last executing test programs: 1m46.571471004s ago: executing program 4 (id=624): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12026, 0x0) 1m40.988750387s ago: executing program 2 (id=164): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000400000000000000c932caa1759e94cb", @ANYRES32=r1, @ANYBLOB="000000008190000018270000", @ANYRES32, @ANYBLOB="0000000003000000180000000300000000000000000000009500000000000000186700000a00000000000000acc300009500000000000000"], 0x0, 0x4665573, 0x91, &(0x7f00000007c0)=""/145, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0xb, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0xffffffffffffffff], &(0x7f0000000980)=[{0x2, 0x4, 0xb, 0x8}, {0x1, 0x4, 0x6, 0x9}, {0x2, 0x4, 0xc, 0x1}], 0x10, 0x9, @void, @value}, 0x94) connect$inet6(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000000c0)="848447", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f0000000300), 0x5a6, 0x3b00, 0x0, 0xfffffffffffffdfd) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200050008004b00000008000100", @ANYRES32=0x0, @ANYBLOB="080004000000020008001500"], 0x8c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0) 1m32.074494396s ago: executing program 4 (id=624): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12026, 0x0) 1m24.199897482s ago: executing program 1 (id=487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="b3f086fb5420d4fabdb791d169a4cc11e88ed19488b923a30c1afd185ded2d736bc4064e04af6fbd2fb10252ec0265144a61e25538f4", 0x36, 0x48000, 0x0, 0x0) 1m23.640614675s ago: executing program 2 (id=164): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000400000000000000c932caa1759e94cb", @ANYRES32=r1, @ANYBLOB="000000008190000018270000", @ANYRES32, @ANYBLOB="0000000003000000180000000300000000000000000000009500000000000000186700000a00000000000000acc300009500000000000000"], 0x0, 0x4665573, 0x91, &(0x7f00000007c0)=""/145, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0xb, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0xffffffffffffffff], &(0x7f0000000980)=[{0x2, 0x4, 0xb, 0x8}, {0x1, 0x4, 0x6, 0x9}, {0x2, 0x4, 0xc, 0x1}], 0x10, 0x9, @void, @value}, 0x94) connect$inet6(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000000c0)="848447", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f0000000300), 0x5a6, 0x3b00, 0x0, 0xfffffffffffffdfd) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200050008004b00000008000100", @ANYRES32=0x0, @ANYBLOB="080004000000020008001500"], 0x8c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0) 1m22.998776509s ago: executing program 4 (id=624): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12026, 0x0) 1m9.665763125s ago: executing program 1 (id=487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="b3f086fb5420d4fabdb791d169a4cc11e88ed19488b923a30c1afd185ded2d736bc4064e04af6fbd2fb10252ec0265144a61e25538f4", 0x36, 0x48000, 0x0, 0x0) 1m4.155120898s ago: executing program 2 (id=164): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000400000000000000c932caa1759e94cb", @ANYRES32=r1, @ANYBLOB="000000008190000018270000", @ANYRES32, @ANYBLOB="0000000003000000180000000300000000000000000000009500000000000000186700000a00000000000000acc300009500000000000000"], 0x0, 0x4665573, 0x91, &(0x7f00000007c0)=""/145, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0xb, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0xffffffffffffffff], &(0x7f0000000980)=[{0x2, 0x4, 0xb, 0x8}, {0x1, 0x4, 0x6, 0x9}, {0x2, 0x4, 0xc, 0x1}], 0x10, 0x9, @void, @value}, 0x94) connect$inet6(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000000c0)="848447", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f0000000300), 0x5a6, 0x3b00, 0x0, 0xfffffffffffffdfd) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200050008004b00000008000100", @ANYRES32=0x0, @ANYBLOB="080004000000020008001500"], 0x8c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0) 1m3.463784182s ago: executing program 4 (id=624): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12026, 0x0) 50.506137297s ago: executing program 1 (id=487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="b3f086fb5420d4fabdb791d169a4cc11e88ed19488b923a30c1afd185ded2d736bc4064e04af6fbd2fb10252ec0265144a61e25538f4", 0x36, 0x48000, 0x0, 0x0) 48.990923934s ago: executing program 2 (id=164): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000400000000000000c932caa1759e94cb", @ANYRES32=r1, @ANYBLOB="000000008190000018270000", @ANYRES32, @ANYBLOB="0000000003000000180000000300000000000000000000009500000000000000186700000a00000000000000acc300009500000000000000"], 0x0, 0x4665573, 0x91, &(0x7f00000007c0)=""/145, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0xb, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0xffffffffffffffff], &(0x7f0000000980)=[{0x2, 0x4, 0xb, 0x8}, {0x1, 0x4, 0x6, 0x9}, {0x2, 0x4, 0xc, 0x1}], 0x10, 0x9, @void, @value}, 0x94) connect$inet6(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000000c0)="848447", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f0000000300), 0x5a6, 0x3b00, 0x0, 0xfffffffffffffdfd) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200050008004b00000008000100", @ANYRES32=0x0, @ANYBLOB="080004000000020008001500"], 0x8c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0) 43.868911749s ago: executing program 4 (id=624): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12026, 0x0) 32.407589475s ago: executing program 1 (id=487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="b3f086fb5420d4fabdb791d169a4cc11e88ed19488b923a30c1afd185ded2d736bc4064e04af6fbd2fb10252ec0265144a61e25538f4", 0x36, 0x48000, 0x0, 0x0) 31.697644681s ago: executing program 2 (id=164): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000400000000000000c932caa1759e94cb", @ANYRES32=r1, @ANYBLOB="000000008190000018270000", @ANYRES32, @ANYBLOB="0000000003000000180000000300000000000000000000009500000000000000186700000a00000000000000acc300009500000000000000"], 0x0, 0x4665573, 0x91, &(0x7f00000007c0)=""/145, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0xb, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0xffffffffffffffff], &(0x7f0000000980)=[{0x2, 0x4, 0xb, 0x8}, {0x1, 0x4, 0x6, 0x9}, {0x2, 0x4, 0xc, 0x1}], 0x10, 0x9, @void, @value}, 0x94) connect$inet6(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000000c0)="848447", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f0000000300), 0x5a6, 0x3b00, 0x0, 0xfffffffffffffdfd) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200050008004b00000008000100", @ANYRES32=0x0, @ANYBLOB="080004000000020008001500"], 0x8c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0) 19.520019186s ago: executing program 1 (id=487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="b3f086fb5420d4fabdb791d169a4cc11e88ed19488b923a30c1afd185ded2d736bc4064e04af6fbd2fb10252ec0265144a61e25538f4", 0x36, 0x48000, 0x0, 0x0) 15.388853699s ago: executing program 2 (id=164): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%+9llu \x00'}, 0x20) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000400000000000000c932caa1759e94cb", @ANYRES32=r1, @ANYBLOB="000000008190000018270000", @ANYRES32, @ANYBLOB="0000000003000000180000000300000000000000000000009500000000000000186700000a00000000000000acc300009500000000000000"], 0x0, 0x4665573, 0x91, &(0x7f00000007c0)=""/145, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0xb, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0xffffffffffffffff], &(0x7f0000000980)=[{0x2, 0x4, 0xb, 0x8}, {0x1, 0x4, 0x6, 0x9}, {0x2, 0x4, 0xc, 0x1}], 0x10, 0x9, @void, @value}, 0x94) connect$inet6(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f00000000c0)="848447", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f0000000300), 0x5a6, 0x3b00, 0x0, 0xfffffffffffffdfd) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc02000000000000000000000000000004001200050008004b00000008000100", @ANYRES32=0x0, @ANYBLOB="080004000000020008001500"], 0x8c}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r1}, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, 0x0) 12.95963391s ago: executing program 4 (id=624): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x12026, 0x0) 3.328405649s ago: executing program 3 (id=1152): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="f9", 0x1, 0x54, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2, 0x20000}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="db", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004500001c0000000000029078e0000002000000001200907800000004"], 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4004899) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000040)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x19, 0x14, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0xa, 0x4, 0x9, 0x9, 0x1ff}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx, @ldst={0x3, 0x1, 0x0, 0x9, 0x1, 0x20, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0xae, &(0x7f0000000b40)=""/174, 0x41000, 0xe, '\x00', r3, @fallback=0x1e, r0, 0x8, &(0x7f0000000380)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x6, 0xa0db86c}, 0x10, 0x0, r4, 0x1, 0x0, &(0x7f00000004c0)=[{0x3, 0x2, 0x0, 0x1}], 0x10, 0x7, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r2, 0x8b2a, &(0x7f0000000040)) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000040)=0x9, 0x4) recvmmsg(r6, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=""/4103, 0x1007}}], 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 2.356581215s ago: executing program 3 (id=1155): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000e40)={{}, r2, 0x0, @inherit={0x68, &(0x7f0000000140)={0x0, 0x4, 0x43580, 0x8000000000000001, {0x8, 0x0, 0x4748, 0x8000000000000000}, [0x2, 0x1, 0x5, 0x1]}}, @devid=r3}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x4a, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r5, &(0x7f0000000000)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c00028005000c0001000000ea216a50ba2b0f371ea15cb4621aa3635b8f172ea3e4eb97fd56c940df936d8ebdb0d2d6032ab987d306d9cfe78eb7d0e98106796401645d3be24d0bb9c43aa83eda370a95e7e1a7adb85da0dc548c546ca4ab2210a622f15b5b9b2261819bdfc6370eec789eac4096270567c910d8f44e1e78e70fccb709cbf5694b3fdea22fa28f29deaf3edcba933c5ba4b63bd8759d274fbc10d98efdac455d1229b6e3ff3330920c9df88422efac77557c25ccd28ceab7d6120450b1633dcf13c773010b2772c250c73c7f381a7c20e9b9"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) 2.17448474s ago: executing program 0 (id=1156): sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x32, 0x0, 0x60b, 0x0, 0x10000, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1d}]}, 0x34}}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x9d741df904aad753, 0x0, 0x0, {{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, {0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0xa, 0x2}}, 0x126}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc9486dd60fec00000383a00fe880000000000000000000000000001ff0200000000000000008be60000000102009078000000006098a35000000000fe800000000000000000000000000002fc0100000000"], 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x87}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.153002526s ago: executing program 3 (id=1157): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="2a003300d0726d00ffffffffffff080211000000fffffffffffff00f04"], 0x48}, 0x1, 0x400000000000000, 0x0, 0xc0}, 0x0) 1.969007214s ago: executing program 0 (id=1158): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000040, 0x20000070, 0x200000a0], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x600, '\x00', 0x11e, 0xffffffffffffffff}]}, 0x108) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}, 0x1, 0xa00}, 0x0) 1.881490857s ago: executing program 3 (id=1159): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@deltfilter={0x40, 0x2d, 0xc31, 0x7, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xffe0}, {0xb, 0xc}, {0xa, 0xffe0}}, [@f_rsvp6={{0xa}, {0x10, 0x2, [@TCA_RSVP_POLICE={0x4}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0xf}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x24008040) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000020c0000000c00000002000000020000000000000c020000000000d8eb94a8b2023405"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.825663475s ago: executing program 0 (id=1160): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.659317217s ago: executing program 0 (id=1161): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x26e1, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x4, 0x4, 0x3c8, 0x1d0, 0xe8, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8, 0x0, {0x3ed}}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x3b}, @loopback, 0xffffff00, 0x0, 0xff, 0x1, {@mac=@link_local}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, {[0x0, 0xff, 0xff]}}, 0x0, 0x4, 0xffff, 0xc092, 0x0, 0x2, 'gretap0\x00', 'veth1_macvtap\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x6}}}, {{@arp={@remote, @broadcast, 0xff, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@broadcast}, 0x0, 0x0, 0x2, 0x5, 0xe, 0x0, 'batadv_slave_1\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0x1a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @broadcast, @multicast1, 0x7, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x418) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x2400, 0x4) 1.47629666s ago: executing program 0 (id=1162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x3c}}, 