2c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 790.369321][ T38] #1: ffff888081468c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 790.369371][ T38] #2: ffff888029848c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 790.369425][ T38] #3: ffffffff8ee3ebd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 790.369471][ T38] locks held by syz-executor/17128: 4, on CPU#0: [ 790.369485][ T38] #0: ffff888035e2c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 790.369538][ T38] #1: ffff888077ea5478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 790.369589][ T38] #2: ffff888029848c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 790.369643][ T38] #3: ffffffff8ee3ebd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 790.369691][ T38] locks held by syz-executor/17291: 4, on CPU#0: [ 790.369705][ T38] #0: ffff888035e2c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 790.399133][ T38] #1: ffff888080d15878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 790.399203][ T38] #2: ffff888029848c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 790.399258][ T38] #3: ffffffff8ee3ebd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 790.399308][ T38] locks held by syz-executor/17311: 4, on CPU#0: [ 790.399322][ T38] #0: ffff888035e2c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 790.399370][ T38] #1: ffff88807b393478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 790.399422][ T38] #2: ffff888029848c38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 790.399476][ T38] #3: ffffffff8ee3ebd8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 790.399523][ T38] locks held by syz-executor/17391: 3, last CPU#0: [ 790.399542][ T38] #0: ffffffff8fb3a588 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 790.399673][ T38] #1: ffffffff8f5cddf8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 790.399719][ T38] #2: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 790.399782][ T38] locks held by dhcpcd-run-hook/17424: 2, last CPU#1: [ 790.399796][ T38] #0: ffffffff8e3106d0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 790.399852][ T38] #1: ffffffff8e1c3a80 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 790.405233][ T38] [ 790.405245][ T38] ============================================= [ 790.405245][ T38] [ 790.405274][ T38] NMI backtrace for cpu 1 [ 790.405302][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 790.405324][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 790.405336][ T38] Call Trace: [ 790.405343][ T38] [ 790.405352][ T38] dump_stack_lvl+0xe8/0x150 [ 790.405413][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 790.405497][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 790.405541][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 790.405567][ T38] sys_info+0x135/0x170 [ 790.405585][ T38] watchdog+0xfd7/0x1030 [ 790.405621][ T38] ? watchdog+0x1c7/0x1030 [ 790.405649][ T38] kthread+0x38b/0x470 [ 790.405670][ T38] ? __pfx_watchdog+0x10/0x10 [ 790.405690][ T38] ? __pfx_kthread+0x10/0x10 [ 790.405710][ T38] ret_from_fork+0x514/0xb70 [ 790.405743][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 790.405762][ T38] ? __switch_to+0xc89/0x1420 [ 790.405791][ T38] ? __pfx_kthread+0x10/0x10 [ 790.405811][ T38] ret_from_fork_asm+0x1a/0x30 [ 790.405844][ T38] [ 790.405852][ T38] Sending NMI from CPU 1 to CPUs 0: [ 790.405879][ C0] NMI backtrace for cpu 0 [ 790.405893][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 790.405913][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 790.405923][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 790.406039][ C0] Code: e8 fe e7 66 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 85 d2 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 4a 30 f8 05 cc 44 89 f9 80 e1 07 [ 790.406054][ C0] RSP: 0018:ffffc900001678b8 EFLAGS: 00000202 [ 790.406071][ C0] RAX: 1ffffffff33d1e00 RBX: 00000000000003fd RCX: 0000000000000000 [ 790.406083][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 790.406094][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 790.406106][ C0] R10: dffffc0000000000 R11: ffffffff855f8550 R12: dffffc0000000000 [ 790.406119][ C0] R13: 0000000000000000 R14: ffffffff99e8f1a0 R15: 0000000000000000 [ 790.406132][ C0] FS: 0000000000000000(0000) GS:ffff888125bde000(0000) knlGS:0000000000000000 [ 790.406147][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 790.406159][ C0] CR2: 000055bc880fb660 CR3: 000000000dfb0000 CR4: 00000000003526f0 [ 790.406175][ C0] Call Trace: [ 790.406182][ C0] [ 790.406191][ C0] wait_for_lsr+0x190/0x300 [ 790.406218][ C0] __serial8250_console_fifo_write+0xd0/0x3f0 [ 790.406242][ C0] serial8250_console_write+0xac5/0x1230 [ 790.406271][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 790.406303][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 790.406333][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 790.406358][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 790.406391][ C0] nbcon_kthread_func+0x679/0x880 [ 790.406416][ C0] ? nbcon_kthread_func+0x163/0x880 [ 790.406437][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 790.406462][ C0] ? __kthread_parkme+0x71/0x1f0 [ 790.406487][ C0] ? __kthread_parkme+0x199/0x1f0 [ 790.406514][ C0] kthread+0x38b/0x470 [ 790.406530][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 790.406550][ C0] ? __pfx_kthread+0x10/0x10 [ 790.406567][ C0] ret_from_fork+0x514/0xb70 [ 790.406586][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 790.406603][ C0] ? __switch_to+0xc89/0x1420 [ 790.406627][ C0] ? __pfx_kthread+0x10/0x10 [ 790.406644][ C0] ret_from_fork_asm+0x1a/0x30 [ 790.406668][ C0] [ 790.415602][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 792.666526][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 792.676776][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 792.686837][ T38] Call Trace: [ 792.690117][ T38] [ 792.693053][ T38] vpanic+0x56d/0xa60 [ 792.697390][ T38] ? __pfx___schedule+0x10/0x10 [ 792.703118][ T38] ? __pfx_vpanic+0x10/0x10 [ 792.707634][ T38] panic+0xc5/0xd0 [ 792.711816][ T38] ? __pfx_panic+0x10/0x10 [ 792.716446][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 792.722433][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 792.727815][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 792.733974][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 792.740125][ T38] watchdog+0x1030/0x1030 [ 792.744816][ T38] ? watchdog+0x1c7/0x1030 [ 792.749264][ T38] kthread+0x38b/0x470 [ 792.753850][ T38] ? __pfx_watchdog+0x10/0x10 [ 792.758869][ T38] ? __pfx_kthread+0x10/0x10 [ 792.763458][ T38] ret_from_fork+0x514/0xb70 [ 792.768058][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 792.774071][ T38] ? __switch_to+0xc89/0x1420 [ 792.778867][ T38] ? __pfx_kthread+0x10/0x10 [ 792.783576][ T38] ret_from_fork_asm+0x1a/0x30 [ 792.788380][ T38] [ 792.794753][ T38] Kernel Offset: disabled [ 792.799134][ T38] Rebooting in 86400 seconds..