last executing test programs: 1m36.838968848s ago: executing program 1 (id=10): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) unshare(0x6020400) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x3, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020692500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x10, 0xf}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}]}}]}, 0x38}}, 0x0) 1m36.437801351s ago: executing program 1 (id=11): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESHEX], 0xb8}}, 0x4801) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 1m18.180830746s ago: executing program 1 (id=11): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESHEX], 0xb8}}, 0x4801) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 1m0.722521007s ago: executing program 1 (id=11): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESHEX], 0xb8}}, 0x4801) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 50.081649178s ago: executing program 0 (id=247): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 49.83357164s ago: executing program 0 (id=250): socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r3 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRES8=r3], 0x10) 49.705098081s ago: executing program 0 (id=252): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) unshare(0x6a040000) r1 = socket(0x8, 0x3, 0x0) bind$l2tp(r1, 0x0, 0x0) 49.52169366s ago: executing program 0 (id=253): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000540)}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x13}}}, 0x24}}, 0x20044810) 40.183854322s ago: executing program 1 (id=11): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESHEX], 0xb8}}, 0x4801) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 30.427402374s ago: executing program 0 (id=253): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000540)}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x13}}}, 0x24}}, 0x20044810) 15.626799399s ago: executing program 1 (id=11): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESHEX], 0xb8}}, 0x4801) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0xfffffffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 13.190853571s ago: executing program 0 (id=253): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000540)}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x13}}}, 0x24}}, 0x20044810) 3.529831874s ago: executing program 4 (id=448): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000000c0)=[{0x0, 0x3, {0x1, 0x0, 0x3}, {0x0, 0xff}, 0xff, 0x7f}, {0x2, 0xffffffffffffffdf, {0x2, 0x1, 0x6}, {0x1, 0x0, 0x5}, 0x2, 0x1}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 2.345776906s ago: executing program 4 (id=454): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) 1.661760334s ago: executing program 3 (id=459): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x60fc, 0x5, 0xffffffffffffffff, 0x9}, 0x57b5}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x24000000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.498296234s ago: executing program 3 (id=460): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x70}}, 0x0) 1.409915272s ago: executing program 4 (id=461): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCSDEBUG(0xffffffffffffffff, 0x40047440, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108bfaffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.333345514s ago: executing program 4 (id=463): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 1.274329675s ago: executing program 3 (id=464): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)="6700a7fba8b8ae4994b97e2f488521a042e7d62fa6fa89b1e9fb6393b11b736bc388e14154b3a0a69c447bc00975fd56d9043675b53b40659bd0c24d8761e9c81d451fcaa3468a89b7a4d6acba5a3177337fde86baf4b9e7db2fef661aae60becde8ce", 0x63}], 0x1}, 0x20048001) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000008c0)=r1, 0x4) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) 1.181886738s ago: executing program 2 (id=465): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x8000) 1.118700243s ago: executing program 4 (id=466): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047452, 0x0) 1.03611944s ago: executing program 3 (id=467): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x3000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 897.938441ms ago: executing program 3 (id=468): sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c"], 0x7c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r1], 0x44}}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x2, 0x7}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r4, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 798.700861ms ago: executing program 2 (id=469): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x5, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 629.204872ms ago: executing program 3 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 496.812401ms ago: executing program 2 (id=471): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x80) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x62654accb376b644) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @mcast1, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x78b2, &(0x7f0000000100)=[{&(0x7f0000000480)="0000c9877701809644d8cae8cc7a6dcf79de2711bf1a81238f89397e8597cd4115feeb04965903c2a7d55fcf8730766274030d00"/68, 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) 496.309986ms ago: executing program 4 (id=472): socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x11, 0xa, 0x300) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 348.92381ms ago: executing program 2 (id=473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xbd}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000050) r2 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'hsr0\x00', 0x2000}) 148.201234ms ago: executing program 2 (id=474): socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002700000095000000000000002348003fd384040b849ab5520d07a7441e0e65de07b1a4da87429bf84f9cc4addb972fe68b01196cdbfb8074d6fe83f29db843dd34ca85ef20e674748a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20) shutdown(r0, 0x1) 0s ago: executing program 2 (id=475): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x10000000000, 0x0, 0x9, 0x0, 0x1, 0x9}, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. [ 85.876381][ T5834] cgroup: Unknown subsys name 'net' [ 86.028447][ T5834] cgroup: Unknown subsys name 'cpuset' [ 86.038148][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.902121][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.110983][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.125685][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.133710][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.134064][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.143660][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.156649][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.157069][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.165793][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.171841][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.178684][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.222450][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.231824][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.239934][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.248603][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.261187][ T5167] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.270759][ T5167] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.280102][ T5167] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.292034][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.329511][ T5167] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.337807][ T5167] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.350176][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.351975][ T5167] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.372140][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.381914][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.390766][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.796469][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 93.043286][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.050714][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.058623][ T5846] bridge_slave_0: entered allmulticast mode [ 93.068058][ T5846] bridge_slave_0: entered promiscuous mode [ 93.151936][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.159263][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.166904][ T5846] bridge_slave_1: entered allmulticast mode [ 93.174282][ T5846] bridge_slave_1: entered promiscuous mode [ 93.248785][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 93.266600][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.293250][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 93.330798][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.372096][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 93.514021][ T5846] team0: Port device team_slave_0 added [ 93.539939][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 93.559658][ T5846] team0: Port device team_slave_1 added [ 93.727709][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.735250][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.742450][ T5856] bridge_slave_0: entered allmulticast mode [ 93.750419][ T5856] bridge_slave_0: entered promiscuous mode [ 93.759276][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.767502][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.774841][ T5856] bridge_slave_1: entered allmulticast mode [ 93.782145][ T5856] bridge_slave_1: entered promiscuous mode [ 93.790118][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.797214][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.823668][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.836005][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.843175][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.850554][ T5858] bridge_slave_0: entered allmulticast mode [ 93.858523][ T5858] bridge_slave_0: entered promiscuous mode [ 