last executing test programs: 17m41.505887761s ago: executing program 0 (id=7955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 17m37.170992075s ago: executing program 2 (id=7958): socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, 0x0, 0x24000841) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), r0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'gretap0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=ANY=[@ANYBLOB="d40000001000010400400000000000000000ff", @ANYRES32=0x0, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}]}]}, 0x34}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 17m35.489681729s ago: executing program 0 (id=7960): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x6, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x6}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='cdg', 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000c8c1) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="9683368ea289f40fc7c257b03df3fd45d2f7dd55ebdd128c78f6a99bd0ec2e9f137a26d93994616c4259babe3dadc6b249941359190de6265a63d15fb59c1f99f685891dd754f1ac86a0eb390e658df5a3a208722acc11625044b8ae13e0aaa25b03dbd45d492fc0c50391f1de94de3978dbbc8894d58604dc7717c9", 0x7c, 0x4008010, &(0x7f0000000240)={0x2, 0x4e24, @empty}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42014}, 0x80000) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) write$nci(r1, &(0x7f0000000280)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x8}, 0xfffffcdd) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xbb8}, 0x1, 0x0, 0x0, 0x4}, 0x1) 17m32.588672183s ago: executing program 3 (id=7962): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newlink={0x154, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x786c4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_VF_PORTS={0x11c, 0x18, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_VF={0x8, 0x1, 0xd}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9f1158ff390e501084660d784ba4fd8f"}]}, {0x30, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "31d3605e1d96bc727dc73aab7d891cf0"}, @IFLA_PORT_VF={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "34fc7fe6ca380b4fce33d32e1773938d"}]}, {0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xe3}, @IFLA_PORT_PROFILE={0x8, 0x2, '#,,\x00'}]}, {0x88, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, 'ip6gre\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "17648dc18dac6abaf3018ff0f5641c52"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d239a2fa3063731386b0bcd15f9a6a6b"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2180b12daca88b9316d295e109583612"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d316289e8efa501a8e3c7b2da33efa2a"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7dba8c3b3ada95c21e9937dcdc31a204"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "889b5e4dc13e088f4dc5544d60a53404"}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="54010000", @ANYRES16=r4, @ANYBLOB="017d26bd7000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="0600cd00000000002d013300802009000802110000010802110000005050505050505f00ffffff"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 17m31.381295873s ago: executing program 2 (id=7964): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, 0x4000804) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}, @NFTA_LOG_LEVEL={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x76, &(0x7f0000000000)="5e3145c608286edd5129cbb97678547b56736edfcc75ecd1c7ca188a9addd929e36fea6250e2b9bed272f84bd606d963c100d2b7a0a225ba10dec65b6f9636f78c7a00d4922667c07569f1a374286b607b7e0727925e60ba1ab80cab700dabda202c5395c84c58426eacaa627ab9") ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 17m30.620057752s ago: executing program 0 (id=7966): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x800, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1000, 0x40, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x4000, 0x40, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x0, 0x0, 0x0) 17m28.769922977s ago: executing program 3 (id=7967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48800) 17m27.89869108s ago: executing program 1 (id=7968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000feffffff2e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000202020202020000180049"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 17m27.566607885s ago: executing program 2 (id=7969): r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socket$tipc(0x1e, 0x2, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r3, &(0x7f0000000200), 0x0) 17m26.223207869s ago: executing program 0 (id=7970): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 17m24.948550528s ago: executing program 3 (id=7972): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 17m24.0262192s ago: executing program 1 (id=7973): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 17m22.090956201s ago: executing program 0 (id=7974): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) socket(0x10, 0x3, 0x0) 17m22.018133442s ago: executing program 2 (id=7975): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 17m21.678353655s ago: executing program 3 (id=7977): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0xe99f, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x61) write(r0, &(0x7f0000000200)="89", 0xffe3) 17m19.419272683s ago: executing program 1 (id=7978): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 17m19.09896967s ago: executing program 2 (id=7979): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b44380100", '\x00\t\x00', "066580001e00"}, 0x38) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="8c67a9201eaf6802c071ce0e5c117cafa62ffae93b59ee34a2d185dbe5cd4a907b610679d61d5d81289b6f4f83f25061ca5a4ec36746942615425265b33e04b38e03bb99b6f9774066c76a4b2a7015eda88c0d2ec5f766e1369504f7590ca24758406a16c17c275c214d348407fba0c7b44a50a8f4e59bd7e49bd26781b5c354f6", 0x81}], 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) 17m18.337700903s ago: executing program 0 (id=7981): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x10, 0x1, 0x7, 0x200, {{0x10, 0x4, 0x1, 0x7, 0x40, 0x66, 0x0, 0x2, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x37}, {[@timestamp_addr={0x44, 0x2c, 0x85, 0x1, 0x1, [{@empty, 0xdb5}, {@rand_addr=0x64010101, 0x101}, {@empty, 0x2}, {@multicast2, 0x101}, {@loopback, 0x9}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xfff0, 0xffff}, {0x8, 0x3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba0c55d0857051fbe39a70744b2b3b311f307df2b46fc25991e3c9ac33fc1ec4bb491bb7fd3c51347a394dc9eca4c41667c625d2b60bae0f2ef881fe0b9f7882b69875260f5b0d09085a3e9ec34e9d231e5d5b7c8803fe9e"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000640)={0x1, 0x2, 0xa16}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6gre0\x00', r3, 0x0, 0x6, 0x1, 0xffffff7f, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x700, 0x700, 0x7ee8, 0x1}}) 17m17.953272765s ago: executing program 3 (id=7982): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce2200"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 17m16.692206538s ago: executing program 2 (id=7983): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="04000a000800090001ac0f008000508011000100d88a49cdf4b8e72e5279843bae00000009000100ad2439c5660000000500091502000000040006"], 0xb0}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 17m15.918019872s ago: executing program 1 (id=7984): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) 17m13.333791938s ago: executing program 3 (id=7986): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "afe1658d587e93ab4b5fca380cdddd71e95c81000bac90d9689507b96ace5d2f9f55fddb8b36c7cac9209681a5fa01cd3874b06f2fcadd0d6c3b2543560ad96ffb3b3bb528250d54c3849e85a72f9805820433eaf86b855cc6bb316351ebf38753b22f619e6525c21a5050c57297595293366a0ed2ad9b308f845f1d9af97cf6384f5ec26ca2afea4eb950f209116b1d8b58fe396fcfb8ae0b8898f212b216cbb7d1bbd57a726d194a29a4e15e035b8162b139c67404e6a503db799c06078f56258de59c08f1812611aff6d4485a01f3413b9b4a11412629c2a4810db413d940af170b313dcf9a1e08e0156a7784c413ffa69bfb6b135b6093ad19c7f8bc70e5f9a0bcf07eb164c44642489845d93c25064c768ff253b3faf52378653b61ed2f3460a2221e6d9b2c04e99cd9fe74c005a330a08f558771a77771a1d1eb8b110912dbc327e07869f73b857cb841b5a47296a81d956c030dee87fda743cf9e56d08856a82ee26a390ac2569a31ca9beccda0251f28b124ee1e8ea6babc1b1e2d81fc795de9620301d65ded5865c5a9f6ce7422536d40694c2aa987542364f7f0bb75bdb0182d10b18a64045c7dadc0c82a47eab7e735fe240f27bb5da305cd08c86314a4a5fef8487c96bc1ea97409d73e1cc6ceba35f74eea39f2bf881833298b1e1a201eb9ea9c0754d41ef9a91b4deefcaeff08ee35a1f31b2d780b3934d5913626ef4a0f31c8e057e43ff14fc6fbf5e4a86b906b1ba320f3c52b629974a1324d97067935df1e4340b071130ee953bababf9dc0229e4a2f29cf1ae2713ffe85a5a9bd374c928ed416e1bd2516657bd4d3a9ac114ed279fcd89645245df7c55454fc367513ffae594d5236b320ad103f2d0956b3da7344a29fc910040027ca8b239d00ab5e79eeb83e25275fb61ceb65f6ace88cb43f106e128330ae709e19f209afd87b934dbd0faf470dfb52fdfd73bfa9a7a983b36d78469568ae69a0481cdc764c554d5ac03e607781cf3a5e209bffce2276529929d800f6d9b8a2f100108d7b883b5ce5e19da38ae5c99a8351b4e41c538fee7299a890edc630abbfe604c0b8847a7b5b4eec1dc00ed60e95b5374270ec634ff6d6ccbcd08145f9df1c2082c9447482ed42b4d0ea9a73bc9a68e36ee9e118bb5c08e1e7c2bd2627e82902d2c6f0da90bdbc52103f3992663653fd2b41a4294aa8f222812fa8b5e1864b75748f992bc2b396c03e202e8bfe9a1ccca1cb8b28c9c6faa47cc6b871140ddc45a0d02c752175a0498c3ba30e79c12d6ebbc32d5533d0216529e0f713eac725fe41bad4c9051d364bf38e3b72641510b09b2645447ea13b440d568adc9aa9ce85c967d78a14bdbd2fcfe0c7324a556ee841fc9ffd7a3c784fe41a349ced68e01c145db8847a547086c5595b9f6299bf7432e0e9c9a4a9108a24f7ad49c18a3ec771953480a0a0fdfeaded6b74f174ea2def77a0b9799f6b75a77a6314a4165e194be616eb5c98726d88da79f54fd01d39e751837a6bd0d77ca79073b3a7e62686fd8e089b0258645db505bb674174d626b1d1cfdf0f32b0d880884b73c63bc78a231a8cb45a12884907c021f87cdd7b2f1de020044666d38a866983c8ffa0cc6963a745c108e80a3b54eedac65b68c897043d914f146ba4ca18a61e144e7746d31879fa7ae7c2a43747e6060d79669bf9a8edcc229b7f1a0fe239b398692a6a65acd19c58442dfa8997430aab89aae8fb8f201bb1fd58605cf9dfe5c85a15e0928542a8fd7768f4b7750c7aeab8d9ced7c9fdea6cc38bc38209f608cc3d7c8bc9240b5b7d1661b8bfd231f30047befefd70183fb8330d184394159cd4153990c6a43ccded133adecced28499e73c4b25ee86e5d68848670736362931be74fe0aab5708ce05f4d6d7a068c590d36f99a0ba3501df60d9c01f54a7c366727287996de354c4a3a5e1ece988e5f59087c730afa107edbab31de441a88061ad799fefef86254a2f2891aa47420dd3f6267833a5345bf001d10c9f1fd121401ae846a9a5df517210cd0beb50a5139854aa1747115bca24522dae42667ef9ce893c4db108941198ed5323f582f11c4b13385f60b3038fa661f3ed276504fb51fb966ef88cbbb953c269ea2ed989ced5e8988839c55b398dbce98ce1e976c2065b2ded80f929dc6ef8afad6b61145686ce14e2d26f0694fda1e52a6c5155c0d8ea91544c76548a25376f13de7245b48e7298421d2c2433a472a8c89c3e621c5370654e1c7bba0f3d8bdf40c36cdbf02f6b5a7c4138b9e3931896fd89272b4d61a9875c00ba0d8d1bd960b9aaee3b6f127db1155680d7eefc5eaa6d4c648fca303706796bef110fbdb731d9e671f937e55ebf5d2e64f7cdcc073c905c134e8d3852689ed81c95be0c259816e7ff7b979557684aa1b6c2dd42754bda93e3e55c5ffc1122c988ca171fd57ab24ebe789e819c60ff3f9f1a9465ff4a9bdc5c2b2d9c351ffef5ab375f9024e297a26642b15108781fdf3c55d0aa9a8cb68ba93b7b13cd6d05b9b16502d7f9d72d015059e7999cc4ed880fd5ebf626ea409b9f0c4ded2974bb3daf88cc1930818dc3e09200897389211d3e780faa0acd64e37c60924a3fd0a16a7146a41b1b01e43fecf610c7d11d42baac5a60db7638077162cd58b3f734070e81ee71c5092422eaac366b41dd996723124df9005cbae4e2ec47f8a06616bd7faa5da6c0200c872c2ef929a16c823c57f2d4f798061e49102cab3af65a5cc9f8856dc5d3c0de1440c4d8df50a7ec09491d2e651ee5f5a76b8fc2d20a07def1a8951b9770f85728b42cd9dafce7c341c26a90b7d1c2e36f03f74eda3bfb2c40eec5c454c38e90f4d31e6a0f23b2ad53a429f73761713181b7839792cc494f21c5be9dd7f167a6681720ccd3cfcdd4b427058b995505a82993805a1860d5ea75e61c216ec9594adfd39cab47511578d57e312f2f3e0d2da8f2d8dbe3fc1fd281bdd8e7dbd203e4ec3e7d3b468ad2b81a76c5bac460f497e3cdb6bf0c6be5ceae4bd488b9597b13a37885b95426d8ea06760516ec13aa339084407d1f45e331e5dd77ac73306f70996728a0d67b48a833e9a3ddf22968e898b59e4b4c9a16aa9ea8120202737746e1a5ec2cca9640d69df2b27900de7abe573b7c023a88d7f3fcc3469a3a4e7f9f9095a6fed55fbb1d3582807407e62b55a38d33e70a0203513f30d37a4e6f03acd9d0fd2f3438eb485aa5e693806c002efd0811ab92518c41856039d7f36cf9981981231b3cea3493f0e8988bd05d3d424a5bfc8d1cdfd0e09e3ce12cab6edfb7f6d80c1edbb4d1d51a1500b0876e13e5173bfeba378c71046e70b590cf542094d01f458a3cec642fb1ce13a992765eca608579e85f03e7d871dbdbd882ce4821a944179e48a920d346ae21b08ee043cbbf3284c3a67d9b9417a5fed1202ca537f7711650f692df044f145587467dfdd45405d7caeb064bfa12b52057e90d2b5d2885bbaf032db769654af272dd78bb8ec8446344d0c1ca57d51fe1243e0a02ada90371e75418223f171f014f9a970964828cdd9faf3b66789cefd0374437f2a271c2765d9876943fb93205cb12448d4cccf68c28259e85a540e013ac77414a147fb1e0f0fc4a4d859a928eaef6e952a103a944052534c9264c85f4200cc8b465f66725c779f49312a308dda8fe7e423ebbee16e64ad6e112b3efd95584160f08c83595fdddfa39c4b89867fcf23085a24c53a6d846863b95f5605beb9b0a1cc6d191524da81ce89c0f7767652d887661b5299e300f2e83a6c962cf9089d82b139f4bedcc14bbf6611258d52e1f3d5a5e3ac05cfa4d066550b2180c31695a52da12c1412e55cdbe6660d86fe4c8eda51f2adf34b81af8ec55b549c3bbcc588c5f074e0dc76bb9bbd0cdea26dd47d84d9321f970912d374a081c9ebb74700a0792dbbb2da41ae7e3aa5230bdd260bd208b68100dc2f7bf2132d7cb34084e999b6ee2b91356ce766523a80359147af20fa15febc42b89d43e4a48d13cb8ed6678f346aa981954e0520ea8cd0a0c16281e57f33a5e3fd97d55d24386832c17f22b1c1fb91d5b1f362f3bc8aa8369c18444fc10e9d1285f6a3bcf24e2606b69fbd89f337f7ee3c27b1a2c7e8dec2c38c84c6712de1e7f1d790d86d8e0a402c40d406d39c13879f4d103adcbca13570eadcd424f8e06155885b054e1d7f994723fd22a6d704a89e6b126271ec5c19ea7b814c36f9ca9a0223da630324ca0f2a3010f4e53426d8d514bcc3303e6fa429c00244b918c01a444f74dd376bccb5709ed103514484a67240c4b992c722601e27dee6ba8b37608ba66e2065f8298a6df8c0a491113bf10e0bf18867dda3e1170fa1853b355fdf41898de4a339927872e8d9fb8a4d1c31833ac1355695a20c75ff6dafb70244a3754cb58feee89045e3408da902a7987e6a66dad0f044951a560954ee812abe142e9a4db701bdc46fabb0b98b4be01dadd629cffc661a3816744bcacdc38777494289ba156b272ade8f4ed3e32ce48958863b09bb09fb6999281164c0c5b50a77350d5f3c78d951fa76d1db68587e58bd40f824a68fd59c4ebd4f7e22e8e1458911012472b876ab15ca8c48ef664b1da41bd1ad9a5b799a1de8b2962c477f1726cbbe4f285a5c387842ac723b3877f5826503b68602c4bdaea94544b4b056142876d995d0db128a38f5c4547f12cf9d1cbc678cd42eebf67519484ab251855dbda09dd04ddc031860a69fd592fa1c12d59adc4699c246a666f6f6c20c1a21562f05f8db43ff424cea0d16789a6a69dc8552f4865bb3fac5b650b549432a0383c8f95c79084ca4841903f0c04319135f2bfc94ec8837374f0c1eccaacf8a0722d54b1a0e748a79e6c7ecdcdbfe376d080d9747a9a5a13cc7eb4111345216d1c787f05c992df3712d2a194ac325bb568abc6a97011bc62110ee12ba209d76f690ddb4e4b417f5b5db52ee7ad97159dfcf82b1c2a4eb5a97396fa24e52ba1c47330f7caca91b2965bac75dbcb86ac85a07b774dbf82be5fc92a8621e80973418d94a0bc10905a3815e04d1a668ea8cb5ffb293893b06bd372c75b477118b78dd69a04097ca8ff8f8fb21a5293d2fe6785e33d15d61008c4ca84121a8e48fabba3656250fba7e058ffc1705c7fa13509fc7c96fc9b16d0b21a26b11ebfc3325a2ca682bc014ec54dc8433af105ada5566f491d3ebe5e1e5f0859b28a576fb7978f2a1b4897890c1c9b0c1f4f8c7351ca738a6100c4f64092d865bc65a8b92007b117e5a4dd7988d3281aa2ccebb36f9af5032eeca2c8a72888c84346d3945507a6bb956b84f03d88a90bb9ecc466c7d94a3670783e11b312ecb4f9eb8489df8d129110b6bd710138476c8be75327e9ea6a0b94b8567b31692fee2d9c17d7e20d3d23cc4d317710537f608793e87d9158cd61a43306898da40d01b544fc951ccd13f11b4b8fbf47d694df601fd6677d796818571ee3125089316e3d33c5684affe9f29f12186bb5dc4c5eaee94e41d07a03c9c59db95bc42c23da55c497caa6a64c73ea3059a8c80955a9730666a0e02c3bf87cfb79542d84a529d7bf9c3ac60b323952fa439c2e5fd512c3bfe3770178b4e8d7efa223bd76830a6b8b604e15773d63d9fec504ea6561793723ff4f6fbdd016372e1a98a9252e8d1607512e5397c78498f68d3792ef7a28f74f4b15358afa5674d4340863a2897af87499bd073a06aef8215f76c9418f5b82b79b77f0a01dfc059b510794cda70b7daf2c74950652e"}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1, @le_set_scan_param={{0x200b, 0x7}, {0x6, 0x8001, 0x7, 0x2, 0x2}}}, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0xa8}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 17m13.224458947s ago: executing program 1 (id=7987): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000440)="1c", 0x1, 0x24008095, &(0x7f0000000240)={0xa, 0x2, 0x41, @loopback, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="04", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="0f", 0x1}], 0x1}}], 0x2, 0x0) 17m10.530952409s ago: executing program 1 (id=7989): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6(0xa, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 17m2.803256021s ago: executing program 32 (id=7981): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x10, 0x1, 0x7, 0x200, {{0x10, 0x4, 0x1, 0x7, 0x40, 0x66, 0x0, 0x2, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x37}, {[@timestamp_addr={0x44, 0x2c, 0x85, 0x1, 0x1, [{@empty, 0xdb5}, {@rand_addr=0x64010101, 0x101}, {@empty, 0x2}, {@multicast2, 0x101}, {@loopback, 0x9}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xfff0, 0xffff}, {0x8, 0x3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r5, 0x0, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba0c55d0857051fbe39a70744b2b3b311f307df2b46fc25991e3c9ac33fc1ec4bb491bb7fd3c51347a394dc9eca4c41667c625d2b60bae0f2ef881fe0b9f7882b69875260f5b0d09085a3e9ec34e9d231e5d5b7c8803fe9e"], &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, &(0x7f0000000640)={0x1, 0x2, 0xa16}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6gre0\x00', r3, 0x0, 0x6, 0x1, 0xffffff7f, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, 0x700, 0x700, 0x7ee8, 0x1}}) 17m0.688436787s ago: executing program 33 (id=7983): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="04000a000800090001ac0f008000508011000100d88a49cdf4b8e72e5279843bae00000009000100ad2439c5660000000500091502000000040006"], 0xb0}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 16m57.410613733s ago: executing program 34 (id=7986): ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000180)={{}, "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"}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1, @le_set_scan_param={{0x200b, 0x7}, {0x6, 0x8001, 0x7, 0x2, 0x2}}}, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0xa8}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 16m53.939841636s ago: executing program 35 (id=7989): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6(0xa, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m43.218671151s ago: executing program 5 (id=8904): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@private=0xa010100, {0x0, 0xe839, 0x1a00000000000000, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x6, 0x0, 0xfffffffffffffffe}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8040880}, 0x2014) 1m42.64962786s ago: executing program 5 (id=8905): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) 1m41.908108048s ago: executing program 5 (id=8907): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="18000000010005", 0x7) close(r1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 1m39.400743219s ago: executing program 5 (id=8909): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000340)={{r3, 0x0, 0x498880, 0x0, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x6}, 0x1, &(0x7f0000000300)=[{0x2, 0x7, 0x0, &(0x7f0000000280)="50d6d8aab88eaba72eca4c14099594c748f0bc2c0dac6ba6bb7ce7ed86fccb45a7d9943ff91281643fe8c489b18ec3ef29aad6fadf308d8eb67c2030731e5e726b7951a5f9f598865c8e5a20412ffbddcc1fe780deda88af75d43a88a8612763c53763262f8d39f5da0faffe4434735d9c776ad6179811766e428d8864f1f008", 0x80, 0x20}]}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_FAMILY={0x5, 0xd, 