0x41) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x40000) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e27}}, 0x24) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="faffff43ffffffffe5f79b4a29ae28e8f687bd4ca2eff8de6173d63130e21efab3bd61f5cfbcc2bbe66b"], 0x8) sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x34}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000014) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x20004051}, 0x4000000) 1.408860526s ago: executing program 3 (id=1163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000840)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000a40)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000e40)={{}, r2, 0x0, @inherit={0x68, &(0x7f0000000140)={0x0, 0x4, 0x43580, 0x8000000000000001, {0x8, 0x0, 0x4748, 0x8000000000000000}, [0x2, 0x1, 0x5, 0x1]}}, @devid=r3}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x4a, 0x4) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$bt_hci(r5, &(0x7f0000000000)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000000c00028005000c0001000000ea216a50ba2b0f371ea15cb4621aa3635b8f172ea3e4eb97fd56c940df936d8ebdb0d2d6032ab987d306d9cfe78eb7d0e98106796401645d3be24d0bb9c43aa83eda370a95e7e1a7adb85da0dc548c546ca4ab2210a622f15b5b9b2261819bdfc6370eec789eac4096270567c910d8f44e1e78e70fccb709cbf5694b3fdea22fa28f29deaf3edcba933c5ba4b63bd8759d274fbc10d98efdac455d1229b6e3ff3330920c9df88422efac77557c25ccd28ceab7d6120450b1633dcf13c773010b2772c250c73c7f381a7c20e9b9"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r7, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) sendto$inet6(r7, &(0x7f0000002380)="4bc32a49c5fee590838631f81d2d501b780e3376f11cd3e5af0a450233e74156f6bbf53a14d2e74c8e46115c0a4d4a0375317c4d988a690e37262cb48b591bfdb4ff738f0be31f3f33d65ec0256e00d937043394bbc296a55f0ffd3f8ae817bd0629ddb54b5a077cb64f8b1b75a3368c7908668352513b274701ffeab331e7427c786ca327f124645e97e4b67c7eda72388d008dbecae8227565c52c02500c1953cff47c07baeaa70ccda20f6ad15db93d0225f72ac9f7c32387b0e50de6f698decf584671232331c524c1e775c4b13e0e379e8253b0ff8fc05238f9a7dada66771b3c485d00532858ad4e137742e6adf72eec34b0ba8821c67f9d2726e98a6074617100882dc2711fb2e477cc76a1ff9b47d93ca2fa42e52f483bd2aa530974ff3fd29a170adadb10241abb8ddff7fdbe53765ee6239d7896be7db752b5046cc5b4b36b2a9c0b3c154915d90ccbf46675a81826b348a5c986a4d1c4488f6e24545619c829e7f6c4ae68d1a86bb2e700728086f30659178c7ba222b71f5786d77f12f221cd20b9fbd24801abcd64eaa605ca9da167fb06b11b9ee2a33d7d144f162f0699972818e0e69159e07393634fd13310a648768d17013063d34b2d68a20469891d0f24285a44ea4dc4aaadf3e326c7645fb569ee78dca1ec46d7942a42bd675ed1dbb3b537a24d57b76583df434bb57f38c0b4c2b6414f4511fb0126a3e17e06c65ec6023b8198ddc4b59707132affdb3123a930192d8a1a1d346501468faf24a8090b0454b7fd4fbe7f3afd8e70150edc2d3b6d799b45010dfd621c39d1e32e19f7c1554abf55e4cb0f450d129c4eaef1a1b7431ad30fc0d6ce6b973f2aa0f1dd2599d8284fb79deff298aae73388cd0ae4fccda5cff46b058fac08debb67bb9bc5eea5a6d28cff2d046a5afb09fb608bab362ef021fefc8d05e9619ea57959a884873b3a887a5e08123d564c5349c4c15c2ece77f0e4d0e4c88a516978afe85c014ff344668d4cd97681bae2ab6aecdc6f4a4c705c43d400f691ef6f5c926a8c51d9cd4d0fc15769c5b20662cfbef41d9cc3d62b9d68795907729d33133f3287f2ab5cce83e35fb0e358bb64a60675308f568a25c2327eebaaac30e6e282464d5547daf53eee7190e1e5a40f7d2e327858099bc5a7eff7f79859a074aaad5d6bdd8164c627ea59784fe40f1467bd17ded380e21bca5d7d0bb59aa681740d4e371e632862cdb8868c4d706a328704dd94d8687e07708b8a4742fb0caa260523e515bfd7ddcae9aff8e487aac73232c6a2bf63663c644f4451e209d720b0bd678b27b673443937d80958f94fd747be9f0df02950c2de593ea6978062aba26d12eda852f37cdfc18d3b96b08ac3eaffa2efb619db6ee789446b30fd5939f59e8cbafc28451fb95eefa265e038f43af933d288578be9ecf26495e6da011d91d5578c46b4a4bcbcf649eced6ac16f6623e67afd80c35dffe6b6aadd4bfbbfcd2f248455b8b1ce0f10f628999d8f56ae47e2fbb744bfb7962a3548240c286277db000d2b0e403d13fea75c7a789dec2a29e51e20a037a5156cfc547a7688f1926d8476a5d5bb64b4a82132a3bcadd080503f72e04e7d55ece7d5bbf24eb6fae2abace69fddbc3604c04a0a82408a7dc035e2512082397323cbf6ac5a01c07baa604bbd6315ad2592491a5397ef1c736f5fae08426ad14753fa0ea774f0397a77399bc5a7c9529f7a7b48313f426796346f77f7e975f8c2704bc61ce89f8f462ba69b68de5bbfaefae6b749d68af86334552a37f02b18671eb6ebf58cc77fde6d93a2b859c49113634afa77d33d2655675697b3ba142b94a18cda12773ed4391e4f80e7caf1c429eb4bbf2d2c982ea62aba0c94cfa2280d12e411edba880debe919d334d58492ce78ee93fafb2b6ef8206bf89cd10139dda68c57aece18acb02b5cb1d8ca7c6eba88751ddfad35db2ef8089e14cc30fa7e963394cbdfd4a39053c69e94b9bb44bb445d77b7a0965e3428142405ef3aa26426fcb8e26423b5342a1ea0bfd28448605e7c4346916a152839c23f1e3d463078830f55cfee3d719080be97cc6b6acd9effda875b18df23c07e55cd732d25d0c32b04c38b2c4cec8e9b57548cb7c153c2ac2043aaa49267c179f1485acb449823fd3f379953adaba9209ce052ee6470529ef6c044efdb9ec79c0da170e1a986706da2f191f735e8c9c27a433f06ad910b552ec871c20202bf39c13e3601a65facb32fb7ef2a85d12345b67409bd14c1e26c028676cef27d47e51deb5c8b616d7ec0dd837ad4fc4800ce78f83e5075bef6d3ef784519908712d411d6af598dda6ea13f20fb2ba8f4a85d1c8df3cc7dfe0a8e8d5b2d696e2b51d835c255d97873dae579a69cc3c9f8d50f282250142f78b562cd59325b010fdf5e103cc05f09295ecd5ad1bdbd195ba895bd38e5f3f8abe520a442f98c9b0df2e1bf30771be8c0ba86d59579a9ceda056c2b3b6d51ea5cd584750f45ccb7c9adc37ea8750ff035778da2cd9eac640e1121c4afac6f796a2a6d1892ce896f201a08cfa422bdbfabc34dad9e34352856160037d3485c344900ebb6d331d35fcb1c393a712cb5fe7002561c4bb11051492e65d4291c92c0545a926a798d7a23e806796fed6534d67cdf9857f7123d4dd1ebdb88d545201d75d1c9ba5456b7fb52af56652cb2537c0a5f82ad02f084edcaa66254f9a0a01eb7c5b9606c4c93594f1e636ab15d96f58b11ee9f7a16b6765a146bac6a98da6b47ecc87974a1c732c1194008c5f3514d0c1f42ba7b284b07b23a3b0fe9073dcec4b2d4ea397ef3984753b134d20515ed774118b46f21cd2f2c60b87f54e9335fa30517fe8c360f0803031a91302ba8f44e82d13c58736881ecf4cb643e7bf9585193f4d1e95e08c18c47d460e2edf2a0f1ed39c2e7800cfbffa0d9a09b108d8a5eab9ed409b61458e9d46bceab006e2df77505af41ff7dc0ee67748ec729ee09c11c229ac7ef447712c220ae2ef5612ae45299ca04cc3a26cc09a259c1dbc9a4291bd6589ce6eedc156df97d1bb7eea68ee273bb4c4c8ca0c515299aa53260e587608e4b1ec4f386ad0367a08bfa47ffca6af5705097d1657c94d5d7736e7157d8f7137416480933be3f325708f6f947ea08c94cf4489e0f338f91384715681044e00fbbff94b8d21a874b12be4294173c65f2f4e56427e840a5703e289f8314f705cf74e1d98ff88105967bd42d62a63a897fbe9a50ff08dd122c3ce1445b21aab0502b6fb47577604a0508249d8422b71eedc58fa678646922050d46d5e69d8612917bbb741c19ede0600917b7f84e44e580334db385ef5e5600a73bfdebcb037cea14f50eb7466db1e51d03d61923804ebfef38735452893486cf5a9e6ecc54526a2c998e3b5b41d5d8477c7e9b756876c8748dd10f44f315a5ccc578ec38a6799846ec1fac57bdfe4f9bc65b31d1e7de7cd9fc2f163cb513d790bd1dbb9b5a5cd46efecbbaba6bf504c23ca744ee36704f0b875396da1f9ac7089c28136e19b3c31ea3ac44f0