93.919440][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.926874][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.952998][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.964984][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.972170][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.980091][ T5858] bridge_slave_1: entered allmulticast mode [ 93.988241][ T5858] bridge_slave_1: entered promiscuous mode [ 94.000963][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.008478][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.015844][ T5848] bridge_slave_0: entered allmulticast mode [ 94.023099][ T5848] bridge_slave_0: entered promiscuous mode [ 94.033239][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.068849][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.076383][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.083568][ T5848] bridge_slave_1: entered allmulticast mode [ 94.091413][ T5848] bridge_slave_1: entered promiscuous mode [ 94.101695][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.186847][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.212394][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.222285][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.225574][ T5849] Bluetooth: hci1: command tx timeout [ 94.230128][ T5845] bridge_slave_0: entered allmulticast mode [ 94.242653][ T5845] bridge_slave_0: entered promiscuous mode [ 94.280013][ T5856] team0: Port device team_slave_0 added [ 94.288582][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.295525][ T5849] Bluetooth: hci0: command tx timeout [ 94.317346][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.324698][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.331879][ T5845] bridge_slave_1: entered allmulticast mode [ 94.340004][ T5845] bridge_slave_1: entered promiscuous mode [ 94.369714][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.374818][ T5849] Bluetooth: hci2: command tx timeout [ 94.383802][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.414630][ T5846] hsr_slave_0: entered promiscuous mode [ 94.421438][ T5846] hsr_slave_1: entered promiscuous mode [ 94.430756][ T5856] team0: Port device team_slave_1 added [ 94.454392][ T51] Bluetooth: hci4: command tx timeout [ 94.460282][ T5849] Bluetooth: hci3: command tx timeout [ 94.513950][ T5858] team0: Port device team_slave_0 added [ 94.523516][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.550674][ T5848] team0: Port device team_slave_0 added [ 94.559870][ T5848] team0: Port device team_slave_1 added [ 94.581732][ T5858] team0: Port device team_slave_1 added [ 94.590155][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.637826][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.644887][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.670875][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.730125][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.737365][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.763418][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.777844][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.784945][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.810909][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.858616][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.866101][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.892317][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.912228][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.919280][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.949689][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.962933][ T5845] team0: Port device team_slave_0 added [ 94.972325][ T5845] team0: Port device team_slave_1 added [ 95.011243][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.018424][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.044700][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.119539][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.127058][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.153389][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.166683][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.173676][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.199833][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.279467][ T5856] hsr_slave_0: entered promiscuous mode [ 95.285990][ T5856] hsr_slave_1: entered promiscuous mode [ 95.292205][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.300510][ T5856] Cannot create hsr debugfs directory [ 95.334716][ T5848] hsr_slave_0: entered promiscuous mode [ 95.341311][ T5848] hsr_slave_1: entered promiscuous mode [ 95.347795][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.355893][ T5848] Cannot create hsr debugfs directory [ 95.413218][ T5858] hsr_slave_0: entered promiscuous mode [ 95.420436][ T5858] hsr_slave_1: entered promiscuous mode [ 95.427170][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.435217][ T5858] Cannot create hsr debugfs directory [ 95.529013][ T5845] hsr_slave_0: entered promiscuous mode [ 95.536221][ T5845] hsr_slave_1: entered promiscuous mode [ 95.543009][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.550852][ T5845] Cannot create hsr debugfs directory [ 95.828314][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.878648][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.934925][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.984079][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.123756][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.136177][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.148312][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.171214][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.252556][ T5856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.283825][ T5856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.294582][ T5849] Bluetooth: hci1: command tx timeout [ 96.295896][ T5856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.326299][ T5856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.375025][ T5849] Bluetooth: hci0: command tx timeout [ 96.454332][ T5849] Bluetooth: hci2: command tx timeout [ 96.462138][ T5858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.478463][ T5858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.490801][ T5858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.502221][ T5858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.534917][ T5849] Bluetooth: hci3: command tx timeout [ 96.540399][ T5849] Bluetooth: hci4: command tx timeout [ 96.596638][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.667239][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.693324][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.705654][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.712640][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.738127][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.745589][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.758769][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.771762][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.830836][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.838113][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.861678][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.912553][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.923756][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.930982][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.947725][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.954938][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.063509][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.087541][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.148935][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.156178][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.202553][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.226453][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.233656][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.262422][ T43] cfg80211: failed to load regulatory.db [ 97.308794][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.316034][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.347282][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.354596][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.423070][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.511715][ T5858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.522917][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.568914][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.629278][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.636487][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.690598][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.698303][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.733666][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.881386][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.007228][ T5846] veth0_vlan: entered promiscuous mode [ 98.068583][ T5846] veth1_vlan: entered promiscuous mode [ 98.100236][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.173442][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.182773][ T5848] veth0_vlan: entered promiscuous mode [ 98.243547][ T5848] veth1_vlan: entered promiscuous mode [ 98.279646][ T5846] veth0_macvtap: entered promiscuous mode [ 98.326337][ T5846] veth1_macvtap: entered promiscuous mode [ 98.375620][ T5849] Bluetooth: hci1: command tx timeout [ 98.418365][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.433348][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.455629][ T5849] Bluetooth: hci0: command tx timeout [ 98.493370][ T5856] veth0_vlan: entered promiscuous mode [ 98.523806][ T5848] veth0_macvtap: entered promiscuous mode [ 98.539275][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.551439][ T5849] Bluetooth: hci2: command tx timeout [ 98.568623][ T5848] veth1_macvtap: entered promiscuous mode [ 98.580862][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.591268][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.614706][ T51] Bluetooth: hci3: command tx timeout [ 98.620281][ T5849] Bluetooth: hci4: command tx timeout [ 98.632925][ T5856] veth1_vlan: entered promiscuous mode [ 98.644341][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.660902][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.707137][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.747545][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.835879][ T3516] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.845775][ T3516] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.871710][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.872990][ T3516] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.890992][ T3516] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.900719][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.967768][ T5856] veth0_macvtap: entered promiscuous mode [ 98.977561][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.982007][ T5856] veth1_macvtap: entered promiscuous mode [ 98.996996][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.054052][ T5845] veth0_vlan: entered promiscuous mode [ 99.098330][ T5845] veth1_vlan: entered promiscuous mode [ 99.127632][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 99.159406][ T5858] veth0_vlan: entered promiscuous mode [ 99.187553][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.235818][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.261245][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.272997][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.327147][ T5858] veth1_vlan: entered promiscuous mode [ 99.348437][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.367803][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.406940][ T5845] veth0_macvtap: entered promiscuous mode [ 99.417706][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.427722][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.452551][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.461449][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.497718][ T5845] veth1_macvtap: entered promiscuous mode [ 99.603403][ T5968] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.606809][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.657681][ T5858] veth0_macvtap: entered promiscuous mode [ 99.687232][ T5858] veth1_macvtap: entered promiscuous mode [ 99.723984][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.746705][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.780439][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.811262][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.837856][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.908613][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.923258][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.971679][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.993406][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.013549][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.038276][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.103773][ T1317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.122364][ T3569] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.173040][ T3569] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.217181][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.293082][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 100.317118][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.340349][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.454659][ T5849] Bluetooth: hci1: command tx timeout [ 100.534781][ T5849] Bluetooth: hci0: command tx timeout [ 100.547235][ T1091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.618213][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.654452][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.695657][ T5849] Bluetooth: hci4: command tx timeout [ 100.701309][ T5849] Bluetooth: hci3: command tx timeout [ 100.742035][ T1091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.845334][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.853211][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.042722][ T1091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.131098][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.163070][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.323934][ T1091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.662495][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 101.672312][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 101.680781][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 101.699947][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 101.707989][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 101.993154][ T6005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 102.179304][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 102.349891][ T1091] bridge_slave_1: left allmulticast mode [ 102.374858][ T1091] bridge_slave_1: left promiscuous mode [ 102.398487][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.446066][ T1091] bridge_slave_0: left allmulticast mode [ 102.459725][ T1091] bridge_slave_0: left promiscuous mode [ 102.471414][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.571235][ T6045] syz.0.25 uses obsolete (PF_INET,SOCK_PACKET) [ 103.737105][ T5849] Bluetooth: hci2: command tx timeout [ 103.750889][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.763128][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.778725][ T1091] bond0 (unregistering): Released all slaves [ 104.596312][ T1091] hsr_slave_0: left promiscuous mode [ 104.624442][ T1091] hsr_slave_1: left promiscuous mode [ 104.640943][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.672209][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.718922][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.743040][ T6067] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31'. [ 104.752524][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.832496][ T1091] veth1_macvtap: left promiscuous mode [ 104.859988][ T1091] veth0_macvtap: left promiscuous mode [ 104.887852][ T1091] veth1_vlan: left promiscuous mode [ 104.893411][ T1091] veth0_vlan: left promiscuous mode [ 104.964962][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.31'. [ 105.818147][ T5849] Bluetooth: hci2: command tx timeout [ 105.850737][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 105.909111][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 107.156255][ T6002] chnl_net:caif_netlink_parms(): no params data found [ 107.898323][ T5849] Bluetooth: hci2: command tx timeout [ 108.024053][ T6135] tipc: Started in network mode [ 108.083546][ T6135] tipc: Node identity 96ca7523e137, cluster identity 4711 [ 108.116986][ T6135] tipc: Enabled bearer , priority 0 [ 108.158039][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.168853][ T6002] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.196842][ T6002] bridge_slave_0: entered allmulticast mode [ 108.210506][ T6002] bridge_slave_0: entered promiscuous mode [ 108.241071][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.270943][ T6002] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.295650][ T6002] bridge_slave_1: entered allmulticast mode [ 108.339674][ T6002] bridge_slave_1: entered promiscuous mode [ 108.563096][ T6140] D: renamed from syzkaller0 [ 108.580424][ T6140] tipc: Disabling bearer [ 108.613382][ T6002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.811304][ T6002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.886768][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 109.123791][ T6002] team0: Port device team_slave_0 added [ 109.267023][ T6002] team0: Port device team_slave_1 added [ 109.498459][ T6002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.523201][ T6002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.578455][ T6172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.53'. [ 109.579536][ T6002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.641573][ T6002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.652101][ T6002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.713954][ T6002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.974888][ T5849] Bluetooth: hci2: command tx timeout [ 110.273765][ T6002] hsr_slave_0: entered promiscuous mode [ 110.306330][ T6002] hsr_slave_1: entered promiscuous mode [ 110.312780][ T6002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.342829][ T6002] Cannot create hsr debugfs directory [ 112.968757][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.63'. [ 114.991153][ T6002] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.033614][ T6002] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.119177][ T6002] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.165309][ T6002] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.566017][ T6002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.648097][ T6002] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.682938][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.690220][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.756975][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.764214][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.723897][ T6002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.966931][ T6002] veth0_vlan: entered promiscuous mode [ 117.037821][ T6002] veth1_vlan: entered promiscuous mode [ 117.254126][ T6002] veth0_macvtap: entered promiscuous mode [ 117.313840][ T6002] veth1_macvtap: entered promiscuous mode [ 117.412608][ T6002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.449731][ T6002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.541263][ T3516] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.599284][ T6307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 117.631635][ T3516] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.730552][ T3516] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.773244][ T3516] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.800926][ T6311] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.808447][ T6311] IPv6: NLM_F_CREATE should be set when creating new route [ 