last executing test programs: 21.580250469s ago: executing program 3 (id=469): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) sendto$inet(r0, &(0x7f00000001c0)="d841395a5621efab31b14a8f3759f0e4a3980b456e702a2de73cbdf4899a241b3bc74610bbc3b64afce0d907e0cfabe8221198fb1a365f12e7f5de195247a360654e7594f652bf392b64297b6c543ed53cd884c9c1f480982b18ef75d646ac7368ee86eefc81090b076d2c94fb8d8a6583fee043f70f4681fb26f9f66bf6b1dafc6fed749e5a82943065eeb73bd50eaa7a203c", 0x93, 0x20000000, &(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) write(r2, &(0x7f0000000480)='~', 0x1) close(0x3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x72, &(0x7f0000000680)={@random="b3844697cb76", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f070000000000880000"}}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)={0x568, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x538, 0x8, 0x0, 0x1, [{0x534, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x4}]}, @WGPEER_A_ALLOWEDIPS={0x4bc, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x31}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x31}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x3f}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x568}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="39895aeb", @ANYRES16=r5, @ANYBLOB="00082abd7000ffdbdf2501000000060006004e220000"], 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 21.364999658s ago: executing program 2 (id=472): unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) unshare(0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x48000}, 0x84) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x1) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)="ad0000000000000004f474d80a0bcb46d613b2dbe7d10000000000f131c32f375e2b98fbe6c66f57472cd798fb0011d25ddebd46e203c0db3798f39e0a3036a28c003860b988b8616046019edbe3baad888c58c7a098f490d5bb173797388e3124ceea5dc42d748d35cf3db702a07c5f32e1889747a3f64af0e002f509dfd29cf70627372651708620bf781fba4250f8a109e309bdc806a1e4eeccb9e1dcf24cbf4c9dc0dcab", 0xa6) (async) recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) unshare(0xc000000) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f00000002c0)=0x78) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a000000080000ee0c00000068360000100000000900000008000000690d000002000040000000000d00000000000007"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) socket$kcm(0x2, 0x1, 0x84) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) 20.616211778s ago: executing program 3 (id=477): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x1d, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x7, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfc, 0x2}, 0xc) unshare(0x62040200) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000440)=@hci, 0x80, &(0x7f0000000280), 0x1, 0x0, 0xfffffd1b}, 0x13e40) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x20000810) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x680000b, 0x3032, 0xffffffffffffffff, 0x52972000) (async) close(r3) (async) r5 = accept$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @default}, [@remote, @netrom, @rose, @null, @netrom, @default, @bcast, @null]}, &(0x7f00000000c0)=0x48) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000340)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r6}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}}, 0x1c) listen(r3, 0x4009) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000080), 0x0) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 19.997145331s ago: executing program 2 (id=482): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001000050400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="6d8d28f27f2c3bdb2d77ec2a4d59a45814a24f806afb9c64a43b3bfe36800e3fe710e1e33432082c0ae9f42c3747055e565affea8201a59bc36d4929ca88cade88bb01c13ee55fa8c955853e4f07000000000000f3498256fe78821fc33f8b99183be7e1abaff532946f2dfe0b4a050513194035ab1537aff9cd432e64f2b77c32ee43231f17bd573faf17eb2e3d036106b1e1ea561b298e0a3cd0d03131c2f95f08136700fba2dc4e9f544d0723a3b75af580d356a0fd933895e9c3f8f94a55e6066cffe7cf"], 0x28}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) 19.643194124s ago: executing program 3 (id=486): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000066c0)={0x20, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x1a, 0x0, 0x1, [@nested={0x8, 0x4, 0x0, 0x1, [@generic="c27b8277"]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2004000c}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b05, &(0x7f00000004c0)={'wlan1\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) socket$xdp(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000000), 0x6) r8 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) bind$llc(r8, &(0x7f0000000040)={0x1a, 0x339, 0x3, 0x2, 0x4, 0x34, @multicast}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x890) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008019}, 0x10800) getsockname(r7, 0x0, &(0x7f0000000180)) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f0000000000)={r12, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000280)={r12, 0x5a, "b62def661e35fa908e27911269fec731ebd109282ea362a2f52b8cbe3dcc9f23684e8316c1835b80ff42a0cbfd564bf9ef9265229e1649f0b8c87c038b1c74d2bb8badfbb32d1208006c2ba511607a02908b659c73d1e429f18e"}, &(0x7f0000000080)=0x62) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x5b}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 18.957063053s ago: executing program 2 (id=488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2a, 0xb, 0x0, 0x25dfdbff, {0x2}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x30004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000003700010327bd6c47ff04cb14c85f0000003a6a65168d502cd57a992804eb6c34da38eb96a6b48eba77697a72493c8f20ad1ce33e5a926f2ed4c87f85b1f48fe9f399b8b897410aa61ef5bb58e32431bc01c038c7e3b9c24c8f147142966acb3829deb749be386bf4ea610b56fafef4bd89028503f1623783f6f5c8157193b6dc4a7346545f7340ceb14e97607870eebe4cf3ba041548fd5f26356ced2d699c0b64eb92375f986d65b0480e442a7a1db5e04c7e0a8c86da7f71505fbb4f63c6125e409767d8f041454c5ceec9573dd80d659f3089"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000006800000600000008000300", @ANYRES32=r3, @ANYBLOB="080005000b000000"], 0x24}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x103200, 0x0) ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f00000002c0)=0x3) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) getsockopt$ax25_int(r7, 0x101, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000340)=@random='\r', 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 18.543211511s ago: executing program 3 (id=490): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r2) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x44, r3, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00000004c0)) close(r0) epoll_wait(r4, &(0x7f0000000240)=[{}], 0x1, 0x6) sendfile(r0, r0, &(0x7f0000000000)=0xfffffffffffff801, 0x7) 18.272975407s ago: executing program 4 (id=493): clock_gettime(0x9, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[], 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$unix(r1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x5452, 0x0) recvmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendfile(r1, r1, &(0x7f0000000680)=0xffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000071400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000001080017"], 0x44}}, 0x0) 18.166304315s ago: executing program 2 (id=495): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40000000000000061114c00000000008500000002000000950000000000000055c2b554a0c90784e6ee54b24111761fe72414979b6fbfbf94ced4b8266733f85dff0e5ca20367207da7ae9237d61fadaa6b573c92d354e8fea34386db98c7b4c40e2c03eb59ef75a72d278f4523e55122e2b4294988f51ba935bfb14c562ad183ffbfd4ce1e4beb7dd90ccdf601d8ef3f2ecb75f9a77364"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'rm\x00'}, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004100090025bd700100000000050000000800020001"], 0x1c}}, 0x0) read(r0, &(0x7f00000001c0)=""/232, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40000000000000061114c00000000008500000002000000950000000000000055c2b554a0c90784e6ee54b24111761fe72414979b6fbfbf94ced4b8266733f85dff0e5ca20367207da7ae9237d61fadaa6b573c92d354e8fea34386db98c7b4c40e2c03eb59ef75a72d278f4523e55122e2b4294988f51ba935bfb14c562ad183ffbfd4ce1e4beb7dd90ccdf601d8ef3f2ecb75f9a77364"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff, @void, @value}, 0x94) (async) write$cgroup_devices(r1, &(0x7f0000000080)={'b', ' *:* ', 'rm\x00'}, 0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004100090025bd700100000000050000000800020001"], 0x1c}}, 0x0) (async) read(r0, &(0x7f00000001c0)=""/232, 0xe8) (async) 18.120900467s ago: executing program 3 (id=496): socket$netlink(0x10, 0x3, 0xa) (async) r0 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, 0x0, 0x0) unshare(0x62040200) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @local, 0x8000}, 0x1c) (async) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @local, 0x8000}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={0x0, 0x0, 0x10}, 0x18) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) (async) shutdown(r5, 0x2) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x40, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) (async) sendmsg$SMC_PNETID_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x40, r6, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) 18.108094609s ago: executing program 0 (id=497): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10000005}, 0x4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) clock_gettime(0xa, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet_smc(0x2b, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7}, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) unshare(0x28000600) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r8, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f00000001c0)="24e8c5d5269c5fa8a6", 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601080000000000000000010000040600010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000) getsockname(r5, &(0x7f0000000040)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80) 17.990601351s ago: executing program 1 (id=498): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000800)='virtio_transport_alloc_pkt\x00', r1}, 0x18) (async, rerun: 32) r2 = socket$vsock_stream(0x28, 0x1, 0x0) (rerun: 32) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async, rerun: 32) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) (rerun: 32) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x44, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0xfffffffffffffda0, 0x4, @remote}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x80) (async) close(r5) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x13, 0x8, 0x8, 0x0, 0x0, 0x1, 0x1, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (rerun: 64) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r7, 0x0, &(0x7f0000000bc0)=""/177}, 0x20) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) (async, rerun: 32) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) (async, rerun: 32) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x11, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b00140000000000000000000000070000"], 0x38}, 0x0) (async) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x507e, 0x4, 0x6, 0x800}, &(0x7f0000000340)=0x10) 17.917017864s ago: executing program 2 (id=499): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r3, 0x0) mmap(&(0x7f0000551000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mmap(&(0x7f000075a000/0x2000)=nil, 0x2000, 0x0, 0x2011, r4, 0xc6e54000) unshare(0x62040200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000080)={'lo\x00', @local}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500002c00000000002f9078ac1c0001e000000100006558001890780400000000000000be04000000000000"], 0x3e) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000100)=0xb) setsockopt$inet_tcp_int(r7, 0x6, 0x22, &(0x7f0000000380)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@polexpire={0x188, 0x1b, 0x2, 0x70bd27, 0x25dfdbfc, {{{@in=@loopback, @in=@private=0xa010101, 0x4e24, 0x9, 0x4e22, 0x6, 0x2, 0x80, 0x20, 0x2b}, {0x9, 0x4, 0x1, 0x40, 0x7fffffff, 0x6, 0x9, 0x10000000005}, {0x8, 0x20000008001, 0xffff, 0xffffffffffffffff}, 0x81, 0x6e6bb2, 0x0, 0x1, 0x0, 0x2}, 0x40}, [@coaddr={0x14, 0xe, @in6=@loopback}, @XFRMA_SET_MARK={0x8, 0x1d, 0xffff}, @policy={0xac, 0x7, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e21, 0x1000, 0x4e22, 0x8001, 0x2, 0x80, 0x0, 0x73}, {0x7, 0x0, 0x9, 0x7, 0x4, 0xfffffffffffffff7, 0x8, 0x427}, {0x7, 0x72f, 0x0, 0x9}, 0x325de6c4, 0x6e6bbf, 0x2, 0x0, 0x2}}]}, 0x188}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) 17.814468704s ago: executing program 0 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)="7885bb21", 0x4}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711283000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=0x0, @ANYBLOB="0500000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000400541d580000050002"], 0x24}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="09002abd7000feffffff0a00000008000300", @ANYRES32=r9, @ANYBLOB="040028f087581519d08b2aebc0bf1f5e00"], 0x20}}, 0x0) (async) r10 = accept$ax25(0xffffffffffffffff, &(0x7f0000000400)={{}, [@bcast, @rose, @bcast, @netrom, @default, @bcast, @rose, @rose]}, &(0x7f0000000200)=0x48) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000640)={r2, 0x16, 0x2000000000, 0x2}) (async, rerun: 32) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r12, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r13, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r14, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000d00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000cc0)={&(0x7f00000008c0)={0x3fc, r13, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x20}}}}, [@NL80211_ATTR_TX_RATES={0x3d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3, 0x1, 0x8, 0x5, 0x1, 0x1ff, 0x9]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x1, 0x9, 0x3, 0x48, 0x12, 0x60, 0x24, 0x1b, 0x12, 0xc, 0x6, 0x30, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x9, 0x800, 0x7ff, 0xffff, 0x6, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x44, 0x8, 0x0, 0x4, 0x93, 0x180]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0xa, 0x5, 0x7ff, 0xd973, 0x40, 0x638]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x40, 0x1812, 0x4, 0x200, 0xbbe, 0x19, 0x5]}}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x8, 0x0, 0x4, 0x6, 0x80, 0x9, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x20, 0x4, 0x8001, 0x8, 0x80, 0x4, 0xfffa, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x6}, {0x1, 0x6}, {0x2, 0x8}, {0x0, 0xa}, {0x0, 0x1}, {0x3, 0x6}, {0x6, 0x2}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x8}, {0x5}, {0x5, 0x5}, {0x1, 0x9}, {0x1, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x36, 0x3b, 0xb, 0x5, 0x60, 0x1, 0x6, 0x18, 0x48, 0x6, 0x30, 0xb, 0x2]}]}, @NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x59, 0xa69, 0x1, 0x4, 0x300, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x36, 0x3, 0xb, 0x36, 0x18, 0x6c, 0x5, 0x24, 0xc, 0xb, 0x6, 0x48, 0xb, 0x1, 0x6c, 0x3, 0x16, 0x1b, 0x6c, 0x18, 0x16, 0x2, 0x24, 0x9, 0x12, 0x24, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x7, 0x0, 0x7f, 0x6, 0x3, 0x100]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xe, 0x0, 0x3, 0x3, 0xfffd, 0x677a, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0xb0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4c, 0x2, [{0x1, 0x6}, {0x1, 0xa}, {0x6}, {0x4, 0x8}, {0x1, 0x3}, {0x0, 0x7}, {0x3}, {0x6, 0x9}, {0x1, 0x1}, {0x0, 0x7}, {0x5, 0x6}, {0x7, 0x7}, {0x0, 0x7}, {0x1, 0x3}, {0x2, 0xa}, {0x5, 0x9}, {0x4, 0x6}, {0x0, 0x2}, {0x0, 0x8}, {0x6}, {0x0, 0x5}, {0x1, 0x9}, {}, {0x1, 0x9}, {0x5, 0x5}, {0x0, 0x5}, {0x6, 0x1}, {0x4, 0x1}, {0x4, 0x2}, {0x4, 0xa}, {0x5, 0x5}, {0x7, 0x9}, {0x5}, {0x4, 0x8}, {0x5, 0x9}, {0x5, 0x3}, {0x0, 0x9}, {0x4}, {0x7, 0x3}, {0x1, 0x5}, {0x4, 0x4}, {0x5, 0xa}, {0x1, 0xa}, {0x3, 0x6}, {0x2, 0x5}, {0x4, 0xa}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0x2}, {0x7, 0x7}, {0x5, 0x3}, {0x0, 0x4}, {0x5, 0x9}, {0x4, 0x3}, {0x4, 0x8}, {0x4, 0x8}, {0x2}, {0x6, 0x4}, {0x7, 0x8}, {0x1, 0x8}, {0x5, 0x6}, {0x2, 0xa}, {0x3, 0x9}, {0x7, 0x5}, {0x1, 0x8}, {0x4, 0x3}, {0x1, 0x8}, {0x3, 0x4}, {0x1, 0x2}, {0x5, 0x4}, {0x7, 0x7}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x6, 0x4}, {0x7, 0xa}, {0x6}, {0x7, 0x5}, {0x2, 0x6}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x7, 0x1}, {0x3, 0x4}, {0x6, 0x7}, {0x4, 0x2}, {0x1, 0x5}, {0x7, 0x2}, {0x2, 0x4}, {0x4, 0x9}, {0x2, 0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x7, 0x2}, {0x1, 0x6}, {0x1}, {0x7, 0x8}, {0x3, 0x3}, {0x1, 0x3}, {0x4, 0xa}, {0x1}, {0x5, 0x9}, {0x7, 0x7}, {0x2}, {0x0, 0x7}, {0x0, 0x9}, {0x2, 0x6}, {0x1}, {0x5, 0x8}, {0x4, 0x3}, {0x7, 0x2}, {0x4, 0x1}, {0x6, 0x5}, {0x2, 0x9}, {0x5, 0x2}, {0x5, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x9, 0x8000, 0x9, 0x8, 0x8, 0x1, 0x8885]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x4, 0x2, 0x1, 0x1, 0x7]}}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x3ff, 0x123, 0x60f2, 0x8, 0x2, 0x166b, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0x0, 0xc1, 0x10, 0x0, 0x7, 0xda, 0x7fff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x30a, 0x2, 0x7, 0x3, 0x0, 0xfff, 0xcb90]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0x48, 0x4, 0x24, 0x48, 0xacb733f1e53926ef, 0x5, 0x30, 0x48, 0x4, 0x18, 0x2, 0x3, 0x1b, 0x12, 0x36, 0x18, 0x3, 0x30, 0x4, 0xb, 0x2]}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x6, 0x9}, {0x1}, {0x1, 0x5}, {0x7, 0x2}, {0x2, 0x1}, {0x5, 0x4}, {0x6, 0xa}, {0x0, 0x7}, {0x7, 0x7}, {0x1, 0x7}, {0x1, 0xa}, {0x6, 0x5}, {0x5, 0x8}, {0x1, 0x1}, {0x6, 0x2}, {0x1, 0x4}, {0x1, 0x2}, {0x7, 0x4}, {0x4, 0x7}, {0x5, 0x8}, {0x1, 0x2}, {0x2, 0x2}, {0x0, 0x8}, {0x5, 0x9}, {0x3, 0x9}, {0x2, 0x8}, {}, {0x5, 0x9}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x6, 0x8}, {0x6, 0x4}, {0x7, 0xa}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x5}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0x2}, {0x3, 0x3}, {0x6}, {0x2, 0x9}, {0x3, 0x5}, {0x3, 0x8}, {0x2, 0xa}, {0x7, 0x4}, {0x3, 0x6}, {0x3, 0x6}, {0x7, 0xa}, {}, {0x0, 0x9}, {0x3}, {0x6, 0x1}, {0x2, 0x5}, {0x7, 0x1}, {0x0, 0x5}, {0x6, 0x6}, {0x4, 0x3}, {0x1, 0x8}, {0x1, 0x8}, {0x1, 0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x2, 0x3}, {0x3, 0x3}, {0x6, 0x3}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x5, 0x48]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x62, 0x5, 0xe777, 0x0, 0x0, 0x6, 0x8, 0x4]}}]}, @NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6c, 0x4, 0x0, 0x30, 0x18, 0x60, 0x4, 0x1, 0x18, 0xc, 0x1b, 0x48, 0x59, 0x7e696cce3602dec8, 0x16]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x30, 0x9, 0x2, 0x69, 0x48, 0x9, 0x5, 0x24, 0x36, 0x60, 0x6c, 0xb, 0x30, 0x48, 0x6c, 0x30, 0x1b, 0x60]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x9}, {0x5, 0x9}, {0x2}, {0x6, 0xa}, {0x3, 0x1}, {0x6, 0x1}, {0x1, 0x3}, {0x0, 0x3}, {0x6, 0x7}, {0x6, 0xa}, {0x5, 0xa}, {0x2}, {0x4, 0x6}, {0x6}, {0x5, 0x9}, {0x7, 0x7}, {0x5, 0x1}, {0x1, 0xa}, {0x5, 0x8}, {0x7, 0x7}, {0x1, 0xa}, {0x0, 0x8}, {0x7, 0x9}, {0x7, 0x3}, {0x0, 0x7}, {0x5, 0x2}, {0x4, 0x1}, {0x4, 0x7}, {0x7, 0x4}, {0x7, 0xa}, {0x4, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x0, 0xfffd, 0x0, 0x4, 0x800, 0x3, 0x81]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xc, 0x3, 0x16, 0x12, 0x30, 0x36, 0x1b, 0x60, 0x9, 0x48, 0x12, 0x2, 0x30, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x4, 0x0, 0x6, 0xecc, 0xada, 0x7fff]}}]}]}]}, 0x3fc}, 0x1, 0x0, 0x0, 0x20004811}, 0x0) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r11, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)={0xa4, r15, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x6}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7ff}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x2a, 0x2a, [@mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ibss_ssid}, @peer_mgmt={0x75, 0x14, {0x1, 0x3, @void, @void, @val="4b7b81a75d628681556ec81b273d4e34"}}]}, @NL80211_ATTR_IE={0x39, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_b}}, @dsss={0x3, 0x1, 0xb3}, @ssid={0x0, 