bf8af4bdeb9a917370c78d11ab838282787cdc45b35f604bddf6c65f4079bd7606a40f219bbe940e25e6a54a8b9850ea0decb10013ae99aa920303f35f6283c0211e1bf12f33926840ec6acc53babc28b29c5aee0f626c48d58b092644823fc0b71a57d7125bc35ddf9ec7019d89a3497aa65fb4f34b169c535ce30d695dbb88f278e730d2e4f1394ed4b843885d8fa33b39152398fd2f6bb77520a84e4135e1995e9568bc4d3e60b98e1452ada5893bfc1a7574570a09fa21064ad12aa22af9195fe351cd34a5e3adac29da4669e09abf318d17c4b564f2ed0a7844c840a729fed5c106861f479fedf326d93b39f186c40e4fc59e064c6d090cc9ecf27630ab471817e3bf8acfa1518c6f0f6b2f4c0905e9249af04c8019d3fe12acd69e0a3085e01d673ffa5f2bb6d26717f611de3a0bdb7b838f0d156c06395bbb9294cb0e293f43baf60df683b35c4ff83bfd71b74fb25762079843d6484fa76a610b8cd6affeaf1930a47aa9aec77fee8b6b6a806527597f769570bb62af13a9da2d81254e102134e256f15126d21a7e5e6865989b1eb5c9752d059bea9eff27f7fed5f0ed40413ac11c20e68aa43baf4fc6a59e049e6bdb3ea3ebc5734b0ad0c6c9be761c5c248d2b50584ddfa2399884b091894f19061f4eb9ffa86097c11ee9fdb04d4ca44f91edded8e541adfab1b71c93305e85a41ca5f4eb9cf15820bf677694325c9c55cb443a7cb5e3d18157bd01bb23c1ede5dd5babc2751bead25b2f18860a085584ebf5211d67f74fd70edbecdbbf435d71db84fa96b9878a4166e2b0cc492f0f9eb82ad4fb4cdd5644e20f296feaa8f147e0e20a7c0f37767bf2a47fee3141447043fd990bb39dd56153eee38d05538b43627891f057a07526bf6848e171247549f53e0ba495a108f99e412a178e12001135e27b0184542ac579e0e22987b6b60fe5fc07954587556a53e1b326888d482f519c2e65f57193cb7f328e865db95b757d370200cb643a4da7596a13391d7b1017d842ecacaac3b0a3f53f388301374ad9033ff34d7d18db497c78a1ec8661c8e78e1d498f5a615649f3ecfe2c8ef3ee616ae455a42a06aacd64f1b2904dd111acd54d349dbb2ea2acf9e8fad483a53eb211018f6f2245c519c50fb3453b956c49a05a140b7270939f4f8216da940564f7facc9a83adae647c9fd43790577ed43dbe77420459a74237593fd5b703c0d4076ab1accd9ba686e621f189f41a66df608f7db2dfb1b08137f2f91413e670f3835dd7bca62a078c1cd14683ed4d9ff8d9025477aacffcc38c330c3940ce55ba0742d8ffb4e0a3220177529978390e19167e40dede952fc0cb5e6e8ad6863c6160f517d714bcf18256eb9d0eec8413dbec13a7bd637a77e328d4db8f61493eb0f26eca93137fc4420e0c5bd8d4a1b700bf0608daddec7d40d24751698f2dc89b8a04ae03d3349511a50f988b02cbfacf2c0455a9c8f034d671972368ceed715f3dfc2e9a143ff5c6275c8b714aee89c48c6b10aaf007e363ae17765dffea8b265a27793f55b86c214bbce2b3745f392109ece5688bdccd6dccf33407932dac4a18783b2d26d6dafeff39146397a4e89d2fb32d27c8b86e02b6ffa8fb91499f51d481ade5aa2e89bf5d24cdb95771574c777df39144316c6d6fcd9d8fb2fcec5823adfea0550014dfd2b5a3f7e23116359d12bee8362b5b96c7816583dabda95117b089f37cb3f682aeafec74dd62ca9ed9f1e56f7789e3b1ea9fcd0e3362ce0819f7b73d5e6b73162452eb69a1625a74926e6f4ee83e443e22f035e28f8bb19cfdc79c4e623356d022866edaf6d75c1938b86aa475670015433496f6455e4178072f05210d023ddb30dbaa5c8549fe893880e9da44d7ef99bc67940e73823962c8cc5e5e2708e22ddf27b863e360b372b57771099ab70fb51538bb0f42684e9b8bee428a9292869ad2bda5c554653e592066acd8e8547987f8e734e9e63ce39aae30439d4a0d7d88c8c5b2ee3727b6e8f22e96b9571ac2290edf3aa74e5cd54f464417773ef295e90d43042ee731d129179bef03fafc424b38118b5bfaa2051da04fbe8c84ddb142b8b80a599e419c09e0946268a52c352e74a8c3ff5b4e554dfcb1ae8b9a7f16ff823022ba5cd25ba70b6d6f620c5b2eff4a318c2c38f71c62b66b6d242e8b6046b57589ae1c9da4c71a3da67ae491f3222f911144603238bc0e508f7f6166e95700e043837b5839", 0x1000, 0x400c881, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) 1.183857733s ago: executing program 1 (id=487): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000100)="b3f086fb5420d4fabdb791d169a4cc11e88ed19488b923a30c1afd185ded2d736bc4064e04af6fbd2fb10252ec0265144a61e25538f4", 0x36, 0x48000, 0x0, 0x0) 512.521µs ago: executing program 0 (id=1164): r0 = socket$netlink(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)="0600", 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}, {&(0x7f00000001c0)}], 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x8}, 0x20044014) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0500d91164420000900e000080000000000000000df36ed375cf51493706141e4dd966ea61985cfdcb5687eedc023a26872a78a8233c5183b87f80c0ca27bfc432dcdcbd81b0fbfe7919fb49d2714aa12b016f36d769bcb46d17422155370a8c7ba4d0cf9b0e6b12d8d45f198146", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000003c0)=@gettaction={0x44, 0x32, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x4, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xb}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x20084001}, 0x8080) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0xba87317d461c07c9, 0xfffffffd}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESDEC, @ANYBLOB="1000a869d4a5244bd10614c96bfa0efc29bd7000fedbdf25700000000a00060008021100000100000a000600080211000000"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0xa0}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r10, @ANYBLOB="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"], 0x21c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r9, @ANYBLOB="ef5ff439e48e331c5c36fbe4943038d6a39b1f80abb40372fca70ce54606da0d17e409d8f9b82393b0db76909f93e55a310b569ada0cb826d886b4819474b7aa3ca08892cb35620e7fafcfe2d7fe95b725af0aa9988bdedaa4c78ee720bba1d7ddcab1169f0976051301c4e844f33ad3ecab4d82c8bd41ce63c93d3602b34b76498a40fff3bacfcdc1744c9212e682c3c7dafe70693da9d762b4867c82298884a132628f6767c2e786783779b047f7d0299bc5d5f200"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 0s ago: executing program 3 (id=1165): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x6, 0xc000000, 0x3, 0x2, 0x4, 0x8, 0x2, 0x39]}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x4, 0x400, 0xffffffff, 'pptp\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x60) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x164}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdb8}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4000000000000006910080000000000630a0eff000000009500000c00000000c18857357c70373691fee4c8f693d7f82af79bc1c507b41d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xf9b979f9a7792f71}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0xabe0b5f6490658c0}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0xfffffffd, 0x7f, 0x10a7}}, @TCA_TBF_BURST={0x8, 0x6, 0x1}]}}]}, 0x6c}}, 0x40000) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f00000000c0)="4b0003000000", 0x6) socket(0x1d, 0x6, 0x73540000) kernel console output (not intermixed with test programs): 9.959147][ T8646] RIP: 0033:0x7fdd4057e759 [ 189.963682][ T8646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.983326][ T8646] RSP: 002b:00007fdd413dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 189.991763][ T8646] RAX: ffffffffffffffda RBX: 00007fdd40735f80 RCX: 00007fdd4057e759 [ 189.999790][ T8646] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 190.007864][ T8646] RBP: 00007fdd413dd090 R08: 0000000000000000 R09: 