117.955436][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.004307][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.170814][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.194110][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.850436][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.033882][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.227330][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.386302][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.558679][ T6342] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.614659][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.92'. [ 119.685813][ T6341] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.782474][ T6342] bridge_slave_1: left allmulticast mode [ 119.789444][ T6342] bridge_slave_1: left promiscuous mode [ 119.816509][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.858593][ T6342] bridge_slave_0: left allmulticast mode [ 119.895417][ T6342] bridge_slave_0: left promiscuous mode [ 119.901386][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.115685][ T6341] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.463660][ T6341] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.612506][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.626878][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.627011][ T6356] wg2: entered promiscuous mode [ 120.646801][ T6356] wg2: entered allmulticast mode [ 120.653937][ T49] bridge_slave_1: left allmulticast mode [ 120.662183][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.671654][ T49] bridge_slave_1: left promiscuous mode [ 120.678473][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.690267][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.697036][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.782464][ T49] bridge_slave_0: left allmulticast mode [ 120.811522][ T49] bridge_slave_0: left promiscuous mode [ 120.865296][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.102885][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 121.758734][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.788095][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.808344][ T49] bond0 (unregistering): Released all slaves [ 121.987119][ T6341] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.190332][ T6393] syz_tun: entered promiscuous mode [ 122.197093][ T6393] vlan2: entered promiscuous mode [ 122.773019][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.794329][ T51] Bluetooth: hci2: command tx timeout [ 122.860442][ T49] hsr_slave_0: left promiscuous mode [ 122.880767][ T49] hsr_slave_1: left promiscuous mode [ 122.915575][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.923053][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.980301][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.004394][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.070250][ T49] veth1_macvtap: left promiscuous mode [ 123.115173][ T49] veth0_macvtap: left promiscuous mode [ 123.120918][ T49] veth1_vlan: left promiscuous mode [ 123.134441][ T49] veth0_vlan: left promiscuous mode [ 124.145024][ T6447] Driver unsupported XDP return value 0 on prog (id 44) dev N/A, expect packet loss! [ 124.490656][ T49] team0 (unregistering): Port device team_slave_1 removed [ 124.577135][ T49] team0 (unregistering): Port device team_slave_0 removed [ 124.854390][ T51] Bluetooth: hci2: command tx timeout [ 125.451906][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.119'. [ 125.497653][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.545753][ T6435] warning: `syz.2.108' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.698584][ T1091] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.844868][ T1317] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.905298][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 125.944653][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 126.053056][ T6357] chnl_net:caif_netlink_parms(): no params data found [ 126.936375][ T51] Bluetooth: hci2: command tx timeout [ 127.035024][ T6357] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.050481][ T6357] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.100591][ T6357] bridge_slave_0: entered allmulticast mode [ 127.135454][ T6357] bridge_slave_0: entered promiscuous mode [ 127.165185][ T6357] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.172373][ T6357] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.223110][ T6357] bridge_slave_1: entered allmulticast mode [ 127.281363][ T6357] bridge_slave_1: entered promiscuous mode [ 127.539019][ T6357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.575548][ T6357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.012534][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.139'. [ 128.136266][ T64] wlan1: Trigger new scan to find an IBSS to join [ 128.148210][ T6357] team0: Port device team_slave_0 added [ 128.254453][ T6357] team0: Port device team_slave_1 added [ 128.312177][ T6572] pimreg3: entered allmulticast mode [ 128.389617][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.410418][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.443672][ T6357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.492788][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.500429][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.530282][ T6357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.753010][ T6581] pimreg: entered allmulticast mode [ 128.780898][ T6357] hsr_slave_0: entered promiscuous mode [ 128.800554][ T6357] hsr_slave_1: entered promiscuous mode [ 128.820455][ T6357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.854647][ T6357] Cannot create hsr debugfs directory [ 129.001891][ T6581] pimreg: left allmulticast mode [ 129.014411][ T51] Bluetooth: hci2: command tx timeout [ 129.100693][ T6596] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 130.449891][ T6632] veth1_to_bond: entered allmulticast mode [ 130.482232][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 130.625907][ T6632] bond0: (slave bond_slave_1): Releasing backup interface [ 130.769304][ T6632] veth1_to_bond (unregistering): left allmulticast mode [ 131.171257][ T6357] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 131.366090][ T6672] wlan1: Trigger new scan to find an IBSS to join [ 131.429267][ T6357] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 131.672234][ T6357] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 131.685057][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 131.915051][ T6357] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 132.124628][ T6700] netlink: 'syz.4.164': attribute type 12 has an invalid length. [ 132.149647][ T6700] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.164'. [ 132.510842][ T6357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.534790][ T6357] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.607625][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.614855][ T6677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.677414][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.684689][ T6677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.293089][ T6357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.550101][ T6357] veth0_vlan: entered promiscuous mode [ 134.624070][ T6357] veth1_vlan: entered promiscuous mode [ 134.820498][ T6357] veth0_macvtap: entered promiscuous mode [ 134.833040][ T6357] veth1_macvtap: entered promiscuous mode [ 134.896004][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.942541][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.983458][ T6672] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.041997][ T6672] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.069203][ T6672] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.096921][ T6679] wlan1: Trigger new scan to find an IBSS to join [ 135.127156][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.184851][ T6799] Zero length message leads to an empty skb [ 135.352761][ T6799] netlink: 20 bytes leftover after parsing attributes in process `syz.4.187'. [ 135.585991][ T6682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.626671][ T6682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.710968][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.759639][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.018947][ T6666] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 136.242305][ T6666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.381630][ T6666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.541788][ T6666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.840308][ T6666] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.482550][ T6666] bridge_slave_1: left allmulticast mode [ 137.501409][ T6666] bridge_slave_1: left promiscuous mode [ 137.520999][ T6666] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.649216][ T6666] bridge_slave_0: left allmulticast mode [ 137.664412][ T6666] bridge_slave_0: left promiscuous mode [ 137.680903][ T6666] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.745576][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 137.754920][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 137.762949][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 137.771860][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 137.780422][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.233392][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.240579][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.157574][ T6666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.170329][ T6666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.193117][ T6666] bond0 (unregistering): Released all slaves [ 139.814904][ T51] Bluetooth: hci2: command tx timeout [ 140.174524][ T6666] hsr_slave_0: left promiscuous mode [ 140.188429][ T30] audit: type=1800 audit(1751639229.519:2): pid=6869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.204" name="@" dev="tmpfs" ino=292 res=0 errno=0 [ 140.221437][ T6666] hsr_slave_1: left promiscuous mode [ 140.222440][ T30] audit: type=1804 audit(1751639229.519:3): pid=6869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.204" name="@" dev="tmpfs" ino=292 res=1 