0x1c, @random="323e07870ea9e73dfe616d27cccaef93ec2f674397fe42fc908a5075"}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x801) (async) bind$ax25(r10, &(0x7f00000004c0)={{0x3, @null}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast]}, 0x48) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="00002abd7000ffdbdf253b000000f3468bc1", @ANYRES32=r9, @ANYBLOB="0c009900050000002c0000004d003300e034810008021100000108021100000150505050505073ca0f0138200107b081055284010972060303030303032d1a01000100000000000000804000060019000000000426000000050000000400870008005700e51000000400870004008e00"], 0x8c}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) (async) socket$inet6(0xa, 0x800, 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='workqueue_queue_work\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffa}, 0x18) (async) setsockopt$MRT_DEL_VIF(r11, 0x0, 0xcb, &(0x7f0000000840)={0xffffffffffffffff, 0x8, 0x4, 0x1ff, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x1b}, @multicast1}, 0x10) 17.696404004s ago: executing program 1 (id=501): bpf$MAP_GET_NEXT_KEY(0x4, 0xfffffffffffffffc, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0xfffffffffffffffc, 0x0) (async) 17.607217543s ago: executing program 1 (id=502): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="a000000000000000"], 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000140)="8f69b66f", 0x20, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket(0x1, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000904000000000000000000000105000000080000000000000000000003000000000200000002000000000000000000000000000003"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$rds(0x15, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0xa, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x25, 0x0, 0x0, 0xfffff034}, {0x45}, {0x6}]}, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c00000100003d3cea67000036d4ddc16cb89746b21d8f93e3f6932c0861372f4c9b2c8066fdb325d7f43b65f5b63ac90feb7e7353a354f22a2c52536306cb7a2708364cd6deca4ca46ea4d2e3bd1b8cf2c7b3a908371877853502425e16500b8c9fe2d36f0f1793f8cd02c2254fdbf4c28f85b76f8563152887924ea22db1ef76ee50aee4cf171bce5d4a9123bcf31e8a27000000052d069bfa83f5349b53ab4fa6693203de08c5a753018fda62ddc351d1ba0d7f6da5f8a3c4f6587cddc3c9d394127cf0bf49d7ead4b3937ae46917f29181e6ac467f2c84ac579fddfafce56d842e31f966513c11bd9753cdecaa9251856a6f8451708da922ee1b7c35c70490114795ef8d2d298e4657defba862084f80afe768224723c9ff23e2225e51c9d8b2a4841f4504a769c071500d57a518bd7b8fcc18d658c1363886f35dd26c8a29f83e44a45affbed4e3865e8d9152273960ddb6a871da2aa11a48d137c601a45815d079bae6e4929c1d072a537ffdddffb9"], 0x1c}], 0x1, 0x0, 0x0, 0x4}, 0x40084) 17.51300515s ago: executing program 0 (id=503): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r0, &(0x7f0000003500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=""/17, 0x11}, 0xdc2}], 0x1, 0x22, 0x0) (async) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) (async) r2 = socket(0x1d, 0x2, 0x6) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f00000002c0)=0x8001, 0x4) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4048040}, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000080)) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0xf3}}, @qdisc_kind_options=@q_drr={0x8}]}, 0x34}}, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) (async) connect$pppoe(r9, &(0x7f00000000c0)={0x18, 0x0, {0x3, @random}}, 0x1e) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffffba) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x40600) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 17.301135657s ago: executing program 0 (id=504): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa2}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffe}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b00), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x6819130f3aa8b09c}, 0x40000) read(r0, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=ANY=[@ANYBLOB="1000000004000000040000000600000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000005c31815ce8d1cf4700"/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r3, &(0x7f00000005c0), &(0x7f00000003c0)=""/79}, 0x20) pwrite64(r0, &(0x7f00000001c0)="9234", 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xd, &(0x7f0000000d80)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x6f}], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4a, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000500)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 17.229108064s ago: executing program 3 (id=505): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0) close(0x3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}}, 0x0) 17.170245783s ago: executing program 4 (id=506): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r3}, 0xc) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 17.121057396s ago: executing program 1 (id=507): r0 = socket(0x1d, 0x2, 0x6) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async, rerun: 32) r2 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r3) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) (async) listen(r1, 0x3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="000229bd7000360000000800030000000000", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x62) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fedbdfd0198b9a9606d625810080000000000300000000"], 0x1c}}, 0x884) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async) connect$inet(r9, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async, rerun: 64) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) (async) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) 17.003662729s ago: executing program 1 (id=508): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in6=@local, 0x0, 0x0, 0x4e20, 0x2000, 0x2}, {0x0, 0x4, 0xa, 0xfffffffffffffffc, 0x0, 0x8000000000000001, 0xffffffffffffffff}, {0x1ff, 0xffffffffe, 0x4053e5, 0x4020}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x1, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3505, 0x1, 0x0, 0x0, 0x6, 0xfffffffb, 0x6}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @empty}}, @NHA_OIF={0x8, 0x5, r1}]}, 0x38}}, 0x90) 16.942977084s ago: executing program 0 (id=509): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000400)=[@in6={0xa, 0x4e23, 0x401, @empty}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x1, @mcast2, 0x7}, @in6={0xa, 0x4e20, 0xca3d, @mcast2, 0xb}], 0x74) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, 0x0, 0x8000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=r4], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000edffffb602000014000000b7030010000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000c00000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r5, 0x20}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x5, 0x7, 0x3, 0xfffffffffffffffc, 0x0, 0x8, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x5, 0x0, 0x80000, 0x407, 0x0, 0xfffffffffffffff9, 0x10000000ebb8, 0xffffffff}, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r7, &(0x7f0000000080)={0xa002a008}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x163301, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r9) 16.888999241s ago: executing program 4 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], 0x0, [0x9, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x4]}}]}}]}, 0x94}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5b979e01d2038d84"}}, 0x48}}, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="05000000030000004d6d000000000000", @ANYRES64=0x0, @ANYRES64=r5], 0x48}}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) r8 = socket(0x1, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r8}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0018000000001811000000000000000000", @ANYRES32=r10, @ANYRESDEC=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x15, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket(0x2a, 0x2, 0x0) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xfffb, 0x4}, {}, {0x1c, 0x19}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xfff2}}]}}]}, 0x48}}, 0x24000000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r12, r7, 0x0, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2, &(0x7f0000000040)=@raw=[@generic={0x7, 0xd, 0x6, 0x5d9, 0x200}, @alu={0x4, 0x1, 0x8, 0x5, 0x0, 0x20}], &(0x7f0000000080)='GPL\x00', 0xa70, 0xcb, &(0x7f0000000400)=""/203, 0x40f00, 0x9, '\x00', r3, 0x25, r7, 0x8, &(0x7f00000001c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x10, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000300)=[r0, r0, r1, r1, r1, r9, r0, r1, r10], &(0x7f0000000500)=[{0x4, 0x5, 0x7, 0xc}, {0x5, 0x1, 0x2, 0x7}, {0x0, 0x4, 0xd, 0x3}, {0x0, 0x2, 0xb, 0xf}, {0x4, 0x2, 0x0, 0x4}, {0x0, 0x3, 0x5, 0x5}], 0x10, 0xe3, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r13}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000000), &(0x7f0000000380)=r13}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x10}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 16.717361952s ago: executing program 1 (id=511): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf4, 0x2a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000280)=@req={0x0, 0x6, 0xfffffffa, 0x5}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r8, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 16.690073911s ago: executing program 4 (id=512): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socket(0x11, 0x800000003, 0x2) unshare(0x62040200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0x2, 0x2) write$tun(r1, 0x0, 0x3e) unshare(0x20000400) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0xb) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000380)=0x1, 0x37) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x14, 0xa01, 0xfffffffe, 0x25dfdbff, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800c054}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x6, [@ptr={0xb, 0x0, 0x0, 0x2, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x6}}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x31, 0x0, 0x12, 0x2}, @fwd={0xb}]}, {0x0, [0x61, 0x30, 0x2e, 0x30]}}, &(0x7f0000000780)=""/154, 0x5e, 0x9a, 0x1, 0x4, 0x10000, @value}, 0x28) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000500)={r4, 0x8, 0x7, 0xfffffffffffffff7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0xe, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fffffff}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x41, 0xe4, &(0x7f00000003c0)=""/228, 0x40f00, 0x44, '\x00', r5, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0xd, 0x8001, 0xba1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000600)=[r7, 0x1], &(0x7f0000000840)=[{0x1, 0x2, 0xe, 0xc}], 0x10, 0x4, @void, @value}, 0x94) r8 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r8, &(0x7f0000003700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) 16.528973457s ago: executing program 2 (id=513): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001100)={r0}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000001080)='_', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000227bd7000ffdbdf258800000008000300", @ANYRES32=r5, @ANYBLOB="0c0099008ebc3c33f2c2001d0000001800330084000200ffffffffffff080211005e44bcaa419d9ceaecd9841e5d88e292641e5902ce4541472fdf6d8a0359dc7b4fdb786a77dcdec0669f42028ffd2c26b6d47ce457f269ebc3241113164d99ab1bf79d50d99cd599c14a81280fa5bf7654306286621cc3835a71aa23b5de08d5547925d904a15a2eeabdd586e7f9c15fba"], 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYBLOB="a607f5ff5c6caff882ca663055ff145b93ca3a2b10dce6de0694910bcae3da5436be4fed1d79b069e5cbca77713edfab33fda266574bf3466ea3d055282b78050aac46eb218949e887c398952865ce21a46f4657c38d0eecf45ed8996c5c7b18e857b3f2cecd57e339e83e6a501df525e01983ac91ffcec5dae2c3a7ea5c91fe8c970ba876461aeb0fb06b21aa7702df9dfa0d821948000fd2684a3ecb28e17cee54ae692cc5f647a96c94f1ca6ddec77477cd848436a7778d922191b0113e5ee345d12756cec6e9", @ANYBLOB="0200050050600000"], 0x24}}, 0x80) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, r4, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x20}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000014) syz_genetlink_get_family_id$SEG6(&(0x7f0000001200), r0) socket$nl_generic(0x10, 0x3, 0x10) 15.523643998s ago: executing program 4 (id=514): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000300), &(0x7f0000000380)=r1}, 0x20) sendmsg$key(r2, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @multicast1}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x50}, 0x1, 0x7}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='wi', 0x2}], 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0xa, 0x1, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r7}) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r8}) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8936, &(0x7f0000000000)={r7}) close(r5) splice(r4, 0x0, r5, 0x0, 0x10500, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@local, @multicast1, 0x12, 0x13}}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000010400004000fe26c857554dbb11", @ANYRESDEC=r9, @ANYRESDEC=r9], 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x4040000) 15.444979127s ago: executing program 0 (id=515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000080)=0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010f00000000000000000100000004000180100002800c00018007"], 0x28}}, 0x4004000) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 15.308225932s ago: executing program 4 (id=516): clock_gettime(0x9, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[], 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$unix(r1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x5452, 0x0) recvmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendfile(r1, r1, &(0x7f0000000680)=0xffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000007001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000001080017"], 0x44}}, 0x0) 2.116852553s ago: executing program 32 (id=505): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0) close(0x3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) shutdown(r2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r4, 0x1}, 0x1c}}, 0x0) 1.609102112s ago: executing program 33 (id=511): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf4, 0x2a}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000280)=@req={0x0, 0x6, 0xfffffffa, 0x5}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(r8, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.079257993s ago: executing program 34 (id=513): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001100)={r0}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000001080)='_', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001140)={&(0x7f0000001240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000227bd7000ffdbdf258800000008000300", @ANYRES32=r5, @ANYBLOB="0c0099008ebc3c33f2c2001d0000001800330084000200ffffffffffff080211005e44bcaa419d9ceaecd9841e5d88e292641e5902ce4541472fdf6d8a0359dc7b4fdb786a77dcdec0669f42028ffd2c26b6d47ce457f269ebc3241113164d99ab1bf79d50d99cd599c14a81280fa5bf7654306286621cc3835a71aa23b5de08d5547925d904a15a2eeabdd586e7f9c15fba"], 0x40}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000000600000008000300", @ANYBLOB="a607f5ff5c6caff882ca663055ff145b93ca3a2b10dce6de0694910bcae3da5436be4fed1d79b069e5cbca77713edfab33fda266574bf3466ea3d055282b78050aac46eb218949e887c398952865ce21a46f4657c38d0eecf45ed8996c5c7b18e857b3f2cecd57e339e83e6a501df525e01983ac91ffcec5dae2c3a7ea5c91fe8c970ba876461aeb0fb06b21aa7702df9dfa0d821948000fd2684a3ecb28e17cee54ae692cc5f647a96c94f1ca6ddec77477cd848436a7778d922191b0113e5ee345d12756cec6e9", @ANYBLOB="0200050050600000"], 0x24}}, 0x80) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, r4, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x20}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20000014) syz_genetlink_get_family_id$SEG6(&(0x7f0000001200), r0) socket$nl_generic(0x10, 0x3, 0x10) 85.588921ms ago: executing program 35 (id=515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PPPIOCBRIDGECHAN(r1, 0x40047435, &(0x7f0000000080)=0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010f00000000000000000100000004000180100002800c00018007"], 0x28}}, 0x4004000) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3], 0x4c}}, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 0s ago: executing program 36 (id=516): clock_gettime(0x9, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[], 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$unix(r1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x4c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x5452, 0x0) recvmsg(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1}, 0x0) sendfile(r1, r1, &(0x7f0000000680)=0xffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000007001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000001080017"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. [ 69.307927][ T5820] cgroup: Unknown subsys name 'net' [ 69.478314][ T5820] cgroup: Unknown subsys name 'cpuset' [ 69.487080][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.998315][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.947309][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.953702][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.159449][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.168364][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.176107][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.184446][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.192019][ T5832] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.200241][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.308144][ T5832] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.316627][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.324237][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.332787][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.340549][ T5832] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.347957][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.414615][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.423827][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.431475][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.439750][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.448238][ T5832] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.455587][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.503127][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.512415][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.520151][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.531944][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.539921][ T5832] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.547532][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.570172][ T5147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.584730][ T5147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.592812][ T5147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.604632][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.613821][ T5147] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.621355][ T5147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.777333][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 73.836150][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 73.968698][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.976020][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.983412][ T5834] bridge_slave_0: entered allmulticast mode [ 73.990546][ T5834] bridge_slave_0: entered promiscuous mode [ 74.038767][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.046090][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.053339][ T5834] bridge_slave_1: entered allmulticast mode [ 74.060497][ T5834] bridge_slave_1: entered promiscuous mode [ 74.088763][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.096350][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.103506][ T5830] bridge_slave_0: entered allmulticast mode [ 74.110637][ T5830] bridge_slave_0: entered promiscuous mode [ 74.120646][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.128099][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.135290][ T5830] bridge_slave_1: entered allmulticast mode [ 74.141940][ T5830] bridge_slave_1: entered promiscuous mode [ 