0000000000000000 [ 190.015941][ T8646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.024028][ T8646] R13: 0000000000000000 R14: 00007fdd40735f80 R15: 00007ffd81abf868 [ 190.032036][ T8646] [ 190.506177][ T1132] hsr_slave_0: left promiscuous mode [ 190.516977][ T1132] hsr_slave_1: left promiscuous mode [ 190.549075][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.556571][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.569753][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.577358][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.608860][ T5845] Bluetooth: hci3: command tx timeout [ 190.641070][ T1132] veth1_macvtap: left promiscuous mode [ 190.646674][ T1132] veth0_macvtap: left promiscuous mode [ 190.653148][ T1132] veth1_vlan: left promiscuous mode [ 190.658839][ T1132] veth0_vlan: left promiscuous mode [ 190.852389][ T5845] Bluetooth: hci4: command tx timeout [ 191.147597][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 191.191398][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 191.568678][ T5845] Bluetooth: hci2: command tx timeout [ 191.754832][ T8676] xt_cluster: you have exceeded the maximum number of cluster nodes (600 > 32) [ 192.690064][ T5845] Bluetooth: hci3: command tx timeout [ 192.929779][ T5845] Bluetooth: hci4: command tx timeout [ 193.311572][ T8632] chnl_net:caif_netlink_parms(): no params data found [ 193.324314][ T8641] chnl_net:caif_netlink_parms(): no params data found [ 193.335478][ T8680] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 193.368709][ T8543] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.395688][ T8543] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.463325][ T8543] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.536480][ T8543] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.651143][ T8696] netlink: 48 bytes leftover after parsing attributes in process `syz.3.859'. [ 193.757934][ T8701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.860'. [ 193.832631][ T8641] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.867859][ T8641] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.899143][ T8641] bridge_slave_0: entered allmulticast mode [ 193.906334][ T8641] bridge_slave_0: entered promiscuous mode [ 193.942776][ T8632] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.950240][ T8632] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.957520][ T8632] bridge_slave_0: entered allmulticast mode [ 193.974257][ T8632] bridge_slave_0: entered promiscuous mode [ 193.991151][ T8632] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.005244][ T8632] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.013418][ T8632] bridge_slave_1: entered allmulticast mode [ 194.020914][ T8632] bridge_slave_1: entered promiscuous mode [ 194.028380][ T8641] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.036486][ T8641] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.044677][ T8641] bridge_slave_1: entered allmulticast mode [ 194.053021][ T8641] bridge_slave_1: entered promiscuous mode [ 194.165518][ T8641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.191452][ T8632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.240728][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.866'. [ 194.270275][ T1132] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.307624][ T8717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.866'. [ 194.317410][ T8717] netlink: 32 bytes leftover after parsing attributes in process `syz.3.866'. [ 194.346998][ T8641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.365622][ T8632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.386049][ T5845] block nbd9: Receive control failed (result -107) [ 194.418698][ T8717] nbd9: detected capacity change from 0 to 256 [ 194.441033][ T1132] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.537961][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.544579][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.555452][ T8632] team0: Port device team_slave_0 added [ 194.584660][ T8632] team0: Port device team_slave_1 added [ 194.646172][ T1132] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.701399][ T8641] team0: Port device team_slave_0 added [ 194.767705][ T1132] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.779429][ T5857] Bluetooth: hci3: command tx timeout [ 194.851360][ T8632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.858370][ T8632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.893414][ T8632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.909741][ T8733] Cannot find add_set index 0 as target [ 194.924537][ T8641] team0: Port device team_slave_1 added [ 194.950108][ T8632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.957188][ T8632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.997051][ T8632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.019584][ T5857] Bluetooth: hci4: command tx timeout [ 195.086523][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 195.171687][ T8641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.189898][ T8641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.216022][ T8641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.227890][ T8739] FAULT_INJECTION: forcing a failure. [ 195.227890][ T8739] name failslab, interval 1, probability 0, space 0, times 0 [ 195.241282][ T8739] CPU: 0 UID: 0 PID: 8739 Comm: syz.0.874 Not tainted 6.12.0-rc7-syzkaller-01702-gd7ef9eeef072 #0 [ 195.251928][ T8739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 195.262016][ T8739] Call Trace: [ 195.265312][ T8739] [ 195.268255][ T8739] dump_stack_lvl+0x241/0x360 [ 195.272965][ T8739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.278190][ T8739] ? __pfx__printk+0x10/0x10 [ 195.282805][ T8739] ? __kmalloc_noprof+0xb0/0x400 [ 195.287861][ T8739] ? __pfx___might_resched+0x10/0x10 [ 195.293185][ T8739] should_fail_ex+0x3b0/0x4e0 [ 195.298064][ T8739] ? fib_create_info+0xc14/0x25b0 [ 195.303120][ T8739] should_failslab+0xac/0x100 [ 195.307820][ T8739] ? fib_create_info+0xc14/0x25b0 [ 195.312876][ T8739] __kmalloc_noprof+0xd8/0x400 [ 195.317674][ T8739] fib_create_info+0xc14/0x25b0 [ 195.322565][ T8739] ? __pfx_lock_acquire+0x10/0x10 [ 195.327649][ T8739] ? lwtunnel_valid_encap_type+0x8a/0x5f0 [ 195.333402][ T8739] ? __pfx_lock_release+0x10/0x10 [ 195.338465][ T8739] fib_table_insert+0x1f6/0x1f20 [ 195.343535][ T8739] ? lwtunnel_valid_encap_type+0x8a/0x5f0 [ 195.349367][ T8739] ? lwtunnel_valid_encap_type+0x265/0x5f0 [ 195.355197][ T8739] ? lwtunnel_valid_encap_type+0x8a/0x5f0 [ 195.360949][ T8739] ? __pfx_fib_table_insert+0x10/0x10 [ 195.366344][ T8739] ? fib_new_table+0x120/0x2d0 [ 195.371132][ T8739] inet_rtm_newroute+0x149/0x290 [ 195.376095][ T8739] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 195.381594][ T8739] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 195.387078][ T8739] rtnetlink_rcv_msg+0x73f/0xcf0 [ 195.392031][ T8739] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 195.397168][ T8739] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.402824][ T8739] ? ref_tracker_free+0x643/0x7e0 [ 195.407896][ T8739] netlink_rcv_skb+0x1e3/0x430 [ 195.413061][ T8739] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.418680][ T8739] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.424086][ T8739] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.429327][ T8739] netlink_unicast+0x7f6/0x990 [ 195.434391][ T8739] ? __pfx_netlink_unicast+0x10/0x10 [ 195.439926][ T8739] ? __virt_addr_valid+0x183/0x530 [ 195.445080][ T8739] ? __check_object_size+0x48e/0x900 [ 195.450424][ T8739] netlink_sendmsg+0x8e4/0xcb0 [ 195.455226][ T8739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.460628][ T8739] ? aa_sock_msg_perm+0x91/0x160 [ 195.465591][ T8739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.470985][ T8739] __sock_sendmsg+0x221/0x270 [ 195.475689][ T8739] ____sys_sendmsg+0x52a/0x7e0 [ 195.480499][ T8739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.485862][ T8739] __sys_sendmsg+0x292/0x380 [ 195.490522][ T8739] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.495671][ T8739] ? __pfx_vfs_write+0x10/0x10 [ 195.500485][ T8739] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 195.506889][ T8739] ? do_syscall_64+0x100/0x230 [ 195.511693][ T8739] ? do_syscall_64+0xb6/0x230 [ 195.516408][ T8739] do_syscall_64+0xf3/0x230 [ 195.520939][ T8739] ? clear_bhb_loop+0x35/0x90 [ 195.525638][ T8739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.531549][ T8739] RIP: 0033:0x7fdd4057e759 [ 195.536588][ T8739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.556397][ T8739] RSP: 002b:00007fdd413dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.564858][ T8739] RAX: ffffffffffffffda RBX: 00007fdd40735f80 RCX: 00007fdd4057e759 [ 195.572848][ T8739] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 195.580841][ T8739] RBP: 00007fdd413dd090 R08: 0000000000000000 R09: 0000000000000000 [ 195.588828][ T8739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.596823][ T8739] R13: 0000000000000000 R14: 00007fdd40735f80 R15: 00007ffd81abf868 [ 195.604829][ T8739] [ 195.682672][ T8742] netlink: 'syz.3.875': attribute type 1 has an invalid length. [ 195.703106][ T8641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.710411][ T8641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.736615][ T8641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.743401][ T8745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 195.871905][ T8632] hsr_slave_0: entered promiscuous mode [ 195.890595][ T8632] hsr_slave_1: entered promiscuous mode [ 195.898746][ T8632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.907404][ T8632] Cannot create hsr debugfs directory [ 195.926406][ T8745] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 195.948399][ T8745] bond3: (slave batadv1): Enslaving as a backup interface with an up link [ 195.995753][ T8641] hsr_slave_0: entered promiscuous mode [ 196.002882][ T8641] hsr_slave_1: entered promiscuous mode [ 196.013895][ T8641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.027606][ T8641] Cannot create hsr debugfs directory [ 196.042768][ T8748] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 196.057035][ T8748] bond3 (unregistering): Released all slaves [ 196.099727][ T8543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.295549][ T1132] bridge_slave_1: left allmulticast mode [ 196.315166][ T1132] bridge_slave_1: left promiscuous mode [ 196.326082][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.356953][ T1132] bridge_slave_0: left allmulticast mode [ 196.365378][ T1132] bridge_slave_0: left promiscuous mode [ 196.371578][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.612869][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 196.803709][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.815817][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.827236][ T1132] bond0 (unregistering): Released all slaves [ 196.848967][ T5845] Bluetooth: hci3: command tx timeout [ 196.906915][ T8543] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.955076][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.962280][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.089489][ T5845] Bluetooth: hci4: command tx timeout [ 197.105838][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.113026][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.119757][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.885'. [ 197.437340][ T1132] hsr_slave_0: left promiscuous mode [ 197.448166][ T1132] hsr_slave_1: left promiscuous mode [ 197.465728][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.475729][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.493063][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.515153][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.556986][ T1132] veth1_macvtap: left promiscuous mode [ 197.562835][ T1132] veth0_macvtap: left promiscuous mode [ 197.569740][ T1132] veth1_vlan: left promiscuous mode [ 197.575133][ T1132] veth0_vlan: left promiscuous mode [ 198.039874][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 198.082335][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 198.502211][ T8779] tipc: Enabling of bearer rejected, failed to enable media [ 199.001650][ T8632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 199.039611][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 199.048595][ T8632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 199.076891][ T8632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 199.088954][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.897'. [ 199.133834][ T8543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.142953][ T8632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 199.269267][ T8543] veth0_vlan: entered promiscuous mode [ 199.335156][ T8543] veth1_vlan: entered promiscuous mode [ 199.376015][ T8632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.407251][ T8632] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.447507][ T8543] veth0_macvtap: entered promiscuous mode [ 199.475154][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.482367][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.515328][ T8543] veth1_macvtap: entered promiscuous mode [ 199.534142][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.541348][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.587007][ T8543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.609057][ T8543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.629082][ T8543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.647123][ T8543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.663193][ T8543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.674741][ T8543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.686433][ T8543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.735775][ T8543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.756993][ T8543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.775190][ T8543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.790080][ T8543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.801062][ T8543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.822034][ T8543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.833451][ T8543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.851460][ T8543] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.864845][ T8543] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.873907][ T8543] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.887873][ T8543] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.911144][ T8641] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 199.977301][ T8641] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 200.037437][ T8641] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 200.055081][ T8825] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.061698][ T8641] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 200.106754][ T8632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.140819][ T8825] Bluetooth: MGMT ver 1.23 [ 200.229850][ T8827] netlink: 'syz.3.907': attribute type 11 has an invalid length. [ 200.263642][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.287113][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.367477][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.376242][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.421434][ T8834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.909'. [ 200.488061][ T8632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.557635][ T8641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.683003][ T8632] veth0_vlan: entered promiscuous mode [ 200.696920][ T8641] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.726765][ T8632] veth1_vlan: entered promiscuous mode [ 200.747842][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.755024][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.814809][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.822032][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.023235][ T1079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.130254][ T8632] veth0_macvtap: entered promiscuous mode [ 201.201198][ T1079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.236543][ T8632] veth1_macvtap: entered promiscuous mode [ 201.277961][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.302331][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.313518][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.325077][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.336423][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.347258][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.357467][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.368194][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.380306][ T8632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.406715][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.418217][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.429561][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.440226][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.450660][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.461364][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.471428][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.482397][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.494723][ T8632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.511753][ T8632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.520739][ T8632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.530077][ T8632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.539604][ T8632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.594009][ T1079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.693088][ T1079] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.758067][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.767953][ T8641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.776166][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.840245][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.864460][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.229964][ T1079] bridge_slave_1: left allmulticast mode [ 202.235945][ T1079] bridge_slave_1: left promiscuous mode [ 202.243786][ T1079] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.263547][ T1079] bridge_slave_0: left allmulticast mode [ 202.275322][ T1079] bridge_slave_0: left promiscuous mode [ 202.281241][ T1079] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.293851][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 202.306554][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 202.325825][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 202.336247][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 202.354664][ T5857] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 202.362298][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.763912][ T1079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.776820][ T1079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.788086][ T1079] bond0 (unregistering): Released all slaves [ 202.912282][ T8641] veth0_vlan: entered promiscuous mode [ 202.996540][ T8641] veth1_vlan: entered promiscuous mode [ 203.100113][ T8641] veth0_macvtap: entered promiscuous mode [ 203.139643][ T1079] hsr_slave_0: left promiscuous mode [ 203.145580][ T1079] hsr_slave_1: left promiscuous mode [ 203.157930][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.166207][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.174769][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.182382][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.203028][ T1079] veth1_macvtap: left promiscuous mode [ 203.209884][ T1079] veth0_macvtap: left promiscuous mode [ 203.215511][ T1079] veth1_vlan: left promiscuous mode [ 203.221045][ T1079] veth0_vlan: left promiscuous mode [ 203.543979][ T8884] netlink: 'syz.3.916': attribute type 4 has an invalid length. [ 203.606159][ T8886] netlink: 'syz.3.916': attribute