0x6}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) 1m37.798587998s ago: executing program 5 (id=8911): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a4010000100001000000000000000000fc00000000000000000000000000001b200100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff6fa420497d5c3a00000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c0014"], 0x1a4}}, 0x0) 1m37.094690458s ago: executing program 5 (id=8913): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010) r2 = syz_genetlink_get_family_id$nfc(0x0, r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c004) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x442800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x101000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000140)="ba", 0x1, 0x4008801, &(0x7f0000000080)={0x11, 0x8100, r9, 0x1, 0x7, 0x6, @broadcast}, 0x14) 1m21.640367229s ago: executing program 36 (id=8913): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010) r2 = syz_genetlink_get_family_id$nfc(0x0, r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x2404c004) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x442800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x101000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000140)="ba", 0x1, 0x4008801, &(0x7f0000000080)={0x11, 0x8100, r9, 0x1, 0x7, 0x6, @broadcast}, 0x14) 5.05359091s ago: executing program 4 (id=8963): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x7, 0x700, 0x7, 0x6, {{0xc, 0x4, 0x0, 0xb, 0x30, 0x65, 0x0, 0x5, 0x2f, 0x0, @private=0xa010101, @local, {[@timestamp_addr={0x44, 0x1c, 0x47, 0x1, 0xe, [{@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0x5f}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x1, 0x1, 0x1ff, 0x1000, {{0x1a, 0x4, 0x3, 0x33, 0x68, 0x68, 0x0, 0x4c, 0x2f, 0x0, @multicast2, @broadcast, {[@end, @timestamp_addr={0x44, 0xc, 0x18, 0x1, 0x1, [{@multicast2, 0x4}]}, @lsrr={0x83, 0x1f, 0x2c, [@local, @local, @broadcast, @rand_addr=0x64010100, @broadcast, @multicast1, @remote]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x8d, 0x1, 0x4, [{@multicast1, 0x1}, {@remote, 0xfffffff7}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3c6a}, {@empty, 0x9}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x80, 0x7, 0x0, 0x10001, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0xe7, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x1f, 0x6a, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @loopback, @private=0xa010100, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000580)={'gretap0\x00', 0x0, 0x20, 0x80, 0x6, 0xe, {{0x9, 0x4, 0x1, 0x3, 0x24, 0x65, 0x0, 0x1, 0x2f, 0x0, @broadcast, @rand_addr=0x64010102, {[@noop, @rr={0x7, 0xf, 0x6a, [@multicast2, @local, @broadcast]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000640)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000f00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000680)={0x81c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x56}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x1c8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r11}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x81c}, 0x1, 0x0, 0x0, 0x4000044}, 0x1) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r15, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r16, 0x400, 0x70bd29, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000}, 0x20004044) getpeername$packet(0xffffffffffffffff, &(0x7f00000010c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001100)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000001440)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)={&(0x7f0000001140)={0x2c0, r1, 0x20, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r4}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x9, 0x6, 0x1, 0x9}, {0x5, 0x2, 0x4, 0xf16}, {0xe61, 0xd9, 0x4, 0x5}, {0x8, 0xe, 0x4, 0x2}, {0x8, 0x8, 0x6, 0x9}, {0xec1, 0x6, 0x8, 0x1000}, {0xff, 0x6, 0x9}, {0x6, 0x2, 0x9, 0x2}]}}}]}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001480), r18) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000014c0)={r0, 0x0, 0x8, 0x4}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001580)={{0x1, 0xffffffffffffffff}, &(0x7f0000001500), &(0x7f0000001540)}, 0x20) r21 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001800)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000018c0)={0x32, 0x0}, 0x8) r23 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001900)={0xffffffffffffffff}, 0x4) r24 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001940)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x10, 0x1b, &(0x7f00000015c0)=@raw=[@call={0x85, 0x0, 0x0, 0x64}, @jmp={0x5, 0x1, 0x3, 0x5, 0x4, 0x1, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r19}}, @generic={0x0, 0x5, 0xd, 0x0, 0xe06}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0xcb}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r20}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000}}, @alu={0x7, 0x1, 0x0, 0x7, 0x3, 0x20, 0x10}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], &(0x7f00000016c0)='syzkaller\x00', 0x54, 0xf9, &(0x7f0000001700)=""/249, 0x40f00, 0x2, '\x00', 0x0, @sk_msg=0x7, r21, 0x8, &(0x7f0000001840)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000001880)={0x3, 0xf, 0x9, 0x1ff}, 0x10, r22, r23, 0x5, &(0x7f0000001a40)=[r24, 0xffffffffffffffff, 0x1], &(0x7f0000001a80)=[{0x5, 0x4, 0xa, 0x9}, {0x2, 0x1, 0x2}, {0x4, 0x3, 0xb, 0x7}, {0x1, 0x5, 0x9, 0x9}, {0x4, 0x5, 0x1, 0x2}], 0x10, 0x7}, 0x94) 3.32954472s ago: executing program 4 (id=8964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x8000003}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) close(r1) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x10000001, 0x80000001, 0x7}, 0x42}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x3e45a1ae8a13af41}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 1.755183058s ago: executing program 4 (id=8965): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000340)={{r3, 0x0, 0x498880, 0x0, 0x8, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x6}, 0x1, &(0x7f0000000300)=[{0x2, 0x7, &(0x7f0000000240)='\\\x00', &(0x7f0000000280)="50d6d8aab88eaba72eca4c14099594c748f0bc2c0dac6ba6bb7ce7ed86fccb45a7d9943ff91281643fe8c489b18ec3ef29aad6fadf308d8eb67c2030731e5e726b7951a5f9f598865c8e5a20412ffbddcc1fe780deda88af", 0x58, 0x20}]}) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_FAMILY={0x5, 0xd, 0x6}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_TID={0xc, 0x3, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x14) 946.591371ms ago: executing program 4 (id=8966): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0xf000000, {0x7, 0x0, 0x0, r1, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000090) 342.421391ms ago: executing program 4 (id=8967): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x2000, 0x0, '\x00', 0x0, 0x1e}, 0x90) 0s ago: executing program 4 (id=8968): r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000ffdbdf25030000000800010000000000100007800c00018008000100", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0xe256610c620013e9}, 0x600000c0) (fail_nth: 7) kernel console output (not intermixed with test programs): .170682][T24545] netdevsim netdevsim6 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1477.178999][T24545] netdevsim netdevsim6 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1477.219825][T29301] team0: Port device team_slave_1 added [ 1477.254926][T29301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1477.261932][T29301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1477.287837][T29301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1477.300665][T29301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.078456][T29301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.323098][T29301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.405034][T29241] netdevsim netdevsim6 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1478.536753][T22024] bridge_slave_1: left allmulticast mode [ 1478.542481][T22024] bridge_slave_1: left promiscuous mode [ 1478.548318][T22024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.558762][T22024] bridge_slave_0: left allmulticast mode [ 1478.631991][T22024] bridge_slave_0: left promiscuous mode [ 1478.639116][T22024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.654273][T22024] bridge_slave_1: left allmulticast mode [ 1478.659975][T22024] bridge_slave_1: left promiscuous mode [ 1478.665826][T22024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.676084][T22024] bridge_slave_0: left allmulticast mode [ 1478.720302][T22024] bridge_slave_0: left promiscuous mode [ 1478.726172][T22024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.479149][T22024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1479.559050][T22024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1479.570222][T22024] bond0 (unregistering): Released all slaves [ 1479.954130][T22024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1480.048332][T22024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.059461][T22024] bond0 (unregistering): Released all slaves [ 1480.113993][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1480.182668][T29241] netdevsim netdevsim6 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.917170][T29301] hsr_slave_0: entered promiscuous mode [ 1480.923944][T29301] hsr_slave_1: entered promiscuous mode [ 1480.930314][T29301] debugfs: 'hsr0' already exists in 'hsr' [ 1480.936090][T29301] Cannot create hsr debugfs directory [ 1481.421802][T29241] netdevsim netdevsim6 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1481.900582][T29551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8555'. [ 1482.115056][T22024] hsr_slave_0: left promiscuous mode [ 1482.160964][T22024] hsr_slave_1: left promiscuous mode [ 1482.169628][T22024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1482.179266][T22024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.513043][T22024] hsr_slave_0: left promiscuous mode [ 1482.520012][T22024] hsr_slave_1: left promiscuous mode [ 1482.526846][T22024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1482.556112][T22024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1482.907185][T29573] netlink: zone id is out of range [ 1482.912546][T29573] netlink: zone id is out of range [ 1482.917696][T29573] netlink: zone id is out of range [ 1483.914291][T22024] team0 (unregistering): Port device team_slave_1 removed [ 1484.019847][T22024] team0 (unregistering): Port device team_slave_0 removed [ 1484.652952][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.659315][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.959674][T22024] team0 (unregistering): Port device team_slave_1 removed [ 1485.057933][T22024] team0 (unregistering): Port device team_slave_0 removed [ 1486.188106][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1486.325300][T29241] netdevsim netdevsim6 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1487.117087][T29582] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8561'. [ 1488.656968][T29609] tipc: Disabling bearer [ 1488.700747][T29241] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1488.930405][T29241] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1489.193268][T29241] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1489.573194][T29241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1489.722457][T29283] netdevsim netdevsim7 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1490.577299][T29241] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1490.609475][T29241] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1490.617591][T29241] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1490.729221][T29241] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1490.919197][T29631] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 1492.138259][T29283] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1492.228423][T29653] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1493.433999][T29283] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1493.576194][T29657] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8576'. [ 1493.962758][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1493.971834][ T29] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1494.455136][ T5343] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1494.817210][T29283] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1494.835681][T29670] netlink: 'syz.4.8579': attribute type 3 has an invalid length. [ 1494.843556][T29670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8579'. [ 1494.881965][ T5343] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1495.216566][T29672] sock: sock_set_timeout: `syz.5.8578' (pid 29672) tries to set negative timeout [ 1495.348390][T29241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1495.412784][T29241] 8021q: adding VLAN 0 to HW filter on device team0 [ 1495.496486][T22023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.503714][T22023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1495.513222][T22023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.520385][T22023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1495.760686][T29241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1496.058973][T29241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1496.381100][T29677] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 1497.172982][T22024] bridge_slave_1: left allmulticast mode [ 1497.178710][T22024] bridge_slave_1: left promiscuous mode [ 1497.184533][T22024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1497.334532][T22024] bridge_slave_0: left allmulticast mode [ 1497.340354][T22024] bridge_slave_0: left promiscuous mode [ 1497.346169][T22024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.448009][T22024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1498.550296][T22024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1498.561494][T22024] bond0 (unregistering): Released all slaves [ 1499.631198][T29283] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1499.771973][T29283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1501.142270][T29721] netlink: 'syz.4.8587': attribute type 3 has an invalid length. [ 1501.150066][T29721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8587'. [ 1501.318996][T22024] hsr_slave_0: left promiscuous mode [ 1501.372389][T22024] hsr_slave_1: left promiscuous mode [ 1501.378734][T22024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1501.399577][T22024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1502.257466][T22024] team0 (unregistering): Port device team_slave_1 removed [ 1502.285641][T22024] team0 (unregistering): Port device team_slave_0 removed [ 1502.562743][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1502.651105][T29283] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1502.863138][T29283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1502.871417][T29283] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1503.087187][T29283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1503.294680][T29283] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1503.747710][T29283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1503.861618][T29301] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1504.117153][T29733] FAULT_INJECTION: forcing a failure. [ 1504.117153][T29733] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.193306][T29734] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 1504.242342][T29301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1504.609374][T29733] CPU: 1 UID: 0 PID: 29733 Comm: syz.4.8588 Not tainted syzkaller #0 PREEMPT(full) [ 1504.609407][T29733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1504.609421][T29733] Call Trace: [ 1504.609429][T29733] [ 1504.609439][T29733] dump_stack_lvl+0xe8/0x150 [ 1504.609479][T29733] should_fail_ex+0x410/0x560 [ 1504.609520][T29733] should_failslab+0xa8/0x100 [ 1504.609554][T29733] __kmalloc_noprof+0xfe/0x720 [ 1504.609583][T29733] ? tomoyo_encode+0x2ad/0x570 [ 1504.609605][T29733] ? tomoyo_encode+0x2ad/0x570 [ 1504.609636][T29733] tomoyo_encode+0x2ad/0x570 [ 1504.609667][T29733] tomoyo_realpath_from_path+0x5fa/0x640 [ 1504.609703][T29733] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1504.609737][T29733] tomoyo_path_number_perm+0x246/0x5f0 [ 1504.609773][T29733] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1504.609804][T29733] ? __lock_acquire+0x683/0x2cf0 [ 1504.609855][T29733] ? hook_file_ioctl+0x1f0/0x5f0 [ 1504.609911][T29733] ? __fget_files+0x2a/0x420 [ 1504.609946][T29733] ? __fget_files+0x2a/0x420 [ 1504.609975][T29733] ? __fget_files+0x3a2/0x420 [ 1504.610005][T29733] ? __fget_files+0x2a/0x420 [ 1504.610041][T29733] security_file_ioctl+0xc3/0x2a0 [ 1504.610074][T29733] __se_sys_ioctl+0x47/0x170 [ 1504.610101][T29733] do_syscall_64+0x166/0x520 [ 1504.610129][T29733] ? trace_irq_disable+0x3b/0x140 [ 1504.610158][T29733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.610188][T29733] ? clear_bhb_loop+0x70/0xc0 [ 1504.610217][T29733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.610240][T29733] RIP: 0033:0x7fbd2e39e0d9 [ 1504.610262][T29733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1504.610282][T29733] RSP: 002b:00007fbd2f258028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1504.610307][T29733] RAX: ffffffffffffffda RBX: 00007fbd2e625fa0 RCX: 00007fbd2e39e0d9 [ 1504.610323][T29733] RDX: 00002000000000c0 RSI: 0000000000008916 RDI: 0000000000000003 [ 1504.610338][T29733] RBP: 00007fbd2f258090 R08: 0000000000000000 R09: 0000000000000000 [ 1504.610351][T29733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1504.610365][T29733] R13: 00007fbd2e626038 R14: 00007fbd2e625fa0 R15: 00007ffeaf1833c8 [ 1504.610402][T29733] [ 1504.610442][T29733] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1505.104990][T29301] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1505.157270][T29301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1505.341239][T29301] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1505.494207][T29301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1505.606668][T29241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1505.615396][T29301] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1506.336278][T29301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1506.760404][T29755] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 1507.097606][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1508.006189][T29283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1508.025781][T29283] 8021q: adding VLAN 0 to HW filter on device team0 [ 1508.069537][T29283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1508.079942][T29283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1508.769159][T29769] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8592'. [ 1509.202265][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1509.213200][T18797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.220384][T18797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.320488][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1509.329192][T18797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.336376][T18797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.766469][T29771] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8592'. [ 1510.037679][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1510.492563][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1511.134533][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1511.740202][T29791] netlink: zone id is out of range [ 1511.745430][T29791] netlink: set zone limit has 4 unknown bytes [ 1511.818612][T29301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1512.868422][T29301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1512.909815][T29301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1512.920219][T29301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1513.163909][T24545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.171119][T24545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1513.764068][T24545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.771279][T24545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1514.380198][ T5621] Bluetooth: hci0: command tx timeout [ 1514.941746][T29823] netlink: 'syz.5.8595': attribute type 3 has an invalid length. [ 1514.949539][T29823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8595'. [ 1515.284504][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1515.569437][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1515.622559][ T5621] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1515.835541][ T5621] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1516.027526][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1516.579875][ T5621] Bluetooth: hci0: command tx timeout [ 1518.171687][T29853] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8599'. [ 1518.322741][T24873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1518.336248][T24873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1518.404472][T24873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1518.411599][T24873] Bluetooth: hci4: command tx timeout [ 1518.761395][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1518.768482][ T5622] Bluetooth: hci0: command tx timeout [ 1518.779850][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1519.460562][T29772] lo speed is unknown, defaulting to 1000 [ 1519.553933][T29850] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8599'. [ 1520.717081][ T5622] Bluetooth: hci4: command tx timeout [ 1520.946969][ T5621] Bluetooth: hci0: command tx timeout [ 1520.997412][ T5621] Bluetooth: hci2: command tx timeout [ 1521.563296][T29826] lo speed is unknown, defaulting to 1000 [ 1522.748002][T29899] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8603'. [ 1522.757004][T29899] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8603'. [ 1522.940526][ T5621] Bluetooth: hci4: command tx timeout [ 1522.960071][T29890] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8603'. [ 1523.001812][T29901] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8604'. [ 1523.122004][ T5621] Bluetooth: hci2: command tx timeout [ 1523.457373][T29851] lo speed is unknown, defaulting to 1000 [ 1524.020130][T29772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.027352][T29772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.084238][T29772] bridge_slave_0: entered allmulticast mode [ 1524.092420][T29772] bridge_slave_0: entered promiscuous mode [ 1524.246355][T29826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.353875][T29826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.361160][T29826] bridge_slave_0: entered allmulticast mode [ 1524.369135][T29826] bridge_slave_0: entered promiscuous mode [ 1524.479499][T29772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.486701][T29772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.568934][T29772] bridge_slave_1: entered allmulticast mode [ 1524.580450][T29772] bridge_slave_1: entered promiscuous mode [ 1524.599823][T29826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.607016][T29826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.746053][T29826] bridge_slave_1: entered allmulticast mode [ 1524.753908][T29826] bridge_slave_1: entered promiscuous mode [ 1524.794349][T29826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.807004][T29826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.993740][ T5621] Bluetooth: hci4: command tx timeout [ 1525.228635][ T5621] Bluetooth: hci2: command tx timeout [ 1525.235704][T29925] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8609'. [ 1525.441765][T29926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8609'. [ 1525.594146][T29826] team0: Port device team_slave_0 added [ 1525.603162][T29826] team0: Port device team_slave_1 added [ 1525.941105][T29772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1525.951073][T29826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.958064][T29826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1526.171500][T29826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1526.183433][T22380] bridge_slave_1: left allmulticast mode [ 1526.189123][T22380] bridge_slave_1: left promiscuous mode [ 1526.195022][T22380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.519312][T22380] bridge_slave_0: left allmulticast mode [ 1526.525043][T22380] bridge_slave_0: left promiscuous mode [ 1526.530846][T22380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.625539][T22380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1527.745023][ T5621] Bluetooth: hci2: command tx timeout [ 1527.761946][T22380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1527.780230][T22380] bond0 (unregistering): Released all slaves [ 1527.983409][T29772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1528.331444][T29826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.338453][T29826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1528.755881][T29826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1528.833220][T24545] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.900752][T22024] netdevsim netdevsim6 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.909655][T22024] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.918374][T22024] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1529.263084][T29772] team0: Port device team_slave_0 added [ 1529.629636][T29772] team0: Port device team_slave_1 added [ 1529.664637][T29772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1529.671989][T29772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.697893][T29772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.710634][T29772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.717619][T29772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1529.948976][T29772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1530.048514][T22380] hsr_slave_0: left promiscuous mode [ 1530.055044][T22380] hsr_slave_1: left promiscuous mode [ 1530.061475][T22380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1530.070531][T22380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1531.200822][T22380] team0 (unregistering): Port device team_slave_1 removed [ 1531.267525][T22380] team0 (unregistering): Port device team_slave_0 removed [ 1531.549902][T29954] ¾x9ÿ.³b÷½å;<™: renamed from bridge_slave_0 (while UP) [ 1531.666913][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1532.001183][T29826] hsr_slave_0: entered promiscuous mode [ 1532.081768][T29826] hsr_slave_1: entered promiscuous mode [ 1532.088235][T29826] debugfs: 'hsr0' already exists in 'hsr' [ 1532.094004][T29826] Cannot create hsr debugfs directory [ 1532.792243][T29772] hsr_slave_0: entered promiscuous mode [ 1532.798968][T29772] hsr_slave_1: entered promiscuous mode [ 1532.960547][T29772] debugfs: 'hsr0' already exists in 'hsr' [ 1532.966377][T29772] Cannot create hsr debugfs directory [ 1533.120215][T29968] netlink: 84 bytes leftover after parsing attributes in process `syz.5.8617'. [ 1533.129239][T29968] netlink: 84 bytes leftover after parsing attributes in process `syz.5.8617'. [ 1535.623886][T29851] bridge0: port 1(bridge_slave_0) entered blocking state [ 1535.831176][T29851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.838762][T29851] bridge_slave_0: entered allmulticast mode [ 1536.055481][T29851] bridge_slave_0: entered promiscuous mode [ 1536.065795][T29851] bridge0: port 2(bridge_slave_1) entered blocking state [ 1536.073004][T29851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.080228][T29851] bridge_slave_1: entered allmulticast mode [ 1536.219620][T29851] bridge_slave_1: entered promiscuous mode [ 1536.228921][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1536.404387][T29772] netdevsim netdevsim6 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1536.830332][T30002] netlink: 88 bytes leftover after parsing attributes in process `syz.5.8624'. [ 1536.846689][T29851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1536.859334][T29851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.361072][T29772] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1538.061141][T29851] team0: Port device team_slave_0 added [ 1538.070422][T29851] team0: Port device team_slave_1 added [ 1538.105838][T29851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1538.112848][T29851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1538.242071][T30015] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1538.696839][T29851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1539.028092][T29851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1539.035134][T29851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1539.174336][T29851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1539.495293][T29851] hsr_slave_0: entered promiscuous mode [ 1539.502165][T29851] hsr_slave_1: entered promiscuous mode [ 1539.509242][T29851] debugfs: 'hsr0' already exists in 'hsr' [ 1539.515027][T29851] Cannot create hsr debugfs directory [ 1540.060190][T29772] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1541.585922][T29772] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1542.500225][T22024] tipc: Subscription rejected, illegal request [ 1543.606143][T30051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8635'. [ 1543.618556][T29772] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1543.815101][T29772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1544.405538][T29772] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1544.459326][T29772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1544.748560][T24548] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1545.142442][T29342] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1545.169112][T24548] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1545.198619][T29772] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1545.470751][T29772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1545.777910][T29772] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1546.103370][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.109756][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.325488][T29772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1547.182971][T24545] netdevsim netdevsim8 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.962406][T29772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1547.981724][T29772] 8021q: adding VLAN 0 to HW filter on device team0 [ 1548.580555][T24548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.588048][T24548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1548.597547][T24548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1548.604808][T24548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1549.037139][T22380] bridge_slave_1: left allmulticast mode [ 1549.042864][T22380] bridge_slave_1: left promiscuous mode [ 1549.048690][T22380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.335188][T22380] bridge_slave_0: left allmulticast mode [ 1549.340927][T22380] bridge_slave_0: left promiscuous mode [ 1549.346761][T22380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.707908][T22380] bridge_slave_1: left allmulticast mode [ 1549.715041][T22380] bridge_slave_1: left promiscuous mode [ 1549.720868][T22380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.820634][T22380] bridge_slave_0: left allmulticast mode [ 1549.826346][T22380] bridge_slave_0: left promiscuous mode [ 1549.832232][T22380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1551.440264][T22380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1551.512354][T22380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1551.527001][T22380] bond0 (unregistering): Released all slaves [ 1552.372267][T22380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1552.596955][T22380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1552.738584][T22380] bond0 (unregistering): Released all slaves [ 1554.194147][T22380] hsr_slave_0: left promiscuous mode [ 1554.262795][T22380] hsr_slave_1: left promiscuous mode [ 1554.272115][T22380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.468635][T22380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1554.499870][T22380] hsr_slave_0: left promiscuous mode [ 1554.710073][T22380] hsr_slave_1: left promiscuous mode [ 1554.716456][T22380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1554.761083][T22380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1556.858591][T22380] team0 (unregistering): Port device team_slave_1 removed [ 1556.902028][T22380] team0 (unregistering): Port device team_slave_0 removed [ 1558.012305][T22380] team0 (unregistering): Port device team_slave_1 removed [ 1558.032013][T22380] team0 (unregistering): Port device team_slave_0 removed [ 1558.654333][T29772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1559.264299][T29826] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1559.879128][T29826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1559.887220][T29826] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1559.963064][T29826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1560.047928][T29826] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1560.093924][T29826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1560.435263][T29851] netdevsim netdevsim8 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1560.879111][T29826] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1561.015413][T29826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1562.079954][T30173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1562.094985][T29851] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.018580][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1564.271053][T29851] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.252301][T29772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1565.286759][T29826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1565.306124][T29826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1565.847948][T29826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1565.858358][T29826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1565.916038][T18798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1565.923236][T18798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1565.932650][T18798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1565.939822][T18798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1567.794368][T29851] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1570.043512][T29851] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1570.655413][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1570.671025][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1570.680661][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1570.688696][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1570.697138][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1571.166915][T29851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1571.244296][T29851] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1571.582348][T29851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1571.625271][T29851] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1571.659166][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1572.053285][T30299] openvswitch: netlink: IP tunnel dst address not specified [ 1572.074830][T29851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1572.083133][T29851] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1572.391997][T29851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1572.824846][ T5622] Bluetooth: hci5: command tx timeout [ 1575.144266][ T5622] Bluetooth: hci5: command tx timeout [ 1575.530530][T29851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.572995][T29851] 8021q: adding VLAN 0 to HW filter on device team0 [ 1575.704380][T24585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1575.711595][T24585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1575.721304][T24585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1575.742744][T24585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1575.842150][T29851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1577.192615][T30283] lo speed is unknown, defaulting to 1000 [ 1577.260740][ T5622] Bluetooth: hci5: command tx timeout [ 1577.451519][T30335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1577.973832][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1578.466460][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1578.667861][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1578.999810][T24873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1579.564026][ T5621] Bluetooth: hci5: command tx timeout [ 1579.571450][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1579.582306][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1579.594416][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1579.643945][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1579.750633][T30368] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1579.773923][T30368] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1580.553708][T30381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1581.787374][T24873] Bluetooth: hci0: command tx timeout [ 1581.897844][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1581.933209][T24873] Bluetooth: hci2: command tx timeout [ 1583.220999][T30365] lo speed is unknown, defaulting to 1000 [ 1583.441231][T30403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8680'. [ 1583.571732][T30351] lo speed is unknown, defaulting to 1000 [ 1584.018676][ T5622] Bluetooth: hci0: command tx timeout [ 1584.115767][T24873] Bluetooth: hci2: command tx timeout [ 1584.664854][T30283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1584.672131][T30283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1584.679349][T30283] bridge_slave_0: entered allmulticast mode [ 1584.701500][T30283] bridge_slave_0: entered promiscuous mode [ 1584.996167][T30420] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8685'. [ 1585.116197][T30283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1585.123506][T30283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1585.130739][T30283] bridge_slave_1: entered allmulticast mode [ 1585.146528][T30283] bridge_slave_1: entered promiscuous mode [ 1585.265234][T30283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1585.690314][T22541] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1585.704667][T30283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1586.149969][T24873] Bluetooth: hci0: command tx timeout [ 1586.239240][T24873] Bluetooth: hci2: command tx timeout [ 1586.435695][T29344] netdevsim netdevsim6 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1586.498350][T22541] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1586.506980][T22541] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.023339][T30441] netlink: 'syz.5.8691': attribute type 1 has an invalid length. [ 1587.629059][T22380] bridge_slave_1: left allmulticast mode [ 1587.638835][T22380] bridge_slave_1: left promiscuous mode [ 1587.644702][T22380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.747380][T22380] bridge_slave_0: left allmulticast mode [ 1587.753201][T22380] bridge_slave_0: left promiscuous mode [ 1587.759054][T22380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.292264][T24873] Bluetooth: hci0: command tx timeout [ 1588.380829][T24873] Bluetooth: hci2: command tx timeout [ 1589.227285][T22380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1589.241547][T22380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1589.322472][T22380] bond0 (unregistering): Released all slaves [ 1590.182703][T30283] team0: Port device team_slave_0 added [ 1590.191656][T30283] team0: Port device team_slave_1 added [ 1590.226640][T30283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1590.233641][T30283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1590.558478][T30283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1590.709574][T30465] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8696'. [ 1590.725989][T22380] hsr_slave_0: left promiscuous mode [ 1590.832816][T22380] hsr_slave_1: left promiscuous mode [ 1590.839622][T22380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1590.942269][T22380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1591.860405][T22380] team0 (unregistering): Port device team_slave_1 removed [ 1591.962976][T22380] team0 (unregistering): Port device team_slave_0 removed [ 1592.319952][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1592.540012][T30283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1592.547028][T30283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1592.675083][T30283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1592.686552][T30472] vlan3: left allmulticast mode [ 1593.109847][T30472] geneve0: left allmulticast mode [ 1593.118480][T30472] vlan3: left promiscuous mode [ 1593.123409][T30472] geneve0: left promiscuous mode [ 1593.128892][T30472] bridge0: port 2(vlan3) entered disabled state [ 1593.142462][T30472] ¾x9ÿ.