errno=0 [ 140.246919][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.262443][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.277673][ T6666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.293192][ T6666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.388065][ T6666] veth1_macvtap: left promiscuous mode [ 140.393663][ T6666] veth0_macvtap: left promiscuous mode [ 140.414853][ T6666] veth1_vlan: left promiscuous mode [ 140.431214][ T6666] veth0_vlan: left promiscuous mode [ 140.635685][ T6877] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 141.787112][ T6666] team0 (unregistering): Port device team_slave_1 removed [ 141.882519][ T6666] team0 (unregistering): Port device team_slave_0 removed [ 141.894520][ T51] Bluetooth: hci2: command tx timeout [ 141.934026][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.209'. [ 142.007787][ T6899] netlink: 'syz.3.210': attribute type 1 has an invalid length. [ 142.563817][ T6900] bond1: (slave veth3): Enslaving as an active interface with a down link [ 142.595752][ T6901] bond1: (slave veth5): Enslaving as an active interface with a down link [ 143.469803][ T6838] chnl_net:caif_netlink_parms(): no params data found [ 143.508954][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 143.974805][ T51] Bluetooth: hci2: command tx timeout [ 144.472022][ T6838] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.499770][ T6838] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.523329][ T6838] bridge_slave_0: entered allmulticast mode [ 144.546780][ T6838] bridge_slave_0: entered promiscuous mode [ 144.713053][ T6838] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.755451][ T6838] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.762789][ T6838] bridge_slave_1: entered allmulticast mode [ 144.799250][ T6838] bridge_slave_1: entered promiscuous mode [ 144.951827][ T6838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.977825][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 145.063964][ T6838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.246860][ T6838] team0: Port device team_slave_0 added [ 145.286024][ T6838] team0: Port device team_slave_1 added [ 145.530988][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.575367][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.672831][ T6838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.718869][ T6838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.732073][ T6838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.760929][ T6838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.994680][ T7008] syzkaller1: entered promiscuous mode [ 146.005918][ T7008] syzkaller1: entered allmulticast mode [ 146.056942][ T51] Bluetooth: hci2: command tx timeout [ 146.060565][ T6838] hsr_slave_0: entered promiscuous mode [ 146.076773][ T6838] hsr_slave_1: entered promiscuous mode [ 146.093055][ T6838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.101257][ T6838] Cannot create hsr debugfs directory [ 146.286301][ T7022] netlink: 'syz.3.241': attribute type 10 has an invalid length. [ 146.348797][ T7024] netlink: 'syz.3.241': attribute type 10 has an invalid length. [ 146.453268][ T7022] team0: Port device dummy0 added [ 146.466633][ T7024] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 146.529958][ T7024] team0: Failed to send options change via netlink (err -105) [ 146.544795][ T7024] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 146.572761][ T7024] team0: Port device dummy0 removed [ 146.599787][ T7024] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 148.002353][ T7066] syz_tun: entered allmulticast mode [ 148.017378][ T7065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'. [ 148.039217][ T7066] syz_tun: left allmulticast mode [ 148.442399][ T6838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 148.693510][ T6838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 148.825350][ T6838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 148.919650][ T6838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 148.954960][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.963929][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.976502][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.991956][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.007977][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.085977][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.264'. [ 149.701149][ T6838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.730696][ T6838] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.838717][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.845990][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.901031][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.908264][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.101148][ T7091] chnl_net:caif_netlink_parms(): no params data found [ 151.111973][ T51] Bluetooth: hci0: command tx timeout [ 151.859236][ T6838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.877860][ T7091] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.890047][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.904595][ T7091] bridge_slave_0: entered allmulticast mode [ 151.916860][ T7091] bridge_slave_0: entered promiscuous mode [ 151.946408][ T7091] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.959268][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.976022][ T7091] bridge_slave_1: entered allmulticast mode [ 151.990327][ T7091] bridge_slave_1: entered promiscuous mode [ 152.123019][ T7091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.165062][ T7091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.279822][ T7091] team0: Port device team_slave_0 added [ 152.300510][ T7091] team0: Port device team_slave_1 added [ 152.546447][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.553454][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.597291][ T7091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.619928][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.627126][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.694538][ T7091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.800062][ T6838] veth0_vlan: entered promiscuous mode [ 152.997074][ T7091] hsr_slave_0: entered promiscuous mode [ 153.013129][ T7091] hsr_slave_1: entered promiscuous mode [ 153.021558][ T7091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.030580][ T7091] Cannot create hsr debugfs directory [ 153.087801][ T6838] veth1_vlan: entered promiscuous mode [ 153.174514][ T51] Bluetooth: hci0: command tx timeout [ 153.593952][ T7091] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.671632][ T6838] veth0_macvtap: entered promiscuous mode [ 153.697183][ T7091] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.761100][ T6838] veth1_macvtap: entered promiscuous mode [ 153.839650][ T7091] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.938761][ T7091] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.117569][ T6838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.203159][ T6838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.387191][ T6666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.396192][ T6666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.441738][ T6666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.476339][ T6666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.004865][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.284'. [ 155.133841][ T7237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.232001][ T7091] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.257742][ T51] Bluetooth: hci0: command tx timeout [ 155.297578][ T7240] macvlan2: entered promiscuous mode [ 155.339563][ T7240] macvlan2: entered allmulticast mode [ 155.378680][ T7240] bond1: (slave macvlan2): Opening slave failed [ 155.537452][ T7091] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.638922][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.683712][ T7091] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 155.713675][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.745962][ T7091] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 155.931567][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.943136][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.336755][ T7091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.511937][ T7091] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.553013][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.560249][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.622214][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.629494][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.946933][ T6672] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.196334][ T6672] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.334647][ T51] Bluetooth: hci0: command tx timeout [ 157.399722][ T6672] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.541422][ T6672] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.008370][ T6672] bridge_slave_1: left allmulticast mode [ 158.014087][ T6672] bridge_slave_1: left promiscuous mode [ 158.057645][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.118105][ T6672] bridge_slave_0: left allmulticast mode [ 158.132674][ T6672] bridge_slave_0: left promiscuous mode [ 158.153303][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.688790][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 158.703125][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 158.711494][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 158.721648][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 158.732065][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 158.865645][ T6672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.878518][ T6672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.889375][ T6672] bond0 (unregistering): Released all slaves [ 158.912714][ T7091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.583513][ T6672] hsr_slave_0: left promiscuous mode [ 159.617874][ T6672] hsr_slave_1: left promiscuous mode [ 