74.171128][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.182626][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 74.221839][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.246602][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.322415][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.345023][ T5834] team0: Port device team_slave_0 added [ 74.374080][ T5834] team0: Port device team_slave_1 added [ 74.388674][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 74.436318][ T5830] team0: Port device team_slave_0 added [ 74.461607][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 74.491563][ T5830] team0: Port device team_slave_1 added [ 74.502043][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.509201][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.535260][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.593487][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.603443][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.629678][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.655365][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.662462][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.670086][ T5836] bridge_slave_0: entered allmulticast mode [ 74.676927][ T5836] bridge_slave_0: entered promiscuous mode [ 74.688292][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.695274][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.721311][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.745322][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.752951][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.760326][ T5836] bridge_slave_1: entered allmulticast mode [ 74.767430][ T5836] bridge_slave_1: entered promiscuous mode [ 74.774505][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.781466][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.807461][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.873628][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.917049][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.924193][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.931852][ T5844] bridge_slave_0: entered allmulticast mode [ 74.940974][ T5844] bridge_slave_0: entered promiscuous mode [ 74.948726][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.955994][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.963161][ T5844] bridge_slave_1: entered allmulticast mode [ 74.970115][ T5844] bridge_slave_1: entered promiscuous mode [ 74.978197][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.999730][ T5834] hsr_slave_0: entered promiscuous mode [ 75.010432][ T5834] hsr_slave_1: entered promiscuous mode [ 75.071087][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.078472][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.086541][ T5839] bridge_slave_0: entered allmulticast mode [ 75.093224][ T5839] bridge_slave_0: entered promiscuous mode [ 75.112923][ T5830] hsr_slave_0: entered promiscuous mode [ 75.119308][ T5830] hsr_slave_1: entered promiscuous mode [ 75.125619][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.133434][ T5830] Cannot create hsr debugfs directory [ 75.151144][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.163432][ T5836] team0: Port device team_slave_0 added [ 75.177741][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.185243][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.192411][ T5839] bridge_slave_1: entered allmulticast mode [ 75.199466][ T5839] bridge_slave_1: entered promiscuous mode [ 75.226832][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.237556][ T5836] team0: Port device team_slave_1 added [ 75.302304][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.314342][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.315461][ T5832] Bluetooth: hci0: command tx timeout [ 75.344038][ T5844] team0: Port device team_slave_0 added [ 75.377693][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.384909][ T5832] Bluetooth: hci1: command tx timeout [ 75.384925][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.384952][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.430814][ T5844] team0: Port device team_slave_1 added [ 75.459126][ T5839] team0: Port device team_slave_0 added [ 75.467820][ T5839] team0: Port device team_slave_1 added [ 75.475969][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.482917][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.512688][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.537037][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.544020][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.570081][ T5832] Bluetooth: hci2: command tx timeout [ 75.575587][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.611207][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.618324][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.644811][ T5832] Bluetooth: hci3: command tx timeout [ 75.650766][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.669075][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.676137][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.702211][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.719196][ T5832] Bluetooth: hci4: command tx timeout [ 75.750290][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.757411][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.783640][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.812434][ T5836] hsr_slave_0: entered promiscuous mode [ 75.819104][ T5836] hsr_slave_1: entered promiscuous mode [ 75.826027][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.833615][ T5836] Cannot create hsr debugfs directory [ 75.889321][ T5844] hsr_slave_0: entered promiscuous mode [ 75.895823][ T5844] hsr_slave_1: entered promiscuous mode [ 75.901782][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.909408][ T5844] Cannot create hsr debugfs directory [ 76.004247][ T5839] hsr_slave_0: entered promiscuous mode [ 76.010894][ T5839] hsr_slave_1: entered promiscuous mode [ 76.017592][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.025340][ T5839] Cannot create hsr debugfs directory [ 76.171057][ T5834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.185920][ T5834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.217382][ T5834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.253637][ T5834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.301669][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.346134][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.376384][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.420407][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.429823][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.451530][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.462668][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.486732][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.526968][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.537561][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.573284][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.586249][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.639741][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.656721][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.670189][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.702798][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.753152][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.783545][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.819649][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.856996][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.864429][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.889281][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.916752][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.925335][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.932433][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.967459][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.974607][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.010619][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.017783][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.062586][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.076132][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.140381][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.147557][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.159847][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.167086][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.187338][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.232883][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.254249][ T2980] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.261464][ T2980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.313252][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.320435][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.369299][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.399514][ T5832] Bluetooth: hci0: command tx timeout [ 77.412935][ T5830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.424339][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.440719][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.447872][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.465667][ T5832] Bluetooth: hci1: command tx timeout [ 77.522624][ T5839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 77.533713][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.556264][ T2980] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.563432][ T2980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.624750][ T5832] Bluetooth: hci2: command tx timeout [ 77.678698][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.705205][ T5832] Bluetooth: hci3: command tx timeout [ 77.784595][ T5832] Bluetooth: hci4: command tx timeout [ 77.812110][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.861513][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.891357][ T5836] veth0_vlan: entered promiscuous mode [ 77.916645][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.970838][ T5836] veth1_vlan: entered promiscuous mode [ 77.996523][ T5834] veth0_vlan: entered promiscuous mode [ 78.028495][ T5839] veth0_vlan: entered promiscuous mode [ 78.052476][ T5834] veth1_vlan: entered promiscuous mode [ 78.085184][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.093254][ T5830] veth0_vlan: entered promiscuous mode [ 78.110965][ T5839] veth1_vlan: entered promiscuous mode [ 78.145415][ T5830] veth1_vlan: entered promiscuous mode [ 78.157718][ T5836] veth0_macvtap: entered promiscuous mode [ 78.167965][ T5836] veth1_macvtap: entered promiscuous mode [ 78.207933][ T5839] veth0_macvtap: entered promiscuous mode [ 78.223570][ T5834] veth0_macvtap: entered promiscuous mode [ 78.253387][ T5839] veth1_macvtap: entered promiscuous mode [ 78.272097][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.299959][ T5834] veth1_macvtap: entered promiscuous mode [ 78.328202][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.341847][ T5830] veth0_macvtap: entered promiscuous mode [ 78.357430][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.368427][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.379073][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.392363][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.417207][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.431419][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.443158][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.456391][ T5830] veth1_macvtap: entered promiscuous mode [ 78.465989][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.477146][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.487878][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.498494][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.510261][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.519262][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.530211][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.541000][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.551280][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.560204][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.569446][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.578688][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.600225][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.611684][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.623480][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.635067][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.646448][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.690687][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.701789][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.712128][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.722418][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.748256][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.761211][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.771564][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.782208][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.792119][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.802930][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.814263][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.827125][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.838085][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.848824][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.859650][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.869876][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.881161][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.892107][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.922709][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.935752][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.945003][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.954137][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.035068][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.051573][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.056991][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.076943][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.087441][ T5844] veth0_vlan: entered promiscuous mode [ 79.133773][ T5844] veth1_vlan: entered promiscuous mode [ 79.173903][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.188860][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.202900][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.219867][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.253989][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.263703][ T5844] veth0_macvtap: entered promiscuous mode [ 79.270802][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.286477][ T5844] veth1_macvtap: entered promiscuous mode [ 79.367215][ T2980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.380727][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.398130][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.402853][ T2980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.419683][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.430543][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.441781][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.452551][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.462236][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.477445][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.489457][ T5832] Bluetooth: hci0: command tx timeout [ 79.496347][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.507783][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.518407][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.527285][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.544609][ T5832] Bluetooth: hci1: command tx timeout [ 79.558723][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.569446][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.579621][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.591690][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.601768][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.612396][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.622406][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.633296][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.644251][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.705674][ T5832] Bluetooth: hci2: command tx timeout [ 79.712586][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.722471][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.731419][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.744869][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.761195][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.782526][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.795118][ T5832] Bluetooth: hci3: command tx timeout [ 79.826312][ T5913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 79.864645][ T5832] Bluetooth: hci4: command tx timeout [ 80.066304][ T5919] Zero length message leads to an empty skb [ 80.181516][ T5922] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.259724][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.291071][ T2950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.332213][ T2950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.399216][ T5932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.422625][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.453225][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.023918][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 81.092972][ T5949] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.236621][ T5949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 81.296949][ T5949] bond0: (slave bond1): Enslaving as an active interface with an up link [ 81.354304][ T5940] wg1: entered promiscuous mode [ 81.360024][ T5940] wg1: entered allmulticast mode [ 81.404700][ T5948] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5'. [ 81.544826][ T5832] Bluetooth: hci0: command tx timeout [ 81.625096][ T5832] Bluetooth: hci1: command tx timeout [ 81.654086][ T5961] Bluetooth: MGMT ver 1.23 [ 81.663780][ T5961] netlink: 'syz.4.15': attribute type 10 has an invalid length. [ 81.745419][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 81.769496][ T5963] Cannot find add_set index 0 as target [ 81.795340][ T5832] Bluetooth: hci2: command tx timeout [ 81.865063][ T5832] Bluetooth: hci3: command tx timeout [ 81.944772][ T5832] Bluetooth: hci4: command tx timeout [ 82.120875][ T5968] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16'. [ 83.820566][ T6018] rdma_op ffff888062ec61f0 conn xmit_rdma 0000000000000000 [ 84.183140][ T6020] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20001 [ 84.192058][ T5878] IPVS: starting estimator thread 0... [ 84.348034][ T6024] IPVS: using max 19 ests per chain, 45600 per kthread [ 84.370453][ T6028] tipc: Enabling not permitted [ 84.380560][ T6028] tipc: Enabling of bearer rejected, failed to enable media [ 84.401573][ T6030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.30'. [ 84.540690][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 84.573599][ T6033] Cannot find add_set index 0 as target [ 84.894576][ T6043] syz.0.33 uses obsolete (PF_INET,SOCK_PACKET) [ 85.032828][ T6048] netlink: 60 bytes leftover after parsing attributes in process `syz.3.34'. [ 85.095322][ T6048] Bluetooth: MGMT ver 1.23 [ 85.164794][ T6045] netlink: 60 bytes leftover after parsing attributes in process `syz.3.34'. [ 85.491581][ T6064] netlink: 168 bytes leftover after parsing attributes in process `syz.1.37'. [ 85.560853][ T6063] netlink: 36 bytes leftover after parsing attributes in process `syz.3.39'. [ 85.686749][ T6072] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 85.948256][ T6086] netlink: 20 bytes leftover after parsing attributes in process `syz.4.43'. [ 86.611168][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'. [ 86.857629][ T6115] sctp: [Deprecated]: syz.4.52 (pid 6115) Use of int in max_burst socket option deprecated. [ 86.857629][ T6115] Use struct sctp_assoc_value instead [ 86.911330][ T6115] sctp: [Deprecated]: syz.4.52 (pid 6115) Use of int in max_burst socket option deprecated. [ 86.911330][ T6115] Use struct sctp_assoc_value instead [ 87.126894][ T6122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.137492][ T6122] team0: Port device bond0 added [ 87.154691][ T5832] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 87.163343][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.189854][ T6122] bridge0: port 3(team0) entered blocking state [ 87.208912][ T6122] bridge0: port 3(team0) entered disabled state [ 87.228831][ T6122] team0: entered allmulticast mode [ 87.234043][ T6122] team_slave_0: entered allmulticast mode [ 87.287970][ T6122] team_slave_1: entered allmulticast mode [ 87.347285][ T6133] netlink: 'syz.4.55': attribute type 1 has an invalid length. [ 87.356052][ T6122] bond0: entered allmulticast mode [ 87.361223][ T6122] bond_slave_0: entered allmulticast mode [ 87.391996][ T6122] bond_slave_1: entered allmulticast mode [ 87.414628][ T6122] bond1: entered allmulticast mode [ 87.447666][ T6122] team0: entered promiscuous mode [ 87.452776][ T6122] team_slave_0: entered promiscuous mode [ 87.510718][ T6122] team_slave_1: entered promiscuous mode [ 87.545696][ T6122] bond0: entered promiscuous mode [ 87.564737][ T6122] bond_slave_0: entered promiscuous mode [ 87.588409][ T6122] bond_slave_1: entered promiscuous mode [ 87.601861][ T6122] bond1: entered promiscuous mode [ 87.622443][ T6122] bridge0: port 3(team0) entered blocking state [ 87.629255][ T6122] bridge0: port 3(team0) entered forwarding state [ 87.663071][ T6131] bridge_slave_0: left allmulticast mode [ 87.669232][ T6131] bridge_slave_0: left promiscuous mode [ 87.688403][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.722030][ T6131] bridge_slave_1: left allmulticast mode [ 87.733626][ T6131] bridge_slave_1: left promiscuous mode [ 87.742345][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.764673][ T6131] bond0: (slave bond_slave_0): Releasing backup interface [ 87.815749][ T6131] bond0: (slave bond_slave_1): Releasing backup interface [ 87.868035][ T6131] team0: Failed to send options change via netlink (err -105) [ 87.890702][ T6131] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 87.924966][ T6131] team0: Port device team_slave_0 removed [ 87.962604][ T6131] team0: Failed to send options change via netlink (err -105) [ 87.983078][ T6131] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 88.011403][ T6131] team0: Port device team_slave_1 removed [ 88.039773][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.052907][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.066964][ T6131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.090978][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.118715][ T6131] syz.3.51 (6131) used greatest stack depth: 18640 bytes left [ 88.158260][ T6134] team0: Mode changed to "loadbalance" [ 88.392503][ T6147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.57'. [ 89.263457][ T6179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.279104][ T6179] team0: Port device bond0 added [ 89.289413][ T6185] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 89.347018][ T6184] bridge0: port 3(team0) entered blocking state [ 89.357668][ T6184] bridge0: port 3(team0) entered disabled state [ 89.364253][ T6184] team0: entered allmulticast mode [ 89.374308][ T6184] team_slave_0: entered allmulticast mode [ 89.380389][ T6184] team_slave_1: entered allmulticast mode [ 89.386580][ T6184] bond0: entered allmulticast mode [ 89.391985][ T6184] bond_slave_0: entered allmulticast mode [ 89.398019][ T6184] bond_slave_1: entered allmulticast mode [ 89.406963][ T6184] team0: entered promiscuous mode [ 89.412219][ T6184] team_slave_0: entered promiscuous mode [ 89.423207][ T6184] team_slave_1: entered promiscuous mode [ 89.429228][ T6184] bond0: entered promiscuous mode [ 89.434618][ T6184] bond_slave_0: entered promiscuous mode [ 89.440553][ T6184] bond_slave_1: entered promiscuous mode [ 89.448776][ T6184] bridge0: port 3(team0) entered blocking state [ 89.455194][ T6184] bridge0: port 3(team0) entered forwarding state [ 89.688447][ T6196] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.801237][ T6196] warning: `syz.0.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.851681][ T9] IPVS: starting estimator thread 0... [ 90.006162][ T6203] IPVS: using max 22 ests per chain, 52800 per kthread [ 90.128724][ T6207] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20003 [ 90.377302][ T6214] netlink: 132 bytes leftover after parsing attributes in process `syz.2.76'. [ 90.415895][ T6214] netlink: 132 bytes leftover after parsing attributes in process `syz.2.76'. [ 90.450999][ T6214] netlink: 132 bytes leftover after parsing attributes in process `syz.2.76'. [ 91.418611][ T6257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.455725][ T6257] team0: Port device bond0 added [ 91.484638][ T6260] bridge0: port 1(team0) entered blocking state [ 91.491118][ T6260] bridge0: port 1(team0) entered disabled state [ 91.565961][ T6260] team0: entered allmulticast mode [ 91.571211][ T6260] bond0: entered allmulticast mode [ 91.623537][ T6263] sctp: [Deprecated]: syz.1.88 (pid 6263) Use of struct sctp_assoc_value in delayed_ack socket option. [ 91.623537][ T6263] Use struct sctp_sack_info instead [ 91.675986][ T6260] team0: entered promiscuous mode [ 91.681790][ T6260] bond0: entered promiscuous mode [ 92.035777][ T6274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 92.407554][ T6294] bond0: left promiscuous mode [ 92.412512][ T6294] bond_slave_0: left promiscuous mode [ 92.438326][ T978] cfg80211: failed to load regulatory.db [ 92.439596][ T6294] bond_slave_1: left promiscuous mode [ 92.452464][ T6294] bond1: left promiscuous mode [ 92.457703][ T6294] bond0: left allmulticast mode [ 92.463480][ T6294] bond_slave_0: left allmulticast mode [ 92.470669][ T6294] bond_slave_1: left allmulticast mode [ 92.477508][ T6294] bond1: left allmulticast mode [ 92.500823][ T6294] team0: Port device bond0 removed [ 92.506832][ T6294] team0: left allmulticast mode [ 92.511806][ T6294] team_slave_0: left allmulticast mode [ 92.517398][ T6294] team_slave_1: left allmulticast mode [ 92.523322][ T6294] team0: left promiscuous mode [ 92.528357][ T6294] team_slave_0: left promiscuous mode [ 92.534044][ T6294] team_slave_1: left promiscuous mode [ 92.540148][ T6294] bridge0: port 3(team0) entered disabled state [ 92.551311][ T6294] bridge_slave_0: left allmulticast mode [ 92.557541][ T6294] bridge_slave_0: left promiscuous mode [ 92.563484][ T6294] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.573868][ T6294] bridge_slave_1: left allmulticast mode [ 92.603959][ T6294] bridge_slave_1: left promiscuous mode [ 92.610584][ T6294] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.619077][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 92.640611][ T6294] bond0: (slave bond_slave_0): Releasing backup interface [ 92.651435][ T6294] bond0: (slave bond_slave_1): Releasing backup interface [ 92.665839][ T6294] team0: Port device team_slave_0 removed [ 92.675752][ T6294] team0: Port device team_slave_1 removed [ 92.682020][ T6294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.691183][ T6294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.700730][ T6294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.708986][ T6294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.727520][ T6294] bond0: (slave bond1): Releasing backup interface [ 92.964075][ T6312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.100'. [ 93.605765][ T6340] netlink: 80 bytes leftover after parsing attributes in process `syz.0.104'. [ 94.231407][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'. [ 94.495277][ T6391] netlink: 36 bytes leftover after parsing attributes in process `syz.4.116'. [ 94.685431][ T6398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 95.010926][ T6420] netlink: 'syz.1.124': attribute type 4 has an invalid length. [ 95.027739][ T6420] netlink: 'syz.1.124': attribute type 4 has an invalid length. [ 95.045630][ T6420] netlink: 'syz.1.124': attribute type 4 has an invalid length. [ 95.099044][ T6420] netlink: 'syz.1.124': attribute type 4 has an invalid length. [ 95.133538][ T6420] netlink: 'syz.1.124': attribute type 4 has an invalid length. [ 95.181668][ T6420] netlink: 'syz.1.124': attribute type 4 has an invalid length. [ 95.215563][ T6420] netlink: 'syz.1.124': attribute type 4 has an invalid length. [ 95.254857][ T6420] netlink: 'syz.1.124': attribute type 4 has an invalid length. [ 95.300784][ T6430] ip6gre1: entered allmulticast mode [ 95.400807][ T6420] netlink: 'syz.1.124': attribute type 4 has an invalid length. [ 95.415012][ T6420] netlink: 'syz.1.124': attribute type 4 has an invalid length. [ 95.638621][ T6445] __nla_validate_parse: 2 callbacks suppressed [ 95.638640][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 95.648732][ T6448] netlink: 312 bytes leftover after parsing attributes in process `syz.2.131'. [ 95.717600][ T6454] syz_tun: entered allmulticast mode [ 95.830383][ T6453] syz_tun: left allmulticast mode [ 96.383457][ T6484] netlink: 24 bytes leftover after parsing attributes in process `syz.2.138'. [ 96.395518][ T6484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.138'. [ 96.708459][ T6493] batadv_slave_1: entered promiscuous mode [ 96.982744][ T6498] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 97.032196][ T6498] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 97.045668][ T6498] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.254718][ T6527] netlink: 140 bytes leftover after parsing attributes in process `syz.4.146'. [ 97.333912][ T6530] bridge0: port 3(vlan2) entered blocking state [ 97.354729][ T6530] bridge0: port 3(vlan2) entered disabled state [ 97.374691][ T6530] vlan2: entered allmulticast mode [ 97.394609][ T6530] gretap0: entered allmulticast mode [ 97.428745][ T6530] vlan2: entered promiscuous mode [ 97.452687][ T6530] gretap0: entered promiscuous mode [ 97.455180][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.150'. [ 97.467258][ T6530] bridge0: port 3(vlan2) entered blocking state [ 97.473370][ T6538] netlink: 24 bytes leftover after parsing attributes in process `syz.2.150'. [ 97.473835][ T6530] bridge0: port 3(vlan2) entered forwarding state [ 97.512702][ T6489] batadv_slave_1: left promiscuous mode [ 97.598075][ T6539] pim6reg: entered allmulticast mode [ 97.739788][ T6546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.152'. [ 97.776702][ T6535] pim6reg: left allmulticast mode [ 97.819239][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.152'. [ 97.839408][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 98.978999][ T6597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.567578][ T6617] vlan2: entered promiscuous mode [ 99.572689][ T6617] bridge0: entered promiscuous mode [ 99.607571][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.616004][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.689018][ T6617] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.697140][ T6617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.704694][ T6617] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.711893][ T6617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.811947][ T6617] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 99.875569][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.942293][ T6626] bridge_slave_1 (unregistering): left allmulticast mode [ 99.950319][ T6626] bridge_slave_1 (unregistering): left promiscuous mode [ 99.976937][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.942905][ T6678] __nla_validate_parse: 8 callbacks suppressed [ 100.942926][ T6678] netlink: 810 bytes leftover after parsing attributes in process `syz.4.186'. [ 101.011727][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'. [ 101.534027][ T6713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.187'. [ 101.675975][ T6719] validate_nla: 27 callbacks suppressed [ 101.675996][ T6719] netlink: 'syz.0.194': attribute type 4 has an invalid length. [ 101.694317][ T6720] xt_TCPMSS: Only works on TCP SYN packets [ 101.709824][ T6719] netlink: 'syz.0.194': attribute type 2 has an invalid length. [ 101.866704][ T6728] Cannot find add_set index 0 as target [ 101.898913][ T6732] vlan3: entered promiscuous mode [ 101.903746][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 101.909848][ T6732] vlan3: entered allmulticast mode [ 101.952900][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.017029][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.346247][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.199'. [ 102.357065][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'. [ 102.383346][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'. [ 102.430643][ T6754] syzkaller1: tun_chr_ioctl cmd 21731 [ 102.922051][ T6778] netlink: 136 bytes leftover after parsing attributes in process `syz.0.206'. [ 102.946510][ T6780] SET target dimension over the limit! [ 102.963262][ T6778] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 103.461335][ T6797] x_tables: unsorted underflow at hook 3 [ 103.987369][ T6811] tipc: Started in network mode [ 103.992312][ T6811] tipc: Node identity e0000001, cluster identity 4711 [ 104.009961][ T6811] tipc: Enabling of bearer rejected, failed to enable media [ 104.141875][ T6816] bond0: option all_slaves_active: invalid value (5) [ 104.217216][ T6818] netlink: 'syz.3.220': attribute type 1 has an invalid length. [ 104.339191][ T6821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 104.812535][ T6811] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 104.894529][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 104.949807][ T6832] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.028602][ T6844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 105.219607][ T6851] xt_l2tp: v2 doesn't support IP mode [ 105.353965][ T6832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.670653][ T6832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.936064][ T6832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.105182][ T5832] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.270731][ T6832] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.348605][ T6832] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.399018][ T6832] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.577780][ T6832] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.730836][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 106.837253][ T6832] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.950734][ T6914] netlink: 56 bytes leftover after parsing attributes in process `syz.1.244'. [ 106.966762][ T6832] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.996986][ T6915] netlink: 'syz.2.245': attribute type 4 has an invalid length. [ 107.053068][ T6917] netlink: 'syz.2.245': attribute type 4 has an invalid length. [ 107.932919][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.4.251'. [ 108.028798][ T6939] netlink: 'syz.0.252': attribute type 10 has an invalid length. [ 108.053921][ T6939] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 108.366127][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.257'. [ 108.438742][ T6955] syzkaller1: tun_chr_ioctl cmd 21731 [ 108.538005][ T6960] netlink: 16 bytes leftover after parsing attributes in process `syz.4.260'. [ 108.547781][ T6960] netlink: 'syz.4.260': attribute type 9 has an invalid length. [ 108.567152][ T6960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.260'. [ 108.599965][ T6960] netlink: 'syz.4.260': attribute type 26 has an invalid length. [ 108.940568][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 109.110991][ T6987] sctp: [Deprecated]: syz.4.269 (pid 6987) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.110991][ T6987] Use struct sctp_sack_info instead [ 109.666417][ T6999] netlink: 72 bytes leftover after parsing attributes in process `syz.2.271'. [ 110.227227][ T7012] syzkaller0: entered promiscuous mode [ 110.232866][ T7012] syzkaller0: entered allmulticast mode [ 112.401550][ T7059] smc: net device bond0 applied user defined pnetid SYZ2 [ 112.469574][ T7061] team0: Device gtp0 is of different type [ 112.514771][ T7066] netlink: 'syz.3.287': attribute type 1 has an invalid length. [ 112.544500][ T7066] netlink: 224 bytes leftover after parsing attributes in process `syz.3.287'. [ 112.708823][ T7079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.291'. [ 112.718600][ T7078] netlink: 144 bytes leftover after parsing attributes in process `syz.3.291'. [ 112.954950][ T7086] netlink: 'syz.4.293': attribute type 20 has an invalid length. [ 113.007419][ T7089] netlink: 'syz.3.294': attribute type 10 has an invalid length. [ 113.043745][ T7089] dummy0: entered promiscuous mode [ 113.074857][ T7089] dummy0: entered allmulticast mode [ 113.101212][ T7089] team0: Port device dummy0 added [ 113.313134][ T7092] macvlan1: entered promiscuous mode [ 113.373111][ T7092] ipvlan0: entered promiscuous mode [ 113.402586][ T7092] ipvlan0: left promiscuous mode [ 113.421249][ T7092] macvlan1: left promiscuous mode [ 113.451244][ T2950] bridge0: port 1(team0) entered blocking state [ 113.457710][ T2950] bridge0: port 1(team0) entered forwarding state [ 113.820536][ T7119] ipt_REJECT: TCP_RESET invalid for non-tcp [ 113.832131][ T7119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 113.885484][ T7119] netlink: 124 bytes leftover after parsing attributes in process `syz.2.298'. [ 113.902177][ T7119] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 113.942989][ T7121] netlink: 'syz.0.301': attribute type 10 has an invalid length. [ 114.390357][ T7138] netlink: 44 bytes leftover after parsing attributes in process `syz.3.308'. [ 114.437065][ T7142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.310'. [ 115.091577][ T7145] bridge0: port 1(team0) entered disabled state [ 116.128030][ T7156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.176761][ T7156] bridge0: port 1(team0) entered blocking state [ 116.183179][ T7156] bridge0: port 1(team0) entered forwarding state [ 116.223455][ T7156] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.246428][ T7156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.293556][ T7156] syz.3.308 (7156) used greatest stack depth: 18288 bytes left [ 116.558420][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 116.617698][ T7196] Unknown status report in ack skb [ 116.896398][ T7202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.924121][ T7202] team0: Port device bond0 added [ 116.945889][ T7202] bridge0: port 1(team0) entered blocking state [ 116.953600][ T7202] bridge0: port 1(team0) entered disabled state [ 116.972640][ T7202] team0: entered allmulticast mode [ 116.984767][ T7202] bond0: entered allmulticast mode [ 117.003852][ T7202] team0: entered promiscuous mode [ 117.011486][ T7202] bond0: entered promiscuous mode [ 117.199543][ T7219] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 117.261997][ T7219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 117.684235][ T7246] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 117.703228][ T7246] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 117.766739][ T30] audit: type=1107 audit(1742609218.319:2): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 117.834303][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.343'. [ 117.950418][ T7254] netlink: 'syz.1.339': attribute type 10 has an invalid length. [ 117.961485][ T7251] vcan0: entered allmulticast mode [ 117.967146][ T7254] netlink: 40 bytes leftover after parsing attributes in process `syz.1.339'. [ 118.086284][ T7254] team0: Port device geneve0 added [ 118.143834][ T7251] netlink: 'syz.4.342': attribute type 1 has an invalid length. [ 118.164274][ T7251] netlink: 112 bytes leftover after parsing attributes in process `syz.4.342'. [ 118.925937][ T7291] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.145049][ T7291] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.281519][ T7291] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.667743][ T7291] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.789083][ T7328] bond0: left promiscuous mode [ 119.793924][ T7328] bond_slave_0: left promiscuous mode [ 119.815798][ T7328] bond_slave_1: left promiscuous mode [ 119.821408][ T7328] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 119.840674][ T7328] bond0: left allmulticast mode [ 119.884862][ T7328] bond_slave_0: left allmulticast mode [ 119.890410][ T7328] bond_slave_1: left allmulticast mode [ 119.909189][ T7328] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 119.943956][ T7329] netlink: 72 bytes leftover after parsing attributes in process `syz.4.359'. [ 119.960645][ T7329] netlink: 112 bytes leftover after parsing attributes in process `syz.4.359'. [ 120.005971][ T7328] team0: Port device bond0 removed [ 120.011658][ T7328] team0: left allmulticast mode [ 120.032974][ T7328] team_slave_0: left allmulticast mode [ 120.054558][ T7328] team_slave_1: left allmulticast mode [ 120.060107][ T7328] team0: left promiscuous mode [ 120.066014][ T7328] team_slave_0: left promiscuous mode [ 120.071731][ T7328] team_slave_1: left promiscuous mode [ 120.081705][ T7328] bridge0: port 3(team0) entered disabled state [ 120.102092][ T7328] bridge_slave_0: left allmulticast mode [ 120.129223][ T7328] bridge_slave_0: left promiscuous mode [ 120.136138][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.152009][ T7328] bridge_slave_1: left allmulticast mode [ 120.158010][ T7328] bridge_slave_1: left promiscuous mode [ 120.163885][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.180959][ T7328] bond0: (slave bond_slave_0): Releasing backup interface [ 120.196593][ T7328] bond0: (slave bond_slave_1): Releasing backup interface [ 120.253465][ T7328] team0: Port device team_slave_0 removed [ 120.287060][ T7328] team0: Port device team_slave_1 removed [ 120.293597][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.319583][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.329036][ T7328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.336735][ T7328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.360511][ T7328] bond0: (slave wlan1): Releasing backup interface [ 120.490926][ T7329] team0: Mode changed to "loadbalance" [ 120.498812][ T7329] netlink: 72 bytes leftover after parsing attributes in process `syz.4.359'. [ 120.716589][ T7291] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.745428][ T5147] Bluetooth: hci4: command 0x0405 tx timeout [ 120.852704][ T7291] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.908516][ T7365] netlink: 'syz.0.369': attribute type 4 has an invalid length. [ 120.941691][ T7365] netlink: 'syz.0.369': attribute type 8 has an invalid length. [ 120.989975][ T7365] netlink: 236 bytes leftover after parsing attributes in process `syz.0.369'. [ 121.271224][ T7371] netlink: 3 bytes leftover after parsing attributes in process `syz.4.372'. [ 121.413816][ T7373] netlink: 48 bytes leftover after parsing attributes in process `syz.4.372'. [ 121.665366][ T7356] bridge0: port 1(team0) entered disabled state [ 121.796212][ T7356] wg1: left promiscuous mode [ 121.800865][ T7356] wg1: left allmulticast mode [ 121.831506][ T7291] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.852479][ T7291] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.890632][ T7371] batadv1: entered promiscuous mode [ 121.898628][ T7371] batadv1: entered allmulticast mode [ 122.278670][ T7377] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.416059][ T7399] netlink: 40 bytes leftover after parsing attributes in process `syz.4.379'. [ 122.568771][ T7377] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.726478][ T7377] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.899105][ T7377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.031289][ T7377] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.073310][ T7377] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.163225][ T7377] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.181386][ T7377] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.273643][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.386'. [ 123.543231][ T7410] netlink: 'syz.4.382': attribute type 1 has an invalid length. [ 123.564922][ T7410] netlink: 224 bytes leftover after parsing attributes in process `syz.4.382'. [ 123.734088][ T7435] netlink: 20 bytes leftover after parsing attributes in process `syz.0.389'. [ 123.746062][ T7437] xt_hashlimit: size too large, truncated to 1048576 [ 123.847228][ T7438] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 123.857918][ T7442] netlink: 48 bytes leftover after parsing attributes in process `syz.1.391'. [ 123.867989][ T7438] netlink: 'syz.2.390': attribute type 9 has an invalid length. [ 123.895997][ T7438] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.390'. [ 124.043339][ T7438] xt_hashlimit: size too large, truncated to 1048576 [ 124.623582][ T7454] trusted_key: syz.1.395 sent an empty control message without MSG_MORE. [ 124.927680][ T7472] lo: entered promiscuous mode [ 124.933126][ T7472] tunl0: entered promiscuous mode [ 124.959477][ T7472] gre0: entered promiscuous mode [ 125.029503][ T7472] gretap0: entered promiscuous mode [ 125.073914][ T7472] erspan0: entered promiscuous mode [ 125.099187][ T7472] ip_vti0: entered promiscuous mode [ 125.114019][ T7472] ip6_vti0: entered promiscuous mode [ 125.131125][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 125.151808][ T7472] sit0: entered promiscuous mode [ 125.169996][ T7472] ip6tnl0: entered promiscuous mode [ 125.181270][ T7472] ip6gre0: entered promiscuous mode [ 125.233049][ T7472] syz_tun: entered promiscuous mode [ 125.250708][ T7472] ip6gretap0: entered promiscuous mode [ 125.271270][ T7472] bridge0: entered promiscuous mode [ 125.303618][ T7472] vcan0: entered promiscuous mode [ 125.346002][ T7472] dummy0: entered promiscuous mode [ 125.363187][ T7472] nlmon0: entered promiscuous mode [ 125.371225][ T7472] caif0: entered promiscuous mode [ 125.386181][ T7472] batadv0: entered promiscuous mode [ 125.395828][ T7472] vxcan0: entered promiscuous mode [ 125.402720][ T7472] vxcan1: entered promiscuous mode [ 125.409959][ T7472] veth0: entered promiscuous mode [ 125.420380][ T7472] veth1: entered promiscuous mode [ 125.443944][ T7472] wg0: entered promiscuous mode [ 125.453441][ T7472] wg1: entered promiscuous mode [ 125.475085][ T7472] wg2: entered promiscuous mode [ 125.483827][ T7472] veth0_to_bridge: entered promiscuous mode [ 125.495641][ T7472] bridge_slave_0: entered promiscuous mode [ 125.507391][ T7472] veth1_to_bridge: entered promiscuous mode [ 125.518926][ T7472] bridge_slave_1: entered promiscuous mode [ 125.528377][ T7472] veth0_to_bond: entered promiscuous mode [ 125.538068][ T7472] bond_slave_0: entered promiscuous mode [ 125.546614][ T7472] veth1_to_bond: entered promiscuous mode [ 125.556112][ T7472] bond_slave_1: entered promiscuous mode [ 125.590743][ T7472] veth0_to_team: entered promiscuous mode [ 125.609808][ T7472] team_slave_0: entered promiscuous mode [ 125.688434][ T7472] veth1_to_team: entered promiscuous mode [ 125.712067][ T7472] team_slave_1: entered promiscuous mode [ 125.733148][ T7472] veth0_to_batadv: entered promiscuous mode [ 125.771417][ T7472] batadv_slave_0: entered promiscuous mode [ 125.810275][ T7472] veth1_to_batadv: entered promiscuous mode [ 125.843508][ T7472] batadv_slave_1: entered promiscuous mode [ 125.861259][ T7472] xfrm0: entered promiscuous mode [ 125.879233][ T7472] veth0_to_hsr: entered promiscuous mode [ 125.899024][ T7472] veth1_to_hsr: entered promiscuous mode [ 125.923750][ T7472] hsr0: entered promiscuous mode [ 125.934076][ T7472] veth1_virt_wifi: entered promiscuous mode [ 125.943898][ T7472] veth0_virt_wifi: entered promiscuous mode [ 125.953723][ T7472] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 125.967882][ T7472] macvtap0: entered promiscuous mode [ 125.977617][ T7472] macsec0: entered promiscuous mode [ 125.987905][ T7472] geneve0: entered promiscuous mode [ 125.996582][ T7472] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.005872][ T7472] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.015086][ T7472] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.024183][ T7472] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.033404][ T7472] geneve1: entered promiscuous mode [ 126.058536][ T7472] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 126.080659][ T7472] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 126.095001][ T7472] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 126.120163][ T7472] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 126.141817][ T7472] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 126.158076][ T7472] bond1: entered promiscuous mode [ 126.170445][ T7472] ip6gre1: entered promiscuous mode [ 126.178389][ T7472] ip6gre1: left allmulticast mode [ 126.189593][ T7496] netlink: 248 bytes leftover after parsing attributes in process `syz.3.407'. [ 126.210208][ T7472] bridge1: entered promiscuous mode [ 126.359001][ T7499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.408'. [ 126.393244][ T7499] netlink: 20 bytes leftover after parsing attributes in process `syz.3.408'. [ 126.476566][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'. [ 127.151249][ T7529] IPv6: addrconf: prefix option has invalid lifetime [ 127.178943][ T7525] pimreg: entered allmulticast mode [ 127.228852][ T7525] 8021q: VLANs not supported on pimreg [ 128.281451][ T7570] __nla_validate_parse: 1 callbacks suppressed [ 128.281470][ T7570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.427'. [ 128.376691][ T7571] x_tables: duplicate underflow at hook 1 [ 129.074789][ T7586] IPVS: length: 78 != 8 [ 129.599785][ T7601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.436'. [ 129.894626][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 129.911716][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'. [ 130.084429][ T7630] lo speed is unknown, defaulting to 1000 [ 130.125406][ T7634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.437'. [ 130.173993][ T7630] lo speed is unknown, defaulting to 1000 [ 130.234618][ T7630] lo speed is unknown, defaulting to 1000 [ 130.266638][ T7630] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 130.329265][ T7630] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 130.439845][ T7630] lo speed is unknown, defaulting to 1000 [ 130.481846][ T7630] lo speed is unknown, defaulting to 1000 [ 130.508951][ T7630] lo speed is unknown, defaulting to 1000 [ 130.529365][ T7630] lo speed is unknown, defaulting to 1000 [ 130.538605][ T7630] lo speed is unknown, defaulting to 1000 [ 130.551910][ T7648] xt_TCPMSS: Only works on TCP SYN packets [ 130.554149][ T7630] lo speed is unknown, defaulting to 1000 [ 130.572217][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.447'. [ 130.715803][ T7653] netlink: 32 bytes leftover after parsing attributes in process `syz.1.448'. [ 130.780995][ T7655] netlink: 32 bytes leftover after parsing attributes in process `syz.4.449'. [ 130.870339][ T7660] netlink: 104 bytes leftover after parsing attributes in process `syz.3.451'. [ 130.889336][ T7660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.451'. [ 130.958529][ T7658] siw: device registration error -23 [ 131.298809][ T7680] netlink: 'syz.3.456': attribute type 4 has an invalid length. [ 131.337205][ T7680] netlink: 'syz.3.456': attribute type 8 has an invalid length. [ 131.395059][ T7679] pimreg: entered allmulticast mode [ 131.411301][ T7679] 8021q: VLANs not supported on pimreg [ 131.749311][ T7686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.781208][ T7686] team0: Port device bond0 added [ 131.809278][ T7688] bridge0: port 2(team0) entered blocking state [ 131.854708][ T7688] bridge0: port 2(team0) entered disabled state [ 131.861488][ T7688] team0: entered allmulticast mode [ 131.891727][ T7688] team_slave_0: entered allmulticast mode [ 131.934724][ T7688] team_slave_1: entered allmulticast mode [ 131.944861][ T7688] geneve0: entered allmulticast mode [ 131.950264][ T7688] bond0: entered allmulticast mode [ 131.973216][ T7688] bond_slave_0: entered allmulticast mode [ 131.987970][ T7688] bond_slave_1: entered allmulticast mode [ 132.007404][ T7688] team0: entered promiscuous mode [ 132.015222][ T7688] team_slave_0: entered promiscuous mode [ 132.034300][ T7688] team_slave_1: entered promiscuous mode [ 132.042595][ T7688] geneve0: entered promiscuous mode [ 132.049411][ T7688] bond0: entered promiscuous mode [ 132.054764][ T7688] bond_slave_0: entered promiscuous mode [ 132.060804][ T7688] bond_slave_1: entered promiscuous mode [ 132.069087][ T7688] bridge0: port 2(team0) entered blocking state [ 132.075555][ T7688] bridge0: port 2(team0) entered forwarding state [ 132.098081][ T7690] syz.0.461 (7690) used greatest stack depth: 16976 bytes left [ 132.866676][ T7727] vlan3: entered promiscuous mode [ 132.871765][ T7727] bridge0: entered promiscuous mode [ 133.047893][ T7738] lo speed is unknown, defaulting to 1000 [ 133.390035][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.717386][ T7756] lo speed is unknown, defaulting to 1000 [ 134.203822][ T7770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.286609][ T7771] __nla_validate_parse: 7 callbacks suppressed [ 134.286630][ T7771] netlink: 128 bytes leftover after parsing attributes in process `syz.0.480'. [ 134.373328][ T7777] bond0: left promiscuous mode [ 134.415424][ T7777] bond_slave_0: left promiscuous mode [ 134.421029][ T7777] bond_slave_1: left promiscuous mode [ 134.451418][ T7777] bond0: left allmulticast mode [ 134.466785][ T7781] openvswitch: netlink: Actions may not be safe on all matching packets [ 134.476226][ T7777] bond_slave_0: left allmulticast mode [ 134.481732][ T7777] bond_slave_1: left allmulticast mode [ 134.542340][ T7777] team0: Port device bond0 removed [ 134.561690][ T7777] team0: left allmulticast mode [ 134.585870][ T7777] team_slave_0: left allmulticast mode [ 134.610536][ T7777] team_slave_1: left allmulticast mode [ 134.636117][ T7777] geneve0: left allmulticast mode [ 134.641316][ T7777] team0: left promiscuous mode [ 134.662478][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 134.720316][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 134.784610][ T7777] team_slave_0: left promiscuous mode [ 134.790555][ T7777] team_slave_1: left promiscuous mode [ 134.805855][ T7777] geneve0: left promiscuous mode [ 134.833660][ T7777] bridge0: port 2(team0) entered disabled state [ 134.881655][ T7777] bridge_slave_0: left allmulticast mode [ 134.914639][ T7777] bridge_slave_0: left promiscuous mode [ 134.950152][ T7777] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.033848][ T7777] bond0: (slave bond_slave_0): Releasing backup interface [ 135.055167][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 135.128850][ T7777] bond0: (slave bond_slave_1): Releasing backup interface [ 135.250564][ T7777] team0: Port device team_slave_0 removed [ 135.327147][ T7777] team0: Port device team_slave_1 removed [ 135.360036][ T7777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.391648][ T7777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.412220][ T7807] netlink: 'syz.2.488': attribute type 1 has an invalid length. [ 135.421532][ T7777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.431596][ T7777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.518728][ T7777] team0: Port device geneve0 removed [ 135.526109][ T7777] vlan2: left allmulticast mode [ 135.531016][ T7777] gretap0: left allmulticast mode [ 135.536838][ T7777] vlan2: left promiscuous mode [ 135.541648][ T7777] gretap0: left promiscuous mode [ 135.552676][ T7777] bridge0: port 3(vlan2) entered disabled state [ 135.617894][ T7815] Bluetooth: MGMT ver 1.23 [ 135.834958][ T7824] openvswitch: netlink: Actions may not be safe on all matching packets [ 136.198732][ T7837] lo speed is unknown, defaulting to 1000 [ 136.269188][ T7842] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 136.289576][ T7842] netlink: 'syz.0.497': attribute type 1 has an invalid length. [ 136.326903][ T7849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.498'. [ 136.479725][ T7852] lo speed is unknown, defaulting to 1000 [ 136.536225][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 137.672908][ T7901] lo speed is unknown, defaulting to 1000 [ 138.765180][ T7920] netlink: 56 bytes leftover after parsing attributes in process `syz.4.514'. [ 138.902923][ T7923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 138.923900][ T7923] 8021q: VLANs not supported on ip6tnl0 [ 152.349527][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.368824][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.380654][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.392168][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.400154][ T5832] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 152.414801][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 152.469342][ T7929] lo speed is unknown, defaulting to 1000 [ 152.710193][ T7929] chnl_net:caif_netlink_parms(): no params data found [ 152.924687][ T7929] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.931837][ T7929] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.963133][ T7929] bridge_slave_0: entered allmulticast mode [ 152.975771][ T7929] bridge_slave_0: entered promiscuous mode [ 153.009311][ T7929] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.024541][ T7929] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.031809][ T7929] bridge_slave_1: entered allmulticast mode [ 153.075991][ T7929] bridge_slave_1: entered promiscuous mode [ 153.200287][ T5147] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.212956][ T7929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.225316][ T5147] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.235164][ T5147] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.246645][ T7929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.270307][ T5147] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.278935][ T5147] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 153.286803][ T5147] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.347235][ T7929] team0: Port device team_slave_0 added [ 153.366853][ T7929] team0: Port device team_slave_1 added [ 153.474248][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.482741][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.544395][ T7929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.556796][ T7941] lo speed is unknown, defaulting to 1000 [ 153.576051][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.583051][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.612783][ T7929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.727102][ T7929] hsr_slave_0: entered promiscuous mode [ 153.733729][ T7929] hsr_slave_1: entered promiscuous mode [ 153.750535][ T7929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.758375][ T7929] Cannot create hsr debugfs directory [ 153.758742][ T5832] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 153.776291][ T5832] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 153.785040][ T5832] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 153.796271][ T5832] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 153.803936][ T5832] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 153.811335][ T5832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 153.932306][ T7944] lo speed is unknown, defaulting to 1000 [ 154.048269][ T7941] chnl_net:caif_netlink_parms(): no params data found [ 154.524028][ T5147] Bluetooth: hci5: command tx timeout [ 154.533567][ T7941] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.547041][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.548813][ T5832] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 154.554297][ T7941] bridge_slave_0: entered allmulticast mode [ 154.568028][ T5832] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 154.568517][ T7941] bridge_slave_0: entered promiscuous mode [ 154.584626][ T5832] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 154.592550][ T5832] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 154.600646][ T5832] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 154.608072][ T5832] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 154.680618][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.714614][ T7941] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.721885][ T7941] bridge_slave_1: entered allmulticast mode [ 154.751471][ T7941] bridge_slave_1: entered promiscuous mode [ 154.766196][ T5832] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 154.776715][ T5832] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 154.785193][ T5832] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 154.797772][ T5832] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 154.811147][ T7944] chnl_net:caif_netlink_parms(): no params data found [ 154.818616][ T5832] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 154.826292][ T5832] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 154.901335][ T7955] lo speed is unknown, defaulting to 1000 [ 154.926364][ T7941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.957382][ T7958] lo speed is unknown, defaulting to 1000 [ 154.962627][ T7941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.109559][ T7941] team0: Port device team_slave_0 added [ 155.127494][ T7941] team0: Port device team_slave_1 added [ 155.310419][ T7944] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.317834][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.327562][ T7944] bridge_slave_0: entered allmulticast mode [ 155.335150][ T7944] bridge_slave_0: entered promiscuous mode [ 155.343944][ T7941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.351833][ T7941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.379407][ T7941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.390721][ T5832] Bluetooth: hci6: command tx timeout [ 155.392218][ T7941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.403619][ T7941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.429866][ T7941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.448659][ T7944] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.459805][ T7944] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.474856][ T7944] bridge_slave_1: entered allmulticast mode [ 155.482116][ T7944] bridge_slave_1: entered promiscuous mode [ 155.620063][ T7941] hsr_slave_0: entered promiscuous mode [ 155.635343][ T7941] hsr_slave_1: entered promiscuous mode [ 155.641468][ T7941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.659433][ T7941] Cannot create hsr debugfs directory [ 155.669291][ T7944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.691327][ T7944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.859773][ T7944] team0: Port device team_slave_0 added [ 155.874502][ T5832] Bluetooth: hci7: command tx timeout [ 155.881350][ T7944] team0: Port device team_slave_1 added [ 156.003317][ T7955] chnl_net:caif_netlink_parms(): no params data found [ 156.054106][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.064013][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.102474][ T7944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.170047][ T7944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.190929][ T7944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.230359][ T7944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.458591][ T7944] hsr_slave_0: entered promiscuous mode [ 156.475240][ T7944] hsr_slave_1: entered promiscuous mode [ 156.483047][ T7944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.501649][ T7944] Cannot create hsr debugfs directory [ 156.518527][ T7958] chnl_net:caif_netlink_parms(): no params data found [ 156.588131][ T5832] Bluetooth: hci5: command tx timeout [ 156.665028][ T5832] Bluetooth: hci8: command tx timeout [ 156.702306][ T7955] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.722633][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.733913][ T7955] bridge_slave_0: entered allmulticast mode [ 156.746103][ T7955] bridge_slave_0: entered promiscuous mode [ 156.765848][ T7955] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.772976][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.785150][ T7955] bridge_slave_1: entered allmulticast mode [ 156.793893][ T7955] bridge_slave_1: entered promiscuous mode [ 156.904619][ T5832] Bluetooth: hci9: command tx timeout [ 156.958260][ T7955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.982621][ T7955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.080993][ T7955] team0: Port device team_slave_0 added [ 157.146274][ T7955] team0: Port device team_slave_1 added [ 157.152351][ T7958] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.175210][ T7958] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.182482][ T7958] bridge_slave_0: entered allmulticast mode [ 157.209032][ T7958] bridge_slave_0: entered promiscuous mode [ 157.226354][ T7958] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.233491][ T7958] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.241213][ T7958] bridge_slave_1: entered allmulticast mode [ 157.248578][ T7958] bridge_slave_1: entered promiscuous mode [ 157.311910][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.322569][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.348868][ T7955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.375227][ T7958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.410243][ T7955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.418864][ T7955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.444991][ T7955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.464843][ T5832] Bluetooth: hci6: command tx timeout [ 157.470818][ T7958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.583063][ T7958] team0: Port device team_slave_0 added [ 157.591362][ T7958] team0: Port device team_slave_1 added [ 157.639608][ T7955] hsr_slave_0: entered promiscuous mode [ 157.647775][ T7955] hsr_slave_1: entered promiscuous mode [ 157.653913][ T7955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.674288][ T7955] Cannot create hsr debugfs directory [ 157.704668][ T7958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.711663][ T7958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.738794][ T7958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.781798][ T7958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.794581][ T7958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.824563][ T7958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.901952][ T7958] hsr_slave_0: entered promiscuous mode [ 157.908699][ T7958] hsr_slave_1: entered promiscuous mode [ 157.915184][ T7958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.923823][ T7958] Cannot create hsr debugfs directory [ 157.944521][ T5832] Bluetooth: hci7: command tx timeout [ 158.664543][ T5832] Bluetooth: hci5: command tx timeout [ 158.744407][ T5832] Bluetooth: hci8: command tx timeout [ 158.985563][ T5832] Bluetooth: hci9: command tx timeout [ 159.544888][ T5832] Bluetooth: hci6: command tx timeout [ 160.024638][ T5832] Bluetooth: hci7: command tx timeout [ 160.744586][ T5832] Bluetooth: hci5: command tx timeout [ 160.824616][ T5832] Bluetooth: hci8: command tx timeout [ 161.064619][ T5832] Bluetooth: hci9: command tx timeout [ 161.624686][ T5832] Bluetooth: hci6: command tx timeout [ 162.104646][ T5832] Bluetooth: hci7: command tx timeout [ 162.904826][ T5832] Bluetooth: hci8: command tx timeout [ 163.144696][ T5832] Bluetooth: hci9: command tx timeout [ 194.830824][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.906627][ T7975] Bluetooth: hci2: command 0x0406 tx timeout [ 196.913425][ T7975] Bluetooth: hci1: command 0x0406 tx timeout [ 196.928342][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 196.930518][ T7976] Bluetooth: hci0: command 0x0c1a tx timeout [ 213.182790][ T5147] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 213.192818][ T5147] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 213.202242][ T5147] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 213.213396][ T5147] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 213.235212][ T5147] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 213.242645][ T5147] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 213.272677][ T7983] lo speed is unknown, defaulting to 1000 [ 213.365540][ T56] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 213.374023][ T56] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 213.382451][ T56] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 213.395772][ T56] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 213.414808][ T56] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 213.434730][ T56] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 213.530065][ T7988] lo speed is unknown, defaulting to 1000 [ 213.736127][ T7983] chnl_net:caif_netlink_parms(): no params data found [ 213.870606][ T56] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 213.879874][ T56] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 213.888056][ T56] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 213.896464][ T56] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 213.904098][ T56] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 213.911530][ T56] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 213.976776][ T7988] chnl_net:caif_netlink_parms(): no params data found [ 214.001934][ T7983] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.024905][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.038263][ T7983] bridge_slave_0: entered allmulticast mode [ 214.055756][ T7983] bridge_slave_0: entered promiscuous mode [ 214.081058][ T7983] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.094708][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.101967][ T7983] bridge_slave_1: entered allmulticast mode [ 214.124071][ T7983] bridge_slave_1: entered promiscuous mode [ 214.150027][ T7998] lo speed is unknown, defaulting to 1000 [ 214.283788][ T7983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.348035][ T7983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.536197][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.543469][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.564698][ T7988] bridge_slave_0: entered allmulticast mode [ 214.571985][ T7988] bridge_slave_0: entered promiscuous mode [ 214.626873][ T5147] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 214.640864][ T5147] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 214.645236][ T7983] team0: Port device team_slave_0 added [ 214.664675][ T5147] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 214.673005][ T5147] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 214.684876][ T7988] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.692008][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.714628][ T5147] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 214.723542][ T5147] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 214.723790][ T7988] bridge_slave_1: entered allmulticast mode [ 214.776133][ T7988] bridge_slave_1: entered promiscuous mode [ 214.837884][ T7983] team0: Port device team_slave_1 added [ 214.899063][ T7988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.979193][ T7988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.119994][ T5147] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 215.135262][ T8005] lo speed is unknown, defaulting to 1000 [ 215.135668][ T7983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.149229][ T5147] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 215.157801][ T5147] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 215.167472][ T5147] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 215.177088][ T7983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.203388][ T5147] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 215.230421][ T7983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.241450][ T5147] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 215.297082][ T7983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.304108][ T7983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.339062][ T7983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.345263][ T56] Bluetooth: hci10: command tx timeout [ 215.369411][ T7988] team0: Port device team_slave_0 added [ 215.407128][ T7988] team0: Port device team_slave_1 added [ 215.464544][ T56] Bluetooth: hci11: command tx timeout [ 215.500210][ T8009] lo speed is unknown, defaulting to 1000 [ 215.527444][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.534928][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.580694][ T7988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.606757][ T7988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.613855][ T7988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.662708][ T7988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.750378][ T7983] hsr_slave_0: entered promiscuous mode [ 215.765316][ T7983] hsr_slave_1: entered promiscuous mode [ 215.771466][ T7983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.794667][ T7983] Cannot create hsr debugfs directory [ 215.800594][ T7998] chnl_net:caif_netlink_parms(): no params data found [ 215.944659][ T56] Bluetooth: hci12: command tx timeout [ 215.986203][ T7988] hsr_slave_0: entered promiscuous mode [ 216.004811][ T7988] hsr_slave_1: entered promiscuous mode [ 216.015447][ T7988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.023063][ T7988] Cannot create hsr debugfs directory [ 216.229639][ T7998] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.245910][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.253229][ T7998] bridge_slave_0: entered allmulticast mode [ 216.283677][ T7998] bridge_slave_0: entered promiscuous mode [ 216.385533][ T7998] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.393630][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.404921][ T7998] bridge_slave_1: entered allmulticast mode [ 216.412126][ T7998] bridge_slave_1: entered promiscuous mode [ 216.579535][ T7998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.630798][ T7998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.726282][ T8005] chnl_net:caif_netlink_parms(): no params data found [ 216.772705][ T7998] team0: Port device team_slave_0 added [ 216.824632][ T56] Bluetooth: hci13: command tx timeout [ 216.877746][ T7998] team0: Port device team_slave_1 added [ 217.058324][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.074395][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.122985][ T7998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.184707][ T7998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.191706][ T7998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.254477][ T7998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.297530][ T8005] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.311817][ T8005] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.319167][ T56] Bluetooth: hci14: command tx timeout [ 217.326101][ T8005] bridge_slave_0: entered allmulticast mode [ 217.333308][ T8005] bridge_slave_0: entered promiscuous mode [ 217.341367][ T8009] chnl_net:caif_netlink_parms(): no params data found [ 217.375532][ T8005] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.382748][ T8005] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.390924][ T8005] bridge_slave_1: entered allmulticast mode [ 217.398487][ T56] Bluetooth: hci10: command tx timeout [ 217.405582][ T8005] bridge_slave_1: entered promiscuous mode [ 217.442268][ T8005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.492805][ T8005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.506286][ T7998] hsr_slave_0: entered promiscuous mode [ 217.512891][ T7998] hsr_slave_1: entered promiscuous mode [ 217.520463][ T7998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.528244][ T7998] Cannot create hsr debugfs directory [ 217.546144][ T56] Bluetooth: hci11: command tx timeout [ 217.644420][ T8005] team0: Port device team_slave_0 added [ 217.709852][ T8005] team0: Port device team_slave_1 added [ 217.813676][ T8009] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.834566][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.841876][ T8009] bridge_slave_0: entered allmulticast mode [ 217.866295][ T8009] bridge_slave_0: entered promiscuous mode [ 217.906530][ T8005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.913541][ T8005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.973159][ T8005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.010541][ T8009] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.024574][ T56] Bluetooth: hci12: command tx timeout [ 218.030413][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.057908][ T8009] bridge_slave_1: entered allmulticast mode [ 218.065501][ T8009] bridge_slave_1: entered promiscuous mode [ 218.105070][ T8005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.112063][ T8005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.162589][ T8005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.242360][ T8009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.316810][ T8009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.379662][ T8005] hsr_slave_0: entered promiscuous mode [ 218.414123][ T8005] hsr_slave_1: entered promiscuous mode [ 218.435336][ T8005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.442979][ T8005] Cannot create hsr debugfs directory [ 218.497178][ T8009] team0: Port device team_slave_0 added [ 218.533272][ T8009] team0: Port device team_slave_1 added [ 218.639414][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.654769][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.713739][ T8009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.777644][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.784990][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.811618][ T8009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.904640][ T56] Bluetooth: hci13: command tx timeout [ 218.970797][ T8009] hsr_slave_0: entered promiscuous mode [ 218.977407][ T8009] hsr_slave_1: entered promiscuous mode [ 218.983577][ T8009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.999750][ T8009] Cannot create hsr debugfs directory [ 219.384790][ T56] Bluetooth: hci14: command tx timeout [ 219.464738][ T56] Bluetooth: hci10: command tx timeout [ 219.634115][ T56] Bluetooth: hci11: command tx timeout [ 220.104587][ T56] Bluetooth: hci12: command tx timeout [ 220.984566][ T56] Bluetooth: hci13: command tx timeout [ 221.465415][ T56] Bluetooth: hci14: command tx timeout [ 221.544747][ T56] Bluetooth: hci10: command tx timeout [ 221.704900][ T56] Bluetooth: hci11: command tx timeout [ 222.184979][ T56] Bluetooth: hci12: command tx timeout [ 223.064762][ T56] Bluetooth: hci13: command tx timeout [ 223.544741][ T56] Bluetooth: hci14: command tx timeout [ 232.746323][ T56] Bluetooth: hci4: command 0x0405 tx timeout [ 256.266997][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.024976][ T56] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 273.039888][ T56] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 273.050102][ T56] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 273.059220][ T56] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 273.074649][ T56] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 273.082153][ T56] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 273.148351][ T8030] lo speed is unknown, defaulting to 1000 [ 273.397393][ T8030] chnl_net:caif_netlink_parms(): no params data found [ 273.550199][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.564388][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.571726][ T8030] bridge_slave_0: entered allmulticast mode [ 273.596754][ T8030] bridge_slave_0: entered promiscuous mode [ 273.615734][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.622892][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.647352][ T8030] bridge_slave_1: entered allmulticast mode [ 273.665215][ T8030] bridge_slave_1: entered promiscuous mode [ 273.765035][ T8030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.797712][ T8030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.946884][ T8030] team0: Port device team_slave_0 added [ 273.975728][ T8030] team0: Port device team_slave_1 added [ 274.086738][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.093757][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.164379][ T8030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.197242][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.224448][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.304514][ T8030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.469471][ T56] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 274.484866][ T56] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 274.493564][ T56] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 274.503080][ T56] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 274.512457][ T56] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 274.534471][ T56] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 274.605282][ T56] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 274.615264][ T56] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 274.623408][ T56] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 274.631453][ T56] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 274.641040][ T56] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 274.648532][ T56] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 274.688126][ T8030] hsr_slave_0: entered promiscuous mode [ 274.705924][ T8030] hsr_slave_1: entered promiscuous mode [ 274.712322][ T8030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.720749][ T8030] Cannot create hsr debugfs directory [ 274.827395][ T8042] lo speed is unknown, defaulting to 1000 [ 274.884365][ T8044] lo speed is unknown, defaulting to 1000 [ 275.153048][ T5832] Bluetooth: hci15: command tx timeout [ 275.493809][ T56] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 275.504338][ T56] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 275.512469][ T56] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 275.522546][ T56] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 275.531442][ T56] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 275.539273][ T56] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 275.571884][ T5147] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 275.583576][ T5147] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 275.592431][ T5147] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 275.601208][ T5147] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 275.609440][ T5147] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 275.617437][ T5147] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 275.814573][ T8053] lo speed is unknown, defaulting to 1000 [ 275.884976][ T8042] chnl_net:caif_netlink_parms(): no params data found [ 275.896946][ T8050] lo speed is unknown, defaulting to 1000 [ 275.991637][ T8044] chnl_net:caif_netlink_parms(): no params data found [ 276.293304][ T8042] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.304619][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.311958][ T8042] bridge_slave_0: entered allmulticast mode [ 276.335964][ T8042] bridge_slave_0: entered promiscuous mode [ 276.397916][ T8042] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.414679][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.421984][ T8042] bridge_slave_1: entered allmulticast mode [ 276.445861][ T8042] bridge_slave_1: entered promiscuous mode [ 276.584718][ T5147] Bluetooth: hci16: command tx timeout [ 276.636080][ T8042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.658036][ T8042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.719758][ T8044] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.748794][ T5832] Bluetooth: hci17: command tx timeout [ 276.753495][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.764762][ T8044] bridge_slave_0: entered allmulticast mode [ 276.772032][ T8044] bridge_slave_0: entered promiscuous mode [ 276.807182][ T8044] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.825433][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.832789][ T8044] bridge_slave_1: entered allmulticast mode [ 276.856577][ T8044] bridge_slave_1: entered promiscuous mode [ 276.920266][ T8053] chnl_net:caif_netlink_parms(): no params data found [ 276.961106][ T8042] team0: Port device team_slave_0 added [ 276.990300][ T8042] team0: Port device team_slave_1 added [ 277.135075][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.142075][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.204596][ T8042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.236247][ T8044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.254399][ T7975] Bluetooth: hci15: command tx timeout [ 277.278070][ T8044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.330970][ T8042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.344455][ T8042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.386046][ T8042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.533480][ T8044] team0: Port device team_slave_0 added [ 277.625314][ T7975] Bluetooth: hci18: command tx timeout [ 277.639389][ T8050] chnl_net:caif_netlink_parms(): no params data found [ 277.679465][ T8044] team0: Port device team_slave_1 added [ 277.704776][ T7975] Bluetooth: hci19: command tx timeout [ 277.730969][ T8042] hsr_slave_0: entered promiscuous mode [ 277.745720][ T8042] hsr_slave_1: entered promiscuous mode [ 277.752135][ T8042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.774554][ T8042] Cannot create hsr debugfs directory [ 277.780342][ T8053] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.794393][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.801734][ T8053] bridge_slave_0: entered allmulticast mode [ 277.826966][ T8053] bridge_slave_0: entered promiscuous mode [ 277.846361][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.853497][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.874853][ T8053] bridge_slave_1: entered allmulticast mode [ 277.882235][ T8053] bridge_slave_1: entered promiscuous mode [ 278.016653][ T8053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.067376][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.084572][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.134572][ T8044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.178400][ T8053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.215108][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.222110][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.284442][ T8044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.413304][ T8053] team0: Port device team_slave_0 added [ 278.437677][ T8053] team0: Port device team_slave_1 added [ 278.540193][ T8053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.547684][ T8053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.574066][ T8053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.664850][ T7975] Bluetooth: hci16: command tx timeout [ 278.686948][ T8053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.693959][ T8053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.751641][ T8053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.795897][ T8044] hsr_slave_0: entered promiscuous mode [ 278.814887][ T8044] hsr_slave_1: entered promiscuous mode [ 278.828414][ T7975] Bluetooth: hci7: command 0x0406 tx timeout [ 278.829750][ T8044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.835075][ T7975] Bluetooth: hci17: command tx timeout [ 278.850229][ T7975] Bluetooth: hci8: command 0x0406 tx timeout [ 278.850560][ T8044] Cannot create hsr debugfs directory [ 278.856410][ T7975] Bluetooth: hci5: command 0x0406 tx timeout [ 278.856459][ T7975] Bluetooth: hci9: command 0x0406 tx timeout [ 278.856501][ T7975] Bluetooth: hci6: command 0x0406 tx timeout [ 278.932472][ T8050] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.943737][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.951567][ T8050] bridge_slave_0: entered allmulticast mode [ 278.959934][ T8050] bridge_slave_0: entered promiscuous mode [ 279.026267][ T8050] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.033403][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.055134][ T8050] bridge_slave_1: entered allmulticast mode [ 279.063573][ T8050] bridge_slave_1: entered promiscuous mode [ 279.161722][ T8053] hsr_slave_0: entered promiscuous mode [ 279.175435][ T8053] hsr_slave_1: entered promiscuous mode [ 279.181727][ T8053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.204621][ T8053] Cannot create hsr debugfs directory [ 279.245378][ T8050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.304799][ T5832] Bluetooth: hci15: command tx timeout [ 279.336430][ T8050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.511761][ T8050] team0: Port device team_slave_0 added [ 279.538156][ T8050] team0: Port device team_slave_1 added [ 279.704662][ T7977] Bluetooth: hci18: command tx timeout [ 279.732073][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.744620][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.784719][ T7977] Bluetooth: hci19: command tx timeout [ 279.804347][ T8050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.827782][ T8050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.844317][ T8050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.904308][ T8050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.103162][ T8050] hsr_slave_0: entered promiscuous mode [ 280.125497][ T8050] hsr_slave_1: entered promiscuous mode [ 280.131804][ T8050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.154328][ T8050] Cannot create hsr debugfs directory [ 280.744744][ T7977] Bluetooth: hci16: command tx timeout [ 280.904636][ T7977] Bluetooth: hci17: command tx timeout [ 281.394432][ T7977] Bluetooth: hci15: command tx timeout [ 281.784522][ T7977] Bluetooth: hci18: command tx timeout [ 281.864595][ T7977] Bluetooth: hci19: command tx timeout [ 282.824554][ T7977] Bluetooth: hci16: command tx timeout [ 282.984603][ T7977] Bluetooth: hci17: command tx timeout [ 283.864700][ T7977] Bluetooth: hci18: command tx timeout [ 283.944588][ T7977] Bluetooth: hci19: command tx timeout [ 294.665199][ T31] INFO: task syz.1.511:7900 blocked for more than 143 seconds. [ 294.672823][ T31] Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 294.694406][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.703135][ T31] task:syz.1.511 state:D stack:26976 pid:7900 tgid:7899 ppid:5830 task_flags:0x400040 flags:0x00000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 294.715453][ T31] Call Trace: [ 294.734455][ T31] [ 294.737447][ T31] __schedule+0x190e/0x4c90 [ 294.742024][ T31] ? __pfx___schedule+0x10/0x10 [ 294.764558][ T31] ? __pfx_lock_release+0x10/0x10 [ 294.769662][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 294.804349][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 294.810330][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 294.834479][ T31] ? schedule+0x90/0x320 [ 294.838796][ T31] schedule+0x14b/0x320 [ 294.842991][ T31] schedule_preempt_disabled+0x13/0x30 [ 294.899972][ T31] __mutex_lock+0x817/0x1010 [ 294.944367][ T31] ? __mutex_lock+0x602/0x1010 [ 294.949228][ T31] ? genl_rcv_msg+0x122/0xec0 [ 294.953952][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 294.974447][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.980878][ T31] ? __local_bh_enable_ip+0x168/0x200 [ 294.994378][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 294.999648][ T31] ? radix_tree_lookup+0x238/0x290 [ 295.014363][ T31] genl_rcv_msg+0x122/0xec0 [ 295.018918][ T31] ? mark_lock+0x9a/0x360 [ 295.023288][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 295.054326][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 295.059441][ T31] ? __pfx___might_resched+0x10/0x10 [ 295.074317][ T31] netlink_rcv_skb+0x206/0x480 [ 295.079146][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 295.084206][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.094415][ T31] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 295.099977][ T31] genl_rcv+0x28/0x40 [ 295.103998][ T31] netlink_unicast+0x7f6/0x990 [ 295.124566][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 295.129940][ T31] ? __virt_addr_valid+0x45f/0x530 [ 295.144495][ T31] ? __phys_addr_symbol+0x2f/0x70 [ 295.149584][ T31] ? __check_object_size+0x47a/0x730 [ 295.164313][ T31] netlink_sendmsg+0x8de/0xcb0 [ 295.169136][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.184508][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 295.189518][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.204401][ T31] __sock_sendmsg+0x221/0x270 [ 295.209188][ T31] __sys_sendto+0x363/0x4c0 [ 295.213731][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 295.234471][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 295.240536][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 295.254373][ T31] ? exc_page_fault+0x590/0x8b0 [ 295.259288][ T31] __x64_sys_sendto+0xde/0x100 [ 295.264088][ T31] do_syscall_64+0xf3/0x230 [ 295.284687][ T31] ? clear_bhb_loop+0x35/0x90 [ 295.289440][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.304726][ T31] RIP: 0033:0x7f6e6158effc [ 295.309193][ T31] RSP: 002b:00007f6e623edec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 295.334445][ T31] RAX: ffffffffffffffda RBX: 00007f6e623edfc0 RCX: 00007f6e6158effc [ 295.342479][ T31] RDX: 0000000000000020 RSI: 00007f6e623ee010 RDI: 0000000000000009 [ 295.364391][ T31] RBP: 0000000000000000 R08: 00007f6e623edf14 R09: 000000000000000c [ 295.372416][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 295.394636][ T31] R13: 00007f6e623edf68 R14: 00007f6e623ee010 R15: 0000000000000000 [ 295.402689][ T31] [ 295.424427][ T31] INFO: task syz.2.513:7907 blocked for more than 144 seconds. [ 295.432023][ T31] Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 295.454440][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.463158][ T31] task:syz.2.513 state:D stack:24456 pid:7907 tgid:7906 ppid:5836 task_flags:0x400140 flags:0x00004004 [ 295.494376][ T31] Call Trace: [ 295.497720][ T31] [ 295.500683][ T31] __schedule+0x190e/0x4c90 [ 295.514358][ T31] ? __pfx___schedule+0x10/0x10 [ 295.519276][ T31] ? __pfx_lock_release+0x10/0x10 [ 295.534395][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 295.540539][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 295.564310][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 295.570720][ T31] ? schedule+0x90/0x320 [ 295.575154][ T31] schedule+0x14b/0x320 [ 295.579359][ T31] schedule_preempt_disabled+0x13/0x30 [ 295.585141][ T31] __mutex_lock+0x817/0x1010 [ 295.589785][ T31] ? __mutex_lock+0x602/0x1010 [ 295.594680][ T31] ? genl_rcv_msg+0x122/0xec0 [ 295.599657][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 295.604782][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 295.610980][ T31] ? __pfx_validate_chain+0x10/0x10 [ 295.616490][ T31] ? radix_tree_lookup+0x238/0x290 [ 295.621662][ T31] genl_rcv_msg+0x122/0xec0 [ 295.626460][ T31] ? mark_lock+0x9a/0x360 [ 295.630836][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 295.636053][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 295.641125][ T31] ? __pfx___might_resched+0x10/0x10 [ 295.647547][ T31] netlink_rcv_skb+0x206/0x480 [ 295.652388][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 295.657640][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.663019][ T31] genl_rcv+0x28/0x40 [ 295.694654][ T31] netlink_unicast+0x7f6/0x990 [ 295.699514][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 295.714295][ T31] ? __virt_addr_valid+0x45f/0x530 [ 295.719460][ T31] ? __phys_addr_symbol+0x2f/0x70 [ 295.734356][ T31] ? __check_object_size+0x47a/0x730 [ 295.739718][ T31] netlink_sendmsg+0x8de/0xcb0 [ 295.754321][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.759675][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 295.774300][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.779637][ T31] __sock_sendmsg+0x221/0x270 [ 295.784885][ T31] __sys_sendto+0x363/0x4c0 [ 295.789449][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 295.794561][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 295.800598][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 295.807279][ T31] ? exc_page_fault+0x590/0x8b0 [ 295.812182][ T31] __x64_sys_sendto+0xde/0x100 [ 295.817105][ T31] do_syscall_64+0xf3/0x230 [ 295.821663][ T31] ? clear_bhb_loop+0x35/0x90 [ 295.826542][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.832474][ T31] RIP: 0033:0x7fdb74d8effc [ 295.836979][ T31] RSP: 002b:00007fdb75c27ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 295.845589][ T31] RAX: ffffffffffffffda RBX: 00007fdb75c27fc0 RCX: 00007fdb74d8effc [ 295.854509][ T31] RDX: 0000000000000020 RSI: 00007fdb75c28010 RDI: 0000000000000006 [ 295.862534][ T31] RBP: 0000000000000000 R08: 00007fdb75c27f14 R09: 000000000000000c [ 295.870778][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 295.878897][ T31] R13: 00007fdb75c27f68 R14: 00007fdb75c28010 R15: 0000000000000000 [ 295.887075][ T31] [ 295.890181][ T31] INFO: task syz.2.513:7914 blocked for more than 144 seconds. [ 295.899786][ T31] Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 295.914999][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 295.923742][ T31] task:syz.2.513 state:D stack:26408 pid:7914 tgid:7906 ppid:5836 task_flags:0x400140 flags:0x00000004 [ 295.938206][ T31] Call Trace: [ 295.941533][ T31] [ 295.944741][ T31] __schedule+0x190e/0x4c90 [ 295.949488][ T31] ? __pfx___schedule+0x10/0x10 [ 295.955447][ T31] ? __pfx_lock_release+0x10/0x10 [ 295.960533][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 295.967268][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 295.973294][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 295.979795][ T31] ? schedule+0x90/0x320 [ 295.984075][ T31] schedule+0x14b/0x320 [ 295.988414][ T31] schedule_preempt_disabled+0x13/0x30 [ 295.993911][ T31] __mutex_lock+0x817/0x1010 [ 295.998652][ T31] ? __mutex_lock+0x602/0x1010 [ 296.003463][ T31] ? genl_rcv_msg+0x122/0xec0 [ 296.008242][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 296.013312][ T31] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 296.019641][ T31] ? __pfx_validate_chain+0x10/0x10 [ 296.025113][ T31] ? radix_tree_lookup+0x238/0x290 [ 296.030271][ T31] genl_rcv_msg+0x122/0xec0 [ 296.034928][ T31] ? mark_lock+0x9a/0x360 [ 296.039299][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.044909][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 296.049988][ T31] ? __pfx___might_resched+0x10/0x10 [ 296.075239][ T31] netlink_rcv_skb+0x206/0x480 [ 296.080098][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.094298][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.099678][ T31] genl_rcv+0x28/0x40 [ 296.103692][ T31] netlink_unicast+0x7f6/0x990 [ 296.124426][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 296.129790][ T31] ? __virt_addr_valid+0x45f/0x530 [ 296.135031][ T31] ? __phys_addr_symbol+0x2f/0x70 [ 296.140098][ T31] ? __check_object_size+0x47a/0x730 [ 296.145603][ T31] netlink_sendmsg+0x8de/0xcb0 [ 296.150416][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.155976][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 296.162319][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.167930][ T31] __sock_sendmsg+0x221/0x270 [ 296.172662][ T31] __sys_sendto+0x363/0x4c0 [ 296.177556][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 296.182649][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 296.190011][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.196463][ T31] ? exc_page_fault+0x590/0x8b0 [ 296.201356][ T31] __x64_sys_sendto+0xde/0x100 [ 296.206364][ T31] do_syscall_64+0xf3/0x230 [ 296.210940][ T31] ? clear_bhb_loop+0x35/0x90 [ 296.215778][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.221722][ T31] RIP: 0033:0x7fdb74d8effc [ 296.226293][ T31] RSP: 002b:00007fdb75be5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 296.234841][ T31] RAX: ffffffffffffffda RBX: 00007fdb75be5fc0 RCX: 00007fdb74d8effc [ 296.242857][ T31] RDX: 0000000000000020 RSI: 00007fdb75be6010 RDI: 0000000000000003 [ 296.250957][ T31] RBP: 0000000000000000 R08: 00007fdb75be5f14 R09: 000000000000000c [ 296.259127][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 296.284435][ T31] R13: 00007fdb75be5f68 R14: 00007fdb75be6010 R15: 0000000000000000 [ 296.292591][ T31] [ 296.304444][ T31] INFO: task syz.0.515:7922 blocked for more than 145 seconds. [ 296.312058][ T31] Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 296.334480][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.343200][ T31] task:syz.0.515 state:D stack:23736 pid:7922 tgid:7921 ppid:5839 task_flags:0x400140 flags:0x00000004 [ 296.384730][ T31] Call Trace: [ 296.388084][ T31] [ 296.391053][ T31] __schedule+0x190e/0x4c90 [ 296.404307][ T31] ? __pfx___schedule+0x10/0x10 [ 296.409305][ T31] ? __pfx_lock_release+0x10/0x10 [ 296.424650][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 296.431202][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 296.437297][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 296.443668][ T31] ? schedule+0x90/0x320 [ 296.448215][ T31] schedule+0x14b/0x320 [ 296.452419][ T31] schedule_preempt_disabled+0x13/0x30 [ 296.458041][ T31] __mutex_lock+0x817/0x1010 [ 296.462680][ T31] ? __mutex_lock+0x602/0x1010 [ 296.468933][ T31] ? genl_rcv_msg+0x122/0xec0 [ 296.473663][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 296.478786][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.485422][ T31] ? __local_bh_enable_ip+0x168/0x200 [ 296.490832][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 296.496494][ T31] ? radix_tree_lookup+0x238/0x290 [ 296.501648][ T31] genl_rcv_msg+0x122/0xec0 [ 296.506435][ T31] ? mark_lock+0x9a/0x360 [ 296.510806][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.515928][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 296.520999][ T31] ? __pfx___might_resched+0x10/0x10 [ 296.527745][ T31] netlink_rcv_skb+0x206/0x480 [ 296.532579][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.554330][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.559888][ T31] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 296.574391][ T31] genl_rcv+0x28/0x40 [ 296.578432][ T31] netlink_unicast+0x7f6/0x990 [ 296.583242][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 296.604859][ T31] ? __virt_addr_valid+0x45f/0x530 [ 296.610044][ T31] ? __phys_addr_symbol+0x2f/0x70 [ 296.624385][ T31] ? __check_object_size+0x47a/0x730 [ 296.629742][ T31] netlink_sendmsg+0x8de/0xcb0 [ 296.644312][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.649851][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 296.664481][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.669822][ T31] __sock_sendmsg+0x221/0x270 [ 296.694473][ T31] __sys_sendto+0x363/0x4c0 [ 296.699077][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 296.704168][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 296.724415][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.730864][ T31] ? exc_page_fault+0x590/0x8b0 [ 296.754677][ T31] __x64_sys_sendto+0xde/0x100 [ 296.759531][ T31] do_syscall_64+0xf3/0x230 [ 296.764099][ T31] ? clear_bhb_loop+0x35/0x90 [ 296.784488][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.790468][ T31] RIP: 0033:0x7f480b98effc [ 296.804405][ T31] RSP: 002b:00007f480c897ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 296.812889][ T31] RAX: ffffffffffffffda RBX: 00007f480c897fc0 RCX: 00007f480b98effc [ 296.834412][ T31] RDX: 0000000000000020 RSI: 00007f480c898010 RDI: 000000000000000e [ 296.842468][ T31] RBP: 0000000000000000 R08: 00007f480c897f14 R09: 000000000000000c [ 296.851978][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000e [ 296.864284][ T31] R13: 00007f480c897f68 R14: 00007f480c898010 R15: 0000000000000000 [ 296.873025][ T31] [ 296.877142][ T31] INFO: task syz.4.516:7926 blocked for more than 145 seconds. [ 296.894609][ T31] Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 296.902293][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.934289][ T31] task:syz.4.516 state:D stack:26840 pid:7926 tgid:7924 ppid:5844 task_flags:0x400140 flags:0x00000004 [ 296.964466][ T31] Call Trace: [ 296.967809][ T31] [ 296.970815][ T31] __schedule+0x190e/0x4c90 [ 296.984312][ T31] ? __pfx___schedule+0x10/0x10 [ 296.989248][ T31] ? __pfx_lock_release+0x10/0x10 [ 297.004572][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 297.010540][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 297.044361][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 297.050872][ T31] ? schedule+0x90/0x320 [ 297.060100][ T31] schedule+0x14b/0x320 [ 297.065020][ T31] schedule_preempt_disabled+0x13/0x30 [ 297.070531][ T31] __mutex_lock+0x817/0x1010 [ 297.075324][ T31] ? __mutex_lock+0x602/0x1010 [ 297.081297][ T31] ? genl_rcv_msg+0x122/0xec0 [ 297.086252][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 297.091327][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.097770][ T31] ? __local_bh_enable_ip+0x168/0x200 [ 297.103176][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 297.108518][ T31] ? radix_tree_lookup+0x238/0x290 [ 297.113672][ T31] genl_rcv_msg+0x122/0xec0 [ 297.118270][ T31] ? mark_lock+0x9a/0x360 [ 297.122638][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.127806][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 297.132888][ T31] ? __pfx___might_resched+0x10/0x10 [ 297.138275][ T31] netlink_rcv_skb+0x206/0x480 [ 297.143240][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.148734][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.154094][ T31] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 297.159678][ T31] genl_rcv+0x28/0x40 [ 297.163696][ T31] netlink_unicast+0x7f6/0x990 [ 297.168874][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 297.174203][ T31] ? __virt_addr_valid+0x45f/0x530 [ 297.179391][ T31] ? __phys_addr_symbol+0x2f/0x70 [ 297.204412][ T31] ? __check_object_size+0x47a/0x730 [ 297.209783][ T31] netlink_sendmsg+0x8de/0xcb0 [ 297.224296][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.229688][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 297.244301][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.249651][ T31] __sock_sendmsg+0x221/0x270 [ 297.254613][ T31] __sys_sendto+0x363/0x4c0 [ 297.259177][ T31] ? __pfx___sys_sendto+0x10/0x10 [ 297.264359][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 297.270407][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.277111][ T31] ? exc_page_fault+0x590/0x8b0 [ 297.282021][ T31] __x64_sys_sendto+0xde/0x100 [ 297.287749][ T31] do_syscall_64+0xf3/0x230 [ 297.292312][ T31] ? clear_bhb_loop+0x35/0x90 [ 297.297362][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.303301][ T31] RIP: 0033:0x7f1f8ef8effc [ 297.307979][ T31] RSP: 002b:00007f1f8cdd3ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 297.316623][ T31] RAX: ffffffffffffffda RBX: 00007f1f8cdd3fc0 RCX: 00007f1f8ef8effc [ 297.324663][ T31] RDX: 0000000000000020 RSI: 00007f1f8cdd4010 RDI: 0000000000000008 [ 297.332668][ T31] RBP: 0000000000000000 R08: 00007f1f8cdd3f14 R09: 000000000000000c [ 297.340793][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008 [ 297.348884][ T31] R13: 00007f1f8cdd3f68 R14: 00007f1f8cdd4010 R15: 0000000000000000 [ 297.357031][ T31] [ 297.360168][ T31] [ 297.360168][ T31] Showing all locks held in the system: [ 297.367979][ T31] 1 lock held by khungtaskd/31: [ 297.372858][ T31] #0: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 297.382889][ T31] 2 locks held by getty/5589: [ 297.388737][ T31] #0: ffff88814cd920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 297.414328][ T31] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 297.434360][ T31] 5 locks held by kworker/u8:8/6012: [ 297.439697][ T31] 2 locks held by syz.3.505/7888: [ 297.454578][ T31] 2 locks held by syz.1.511/7900: [ 297.459656][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.484328][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 297.504367][ T31] 2 locks held by syz.2.513/7907: [ 297.509462][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.518071][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 297.527144][ T31] 2 locks held by syz.2.513/7914: [ 297.532277][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.540614][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 297.550219][ T31] 2 locks held by syz.0.515/7922: [ 297.555311][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.563572][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 297.572831][ T31] 2 locks held by syz.4.516/7926: [ 297.584365][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.604562][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 297.613638][ T31] 2 locks held by syz-executor/7929: [ 297.634658][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.643007][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 297.674333][ T31] 2 locks held by syz-executor/7941: [ 297.679667][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.704517][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 297.713598][ T31] 2 locks held by syz-executor/7944: [ 297.724562][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.732857][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 297.755152][ T31] 2 locks held by syz-executor/7955: [ 297.760488][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.784597][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 297.793679][ T31] 2 locks held by syz-executor/7958: [ 297.812876][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.834470][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 297.843563][ T31] 2 locks held by syz-executor/7983: [ 297.865555][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.873852][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 297.894343][ T31] 2 locks held by syz-executor/7988: [ 297.900590][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.924343][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 297.933417][ T31] 2 locks held by syz-executor/7998: [ 297.954292][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.962577][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 297.994317][ T31] 2 locks held by syz-executor/8005: [ 297.999664][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.024445][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 298.033529][ T31] 2 locks held by syz-executor/8009: [ 298.054314][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.062607][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 298.085476][ T31] 2 locks held by syz-executor/8030: [ 298.090815][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.114480][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 298.123758][ T31] 2 locks held by syz-executor/8042: [ 298.144497][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.164567][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 298.173718][ T31] 2 locks held by syz-executor/8044: [ 298.204337][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.213533][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 298.234387][ T31] 2 locks held by syz-executor/8050: [ 298.239747][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.264412][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 298.273504][ T31] 2 locks held by syz-executor/8053: [ 298.294377][ T31] #0: ffffffff8ff3b310 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 298.302688][ T31] #1: ffffffff8ff3b1c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x122/0xec0 [ 298.324421][ T31] [ 298.326814][ T31] ============================================= [ 298.326814][ T31] [ 298.354522][ T31] NMI backtrace for cpu 1 [ 298.354554][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 298.354578][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.354591][ T31] Call Trace: [ 298.354599][ T31] [ 298.354608][ T31] dump_stack_lvl+0x241/0x360 [ 298.354661][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.354685][ T31] ? __pfx__printk+0x10/0x10 [ 298.354718][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 298.354751][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 298.354774][ T31] ? _printk+0xd5/0x120 [ 298.354793][ T31] ? __pfx__printk+0x10/0x10 [ 298.354813][ T31] ? __wake_up_klogd+0xcc/0x110 [ 298.354842][ T31] ? __pfx__printk+0x10/0x10 [ 298.354863][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 298.354896][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 298.354925][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 298.354955][ T31] watchdog+0x1058/0x10a0 [ 298.354989][ T31] ? watchdog+0x1ea/0x10a0 [ 298.355025][ T31] ? __pfx_watchdog+0x10/0x10 [ 298.355057][ T31] kthread+0x7a9/0x920 [ 298.355074][ T31] ? __pfx_kthread+0x10/0x10 [ 298.355096][ T31] ? __pfx_watchdog+0x10/0x10 [ 298.355128][ T31] ? __pfx_kthread+0x10/0x10 [ 298.355144][ T31] ? __pfx_kthread+0x10/0x10 [ 298.355167][ T31] ? __pfx_kthread+0x10/0x10 [ 298.355184][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.355210][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 298.355238][ T31] ? __pfx_kthread+0x10/0x10 [ 298.355258][ T31] ret_from_fork+0x4b/0x80 [ 298.355286][ T31] ? __pfx_kthread+0x10/0x10 [ 298.355306][ T31] ret_from_fork_asm+0x1a/0x30 [ 298.355346][ T31] [ 298.355354][ T31] Sending NMI from CPU 1 to CPUs 0: [ 298.527040][ C0] NMI backtrace for cpu 0 [ 298.527056][ C0] CPU: 0 UID: 0 PID: 7888 Comm: syz.3.505 Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 298.527075][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.527087][ C0] RIP: 0010:__lock_acquire+0x129d/0x2100 [ 298.527118][ C0] Code: 00 00 00 fc ff df 48 83 3b 00 0f 84 b7 04 00 00 41 0f b6 04 3e 84 c0 0f 85 62 0a 00 00 48 8b 44 24 10 8b 18 81 e3 ff 1f 00 00 <48> 89 d8 48 c1 e8 06 48 8d 3c c5 40 a8 55 94 be 08 00 00 00 e8 9a [ 298.527133][ C0] RSP: 0018:ffffc90003526590 EFLAGS: 00000006 [ 298.527148][ C0] RAX: ffff888027b8c760 RBX: 0000000000000021 RCX: ffffffff819cf925 [ 298.527161][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 [ 298.527172][ C0] RBP: 5ae34fab0bc89c6b R08: ffffffff9455a867 R09: 1ffffffff28ab50c [ 298.527185][ C0] R10: dffffc0000000000 R11: fffffbfff28ab50d R12: ffff888027b8bc00 [ 298.527198][ C0] R13: ffff888027b8bc00 R14: 1ffff11004f718ec R15: 0000000000000000 [ 298.527210][ C0] FS: 00007fdfde56a6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 298.527225][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.527237][ C0] CR2: 00007fb5278a5775 CR3: 000000005d138000 CR4: 00000000003526f0 [ 298.527252][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 298.527262][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 298.527272][ C0] Call Trace: [ 298.527279][ C0] [ 298.527285][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 298.527307][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 298.527333][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 298.527360][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 298.527383][ C0] ? nmi_handle+0x14f/0x5a0 [ 298.527410][ C0] ? nmi_handle+0x2a/0x5a0 [ 298.527435][ C0] ? __lock_acquire+0x129d/0x2100 [ 298.527461][ C0] ? default_do_nmi+0x63/0x160 [ 298.527480][ C0] ? exc_nmi+0x123/0x1f0 [ 298.527497][ C0] ? end_repeat_nmi+0xf/0x53 [ 298.527525][ C0] ? __lock_acquire+0xf55/0x2100 [ 298.527550][ C0] ? __lock_acquire+0x129d/0x2100 [ 298.527575][ C0] ? __lock_acquire+0x129d/0x2100 [ 298.527601][ C0] ? __lock_acquire+0x129d/0x2100 [ 298.527627][ C0] [ 298.527633][ C0] [ 298.527646][ C0] lock_acquire+0x1ed/0x550 [ 298.527671][ C0] ? tipc_sk_lookup+0xce/0x9e0 [ 298.527697][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 298.527723][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 298.527750][ C0] ? check_preemption_disabled+0x42/0x120 [ 298.527781][ C0] ? net_generic+0x1f/0x240 [ 298.527807][ C0] tipc_sk_lookup+0xef/0x9e0 [ 298.527831][ C0] ? tipc_sk_lookup+0xce/0x9e0 [ 298.527862][ C0] ? tipc_sk_lookup+0xce/0x9e0 [ 298.527888][ C0] ? __pfx_tipc_sk_lookup+0x10/0x10 [ 298.527914][ C0] ? __nla_parse+0x40/0x60 [ 298.527934][ C0] tipc_nl_publ_dump+0x2c6/0xde0 [ 298.527957][ C0] ? __pfx_tipc_nl_publ_dump+0x10/0x10 [ 298.527985][ C0] __tipc_nl_compat_dumpit+0x4d1/0xc10 [ 298.528010][ C0] ? __pfx___tipc_nl_compat_dumpit+0x10/0x10 [ 298.528036][ C0] ? __build_skb_around+0x245/0x3d0 [ 298.528062][ C0] ? __asan_memcpy+0x40/0x70 [ 298.528079][ C0] ? nla_put+0xd3/0x150 [ 298.528099][ C0] tipc_nl_compat_sk_dump+0x7b3/0x9a0 [ 298.528121][ C0] ? __pfx_tipc_nl_compat_sk_dump+0x10/0x10 [ 298.528141][ C0] ? __pfx_tipc_nl_publ_dump+0x10/0x10 [ 298.528157][ C0] ? __pfx___tipc_nl_compat_publ_dump+0x10/0x10 [ 298.528177][ C0] ? rhashtable_walk_stop+0x267/0x2a0 [ 298.528206][ C0] ? rhashtable_walk_stop+0x273/0x2a0 [ 298.528228][ C0] ? __nla_parse+0x40/0x60 [ 298.528247][ C0] __tipc_nl_compat_dumpit+0x623/0xc10 [ 298.528272][ C0] ? __pfx___tipc_nl_compat_dumpit+0x10/0x10 [ 298.528298][ C0] ? __build_skb_around+0x245/0x3d0 [ 298.528322][ C0] ? __asan_memset+0x23/0x50 [ 298.528338][ C0] ? __nlmsg_put+0xf7/0x190 [ 298.528365][ C0] tipc_nl_compat_dumpit+0x4fc/0x740 [ 298.528385][ C0] tipc_nl_compat_recv+0xe38/0x1590 [ 298.528405][ C0] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 298.528421][ C0] ? genl_get_cmd+0x610/0xce0 [ 298.528440][ C0] ? __pfx_tipc_nl_sk_dump+0x10/0x10 [ 298.528456][ C0] ? __pfx_tipc_nl_compat_sk_dump+0x10/0x10 [ 298.528474][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 298.528499][ C0] ? __pfx_genl_get_cmd+0x10/0x10 [ 298.528522][ C0] ? __pfx_validate_chain+0x10/0x10 [ 298.528543][ C0] genl_rcv_msg+0xb1f/0xec0 [ 298.528567][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.528597][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 298.528624][ C0] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 298.528642][ C0] ? __pfx___might_resched+0x10/0x10 [ 298.528668][ C0] netlink_rcv_skb+0x206/0x480 [ 298.528694][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.528714][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 298.528752][ C0] genl_rcv+0x28/0x40 [ 298.528770][ C0] netlink_unicast+0x7f6/0x990 [ 298.528797][ C0] ? __pfx_netlink_unicast+0x10/0x10 [ 298.528819][ C0] ? __virt_addr_valid+0x45f/0x530 [ 298.528836][ C0] ? __phys_addr_symbol+0x2f/0x70 [ 298.528852][ C0] ? __check_object_size+0x47a/0x730 [ 298.528881][ C0] netlink_sendmsg+0x8de/0xcb0 [ 298.528902][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.528920][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 298.528947][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.528963][ C0] __sock_sendmsg+0x221/0x270 [ 298.528989][ C0] ____sys_sendmsg+0x53a/0x860 [ 298.529013][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 298.529033][ C0] ? __fget_files+0x2a/0x410 [ 298.529062][ C0] ? __fget_files+0x2a/0x410 [ 298.529090][ C0] __sys_sendmsg+0x269/0x350 [ 298.529109][ C0] ? __pfx_futex_wake+0x10/0x10 [ 298.529135][ C0] ? __pfx___sys_sendmsg+0x10/0x10 [ 298.529173][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.529199][ C0] ? do_syscall_64+0x100/0x230 [ 298.529225][ C0] ? do_syscall_64+0xb6/0x230 [ 298.529251][ C0] do_syscall_64+0xf3/0x230 [ 298.529275][ C0] ? clear_bhb_loop+0x35/0x90 [ 298.529299][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.529323][ C0] RIP: 0033:0x7fdfdd78d169 [ 298.529337][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.529351][ C0] RSP: 002b:00007fdfde56a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.529368][ C0] RAX: ffffffffffffffda RBX: 00007fdfdd9a6160 RCX: 00007fdfdd78d169 [ 298.529380][ C0] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000006 [ 298.529391][ C0] RBP: 00007fdfdd80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 298.529402][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.529412][ C0] R13: 0000000000000000 R14: 00007fdfdd9a6160 R15: 00007ffd51dcd858 [ 298.529430][ C0] [ 298.532478][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 299.189468][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc7-syzkaller-01413-gd9917c7d533c #0 [ 299.199978][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.210039][ T31] Call Trace: [ 299.213508][ T31] [ 299.216451][ T31] dump_stack_lvl+0x241/0x360 [ 299.221145][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.226357][ T31] ? __pfx__printk+0x10/0x10 [ 299.230983][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 299.236996][ T31] ? vscnprintf+0x5d/0x90 [ 299.241343][ T31] panic+0x349/0x880 [ 299.245250][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 299.251510][ T31] ? __pfx_panic+0x10/0x10 [ 299.255930][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 299.261316][ T31] ? __irq_work_queue_local+0x137/0x410 [ 299.266880][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 299.272266][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 299.278429][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 299.284866][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 299.291033][ T31] watchdog+0x1097/0x10a0 [ 299.295403][ T31] ? watchdog+0x1ea/0x10a0 [ 299.299845][ T31] ? __pfx_watchdog+0x10/0x10 [ 299.304547][ T31] kthread+0x7a9/0x920 [ 299.308624][ T31] ? __pfx_kthread+0x10/0x10 [ 299.313220][ T31] ? __pfx_watchdog+0x10/0x10 [ 299.317941][ T31] ? __pfx_kthread+0x10/0x10 [ 299.322559][ T31] ? __pfx_kthread+0x10/0x10 [ 299.327169][ T31] ? __pfx_kthread+0x10/0x10 [ 299.331774][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 299.336997][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 299.342220][ T31] ? __pfx_kthread+0x10/0x10 [ 299.346843][ T31] ret_from_fork+0x4b/0x80 [ 299.351297][ T31] ? __pfx_kthread+0x10/0x10 [ 299.355914][ T31] ret_from_fork_asm+0x1a/0x30 [ 299.360711][ T31] [ 299.363882][ T31] Kernel Offset: disabled [ 299.368241][ T31] Rebooting in 86400 seconds..