³b÷½å;<™: left allmulticast mode [ 1593.321035][T30472] ¾x9ÿ.³b÷½å;<™: left promiscuous mode [ 1593.326865][T30472] bridge0: port 1(1¾x9ÿ.³b÷½å;<™) entered disabled state [ 1594.646398][T30283] hsr_slave_0: entered promiscuous mode [ 1594.653120][T30283] hsr_slave_1: entered promiscuous mode [ 1594.659537][T30283] debugfs: 'hsr0' already exists in 'hsr' [ 1594.665302][T30283] Cannot create hsr debugfs directory [ 1595.545155][T30351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1595.552348][T30351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.559593][T30351] bridge_slave_0: entered allmulticast mode [ 1595.567428][T30351] bridge_slave_0: entered promiscuous mode [ 1595.835957][T30351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1595.843155][T30351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.850439][T30351] bridge_slave_1: entered allmulticast mode [ 1596.134124][T30351] bridge_slave_1: entered promiscuous mode [ 1597.033219][T30351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1597.084974][T30351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1597.150347][T24585] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 1597.179285][T30517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8705'. [ 1597.527490][T30523] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8706'. [ 1597.883070][T30365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.068786][T30365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.076077][T30365] bridge_slave_0: entered allmulticast mode [ 1598.101499][T30365] bridge_slave_0: entered promiscuous mode [ 1598.221189][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1598.670556][T30365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.677866][T30365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.777520][T30365] bridge_slave_1: entered allmulticast mode [ 1598.788795][T30365] bridge_slave_1: entered promiscuous mode [ 1598.873573][T30533] netlink: 'syz.4.8708': attribute type 83 has an invalid length. [ 1599.438818][T30351] team0: Port device team_slave_0 added [ 1599.447423][T30365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1599.556739][T30365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1599.569527][T30351] team0: Port device team_slave_1 added [ 1600.475085][T30546] xt_policy: output policy not valid in PREROUTING and INPUT [ 1600.578597][T30283] netdevsim netdevsim6 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1600.707235][T30351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1600.714407][T30351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1600.855297][T30351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.134279][T30351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.141294][T30351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.167213][T30351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1603.217585][T30351] hsr_slave_0: entered promiscuous mode [ 1603.224558][T30351] hsr_slave_1: entered promiscuous mode [ 1603.231027][T30351] debugfs: 'hsr0' already exists in 'hsr' [ 1603.236800][T30351] Cannot create hsr debugfs directory [ 1603.244741][T30365] team0: Port device team_slave_0 added [ 1603.256540][T30283] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1603.834190][T30365] team0: Port device team_slave_1 added [ 1604.410527][T30365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1604.417544][T30365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1604.730932][T30365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1605.282300][T30283] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1605.787752][T30589] x_tables: duplicate underflow at hook 1 [ 1605.916751][T30365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1605.923762][T30365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1606.013916][T30365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1606.467644][T30365] hsr_slave_0: entered promiscuous mode [ 1606.474470][T30365] hsr_slave_1: entered promiscuous mode [ 1606.480894][T30365] debugfs: 'hsr0' already exists in 'hsr' [ 1606.486679][T30365] Cannot create hsr debugfs directory [ 1606.985025][T30283] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1607.069808][T30595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8720'. [ 1607.500355][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.506839][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.897352][T24545] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1607.950164][T30595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8720'. [ 1608.291301][T30600] vlan2: entered allmulticast mode [ 1608.296494][T30600] bridge0: entered allmulticast mode [ 1608.306611][T30603] bridge0: port 1(erspan0) entered blocking state [ 1608.317417][T30603] bridge0: port 1(erspan0) entered disabled state [ 1608.468620][T30603] erspan0: entered allmulticast mode [ 1608.476746][T30603] erspan0: left allmulticast mode [ 1608.769993][T30595] team0 (unregistering): Port device team_slave_1 removed [ 1608.994211][T30595] team0 (unregistering): Port device dummy0 removed [ 1609.340853][T30594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1609.402307][T24545] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1609.934388][T22546] netdevsim netdevsim8 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1610.009409][T24546] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1611.420700][T30283] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1611.648368][T30283] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1611.664192][T30283] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1611.714225][T30283] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1612.519826][T30283] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1612.615080][T30283] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1612.639056][T30283] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1613.138264][T30283] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1614.059650][T30656] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1614.329782][T30283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1614.715649][T30283] 8021q: adding VLAN 0 to HW filter on device team0 [ 1614.756957][T30283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1614.767345][T30283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1615.443585][T24585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1615.450838][T24585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1615.460845][T24585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1615.468034][T24585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1616.166574][T30692] netlink: 'syz.4.8733': attribute type 16 has an invalid length. [ 1617.075800][T24548] netdevsim netdevsim7 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1617.115132][ T3302] netdevsim netdevsim7 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1617.448727][ T3302] netdevsim netdevsim7 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1618.262391][T22380] bridge_slave_1: left allmulticast mode [ 1618.268119][T22380] bridge_slave_1: left promiscuous mode [ 1618.284681][T22380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.294976][T22380] bridge_slave_0: left allmulticast mode [ 1618.300674][T22380] bridge_slave_0: left promiscuous mode [ 1618.608463][T22380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.617757][T30718] netlink: 'syz.4.8737': attribute type 1 has an invalid length. [ 1618.710424][T22380] bridge_slave_1: left allmulticast mode [ 1618.716139][T22380] bridge_slave_1: left promiscuous mode [ 1618.736536][T22380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.746777][T22380] bridge_slave_0: left allmulticast mode [ 1618.969589][T22380] bridge_slave_0: left promiscuous mode [ 1618.975446][T22380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.551591][T22380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1620.563991][T22380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1620.685352][T22380] bond0 (unregistering): Released all slaves [ 1621.122775][T22380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1621.145331][T22380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1621.156477][T22380] bond0 (unregistering): Released all slaves [ 1621.349604][T30351] netdevsim netdevsim7 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1622.499730][T30351] netdevsim netdevsim7 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1622.626672][T30748] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8741'. [ 1623.771672][T22380] hsr_slave_0: left promiscuous mode [ 1623.990431][T22380] hsr_slave_1: left promiscuous mode [ 1623.997286][T22380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1624.335949][T22380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1624.760688][T22380] hsr_slave_0: left promiscuous mode [ 1624.767026][T22380] hsr_slave_1: left promiscuous mode [ 1624.773982][T22380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1624.782024][T22380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1624.849747][T30762] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8744'. [ 1626.454384][T22380] team0 (unregistering): Port device team_slave_1 removed [ 1626.475569][T22380] team0 (unregistering): Port device team_slave_0 removed [ 1627.812008][T22380] team0 (unregistering): Port device team_slave_1 removed [ 1627.837071][T22380] team0 (unregistering): Port device team_slave_0 removed [ 1628.309043][T30283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1628.403511][T30351] netdevsim netdevsim7 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1628.595251][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1629.669728][T30779] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8747'. [ 1629.863674][T30779] netlink: 'syz.4.8747': attribute type 11 has an invalid length. [ 1629.975255][T30781] netlink: 'syz.4.8747': attribute type 11 has an invalid length. [ 1630.552969][T30351] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1630.672884][T30351] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1630.795290][T30365] netdevsim netdevsim8 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1631.216808][T30351] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1631.769914][T30801] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8750'. [ 1631.859941][T30351] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1631.868041][T30351] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1631.906416][T30351] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1631.944186][T30351] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1632.147913][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1632.291488][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1632.421231][T30351] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1632.463019][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1632.604315][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1632.749036][T30351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.304458][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1633.511623][T30365] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1633.742679][T30825] ieee802154 phy0 wpan0: encryption failed: -22 [ 1633.828590][T30825] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8753'. [ 1634.203741][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1634.674531][T30365] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1635.093988][T30351] 8021q: adding VLAN 0 to HW filter on device team0 [ 1635.585919][T29342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1635.593307][T29342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1635.630547][T29342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.637840][T29342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1635.738457][T30351] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1635.848424][ T5622] Bluetooth: hci4: command tx timeout [ 1636.052609][T30365] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1637.837185][T30803] lo speed is unknown, defaulting to 1000 [ 1638.067457][T24873] Bluetooth: hci4: command tx timeout [ 1638.415661][T30862] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1640.006102][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1640.096581][ T5622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1640.139585][ T5622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1640.185876][ T5622] Bluetooth: hci4: command tx timeout [ 1640.226169][ T5622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1640.233980][ T5622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1640.899429][T30877] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8760'. [ 1641.020596][T24873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1641.121609][T24873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1641.148401][T24873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1641.228210][T24873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1641.236052][T24873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1642.524977][ T5622] Bluetooth: hci4: command tx timeout [ 1642.550035][ T5622] Bluetooth: hci5: command tx timeout [ 1643.042054][T30899] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8762'. [ 1643.051065][T30899] openvswitch: netlink: Flow key attr not present in new flow. [ 1643.660146][T24873] Bluetooth: hci0: command tx timeout [ 1644.790825][ T5622] Bluetooth: hci5: command tx timeout [ 1645.977694][ T5622] Bluetooth: hci0: command tx timeout [ 1646.596142][T30803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1646.827808][T30803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.933015][T30803] bridge_slave_0: entered allmulticast mode [ 1646.942429][T30803] bridge_slave_0: entered promiscuous mode [ 1646.992418][ T5622] Bluetooth: hci5: command tx timeout [ 1647.030232][T30869] lo speed is unknown, defaulting to 1000 [ 1647.122301][T30941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8770'. [ 1647.168810][T30879] lo speed is unknown, defaulting to 1000 [ 1647.275966][T30803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.283190][T30803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.463740][T30803] bridge_slave_1: entered allmulticast mode [ 1647.494384][T30803] bridge_slave_1: entered promiscuous mode [ 1647.993417][ T5622] Bluetooth: hci0: command tx timeout [ 1648.294493][T30803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1648.438372][T30803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1648.949841][T30803] team0: Port device team_slave_0 added [ 1648.973391][T30803] team0: Port device team_slave_1 added [ 1649.161610][ T5622] Bluetooth: hci5: command tx timeout [ 1649.449156][T30803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1649.456175][T30803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.482265][T30803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1649.495008][T30803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1649.501992][T30803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1649.527902][T30803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1650.135213][ T5622] Bluetooth: hci0: command tx timeout [ 1650.692255][T29344] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1650.727919][T29344] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1650.736440][T29344] netdevsim netdevsim6 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1650.744751][T29344] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1650.961391][T30969] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1650.995089][T22380] bridge_slave_1: left allmulticast mode [ 1651.000795][T22380] bridge_slave_1: left promiscuous mode [ 1651.006667][T22380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.120256][T22380] bridge_slave_0: left allmulticast mode [ 1651.125999][T22380] bridge_slave_0: left promiscuous mode [ 1651.344564][T22380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.757474][T22380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1652.781665][T22380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1652.826528][T22380] bond0 (unregistering): Released all slaves [ 1653.237423][T30803] hsr_slave_0: entered promiscuous mode [ 1653.244200][T30803] hsr_slave_1: entered promiscuous mode [ 1653.250565][T30803] debugfs: 'hsr0' already exists in 'hsr' [ 1653.256372][T30803] Cannot create hsr debugfs directory [ 1654.385403][T31005] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1655.378189][T30869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1655.481562][T30869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1655.488876][T30869] bridge_slave_0: entered allmulticast mode [ 1655.496764][T30869] bridge_slave_0: entered promiscuous mode [ 1655.649530][T31006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8782'. [ 1655.878310][T22380] hsr_slave_0: left promiscuous mode [ 1656.215761][T22380] hsr_slave_1: left promiscuous mode [ 1656.222592][T22380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1656.312307][T31021] sctp: [Deprecated]: syz.5.8785 (pid 31021) Use of int in max_burst socket option. [ 1656.312307][T31021] Use struct sctp_assoc_value instead [ 1656.344684][T22380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1656.877597][T31027] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8787'. [ 1657.105399][ T5622] Bluetooth: hci0: command tx timeout [ 1657.797099][T31035] netlink: 'syz.5.8789': attribute type 1 has an invalid length. [ 