159.623985][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.642591][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.664266][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.684043][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.732652][ T6672] veth1_macvtap: left promiscuous mode [ 159.759621][ T6672] veth0_macvtap: left promiscuous mode [ 159.774807][ T6672] veth1_vlan: left promiscuous mode [ 159.786532][ T6672] veth0_vlan: left promiscuous mode [ 160.397288][ T6672] team0 (unregistering): Port device team_slave_1 removed [ 160.432171][ T6672] team0 (unregistering): Port device team_slave_0 removed [ 160.774304][ T51] Bluetooth: hci2: command tx timeout [ 160.882212][ T7091] veth0_vlan: entered promiscuous mode [ 160.908731][ T7091] veth1_vlan: entered promiscuous mode [ 161.038818][ T7091] veth0_macvtap: entered promiscuous mode [ 161.070967][ T7091] veth1_macvtap: entered promiscuous mode [ 161.173244][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.210551][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.262285][ T7320] chnl_net:caif_netlink_parms(): no params data found [ 161.496281][ T6679] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.509148][ T6679] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.529821][ T6679] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.583797][ T6679] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.941155][ T7320] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.970465][ T7320] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.979845][ T7320] bridge_slave_0: entered allmulticast mode [ 162.017912][ T7320] bridge_slave_0: entered promiscuous mode [ 162.047202][ T7320] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.084566][ T7320] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.091883][ T7320] bridge_slave_1: entered allmulticast mode [ 162.126496][ T7320] bridge_slave_1: entered promiscuous mode [ 162.512216][ T7320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.550939][ T6679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.583885][ T6679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.658888][ T7320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.854497][ T51] Bluetooth: hci2: command tx timeout [ 162.892413][ T7397] syzkaller0: entered promiscuous mode [ 162.901999][ T7397] syzkaller0: entered allmulticast mode [ 162.924715][ T7320] team0: Port device team_slave_0 added [ 162.936942][ T6672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.952307][ T6672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.550594][ T7320] team0: Port device team_slave_1 added [ 164.567961][ T7407] tipc: Enabled bearer , priority 10 [ 164.629628][ T7408] tipc: Resetting bearer [ 164.739980][ T7320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.747721][ T7320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.783335][ T7320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.822789][ T7320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.832984][ T7320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.860371][ T7320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.872350][ T7404] tipc: Resetting bearer [ 164.935365][ T51] Bluetooth: hci2: command tx timeout [ 165.052726][ T7416] block nbd3: NBD_DISCONNECT [ 165.577350][ T5939] tipc: Node number set to 2013099299 [ 166.108929][ T6682] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 166.269778][ T7404] tipc: Disabling bearer [ 166.632966][ T6682] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.693640][ T7320] hsr_slave_0: entered promiscuous mode [ 166.715769][ T7320] hsr_slave_1: entered promiscuous mode [ 166.736922][ T7320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.750876][ T7320] Cannot create hsr debugfs directory [ 166.861505][ T6682] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.014977][ T51] Bluetooth: hci2: command tx timeout [ 167.073513][ T6682] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.136976][ T7441] netlink: 136 bytes leftover after parsing attributes in process `syz.3.323'. [ 167.381012][ T6682] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.053288][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.062563][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.070917][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.079945][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.089337][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 168.153668][ T7458] tipc: Started in network mode [ 168.160686][ T7458] tipc: Node identity 3e0c087f1efe, cluster identity 4711 [ 168.168338][ T7458] tipc: Enabled bearer , priority 10 [ 168.231614][ T7462] tipc: Resetting bearer [ 168.338904][ T7457] tipc: Resetting bearer [ 169.188314][ T5859] tipc: Node number set to 552732799 [ 169.772386][ T7457] tipc: Disabling bearer [ 170.124111][ T6682] bridge_slave_1: left allmulticast mode [ 170.134346][ T51] Bluetooth: hci0: command tx timeout [ 170.143686][ T6682] bridge_slave_1: left promiscuous mode [ 170.163056][ T6682] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.196716][ T6682] bridge_slave_0: left allmulticast mode [ 170.212268][ T6682] bridge_slave_0: left promiscuous mode [ 170.243728][ T6682] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.045260][ T6682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.070616][ T6682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.087954][ T6682] bond0 (unregistering): Released all slaves [ 171.391985][ T7503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.340'. [ 172.017522][ T6682] hsr_slave_0: left promiscuous mode [ 172.052195][ T6682] hsr_slave_1: left promiscuous mode [ 172.067456][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.104429][ T6682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.133127][ T6682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.154336][ T6682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.214330][ T51] Bluetooth: hci0: command tx timeout [ 172.250182][ T6682] veth1_macvtap: left promiscuous mode [ 172.264542][ T6682] veth0_macvtap: left promiscuous mode [ 172.273929][ T6682] veth1_vlan: left promiscuous mode [ 172.283815][ T6682] veth0_vlan: left promiscuous mode [ 173.222047][ T6682] team0 (unregistering): Port device team_slave_1 removed [ 173.260683][ T6682] team0 (unregistering): Port device team_slave_0 removed [ 173.943620][ T7320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.030911][ T7320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 174.097281][ T7320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 174.149277][ T7320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 174.224362][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.349'. [ 174.308784][ T51] Bluetooth: hci0: command tx timeout [ 174.337459][ T7460] chnl_net:caif_netlink_parms(): no params data found [ 175.042391][ T7460] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.068235][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.077576][ T7460] bridge_slave_0: entered allmulticast mode [ 175.099579][ T7460] bridge_slave_0: entered promiscuous mode [ 175.178836][ T7460] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.213958][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.243711][ T7460] bridge_slave_1: entered allmulticast mode [ 175.260580][ T7460] bridge_slave_1: entered promiscuous mode [ 175.418019][ T7460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.452692][ T7460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.589179][ T7460] team0: Port device team_slave_0 added [ 175.610795][ T7460] team0: Port device team_slave_1 added [ 175.731198][ T7460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.754699][ T7460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.785170][ T7460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.801020][ T7460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.808506][ T7460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.839490][ T7460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.920820][ T7320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.106719][ T7460] hsr_slave_0: entered promiscuous mode [ 176.130930][ T7460] hsr_slave_1: entered promiscuous mode [ 176.153171][ T7460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.170052][ T7460] Cannot create hsr debugfs directory [ 176.377998][ T51] Bluetooth: hci0: command tx timeout [ 176.516526][ T7320] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.686737][ T6672] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.693984][ T6672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.771533][ T6672] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.778716][ T6672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.508170][ T7650] lo speed is unknown, defaulting to 1000 [ 177.558698][ T7650] lo speed is unknown, defaulting to 1000 [ 177.591292][ T7460] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 177.663892][ T7650] lo speed is unknown, defaulting to 1000 [ 177.673784][ T7460] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 177.730557][ T7650] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 177.742878][ T7460] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 177.778875][ T7460] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 177.787070][ T7650] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 177.933247][ T7650] lo speed is unknown, defaulting to 1000 [ 177.971596][ T7650] lo speed is unknown, defaulting to 1000 [ 177.994826][ T7320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.021257][ T7650] lo speed is unknown, defaulting to 1000 [ 178.061666][ T7650] lo speed is unknown, defaulting to 1000 [ 178.092646][ T7650] lo speed is unknown, defaulting to 1000 [ 178.117463][ T7650] lo speed is unknown, defaulting to 1000 [ 178.162409][ T7460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.178736][ T7320] veth0_vlan: entered promiscuous mode [ 178.217713][ T7460] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.253612][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.260896][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.306766][ T7320] veth1_vlan: entered promiscuous mode [ 