1658.222855][T22380] team0 (unregistering): Port device team_slave_1 removed [ 1658.268030][T22380] team0 (unregistering): Port device team_slave_0 removed [ 1659.155082][T30869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.162307][T30869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.169542][T30869] bridge_slave_1: entered allmulticast mode [ 1659.177360][T30869] bridge_slave_1: entered promiscuous mode [ 1659.249978][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1659.948050][T30803] netdevsim netdevsim6 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1660.349945][T30869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1660.362978][T30869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1660.432703][T30869] team0: Port device team_slave_0 added [ 1661.109484][T30869] team0: Port device team_slave_1 added [ 1661.237169][T30803] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1661.542367][T30869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1661.549380][T30869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.575298][T30869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1661.809121][T30869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1661.840583][T30869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1661.968635][T30869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1661.979917][T30879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1661.987072][T30879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1661.994298][T30879] bridge_slave_0: entered allmulticast mode [ 1662.002133][T30879] bridge_slave_0: entered promiscuous mode [ 1662.171776][T30879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1662.178957][T30879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1662.186183][T30879] bridge_slave_1: entered allmulticast mode [ 1662.193988][T30879] bridge_slave_1: entered promiscuous mode [ 1662.967183][T31081] netlink: 'syz.4.8802': attribute type 1 has an invalid length. [ 1662.974986][T31081] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.8802'. [ 1662.984330][T31081] netlink: 'syz.4.8802': attribute type 1 has an invalid length. [ 1662.992072][T31081] netlink: 2016 bytes leftover after parsing attributes in process `syz.4.8802'. [ 1663.135677][T30803] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1663.500999][T30869] hsr_slave_0: entered promiscuous mode [ 1663.533456][T30869] hsr_slave_1: entered promiscuous mode [ 1663.539895][T30869] debugfs: 'hsr0' already exists in 'hsr' [ 1663.611948][T30869] Cannot create hsr debugfs directory [ 1663.826150][T30879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1664.328169][T30803] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1664.857600][T30879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1665.627534][T30879] team0: Port device team_slave_0 added [ 1665.637283][T30879] team0: Port device team_slave_1 added [ 1665.643019][T31101] : renamed from bond0 (while UP) [ 1666.359839][T31109] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8808'. [ 1666.368845][T31109] netlink: 80 bytes leftover after parsing attributes in process `syz.5.8808'. [ 1666.377821][T31109] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8808'. [ 1666.851790][T30879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1666.858795][T30879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1666.901604][T30879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1667.020651][T30879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1667.253031][T30879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1667.599615][T30879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1668.737100][T30879] hsr_slave_0: entered promiscuous mode [ 1668.747581][T30879] hsr_slave_1: entered promiscuous mode [ 1668.794473][T30879] debugfs: 'hsr0' already exists in 'hsr' [ 1668.800359][T30879] Cannot create hsr debugfs directory [ 1668.807573][T31136] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8811'. [ 1668.843331][T30803] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1668.976319][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.005006][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.077245][T30803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1669.431078][T30803] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1669.531547][T31145] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8814'. [ 1669.880530][T30803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1669.931716][T30803] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1669.948889][T30803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1670.133420][T22541] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1670.196383][T31145] bridge_slave_0: left allmulticast mode [ 1670.217009][T31145] bridge_slave_0: left promiscuous mode [ 1670.302629][T31145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.419449][T31145] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1670.669519][T30803] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1670.864675][T30803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1671.208677][T18797] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1671.745384][T31171] tc_dump_action: action bad kind [ 1672.001931][T31171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8817'. [ 1673.831859][T30869] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1674.668434][T30803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1674.688442][T30803] 8021q: adding VLAN 0 to HW filter on device team0 [ 1674.729953][T30803] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1674.740348][T30803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1675.313566][T24546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.335111][T24546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1675.537631][T24546] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.544832][T24546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.708161][T30869] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1678.036376][T30869] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1678.310452][T30869] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1678.706768][T24548] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1678.715432][T24548] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1679.035966][T30869] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1679.046958][T30869] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1679.059941][T30869] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1679.168792][T30869] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1679.910488][T22380] bridge_slave_1: left allmulticast mode [ 1679.916219][T22380] bridge_slave_1: left promiscuous mode [ 1679.922122][T22380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.932349][T22380] bridge_slave_0: left allmulticast mode [ 1679.938042][T22380] bridge_slave_0: left promiscuous mode [ 1680.105165][T22380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1680.124585][T22380] bridge_slave_1: left allmulticast mode [ 1680.130301][T22380] bridge_slave_1: left promiscuous mode [ 1680.136087][T22380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1680.151354][T22380] bridge_slave_0: left allmulticast mode [ 1680.158545][T22380] bridge_slave_0: left promiscuous mode [ 1680.164362][T22380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.285939][T22380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1681.310862][T22380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1681.322175][T22380] bond0 (unregistering): Released all slaves [ 1681.565919][T22380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1681.657179][T22380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1681.668627][T22380] bond0 (unregistering): Released all slaves [ 1681.686344][T30869] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1681.787919][T30869] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1682.783980][T22380] hsr_slave_0: left promiscuous mode [ 1682.809594][T22380] hsr_slave_1: left promiscuous mode [ 1682.816293][T22380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1682.824254][T22380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1683.135928][T22380] hsr_slave_0: left promiscuous mode [ 1683.158679][T22380] hsr_slave_1: left promiscuous mode [ 1683.360914][T22380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1683.443047][T22380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1683.766633][T31300] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 1686.301452][T22380] team0 (unregistering): Port device team_slave_1 removed [ 1686.321034][T22380] team0 (unregistering): Port device team_slave_0 removed [ 1687.426339][T22380] team0 (unregistering): Port device team_slave_1 removed [ 1687.445844][T22380] team0 (unregistering): Port device team_slave_0 removed [ 1688.018746][T30879] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1688.152886][T30803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1688.328989][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1688.917947][T30869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1688.936993][T30869] 8021q: adding VLAN 0 to HW filter on device team0 [ 1689.157576][T29344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.164789][T29344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1689.246764][T29344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.253968][T29344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1690.040548][T30879] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1691.086307][T30803] veth0_vlan: entered promiscuous mode [ 1691.100572][T30803] veth1_vlan: entered promiscuous mode [ 1692.596034][T30879] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1693.137342][T30879] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1693.475914][T30879] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1693.651005][T30879] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1693.693366][T30879] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1693.788731][T30879] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1694.094047][T30879] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1694.227822][T30879] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1694.336495][T24873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1694.639800][T24873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1694.650383][T24873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1694.658544][T24873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1694.669825][T24873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1696.610616][T30869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1696.985273][T30879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1697.415677][ T5622] Bluetooth: hci2: command tx timeout [ 1697.521964][T30879] 8021q: adding VLAN 0 to HW filter on device team0 [ 1697.647024][T22024] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.654220][T22024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1697.664094][T22024] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.671265][T22024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1697.962114][T30879] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1698.073772][T30879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1698.773938][T31424] netlink: zone id is out of range [ 1698.779136][T31424] netlink: zone id is out of range [ 1698.784287][T31424] netlink: zone id is out of range [ 1699.500264][ T5622] Bluetooth: hci2: command tx timeout [ 1700.431246][T31370] lo speed is unknown, defaulting to 1000 [ 1701.419256][T31446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8853'. [ 1701.428194][T31446] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8853'. [ 1701.729318][ T5622] Bluetooth: hci2: command tx timeout [ 1702.258119][T24873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1702.283253][T24873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1702.293805][T24873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1702.321287][T24873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1702.329022][T24873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1703.830286][T24873] Bluetooth: hci2: command tx timeout [ 1704.099420][ T5622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1704.129941][ T5622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1704.139738][ T5622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1704.151045][ T5622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1704.161716][ T5622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1704.626666][T24873] Bluetooth: hci4: command tx timeout [ 1704.802920][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1705.668430][T31469] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1705.678313][T31469] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1705.993246][T31469] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1706.341089][T24873] Bluetooth: hci6: command tx timeout [ 1706.731350][T24873] Bluetooth: hci4: command tx timeout [ 1706.884822][T31370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.892106][T31370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.899336][T31370] bridge_slave_0: entered allmulticast mode [ 1706.930625][T31370] bridge_slave_0: entered promiscuous mode [ 1707.046802][T31370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1707.355067][T31370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.362335][T31370] bridge_slave_1: entered allmulticast mode [ 1707.391931][T31370] bridge_slave_1: entered promiscuous mode [ 1707.987264][T31500] syzkaller0: entered promiscuous mode [ 1707.992820][T31500] syzkaller0: entered allmulticast mode [ 1708.237307][T31514] FAULT_INJECTION: forcing a failure. [ 1708.237307][T31514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1708.250411][T31514] CPU: 1 UID: 0 PID: 31514 Comm: syz.4.8864 Not tainted syzkaller #0 PREEMPT(full) [ 1708.250442][T31514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1708.250457][T31514] Call Trace: [ 1708.250467][T31514] [ 1708.250477][T31514] dump_stack_lvl+0xe8/0x150 [ 1708.250517][T31514] should_fail_ex+0x410/0x560 [ 1708.250558][T31514] _copy_from_iter+0x1d3/0x1660 [ 1708.250592][T31514] ? kmem_cache_alloc_node_noprof+0x1c1/0x620 [ 1708.250621][T31514] ? rcu_is_watching+0x16/0xb0 [ 1708.250646][T31514] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1708.250675][T31514] ? kmem_cache_alloc_node_noprof+0x3bc/0x620 [ 1708.250702][T31514] ? __pfx__copy_from_iter+0x10/0x10 [ 1708.250736][T31514] ? __alloc_skb+0x27a/0x7a0 [ 1708.250765][T31514] ? __alloc_skb+0x27a/0x7a0 [ 1708.250802][T31514] ? netlink_sendmsg+0x650/0xb40 [ 1708.250827][T31514] ? skb_put+0x112/0x210 [ 1708.250863][T31514] netlink_sendmsg+0x6c0/0xb40 [ 1708.250898][T31514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1708.250927][T31514] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1708.250971][T31514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1708.250995][T31514] sock_sendmsg_nosec+0x13a/0x180 [ 1708.251026][T31514] ____sys_sendmsg+0x54e/0x850 [ 1708.251068][T31514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1708.251120][T31514] ? import_iovec+0x73/0xa0 [ 1708.251149][T31514] ___sys_sendmsg+0x2a5/0x360 [ 1708.251183][T31514] ? __lock_acquire+0x683/0x2cf0 [ 1708.251221][T31514] ? __pfx____sys_sendmsg+0x10/0x10 [ 1708.251294][T31514] ? __fget_files+0x2a/0x420 [ 1708.251325][T31514] ? __fget_files+0x3a2/0x420 [ 1708.251369][T31514] __x64_sys_sendmsg+0x1b1/0x290 [ 1708.251407][T31514] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1708.251466][T31514] do_syscall_64+0x166/0x520 [ 1708.251495][T31514] ? trace_irq_disable+0x3b/0x140 [ 1708.251526][T31514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.251550][T31514] ? clear_bhb_loop+0x70/0xc0 [ 1708.251578][T31514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.251603][T31514] RIP: 0033:0x7fbd2e39e0d9 [ 1708.251626][T31514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1708.251646][T31514] RSP: 002b:00007fbd2f258028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1708.251671][T31514] RAX: ffffffffffffffda RBX: 00007fbd2e625fa0 RCX: 00007fbd2e39e0d9 [ 1708.251688][T31514] RDX: 0000000000000810 RSI: 0000200000001b80 RDI: 0000000000000004 [ 1708.251703][T31514] RBP: 00007fbd2f258090 R08: 0000000000000000 R09: 0000000000000000 [ 1708.251718][T31514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1708.251731][T31514] R13: 00007fbd2e626038 R14: 00007fbd2e625fa0 R15: 00007ffeaf1833c8 [ 1708.251768][T31514] [ 1708.905620][T24873] Bluetooth: hci6: command tx timeout [ 1708.913872][T24873] Bluetooth: hci4: command tx timeout [ 1708.981037][T31370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1708.993730][T31370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1709.193469][T31470] lo speed is unknown, defaulting to 1000 [ 1709.481491][T31454] lo speed is unknown, defaulting to 1000 [ 1710.728706][T31525] netlink: 'syz.4.8869': attribute type 1 has an invalid length. [ 1710.961885][T31527] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8869'. [ 1710.971026][T24873] Bluetooth: hci4: command tx timeout [ 1711.036283][T24873] Bluetooth: hci6: command tx timeout [ 1713.152289][T24873] Bluetooth: hci6: command tx timeout [ 1720.095280][T31370] team0: Port device team_slave_0 added [ 1720.159624][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1720.503739][T31526] veth9: entered promiscuous mode [ 1720.527591][T31526] bond9: (slave veth9): Enslaving as a backup interface with a down link [ 1720.546022][T31527] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1720.895238][T31370] team0: Port device team_slave_1 added [ 1721.503770][T31370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1721.699903][T31370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1721.725847][T31370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1722.141796][T31370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1722.148815][T31370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1722.174727][T31370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1723.976863][T31370] hsr_slave_0: entered promiscuous mode [ 1724.108969][T31370] hsr_slave_1: entered promiscuous mode [ 1724.133478][T31370] debugfs: 'hsr0' already exists in 'hsr' [ 1724.139285][T31370] Cannot create hsr debugfs directory [ 1724.145000][T18797] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1724.494899][T22024] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1725.050132][T31470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.057328][T31470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.064558][T31470] bridge_slave_0: entered allmulticast mode [ 1725.072409][T31470] bridge_slave_0: entered promiscuous mode [ 1725.556189][T31470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1725.563394][T31470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.570623][T31470] bridge_slave_1: entered allmulticast mode [ 1725.650985][T31470] bridge_slave_1: entered promiscuous mode [ 1725.760016][T22541] bridge_slave_1: left allmulticast mode [ 1725.765825][T22541] bridge_slave_1: left promiscuous mode [ 1725.914370][T22541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1726.011103][T22541] bridge_slave_0: left allmulticast mode [ 1726.016814][T22541] bridge_slave_0: left promiscuous mode [ 1726.022734][T22541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1726.235049][T31598] netlink: 666 bytes leftover after parsing attributes in process `syz.4.8878'. [ 1727.605204][T22541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1727.705051][T22541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1727.716339][T22541] bond0 (unregistering): Released all slaves [ 1728.290415][T31609] bridge0: entered promiscuous mode [ 1728.343440][T24585] netdevsim netdevsim6 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1728.377629][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1728.644032][T31470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1728.740586][T22541] hsr_slave_0: left promiscuous mode [ 1728.752917][T22541] hsr_slave_1: left promiscuous mode [ 1728.759257][T22541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1728.771116][T22541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1728.952266][T22541] veth1_vlan: left promiscuous mode [ 1728.957628][T22541] veth0_vlan: left promiscuous mode [ 1729.541842][T31625] netlink: 'syz.5.8883': attribute type 5 has an invalid length. [ 1729.549650][T31625] netlink: 140 bytes leftover after parsing attributes in process `syz.5.8883'. [ 1729.702772][T31625] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8883'. [ 1730.095381][T22541] team0 (unregistering): Port device team_slave_1 removed [ 1730.115187][T22541] team0 (unregistering): Port device team_slave_0 removed [ 1730.421528][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.427905][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.669968][T31470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1730.927642][T31454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.125348][T31454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.132652][T31454] bridge_slave_0: entered allmulticast mode [ 1731.140613][T31454] bridge_slave_0: entered promiscuous mode [ 1731.364731][T31454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.371953][T31454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.379213][T31454] bridge_slave_1: entered allmulticast mode [ 1731.387232][T31454] bridge_slave_1: entered promiscuous mode [ 1731.795152][T31454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1731.807821][T31454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1732.141779][T31470] team0: Port device team_slave_0 added [ 1732.731454][T31637] syzkaller0: entered promiscuous mode [ 1732.737003][T31637] syzkaller0: entered allmulticast mode [ 1732.812218][T31454] team0: Port device team_slave_0 added [ 1732.820316][T31470] team0: Port device team_slave_1 added [ 1732.970549][T31454] team0: Port device team_slave_1 added [ 1743.264784][T31370] netdevsim netdevsim6 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1743.315579][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1743.372954][T29344] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1743.698470][T31454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1743.705484][T31454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1743.731395][T31454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1743.852064][T31470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1743.859072][T31470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1743.884978][T31470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1744.218224][T31470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1744.225304][T31470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1744.527101][T31470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1744.562757][T31454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1744.569764][T31454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1744.681388][T31454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1745.024539][T31370] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1746.820303][T31454] hsr_slave_0: entered promiscuous mode [ 1746.855433][T31454] hsr_slave_1: entered promiscuous mode [ 1747.070777][T31454] debugfs: 'hsr0' already exists in 'hsr' [ 1747.076579][T31454] Cannot create hsr debugfs directory [ 1747.249245][T31470] hsr_slave_0: entered promiscuous mode [ 1747.280059][T31470] hsr_slave_1: entered promiscuous mode [ 1747.295635][T31470] debugfs: 'hsr0' already exists in 'hsr' [ 1747.301451][T31470] Cannot create hsr debugfs directory [ 1748.802812][T31370] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1749.883516][T31370] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1754.492454][T29342] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1754.593699][T24585] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1754.610373][T22380] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1754.618667][T22380] netdevsim netdevsim8 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1755.788943][T31470] netdevsim netdevsim8 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1755.997241][T30368] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1756.091032][T30368] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1756.115467][T30368] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1756.226843][T30368] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1756.234741][T30368] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1758.089299][T31470] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1758.377793][T24873] Bluetooth: hci0: command tx timeout [ 1759.057720][T31789] syzkaller0: entered promiscuous mode [ 1759.063264][T31789] syzkaller0: entered allmulticast mode [ 1760.550357][T24873] Bluetooth: hci0: command tx timeout [ 1762.651205][T24873] Bluetooth: hci0: command tx timeout [ 1763.947748][T30368] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1763.960819][T30368] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1763.973357][T30368] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1763.982049][T30368] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1763.989775][T30368] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1764.744507][T30368] Bluetooth: hci0: command tx timeout [ 1765.253985][T24873] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1765.267193][T24873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1765.368762][T24873] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1765.490428][T24873] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1765.500347][T24873] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1766.317989][T24873] Bluetooth: hci2: command tx timeout [ 1767.744993][T24873] Bluetooth: hci5: command tx timeout [ 1767.909403][T31870] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8920'. [ 1768.357089][T24873] Bluetooth: hci2: command tx timeout [ 1769.922188][T24873] Bluetooth: hci5: command tx timeout [ 1770.487703][T24873] Bluetooth: hci2: command tx timeout [ 1772.051917][T24873] Bluetooth: hci5: command tx timeout [ 1772.538801][T24873] Bluetooth: hci2: command tx timeout [ 1773.725869][T30368] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1773.736209][T30368] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1773.747111][T30368] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1773.755242][T30368] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1773.765543][T30368] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1774.131758][T30368] Bluetooth: hci5: command tx timeout [ 1775.758644][T31470] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1775.911065][T30368] Bluetooth: hci7: command tx timeout [ 1776.034358][T31772] lo speed is unknown, defaulting to 1000 [ 1776.770345][T31470] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1777.560082][T31894] openvswitch: netlink: Encap mask attribute is set for non-VLAN frame. [ 1778.134551][T30368] Bluetooth: hci7: command tx timeout [ 1779.711979][T31855] lo speed is unknown, defaulting to 1000 [ 1780.381525][T30368] Bluetooth: hci7: command tx timeout [ 1781.524398][T31843] lo speed is unknown, defaulting to 1000 [ 1782.203325][T22380] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1782.211624][T22380] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1782.219894][T22380] netdevsim netdevsim7 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1782.484664][T30368] Bluetooth: hci7: command tx timeout [ 1782.713722][T22380] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1782.774550][T31873] lo speed is unknown, defaulting to 1000 [ 1783.522078][T22024] bridge_slave_1: left allmulticast mode [ 1783.527796][T22024] bridge_slave_1: left promiscuous mode [ 1783.542407][T22024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.551879][T31955] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1783.574422][T22024] bridge_slave_0: left allmulticast mode [ 1783.580131][T22024] bridge_slave_0: left promiscuous mode [ 1783.912263][T22024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.031673][T31955] xt_hashlimit: size too large, truncated to 1048576 [ 1784.120438][T22024] bridge_slave_1: left allmulticast mode [ 1784.126153][T22024] bridge_slave_1: left promiscuous mode [ 1784.131978][T22024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1784.149713][T31957] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8928'. [ 1785.064095][T22024] bridge_slave_0: left allmulticast mode [ 1785.142527][T22024] bridge_slave_0: left promiscuous mode [ 1785.148369][T22024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.878383][T22024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1785.972672][T22024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1785.983880][T22024] bond0 (unregistering): Released all slaves [ 1786.449387][T22024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1786.514225][T22024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1786.525318][T22024] bond0 (unregistering): Released all slaves [ 1787.232252][T31454] netdevsim netdevsim7 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1787.770600][T31957] 0·: renamed from hsr0 (while UP) [ 1787.778664][T31957] 0·: entered allmulticast mode [ 1787.783657][T31957] hsr_slave_0: entered allmulticast mode [ 1787.789332][T31957] hsr_slave_1: entered allmulticast mode [ 1787.795595][T31957] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1788.364744][T31969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8929'. [ 1788.373766][T31969] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 1788.454156][T22024] hsr_slave_0: left promiscuous mode [ 1788.514181][T22024] hsr_slave_1: left promiscuous mode [ 1788.521253][T22024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1788.596645][T22024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1788.702495][T22024] hsr_slave_0: left promiscuous mode [ 1788.709929][T22024] hsr_slave_1: left promiscuous mode [ 1788.716828][T22024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1788.983368][T22024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1789.004931][T31977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8930'. [ 1790.954013][T22024] team0 (unregistering): Port device team_slave_1 removed [ 1790.973542][T22024] team0 (unregistering): Port device team_slave_0 removed [ 1791.892927][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.899319][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.980149][T22024] team0 (unregistering): Port device team_slave_1 removed [ 1791.999764][T22024] team0 (unregistering): Port device team_slave_0 removed [ 1792.660037][T31454] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1792.921410][T31772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.996957][T31772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1793.004259][T31772] bridge_slave_0: entered allmulticast mode [ 1793.012233][T31772] bridge_slave_0: entered promiscuous mode [ 1793.217418][T31977] vlan5: entered promiscuous mode [ 1793.235472][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1793.481030][T31772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.488228][T31772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1793.603925][T31772] bridge_slave_1: entered allmulticast mode [ 1793.688821][T31772] bridge_slave_1: entered promiscuous mode [ 1794.061595][T31454] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1794.158489][T31772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1794.169872][T31855] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.177106][T31855] bridge0: port 1(bridge_slave_0) entered disabled state [ 1794.184331][T31855] bridge_slave_0: entered allmulticast mode [ 1794.289440][T31855] bridge_slave_0: entered promiscuous mode [ 1794.509520][T31855] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.516714][T31855] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.523951][T31855] bridge_slave_1: entered allmulticast mode [ 1794.770170][T31855] bridge_slave_1: entered promiscuous mode [ 1794.876138][T31772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1794.963422][T31772] team0: Port device team_slave_0 added [ 1794.972291][T31772] team0: Port device team_slave_1 added [ 1795.024772][T31772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1795.031866][T31772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1795.057862][T31772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1795.070609][T31772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1795.077595][T31772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1795.103501][T31772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1795.902983][T31454] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1796.707021][T31772] hsr_slave_0: entered promiscuous mode [ 1796.959833][T31772] hsr_slave_1: entered promiscuous mode [ 1796.966351][T31772] debugfs: 'hsr0' already exists in 'hsr' [ 1796.972139][T31772] Cannot create hsr debugfs directory [ 1797.613539][T31855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1797.831314][T31855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1799.261199][T31855] team0: Port device team_slave_0 added [ 1799.541268][T31855] team0: Port device team_slave_1 added [ 1801.324823][T31855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.336431][T31855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.362366][T31855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.426816][T31843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.434018][T31843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.441260][T31843] bridge_slave_0: entered allmulticast mode [ 1801.449181][T31843] bridge_slave_0: entered promiscuous mode [ 1801.657032][T31855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.664048][T31855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1801.701854][T31855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.804298][T31843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.811496][T31843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.818787][T31843] bridge_slave_1: entered allmulticast mode [ 1801.835893][T31843] bridge_slave_1: entered promiscuous mode [ 1802.060566][T31873] bridge0: port 1(bridge_slave_0) entered blocking state [ 1802.067779][T31873] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.171618][T31873] bridge_slave_0: entered allmulticast mode [ 1802.179597][T31873] bridge_slave_0: entered promiscuous mode [ 1802.729923][T31855] hsr_slave_0: entered promiscuous mode [ 1802.737327][T31855] hsr_slave_1: entered promiscuous mode [ 1802.743933][T31855] debugfs: 'hsr0' already exists in 'hsr' [ 1802.749708][T31855] Cannot create hsr debugfs directory [ 1802.858172][T32058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1803.115585][T31843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1803.128243][T31843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1803.168767][T31843] team0: Port device team_slave_0 added [ 1803.177539][T31843] team0: Port device team_slave_1 added [ 1803.515714][T31873] bridge0: port 2(bridge_slave_1) entered blocking state [ 1803.522931][T31873] bridge0: port 2(bridge_slave_1) entered disabled state [ 1803.530149][T31873] bridge_slave_1: entered allmulticast mode [ 1803.598856][T31873] bridge_slave_1: entered promiscuous mode [ 1803.632545][T32057] netlink: 'syz.4.8939': attribute type 2 has an invalid length. [ 1803.875035][T22024] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.960486][T31843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1803.967498][T31843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1803.993423][T31843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1804.101686][T31843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1804.108699][T31843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1804.224054][T31843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1804.276631][T31873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1804.324104][T31873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1804.577900][T22024] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.633805][T31873] team0: Port device team_slave_0 added [ 1804.643130][T31873] team0: Port device team_slave_1 added [ 1805.116775][T31873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1805.123784][T31873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1805.201439][T31873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1805.219852][T31843] hsr_slave_0: entered promiscuous mode [ 1805.230891][T31843] hsr_slave_1: entered promiscuous mode [ 1805.238393][T31843] debugfs: 'hsr0' already exists in 'hsr' [ 1805.244174][T31843] Cannot create hsr debugfs directory [ 1805.468247][T22024] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.624442][T31873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1805.631454][T31873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1805.657385][T31873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1806.047724][T31873] hsr_slave_0: entered promiscuous mode [ 1806.054654][T31873] hsr_slave_1: entered promiscuous mode [ 1806.166589][T31873] debugfs: 'hsr0' already exists in 'hsr' [ 1806.172401][T31873] Cannot create hsr debugfs directory [ 1806.442391][T32077] vcan0: tx address claim with dlc 0 [ 1806.514176][T22024] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1806.722514][T31772] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1806.799668][T31772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1807.054706][T31772] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1807.090726][T31772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1807.171859][T32083] netlink: 'syz.4.8941': attribute type 21 has an invalid length. [ 1807.601230][T31772] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1807.631404][T31772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1807.915063][T31855] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1808.072527][T32086] sctp: [Deprecated]: syz.4.8942 (pid 32086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1808.072527][T32086] Use struct sctp_sack_info instead [ 1808.092781][T31855] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1808.175373][T32086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8942'. [ 1808.415580][T31772] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1808.433664][T31772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1808.451686][T31855] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1808.564523][T31855] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1808.591586][T24548] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1809.302620][T31855] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1809.314190][T31855] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1809.753642][T31855] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1810.017033][T31855] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1810.249126][T31843] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1810.292898][T31843] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1810.303778][T31843] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1810.333105][T31843] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1810.477343][T31843] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1810.689570][T31843] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1811.118176][T22024] bridge_slave_1: left allmulticast mode [ 1811.123899][T22024] bridge_slave_1: left promiscuous mode [ 1811.129721][T22024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.272737][T22024] bridge_slave_0: left allmulticast mode [ 1811.278453][T22024] bridge_slave_0: left promiscuous mode [ 1811.284281][T22024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.066287][T22024] bridge_slave_1: left allmulticast mode [ 1812.072095][T22024] bridge_slave_1: left promiscuous mode [ 1812.077904][T22024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.307935][T22024] bridge_slave_0: left allmulticast mode [ 1812.425607][T22024] bridge_slave_0: left promiscuous mode [ 1812.495977][T22024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.511666][T22024] bridge_slave_1: left allmulticast mode [ 1812.517376][T22024] bridge_slave_1: left promiscuous mode [ 1812.523183][T22024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.543020][T22024] bridge_slave_1: left allmulticast mode [ 1812.638674][T22024] bridge_slave_1: left promiscuous mode [ 1812.644522][T22024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1812.658717][T22024] bridge_slave_0: left allmulticast mode [ 1812.731307][T22024] bridge_slave_0: left promiscuous mode [ 1812.737140][T22024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1813.525943][T22024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1813.538465][T22024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1813.668262][T22024] bond0 (unregistering): Released all slaves [ 1813.792903][T32129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8947'. [ 1813.911034][T22024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1813.992473][T22024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1814.003583][T22024] bond0 (unregistering): Released all slaves [ 1814.478547][T22024]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1814.552533][T22024]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1814.563490][T22024]  (unregistering): Released all slaves [ 1814.576774][T22024] bond1 (unregistering): Released all slaves [ 1814.596717][T22024] bond2 (unregistering): Released all slaves [ 1814.793338][T22024] bond3 (unregistering): Released all slaves [ 1814.813473][T22024] bond0 (unregistering): Released all slaves [ 1815.166502][T22024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1815.254783][T22024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1815.265880][T22024] bond0 (unregistering): Released all slaves [ 1815.355823][T31843] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1815.366997][T31843] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1815.721203][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1815.771828][T30379] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1815.780583][T30379] netdevsim netdevsim5 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1815.789336][T30379] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1816.452068][T31855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1816.471187][T31855] 8021q: adding VLAN 0 to HW filter on device team0 [ 1816.740407][T24546] bridge0: port 1(bridge_slave_0) entered blocking state [ 1816.747673][T24546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1817.458759][T31873] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1817.568214][T31873] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1817.576298][T31873] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1817.619435][T31873] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1817.648054][T22024] tipc: Disabling bearer [ 1817.659778][T22024] tipc: Left network mode [ 1817.979414][T24873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1817.993720][T24873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1818.017853][T24585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.025047][T24585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.073304][T24873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1818.081403][T24873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1818.089088][T24873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1818.625362][T31873] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1818.755223][T31873] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1819.571842][T31843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1820.182776][T31873] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1820.214676][T24873] Bluetooth: hci0: command tx timeout [ 1820.254957][T32169] netlink: 'syz.4.8950': attribute type 1 has an invalid length. [ 1820.351770][T31873] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1820.671260][T31843] 8021q: adding VLAN 0 to HW filter on device team0 [ 1821.122262][T32169] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 1821.510702][T22380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1821.540121][T22380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1821.740159][T22380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.747345][T22380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1821.848194][T32183] netlink: del zone limit has 4 unknown bytes [ 1821.948076][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1822.190959][T31843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1822.201354][T31843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1822.346645][T24873] Bluetooth: hci0: command tx timeout [ 1822.865424][T31873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.884784][T31873] 8021q: adding VLAN 0 to HW filter on device team0 [ 1823.886055][T22024] hsr_slave_0: left promiscuous mode [ 1823.892363][T22024] hsr_slave_1: left promiscuous mode [ 1823.898716][T22024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1823.970503][T22024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1823.986557][T22024] hsr_slave_0: left promiscuous mode [ 1824.011552][T22024] hsr_slave_1: left promiscuous mode [ 1824.017945][T22024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1824.107975][T22024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1824.120991][T22024] hsr_slave_0: left promiscuous mode [ 1824.127268][T22024] hsr_slave_1: left promiscuous mode [ 1824.133638][T22024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1824.251611][T22024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1824.342238][T22024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1824.349679][T22024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1824.362247][T22024] hsr_slave_0: left promiscuous mode [ 1824.368495][T22024] hsr_slave_1: left promiscuous mode [ 1824.392300][T24873] Bluetooth: hci0: command tx timeout [ 1824.463414][T22024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1824.595554][T22024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1824.674252][T22024] veth1_macvtap: left promiscuous mode [ 1824.679804][T22024] veth0_macvtap: left promiscuous mode [ 1824.685509][T22024] veth1_vlan: left promiscuous mode [ 1824.690803][T22024] veth0_vlan: left promiscuous mode [ 1825.776238][T30368] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1825.813889][T30368] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1825.836068][T30368] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1825.852723][T30368] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1825.943575][T30368] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1826.107925][T22024] team0 (unregistering): Port device team_slave_1 removed [ 1826.300808][T22024] team0 (unregistering): Port device team_slave_0 removed [ 1826.613728][T30368] Bluetooth: hci0: command tx timeout [ 1827.305464][T22024] team0 (unregistering): Port device team_slave_1 removed [ 1827.425597][T22024] team0 (unregistering): Port device team_slave_0 removed [ 1827.663169][T24873] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1827.702679][T24873] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1827.711239][T24873] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1827.719277][T24873] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1827.726988][T24873] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1828.229850][T30368] Bluetooth: hci1: command tx timeout [ 1829.234711][T22024] team0 (unregistering): Port device team_slave_1 removed [ 1829.254562][T22024] team0 (unregistering): Port device team_slave_0 removed [ 1829.854257][T30368] Bluetooth: hci2: command tx timeout [ 1830.258364][T22024] team0 (unregistering): Port device team_slave_1 removed [ 1830.279324][T22024] team0 (unregistering): Port device team_slave_0 removed [ 1830.325005][T30368] Bluetooth: hci1: command tx timeout [ 1831.203571][T18797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1831.224883][T18797] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1832.042315][T24873] Bluetooth: hci2: command tx timeout [ 1832.415080][ T651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.422312][ T651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1832.603558][T32152] lo speed is unknown, defaulting to 1000 [ 1832.761319][T24873] Bluetooth: hci1: command tx timeout [ 1833.747738][T32226] netlink: del zone limit has 4 unknown bytes [ 1834.327824][T30368] Bluetooth: hci2: command tx timeout [ 1834.901812][T30368] Bluetooth: hci1: command tx timeout [ 1835.082273][T32203] lo speed is unknown, defaulting to 1000 [ 1836.165870][T24873] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1836.420912][T24873] Bluetooth: hci2: command tx timeout [ 1836.735131][T32208] lo speed is unknown, defaulting to 1000 [ 1837.163495][T24873] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1837.210765][T24873] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1837.397910][T24873] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1837.406112][T24873] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1838.581524][T32266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8956'. [ 1839.359893][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1839.593847][T24873] Bluetooth: hci4: command tx timeout [ 1840.352746][T32152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1840.359975][T32152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1840.367311][T32152] bridge_slave_0: entered allmulticast mode [ 1840.375163][T32152] bridge_slave_0: entered promiscuous mode [ 1840.412596][T32275] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8957'. [ 1840.758547][T32152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1840.765746][T32152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1840.772989][T32152] bridge_slave_1: entered allmulticast mode [ 1840.969624][T32152] bridge_slave_1: entered promiscuous mode [ 1841.604537][T24873] Bluetooth: hci4: command tx timeout [ 1842.121690][T32203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.128890][T32203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.398515][T32203] bridge_slave_0: entered allmulticast mode [ 1842.406400][T32203] bridge_slave_0: entered promiscuous mode [ 1842.465709][T32203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.472892][T32203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.665699][T32203] bridge_slave_1: entered allmulticast mode [ 1842.702719][T32203] bridge_slave_1: entered promiscuous mode [ 1843.022650][T32152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1843.035289][T32152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1843.144502][T32299] netlink: 'syz.4.8959': attribute type 1 has an invalid length. [ 1843.152298][T32299] netlink: 192 bytes leftover after parsing attributes in process `syz.4.8959'. [ 1843.752439][T32299] netlink: 'syz.4.8959': attribute type 1 has an invalid length. [ 1843.760241][T32299] netlink: 29 bytes leftover after parsing attributes in process `syz.4.8959'. [ 1843.807991][T32247] lo speed is unknown, defaulting to 1000 [ 1843.917807][T24873] Bluetooth: hci4: command tx timeout [ 1844.149953][T32152] team0: Port device team_slave_0 added [ 1844.158628][T32203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1844.268860][T32152] team0: Port device team_slave_1 added [ 1844.744157][T32203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1845.286704][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1845.523401][T32203] team0: Port device team_slave_0 added [ 1845.616810][T32152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1845.623817][T32152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1845.649725][T32152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1845.914248][T32203] team0: Port device team_slave_1 added [ 1846.114344][T30368] Bluetooth: hci4: command tx timeout [ 1846.156750][T32152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1846.207949][T32152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1846.297988][T32152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1846.314341][T32208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1846.321844][T32208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1846.329097][T32208] bridge_slave_0: entered allmulticast mode [ 1846.337015][T32208] bridge_slave_0: entered promiscuous mode [ 1846.402892][T32208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1846.410092][T32208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1846.417369][T32208] bridge_slave_1: entered allmulticast mode [ 1846.425226][T32208] bridge_slave_1: entered promiscuous mode [ 1846.728572][T32203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1846.735581][T32203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1846.887449][T32203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1846.900705][T32203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1846.910178][T32203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1847.161359][T32203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1847.685444][T32203] hsr_slave_0: entered promiscuous mode [ 1847.692187][T32203] hsr_slave_1: entered promiscuous mode [ 1847.698621][T32203] debugfs: 'hsr0' already exists in 'hsr' [ 1847.704386][T32203] Cannot create hsr debugfs directory [ 1848.174282][T32208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1848.725191][T32208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1848.741416][T32152] hsr_slave_0: entered promiscuous mode [ 1848.748126][T32152] hsr_slave_1: entered promiscuous mode [ 1848.754510][T32152] debugfs: 'hsr0' already exists in 'hsr' [ 1848.943618][T32152] Cannot create hsr debugfs directory [ 1850.138673][T32208] team0: Port device team_slave_0 added [ 1850.148199][T32208] team0: Port device team_slave_1 added [ 1850.858138][T32208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1851.430202][T32208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1851.456164][T32208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1852.031963][T32208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1852.038987][T32208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1852.171319][T32208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1852.508413][T32208] hsr_slave_0: entered promiscuous mode [ 1852.515112][T32208] hsr_slave_1: entered promiscuous mode [ 1853.035731][T32208] debugfs: 'hsr0' already exists in 'hsr' [ 1853.041530][T32208] Cannot create hsr debugfs directory [ 1853.338630][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.344988][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.862680][T32374] veth0_to_bond: default FDB implementation only supports local addresses [ 1854.474451][T32247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.489253][T32247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1854.496528][T32247] bridge_slave_0: entered allmulticast mode [ 1854.504405][T32247] bridge_slave_0: entered promiscuous mode [ 1854.548843][T32247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1854.585865][T32247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.593134][T32247] bridge_slave_1: entered allmulticast mode [ 1854.600957][T32247] bridge_slave_1: entered promiscuous mode [ 1854.824218][T32383] block nbd0: reconnected socket [ 1854.829339][T32383] FAULT_INJECTION: forcing a failure. [ 1854.829339][T32383] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1854.843169][T32383] CPU: 1 UID: 0 PID: 32383 Comm: syz.4.8968 Not tainted syzkaller #0 PREEMPT(full) [ 1854.843213][T32383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1854.843228][T32383] Call Trace: [ 1854.843239][T32383] [ 1854.843250][T32383] dump_stack_lvl+0xe8/0x150 [ 1854.843289][T32383] should_fail_ex+0x410/0x560 [ 1854.843337][T32383] _copy_to_user+0x31/0xb0 [ 1854.843364][T32383] simple_read_from_buffer+0xe1/0x170 [ 1854.843403][T32383] proc_fail_nth_read+0x1bb/0x230 [ 1854.843441][T32383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1854.843480][T32383] ? rw_verify_area+0x24a/0x4c0 [ 1854.843535][T32383] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1854.843571][T32383] vfs_read+0x213/0xa80 [ 1854.843611][T32383] ? __pfx___mutex_lock+0x10/0x10 [ 1854.843642][T32383] ? __pfx_vfs_read+0x10/0x10 [ 1854.843677][T32383] ? __fget_files+0x2a/0x420 [ 1854.843714][T32383] ? __fget_files+0x3a2/0x420 [ 1854.843743][T32383] ? __fget_files+0x2a/0x420 [ 1854.843785][T32383] ksys_read+0x150/0x270 [ 1854.843821][T32383] ? __pfx_ksys_read+0x10/0x10 [ 1854.843869][T32383] do_syscall_64+0x166/0x520 [ 1854.843898][T32383] ? trace_irq_disable+0x3b/0x140 [ 1854.843929][T32383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1854.843954][T32383] ? clear_bhb_loop+0x70/0xc0 [ 1854.843984][T32383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1854.844009][T32383] RIP: 0033:0x7fbd2e35e90e [ 1854.844033][T32383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1854.844053][T32383] RSP: 002b:00007fbd2f257fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1854.844079][T32383] RAX: ffffffffffffffda RBX: 00007fbd2f2586c0 RCX: 00007fbd2e35e90e [ 1854.844096][T32383] RDX: 000000000000000f RSI: 00007fbd2f2580a0 RDI: 0000000000000005 [ 1854.844112][T32383] RBP: 00007fbd2f258090 R08: 0000000000000000 R09: 0000000000000000 [ 1854.844129][T32383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1854.844143][T32383] R13: 00007fbd2e626038 R14: 00007fbd2e625fa0 R15: 00007ffeaf1833c8 [ 1854.844181][T32383] [ 1855.285168][T32203] [ 1855.287562][T32203] ====================================================== [ 1855.294599][T32203] WARNING: possible circular locking dependency detected [ 1855.301655][T32203] syzkaller #0 Not tainted [ 1855.306089][T32203] ------------------------------------------------------ [ 1855.313133][T32203] syz-executor/32203 is trying to acquire lock: [ 1855.319424][T32203] ffff88801c294aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 1855.329566][T32203] [ 1855.329566][T32203] but task is already holding lock: [ 1855.336956][T32203] ffffffff8f5e91a0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 1855.345716][T32203] [ 1855.345716][T32203] which lock already depends on the new lock. [ 1855.345716][T32203] [ 1855.356153][T32203] [ 1855.356153][T32203] the existing dependency chain (in reverse order) is: [ 1855.365322][T32203] [ 1855.365322][T32203] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 