178.341062][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.348425][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.480312][ T7677] lo speed is unknown, defaulting to 1000 [ 178.548245][ T7320] veth0_macvtap: entered promiscuous mode [ 178.579549][ T7460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 178.650455][ T7320] veth1_macvtap: entered promiscuous mode [ 178.812162][ T7320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.922980][ T7320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.002816][ T6666] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.032382][ T7690] lo speed is unknown, defaulting to 1000 [ 179.039300][ T6666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.069346][ T6666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.083901][ T6666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.506658][ T7709] xt_CT: No such helper "pptp" [ 179.932323][ T7460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.055307][ T7717] lo speed is unknown, defaulting to 1000 [ 180.127676][ T7723] lo speed is unknown, defaulting to 1000 [ 180.137075][ T6666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.167841][ T6666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.447017][ T6666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.461626][ T6666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.854970][ T7460] veth0_vlan: entered promiscuous mode [ 181.011661][ T7460] veth1_vlan: entered promiscuous mode [ 181.238859][ T7460] veth0_macvtap: entered promiscuous mode [ 181.277936][ T7460] veth1_macvtap: entered promiscuous mode [ 181.373393][ T7460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.551337][ T6672] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.632153][ T7460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.707953][ T6672] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.750549][ T6682] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.787367][ T6682] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.814899][ T6682] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.823896][ T6682] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.873885][ T6672] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.987080][ T6672] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.035269][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.043170][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.100772][ T6666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.119227][ T6666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.206187][ T6672] bridge_slave_1: left allmulticast mode [ 182.211908][ T6672] bridge_slave_1: left promiscuous mode [ 182.223175][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.248032][ T6672] bridge_slave_0: left allmulticast mode [ 182.253818][ T6672] bridge_slave_0: left promiscuous mode [ 182.265310][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.249896][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.260066][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.269707][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.279111][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.292197][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.353192][ T6672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.370157][ T6672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.380919][ T6672] bond0 (unregistering): Released all slaves [ 183.778474][ T7782] lo speed is unknown, defaulting to 1000 [ 184.048129][ T7797] lo speed is unknown, defaulting to 1000 [ 184.119707][ T6672] hsr_slave_0: left promiscuous mode [ 184.139750][ T6672] hsr_slave_1: left promiscuous mode [ 184.164731][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.192643][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.223880][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.252627][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.329775][ T6672] veth1_macvtap: left promiscuous mode [ 184.351538][ T6672] veth0_macvtap: left promiscuous mode [ 184.370493][ T6672] veth1_vlan: left promiscuous mode [ 184.384298][ T6672] veth0_vlan: left promiscuous mode [ 185.247532][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.269567][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.279636][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.291383][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.304417][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.335112][ T51] Bluetooth: hci0: command tx timeout [ 185.646466][ T6672] team0 (unregistering): Port device team_slave_1 removed [ 185.709183][ T6672] team0 (unregistering): Port device team_slave_0 removed [ 186.512224][ T7828] lo speed is unknown, defaulting to 1000 [ 186.564844][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 186.574630][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'. [ 186.832548][ T7797] chnl_net:caif_netlink_parms(): no params data found [ 187.231260][ T7828] chnl_net:caif_netlink_parms(): no params data found [ 187.252646][ T7797] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.271039][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.280265][ T7797] bridge_slave_0: entered allmulticast mode [ 187.287934][ T7797] bridge_slave_0: entered promiscuous mode [ 187.314675][ T7861] netlink: 'syz.2.408': attribute type 29 has an invalid length. [ 187.323684][ T7864] netlink: 'syz.2.408': attribute type 29 has an invalid length. [ 187.334647][ T51] Bluetooth: hci2: command tx timeout [ 187.348349][ T7797] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.356285][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.363694][ T7797] bridge_slave_1: entered allmulticast mode [ 187.371702][ T7797] bridge_slave_1: entered promiscuous mode [ 187.414449][ T51] Bluetooth: hci0: command tx timeout [ 187.447544][ T6672] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.504921][ T7863] lo speed is unknown, defaulting to 1000 [ 187.526832][ T7797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.540147][ T7797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.701526][ T6672] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.873828][ T7828] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.894352][ T7828] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.901786][ T7828] bridge_slave_0: entered allmulticast mode [ 187.915171][ T7828] bridge_slave_0: entered promiscuous mode [ 187.957842][ T6672] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.995860][ T7797] team0: Port device team_slave_0 added [ 188.025069][ T7828] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.036755][ T7828] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.044899][ T7828] bridge_slave_1: entered allmulticast mode [ 188.053541][ T7828] bridge_slave_1: entered promiscuous mode [ 188.118016][ T7797] team0: Port device team_slave_1 added [ 188.232167][ T6672] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.391918][ T7828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.419191][ T7797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.432065][ T7797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.463955][ T7797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.481231][ T7828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.537680][ T7797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.545872][ T7797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.575068][ T7797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.615054][ T7828] team0: Port device team_slave_0 added [ 188.631487][ T7828] team0: Port device team_slave_1 added [ 188.726338][ T7797] hsr_slave_0: entered promiscuous mode [ 188.732994][ T7797] hsr_slave_1: entered promiscuous mode [ 188.741585][ T7797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.749723][ T7797] Cannot create hsr debugfs directory [ 188.768450][ T7828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.776716][ T7828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.804756][ T7828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.915656][ T7828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.930948][ T7828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.970330][ T7828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.018095][ T6672] bridge_slave_1: left allmulticast mode [ 189.023962][ T6672] bridge_slave_1: left promiscuous mode [ 189.029953][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.040840][ T6672] bridge_slave_0: left allmulticast mode [ 189.047604][ T6672] bridge_slave_0: left promiscuous mode [ 189.053414][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.415872][ T51] Bluetooth: hci2: command tx timeout [ 189.505858][ T51] Bluetooth: hci0: command tx timeout [ 189.552436][ T6672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.565341][ T6672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.579988][ T6672] bond0 (unregistering): Released all slaves [ 189.803710][ T7828] hsr_slave_0: entered promiscuous mode [ 189.833747][ T7828] hsr_slave_1: entered promiscuous mode [ 189.843558][ T7828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.851428][ T7828] Cannot create hsr debugfs directory [ 190.403723][ T6672] hsr_slave_0: left promiscuous mode [ 190.416638][ T6672] hsr_slave_1: left promiscuous mode [ 190.423392][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.435891][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.448975][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.458983][ T6672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.492700][ T6672] veth1_macvtap: left promiscuous mode [ 190.504814][ T6672] veth0_macvtap: left promiscuous mode [ 190.510579][ T6672] veth1_vlan: left promiscuous mode [ 190.516424][ T6672] veth0_vlan: left promiscuous mode [ 191.154714][ T6672] team0 (unregistering): Port device team_slave_1 removed [ 191.196815][ T6672] team0 (unregistering): Port device team_slave_0 removed [ 191.497698][ T51] Bluetooth: hci2: command tx timeout [ 191.574524][ T51] Bluetooth: hci0: command tx timeout [ 191.633097][ T7934] lo speed is unknown, defaulting to 1000 [ 191.698181][ T7946] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 191.717318][ T7946] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 191.729444][ T7946] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 192.290350][ T7967] netlink: 'syz.4.442': attribute type 4 has an invalid length. [ 192.309767][ T7967] netlink: 'syz.4.442': attribute type 4 has an invalid length. [ 192.782314][ T7797] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.825887][ T7797] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.147003][ T7978] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 193.166611][ T7797] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.289528][ T7797] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.370974][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.448'. [ 193.371670][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806d3b3c00: rx timeout, send abort [ 193.389571][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806d3b3c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 193.404285][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806d3b3800: rx timeout, send abort [ 193.413630][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88806d3b3800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 193.434028][ T7828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 193.462155][ T7828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 193.481827][ T7828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 193.503267][ T7828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 193.575120][ T51] Bluetooth: hci2: command tx timeout [ 193.807096][ T7797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.849068][ T7828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.905061][ T7797] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.931043][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.938351][ T6677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.961597][ T7828] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.012105][ T6682] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.019426][ T6682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.032803][ T6682] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.040064][ T6682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.091381][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.098676][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.918936][ T7797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.960386][ T7828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.997947][ T8027] netlink: 'syz.3.457': attribute type 3 has an invalid length. [ 195.011035][ T8027] netlink: 'syz.3.457': attribute type 3 has an invalid length. [ 195.042188][ T8025] lo speed is unknown, defaulting to 1000 [ 195.233069][ T7828] veth0_vlan: entered promiscuous mode [ 195.277016][ T7797] veth0_vlan: entered promiscuous mode [ 195.383819][ T8035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'. [ 195.501696][ T7828] veth1_vlan: entered promiscuous mode [ 195.581132][ T7797] veth1_vlan: entered promiscuous mode [ 195.742081][ T7797] veth0_macvtap: entered promiscuous mode [ 195.751043][ T7828] veth0_macvtap: entered promiscuous mode [ 195.771051][ T8047] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 195.840479][ T8047] 8021q: adding VLAN 0 to HW filter on device bond2 [ 195.853995][ T7797] veth1_macvtap: entered promiscuous mode [ 195.927701][ T8051] bond2: (slave ip6erspan0): making interface the new active one [ 195.941932][ T8051] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 195.952632][ T7828] veth1_macvtap: entered promiscuous mode [ 195.996187][ T8054] syz_tun: entered allmulticast mode [ 196.039990][ T7828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.089160][ T7828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.106272][ T8057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.468'. [ 196.199487][ T7797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.258712][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.268374][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.290911][ T8049] syz_tun: left allmulticast mode [ 196.305708][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.332079][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.389230][ T7797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.456946][ T8061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.488350][ T6682] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.525598][ T6670] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.554043][ T6670] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.569237][ T8061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.581738][ T6670] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.649504][ T8061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.700008][ T6666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.726627][ T6666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.763302][ T6682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.771963][ T6682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.824743][ T6670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.833909][ T6670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.890963][ T6682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.904935][ T6682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.059487][ T7828] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 197.071430][ T7828] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 197.079870][ T7828] CPU: 0 UID: 0 PID: 7828 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 197.092022][ T7828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.102091][ T7828] RIP: 0010:klist_remove+0x14a/0x340 [ 197.107413][ T7828] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 57 bd f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 57 bd f6 49 8b 44 24 58 48 89 44 24 08 [ 197.127212][ T7828] RSP: 0018:ffffc900030b7840 EFLAGS: 00010202 [ 197.133316][ T7828] RAX: 000000000000000b RBX: ffff888025811e00 RCX: 0000000000000000 [ 197.135773][ T6666] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 197.141296][ T7828] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 197.141314][ T7828] RBP: ffffc900030b7928 R08: ffffffff8f888803 R09: 1ffffffff1f11100 [ 197.141331][ T7828] R10: dffffc0000000000 R11: fffffbfff1f11101 R12: 0000000000000000 [ 197.175407][ T7828] R13: 1ffff110052a2d8c R14: ffff888029516c60 R15: dffffc0000000000 [ 197.183408][ T7828] FS: 0000000000000000(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 197.192349][ T7828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.198958][ T7828] CR2: 00002000000009c0 CR3: 00000000332e2000 CR4: 00000000003526f0 [ 197.207046][ T7828] Call Trace: [ 197.210337][ T7828] [ 197.213278][ T7828] ? __pfx_klist_remove+0x10/0x10 [ 197.218322][ T7828] ? __pfx_kobject_move+0x10/0x10 [ 197.223419][ T7828] ? get_device_parent+0x366/0x3a0 [ 197.228543][ T7828] device_move+0x193/0x700 [ 197.232973][ T7828] hci_conn_del_sysfs+0xb8/0x170 [ 197.237923][ T7828] hci_conn_del+0x8ff/0xcb0 [ 197.242467][ T7828] hci_conn_hash_flush+0x191/0x230 [ 197.247587][ T7828] hci_dev_close_sync+0xaef/0x1330 [ 197.252713][ T7828] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 197.258268][ T7828] ? up_write+0x1c4/0x420 [ 197.262610][ T7828] hci_unregister_dev+0x21a/0x510 [ 197.267644][ T7828] vhci_release+0x80/0xd0 [ 197.271984][ T7828] ? __pfx_vhci_release+0x10/0x10 [ 197.277025][ T7828] __fput+0x449/0xa70 [ 197.281028][ T7828] task_work_run+0x1d1/0x260 [ 197.285654][ T7828] ? __pfx_task_work_run+0x10/0x10 [ 197.290795][ T7828] ? kmem_cache_free+0x18f/0x400 [ 197.295752][ T7828] do_exit+0x6b5/0x22e0 [ 197.299924][ T7828] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 197.305311][ T7828] ? __pfx_do_exit+0x10/0x10 [ 197.309912][ T7828] ? _raw_spin_unlock_irq+0x23/0x50 [ 197.315118][ T7828] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.320347][ T7828] do_group_exit+0x21c/0x2d0 [ 197.324963][ T7828] __x64_sys_exit_group+0x3f/0x40 [ 197.329998][ T7828] x64_sys_call+0x21ba/0x21c0 [ 197.334685][ T7828] do_syscall_64+0xfa/0x3b0 [ 197.339206][ T7828] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.344450][ T7828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.350549][ T7828] ? clear_bhb_loop+0x60/0xb0 [ 197.355238][ T7828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.361137][ T7828] RIP: 0033:0x7fa90478e929 [ 197.365572][ T7828] Code: Unable to access opcode bytes at 0x7fa90478e8ff. [ 197.372585][ T7828] RSP: 002b:00007ffe497619d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 197.381011][ T7828] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa90478e929 [ 197.388993][ T7828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 197.396967][ T7828] RBP: 00007fa9047ee8f0 R08: 00007ffe4975f777 R09: 0000000000000003 [ 197.404939][ T7828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.412914][ T7828] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffe49761b90 [ 197.420900][ T7828] [ 197.423925][ T7828] Modules linked in: [ 197.429096][ T7828] ---[ end trace 0000000000000000 ]--- [ 197.442514][ T7828] RIP: 0010:klist_remove+0x14a/0x340 [ 197.447957][ T7828] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 57 bd f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 57 bd f6 49 8b 44 24 58 48 89 44 24 08 [ 197.467969][ T7828] RSP: 0018:ffffc900030b7840 EFLAGS: 00010202 [ 197.474089][ T7828] RAX: 000000000000000b RBX: ffff888025811e00 RCX: 0000000000000000 [ 197.482153][ T7828] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 197.496585][ T7828] RBP: ffffc900030b7928 R08: ffffffff8f888803 R09: 1ffffffff1f11100 [ 197.512235][ T7828] R10: dffffc0000000000 R11: fffffbfff1f11101 R12: 0000000000000000 [ 197.535110][ T7828] R13: 1ffff110052a2d8c R14: ffff888029516c60 R15: dffffc0000000000 [ 197.543710][ T7828] FS: 0000000000000000(0000) GS:ffff888125c16000(0000) knlGS:0000000000000000 [ 197.584990][ T7828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.591616][ T7828] CR2: 00007f11f2ce8710 CR3: 000000000df38000 CR4: 00000000003526f0 [ 197.614160][ T7828] Kernel panic - not syncing: Fatal exception [ 197.620664][ T7828] Kernel Offset: disabled [ 197.625001][ T7828] Rebooting in 86400 seconds..