1855.372575][T32203] __mutex_lock+0x19d/0x1550 [ 1855.377731][T32203] get_device_parent+0x16f/0x3a0 [ 1855.383227][T32203] device_add+0x2d4/0xb80 [ 1855.388109][T32203] device_create+0x269/0x300 [ 1855.393276][T32203] msr_device_create+0x33/0x50 [ 1855.398594][T32203] cpuhp_invoke_callback+0x434/0x810 [ 1855.404451][T32203] cpuhp_thread_fun+0x362/0x780 [ 1855.409858][T32203] smpboot_thread_fn+0x565/0xa70 [ 1855.415354][T32203] kthread+0x38b/0x480 [ 1855.420013][T32203] ret_from_fork+0x514/0xb70 [ 1855.425159][T32203] ret_from_fork_asm+0x1a/0x30 [ 1855.430485][T32203] [ 1855.430485][T32203] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 1855.438082][T32203] cpuhp_thread_fun+0x127/0x780 [ 1855.443491][T32203] smpboot_thread_fn+0x565/0xa70 [ 1855.448985][T32203] kthread+0x38b/0x480 [ 1855.453610][T32203] ret_from_fork+0x514/0xb70 [ 1855.458756][T32203] ret_from_fork_asm+0x1a/0x30 [ 1855.464111][T32203] [ 1855.464111][T32203] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 1855.471879][T32203] cpus_read_lock+0x42/0x160 [ 1855.477016][T32203] static_key_slow_inc+0x12/0x30 [ 1855.482505][T32203] nbd_genl_reconfigure+0x1301/0x1e80 [ 1855.488437][T32203] genl_family_rcv_msg_doit+0x233/0x340 [ 1855.494543][T32203] genl_rcv_msg+0x614/0x7a0 [ 1855.499603][T32203] netlink_rcv_skb+0x226/0x4a0 [ 1855.504909][T32203] genl_rcv+0x28/0x40 [ 1855.509438][T32203] netlink_unicast+0x7bd/0x940 [ 1855.514764][T32203] netlink_sendmsg+0x813/0xb40 [ 1855.520109][T32203] sock_sendmsg_nosec+0x13a/0x180 [ 1855.525691][T32203] ____sys_sendmsg+0x54e/0x850 [ 1855.531012][T32203] ___sys_sendmsg+0x2a5/0x360 [ 1855.536287][T32203] __x64_sys_sendmsg+0x1b1/0x290 [ 1855.541889][T32203] do_syscall_64+0x166/0x520 [ 1855.547025][T32203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.553451][T32203] [ 1855.553451][T32203] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 1855.561113][T32203] __mutex_lock+0x19d/0x1550 [ 1855.566246][T32203] nbd_queue_rq+0x373/0x1150 [ 1855.571384][T32203] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1855.577487][T32203] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1855.584355][T32203] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1855.590902][T32203] blk_mq_run_work_fn+0x16c/0x300 [ 1855.596492][T32203] process_scheduled_works+0xa88/0x14c0 [ 1855.602577][T32203] worker_thread+0xa47/0xfb0 [ 1855.607713][T32203] kthread+0x38b/0x480 [ 1855.612326][T32203] ret_from_fork+0x514/0xb70 [ 1855.617471][T32203] ret_from_fork_asm+0x1a/0x30 [ 1855.622786][T32203] [ 1855.622786][T32203] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 1855.630021][T32203] __mutex_lock+0x19d/0x1550 [ 1855.635159][T32203] nbd_queue_rq+0xc1/0x1150 [ 1855.640211][T32203] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1855.646307][T32203] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1855.653212][T32203] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1855.659730][T32203] blk_mq_run_work_fn+0x16c/0x300 [ 1855.665297][T32203] process_scheduled_works+0xa88/0x14c0 [ 1855.671387][T32203] worker_thread+0xa47/0xfb0 [ 1855.676513][T32203] kthread+0x38b/0x480 [ 1855.681127][T32203] ret_from_fork+0x514/0xb70 [ 1855.686258][T32203] ret_from_fork_asm+0x1a/0x30 [ 1855.691567][T32203] [ 1855.691567][T32203] -> #5 (set->srcu){.+.+}-{0:0}: [ 1855.698713][T32203] __synchronize_srcu+0xc9/0x2f0 [ 1855.704220][T32203] elevator_switch+0x1e8/0x7b0 [ 1855.709553][T32203] elevator_change+0x2fa/0x480 [ 1855.714861][T32203] elevator_set_default+0x375/0x440 [ 1855.720611][T32203] blk_register_queue+0x3f3/0x4e0 [ 1855.726184][T32203] __add_disk+0x6cb/0xe30 [ 1855.731048][T32203] add_disk_fwnode+0x100/0x3a0 [ 1855.736353][T32203] nbd_dev_add+0x733/0xb60 [ 1855.741343][T32203] nbd_init+0x15f/0x1e0 [ 1855.746153][T32203] do_one_initcall+0x250/0x870 [ 1855.751466][T32203] do_initcall_level+0x10a/0x1a0 [ 1855.757115][T32203] do_initcalls+0x59/0xa0 [ 1855.762454][T32203] kernel_init_freeable+0x29d/0x3e0 [ 1855.768205][T32203] kernel_init+0x22/0x1d0 [ 1855.773081][T32203] ret_from_fork+0x514/0xb70 [ 1855.778223][T32203] ret_from_fork_asm+0x1a/0x30 [ 1855.783534][T32203] [ 1855.783534][T32203] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 1855.791379][T32203] __mutex_lock+0x19d/0x1550 [ 1855.796518][T32203] elevator_change+0x1af/0x480 [ 1855.801831][T32203] elevator_set_none+0xb5/0x140 [ 1855.807226][T32203] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1855.813569][T32203] nbd_start_device+0x189/0xb30 [ 1855.818965][T32203] nbd_genl_connect+0x1597/0x1c10 [ 1855.824528][T32203] genl_family_rcv_msg_doit+0x233/0x340 [ 1855.830611][T32203] genl_rcv_msg+0x614/0x7a0 [ 1855.835657][T32203] netlink_rcv_skb+0x226/0x4a0 [ 1855.841070][T32203] genl_rcv+0x28/0x40 [ 1855.845591][T32203] netlink_unicast+0x7bd/0x940 [ 1855.850899][T32203] netlink_sendmsg+0x813/0xb40 [ 1855.856196][T32203] sock_sendmsg_nosec+0x13a/0x180 [ 1855.861757][T32203] ____sys_sendmsg+0x54e/0x850 [ 1855.867065][T32203] ___sys_sendmsg+0x2a5/0x360 [ 1855.872293][T32203] __x64_sys_sendmsg+0x1b1/0x290 [ 1855.877777][T32203] do_syscall_64+0x166/0x520 [ 1855.882906][T32203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.889342][T32203] [ 1855.889342][T32203] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1855.898079][T32203] blk_alloc_queue+0x544/0x690 [ 1855.903403][T32203] __blk_mq_alloc_disk+0x194/0x390 [ 1855.909051][T32203] nbd_dev_add+0x494/0xb60 [ 1855.914007][T32203] nbd_init+0x15f/0x1e0 [ 1855.918701][T32203] do_one_initcall+0x250/0x870 [ 1855.924010][T32203] do_initcall_level+0x10a/0x1a0 [ 1855.929487][T32203] do_initcalls+0x59/0xa0 [ 1855.934357][T32203] kernel_init_freeable+0x29d/0x3e0 [ 1855.940103][T32203] kernel_init+0x22/0x1d0 [ 1855.944977][T32203] ret_from_fork+0x514/0xb70 [ 1855.950121][T32203] ret_from_fork_asm+0x1a/0x30 [ 1855.955443][T32203] [ 1855.955443][T32203] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 1855.962685][T32203] fs_reclaim_acquire+0x71/0x100 [ 1855.968177][T32203] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 1855.974442][T32203] alloc_inode+0xb8/0x1b0 [ 1855.979311][T32203] iget_locked+0x131/0x6a0 [ 1855.984270][T32203] kernfs_get_inode+0x4f/0x770 [ 1855.989590][T32203] kernfs_get_tree+0x5cd/0x980 [ 1855.994909][T32203] vfs_get_tree+0x92/0x2a0 [ 1855.999860][T32203] do_new_mount+0x319/0xdc0 [ 1856.004901][T32203] __se_sys_mount+0x31d/0x420 [ 1856.010125][T32203] do_syscall_64+0x166/0x520 [ 1856.015278][T32203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.021730][T32203] [ 1856.021730][T32203] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 1856.029744][T32203] down_write+0x96/0x200 [ 1856.034526][T32203] kernfs_remove_by_name_ns+0x4e/0x140 [ 1856.040525][T32203] device_links_driver_bound+0x4ab/0x1440 [ 1856.046783][T32203] driver_bound+0xd8/0x2e0 [ 1856.051748][T32203] really_probe+0x774/0xae0 [ 1856.056790][T32203] __driver_probe_device+0x1e8/0x360 [ 1856.062620][T32203] driver_probe_device+0x4f/0x240 [ 1856.068183][T32203] __device_attach_driver+0x270/0x410 [ 1856.074116][T32203] bus_for_each_drv+0x258/0x2f0 [ 1856.079505][T32203] __device_attach+0x2c4/0x450 [ 1856.084817][T32203] device_initial_probe+0xa1/0xd0 [ 1856.090388][T32203] bus_probe_device+0x12a/0x220 [ 1856.095779][T32203] device_add+0x7d7/0xb80 [ 1856.100777][T32203] faux_device_create_with_groups+0x1a5/0x2b0 [ 1856.107435][T32203] regulator_dummy_init+0x19/0x40 [ 1856.113073][T32203] regulator_init+0xca/0x110 [ 1856.118222][T32203] do_one_initcall+0x250/0x870 [ 1856.123538][T32203] do_initcall_level+0x10a/0x1a0 [ 1856.129018][T32203] do_initcalls+0x59/0xa0 [ 1856.133885][T32203] kernel_init_freeable+0x29d/0x3e0 [ 1856.139621][T32203] kernel_init+0x22/0x1d0 [ 1856.144491][T32203] ret_from_fork+0x514/0xb70 [ 1856.149622][T32203] ret_from_fork_asm+0x1a/0x30 [ 1856.154934][T32203] [ 1856.154934][T32203] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 1856.163575][T32203] __lock_acquire+0x1520/0x2cf0 [ 1856.168970][T32203] lock_acquire+0x106/0x350 [ 1856.174016][T32203] down_read+0x4a/0x330 [ 1856.178721][T32203] kernfs_remove+0x35/0x80 [ 1856.183692][T32203] __kobject_del+0xe0/0x310 [ 1856.188826][T32203] kobject_del+0x45/0x60 [ 1856.193611][T32203] cleanup_glue_dir+0x1a3/0x220 [ 1856.199009][T32203] device_del+0x77d/0x8f0 [ 1856.203879][T32203] unregister_netdevice_many_notify+0x1be1/0x2140 [ 1856.210902][T32203] unregister_netdevice_queue+0x2f5/0x340 [ 1856.217164][T32203] nsim_destroy+0x275/0x800 [ 1856.222209][T32203] __nsim_dev_port_del+0x14e/0x200 [ 1856.227870][T32203] nsim_dev_reload_destroy+0x288/0x490 [ 1856.233881][T32203] nsim_drv_remove+0x58/0x170 [ 1856.239097][T32203] device_release_driver_internal+0x48b/0x880 [ 1856.245719][T32203] bus_remove_device+0x444/0x560 [ 1856.251203][T32203] device_del+0x524/0x8f0 [ 1856.256092][T32203] device_unregister+0x21/0xf0 [ 1856.261398][T32203] del_device_store+0x2b5/0x370 [ 1856.266795][T32203] kernfs_fop_write_iter+0x3a4/0x540 [ 1856.272617][T32203] vfs_write+0x612/0xba0 [ 1856.277432][T32203] ksys_write+0x150/0x270 [ 1856.282305][T32203] do_syscall_64+0x166/0x520 [ 1856.287431][T32203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.293858][T32203] [ 1856.293858][T32203] other info that might help us debug this: [ 1856.293858][T32203] [ 1856.304115][T32203] Chain exists of: [ 1856.304115][T32203] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 1856.304115][T32203] [ 1856.317523][T32203] Possible unsafe locking scenario: [ 1856.317523][T32203] [ 1856.324985][T32203] CPU0 CPU1 [ 1856.330363][T32203] ---- ---- [ 1856.335760][T32203] lock(gdp_mutex); [ 1856.339679][T32203] lock(cpuhp_state-up); [ 1856.346544][T32203] lock(gdp_mutex); [ 1856.352977][T32203] rlock(&root->kernfs_supers_rwsem); [ 1856.358452][T32203] [ 1856.358452][T32203] *** DEADLOCK *** [ 1856.358452][T32203] [ 1856.366605][T32203] locks held by syz-executor/32203: 8, last CPU#1: [ 1856.373120][T32203] #0: ffff88807fe0a460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1856.382038][T32203] #1: ffff888055f7c480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1856.391815][T32203] #2: ffff8880293363c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1856.402025][T32203] #3: ffffffff8f8afec0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1856.412326][T32203] #4: ffff8880780b7128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1856.422910][T32203] #5: ffff8880780b4258 (&devlink->lock_key#54){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1856.433032][T32203] #6: ffffffff90036540 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1856.442021][T32203] #7: ffffffff8f5e91a0 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 1856.451193][T32203] [ 1856.451193][T32203] stack backtrace: [ 1856.457105][T32203] CPU: 1 UID: 0 PID: 32203 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 1856.457126][T32203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1856.457137][T32203] Call Trace: [ 1856.457145][T32203] [ 1856.457154][T32203] dump_stack_lvl+0xe8/0x150 [ 1856.457179][T32203] print_circular_bug+0x2e1/0x300 [ 1856.457200][T32203] check_noncircular+0x12e/0x150 [ 1856.457221][T32203] __lock_acquire+0x1520/0x2cf0 [ 1856.457257][T32203] ? kernfs_remove+0x35/0x80 [ 1856.457279][T32203] lock_acquire+0x106/0x350 [ 1856.457303][T32203] ? kernfs_remove+0x35/0x80 [ 1856.457327][T32203] down_read+0x4a/0x330 [ 1856.457350][T32203] ? kernfs_remove+0x35/0x80 [ 1856.457368][T32203] kernfs_remove+0x35/0x80 [ 1856.457385][T32203] __kobject_del+0xe0/0x310 [ 1856.457412][T32203] kobject_del+0x45/0x60 [ 1856.457436][T32203] cleanup_glue_dir+0x1a3/0x220 [ 1856.457462][T32203] device_del+0x77d/0x8f0 [ 1856.457490][T32203] ? __pfx_device_del+0x10/0x10 [ 1856.457513][T32203] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 1856.457541][T32203] ? netdev_unregister_kobject+0x347/0x450 [ 1856.457633][T32203] unregister_netdevice_many_notify+0x1be1/0x2140 [ 1856.457660][T32203] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1856.457680][T32203] ? __mutex_lock+0x10a0/0x1550 [ 1856.457710][T32203] unregister_netdevice_queue+0x2f5/0x340 [ 1856.457730][T32203] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1856.457752][T32203] nsim_destroy+0x275/0x800 [ 1856.457779][T32203] __nsim_dev_port_del+0x14e/0x200 [ 1856.457797][T32203] nsim_dev_reload_destroy+0x288/0x490 [ 1856.457816][T32203] nsim_drv_remove+0x58/0x170 [ 1856.457832][T32203] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1856.457854][T32203] device_release_driver_internal+0x48b/0x880 [ 1856.457886][T32203] bus_remove_device+0x444/0x560 [ 1856.457910][T32203] ? __pfx_bus_remove_device+0x10/0x10 [ 1856.457933][T32203] ? kernfs_remove_by_name_ns+0x101/0x140 [ 1856.457955][T32203] device_del+0x524/0x8f0 [ 1856.457978][T32203] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1856.458001][T32203] ? __pfx_device_del+0x10/0x10 [ 1856.458027][T32203] ? sysfs_file_kobj+0x1a/0x230 [ 1856.458051][T32203] device_unregister+0x21/0xf0 [ 1856.458076][T32203] del_device_store+0x2b5/0x370 [ 1856.458101][T32203] ? __pfx_del_device_store+0x10/0x10 [ 1856.458125][T32203] ? sysfs_file_kobj+0x1e4/0x230 [ 1856.458148][T32203] ? sysfs_kf_write+0x166/0x260 [ 1856.458173][T32203] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1856.458197][T32203] kernfs_fop_write_iter+0x3a4/0x540 [ 1856.458221][T32203] vfs_write+0x612/0xba0 [ 1856.458250][T32203] ? __pfx_vfs_write+0x10/0x10 [ 1856.458283][T32203] ? do_sys_openat2+0x14e/0x200 [ 1856.458303][T32203] ? kmem_cache_free+0x182/0x650 [ 1856.458332][T32203] ksys_write+0x150/0x270 [ 1856.458358][T32203] ? __pfx_ksys_write+0x10/0x10 [ 1856.458389][T32203] do_syscall_64+0x166/0x520 [ 1856.458411][T32203] ? trace_irq_disable+0x3b/0x140 [ 1856.458434][T32203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.458452][T32203] ? clear_bhb_loop+0x70/0xc0 [ 1856.458472][T32203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.458490][T32203] RIP: 0033:0x7f5bdf35e90e [ 1856.458507][T32203] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1856.458523][T32203] RSP: 002b:00007fff5b9b76b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1856.458540][T32203] RAX: ffffffffffffffda RBX: 000055556be29500 RCX: 00007f5bdf35e90e [ 1856.458553][T32203] RDX: 0000000000000001 RSI: 00007fff5b9b7740 RDI: 0000000000000005 [ 1856.458565][T32203] RBP: 00007f5bdf4358a7 R08: 0000000000000000 R09: 0000000000000000 [ 1856.458576][T32203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1856.458587][T32203] R13: 00007fff5b9b7740 R14: 00007f5be0154620 R15: 0000000000000003 [ 1856.458607][T32203] [ 1857.128153][T30368] block nbd0: Receive control failed (result -32) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1859.025076][T29342] netdevsim netdevsim9 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1859.053104][T22024] netdevsim netdevsim9 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1859.064366][T24548] netdevsim netdevsim9 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1859.072625][T24548] netdevsim netdevsim9 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1859.680413][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1860.333602][T24585] netdevsim netdevsim8 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1860.349233][T18797] bridge_slave_1: left allmulticast mode [ 1860.354956][T18797] bridge_slave_1: left promiscuous mode [ 1860.360803][T18797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.466970][T18797] bridge_slave_0: left allmulticast mode [ 1860.472761][T18797] bridge_slave_0: left promiscuous mode [ 1860.478554][T18797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1860.581576][T18797] bridge_slave_1: left allmulticast mode [ 1860.587292][T18797] bridge_slave_1: left promiscuous mode [ 1860.593023][T18797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.662501][T18797] bridge_slave_0: left allmulticast mode [ 1860.668228][T18797] bridge_slave_0: left promiscuous mode [ 1860.673957][T18797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1860.820979][T18797] bridge_slave_1: left allmulticast mode [ 1860.826694][T18797] bridge_slave_1: left promiscuous mode [ 1860.832410][T18797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.851820][T18797] bridge_slave_0: left allmulticast mode [ 1860.857535][T18797] bridge_slave_0: left promiscuous mode [ 1860.863271][T18797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1860.938659][T18797] bridge_slave_1: left allmulticast mode [ 1860.944371][T18797] bridge_slave_1: left promiscuous mode [ 1860.950105][T18797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1860.973957][T18797] bridge_slave_0: left allmulticast mode [ 1860.979669][T18797] bridge_slave_0: left promiscuous mode [ 1860.985409][T18797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1861.184862][T18797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1861.195753][T18797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1861.205916][T18797] bond0 (unregistering): Released all slaves [ 1861.314930][T18797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1861.325780][T18797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1861.335918][T18797] bond0 (unregistering): Released all slaves [ 1861.892020][T18797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1861.916584][T18797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1861.933233][T18797] bond0 (unregistering): Released all slaves [ 1862.209735][T18797] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1862.273343][T18797] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1862.329454][T18797] bond0 (unregistering): Released all slaves [ 1862.363071][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1862.372470][T24548] netdevsim netdevsim8 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1862.395050][T24548] netdevsim netdevsim8 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1862.497066][T22546] netdevsim netdevsim8 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1863.052359][T18797] hsr_slave_0: left promiscuous mode [ 1863.076418][T18797] hsr_slave_1: left promiscuous mode [ 1863.108427][T18797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1863.160211][T18797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1863.193786][T18797] hsr_slave_0: left promiscuous mode [ 1863.217712][T18797] hsr_slave_1: left promiscuous mode [ 1863.269881][T18797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1863.345348][T18797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1863.540299][T18797] hsr_slave_0: left promiscuous mode [ 1863.566180][T18797] hsr_slave_1: left promiscuous mode [ 1863.614058][T18797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1863.675786][T18797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1863.733694][T18797] hsr_slave_0: left promiscuous mode [ 1863.773994][T18797] hsr_slave_1: left promiscuous mode [ 1863.799880][T18797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1863.816851][T18797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1864.321786][T18797] team0 (unregistering): Port device team_slave_1 removed [ 1864.334741][T18797] team0 (unregistering): Port device team_slave_0 removed [ 1864.505564][T18797] team0 (unregistering): Port device team_slave_1 removed [ 1864.518694][T18797] team0 (unregistering): Port device team_slave_0 removed [ 1864.848112][T18797] team0 (unregistering): Port device team_slave_1 removed [ 1864.861332][T18797] team0 (unregistering): Port device team_slave_0 removed [ 1865.164640][T18797] team0 (unregistering): Port device team_slave_1 removed [ 1865.177509][T18797] team0 (unregistering): Port device team_slave_0 removed