type 4 has an invalid length. [ 203.782142][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 203.794334][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 203.816086][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 203.843708][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 203.855209][ T5857] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 203.863869][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 203.914093][ T1079] team0 (unregistering): Port device team_slave_1 removed [ 203.964645][ T1079] team0 (unregistering): Port device team_slave_0 removed [ 204.397735][ T8641] veth1_macvtap: entered promiscuous mode [ 204.424683][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 204.449633][ T5857] Bluetooth: hci2: command tx timeout [ 204.547066][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.588142][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.606744][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.628635][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.649196][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.663647][ T8895] netlink: 20 bytes leftover after parsing attributes in process `syz.0.918'. [ 204.669567][ T8896] netlink: 'syz.3.919': attribute type 9 has an invalid length. [ 204.680780][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.685619][ T8896] netlink: 'syz.3.919': attribute type 7 has an invalid length. [ 204.691775][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.710199][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.723264][ T8641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.730140][ T8896] netlink: 'syz.3.919': attribute type 8 has an invalid length. [ 204.743171][ T8869] chnl_net:caif_netlink_parms(): no params data found [ 204.897796][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.929472][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.945605][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.966454][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.990964][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.022104][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.042438][ T8641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.063556][ T8641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.085106][ T8641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.107088][ T8641] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.119023][ T8641] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.127776][ T8641] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.136775][ T8641] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.449968][ T8869] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.457104][ T8869] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.483899][ T8869] bridge_slave_0: entered allmulticast mode [ 205.497095][ T8869] bridge_slave_0: entered promiscuous mode [ 205.639163][ T8869] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.646404][ T8869] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.664081][ T8869] bridge_slave_1: entered allmulticast mode [ 205.677395][ T8869] bridge_slave_1: entered promiscuous mode [ 205.759368][ T1079] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.825013][ T8869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.850476][ T8869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.891839][ T5857] Bluetooth: hci3: command tx timeout [ 205.971273][ T1079] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.078304][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.095801][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.137974][ T1079] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.179585][ T8869] team0: Port device team_slave_0 added [ 206.200205][ T8932] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 206.215499][ T8932] vlan2: entered promiscuous mode [ 206.222202][ T8932] ip6gretap0: entered promiscuous mode [ 206.227963][ T8932] vlan2: entered allmulticast mode [ 206.234264][ T8932] ip6gretap0: entered allmulticast mode [ 206.242855][ T8932] team0: Device vlan2 is up. Set it down before adding it as a team port [ 206.253773][ T8932] ip6gretap0: left allmulticast mode [ 206.260233][ T8932] ip6gretap0: left promiscuous mode [ 206.296586][ T8869] team0: Port device team_slave_1 added [ 206.323111][ T1079] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.352891][ T8888] chnl_net:caif_netlink_parms(): no params data found [ 206.472320][ T8869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.482075][ T8869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.510135][ T8869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.529068][ T5857] Bluetooth: hci2: command tx timeout [ 206.631787][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.641274][ T8869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.641856][ T8944] Bluetooth: MGMT ver 1.23 [ 206.648773][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.660818][ T8869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.679341][ T8944] FAULT_INJECTION: forcing a failure. [ 206.679341][ T8944] name failslab, interval 1, probability 0, space 0, times 0 [ 206.693151][ T8869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.736825][ T8944] CPU: 0 UID: 0 PID: 8944 Comm: syz.3.934 Not tainted 6.12.0-rc7-syzkaller-01702-gd7ef9eeef072 #0 [ 206.747581][ T8944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 206.757837][ T8944] Call Trace: [ 206.761162][ T8944] [ 206.764131][ T8944] dump_stack_lvl+0x241/0x360 [ 206.768877][ T8944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.774135][ T8944] ? __pfx__printk+0x10/0x10 [ 206.778782][ T8944] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 206.784889][ T8944] ? __pfx___might_resched+0x10/0x10 [ 206.790244][ T8944] should_fail_ex+0x3b0/0x4e0 [ 206.794985][ T8944] should_failslab+0xac/0x100 [ 206.799725][ T8944] ? __alloc_skb+0x1c3/0x440 [ 206.804383][ T8944] kmem_cache_alloc_node_noprof+0x71/0x320 [ 206.810247][ T8944] __alloc_skb+0x1c3/0x440 [ 206.814687][ T8944] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 206.821062][ T8944] ? __pfx___alloc_skb+0x10/0x10 [ 206.826036][ T8944] ? lockdep_hardirqs_on+0x90/0x150 [ 206.831271][ T8944] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 206.837183][ T8944] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 206.843541][ T8944] mgmt_cmd_complete+0x47/0x580 [ 206.848434][ T8944] read_def_system_config+0x1358/0x27c0 [ 206.854014][ T8944] ? __pfx_read_def_system_config+0x10/0x10 [ 206.859938][ T8944] ? trace_event_raw_event_workqueue_queue_work+0xb1/0x3f0 [ 206.867160][ T8944] ? init_timer_key+0x197/0x310 [ 206.872039][ T8944] ? mgmt_init_hdev+0x444/0x470 [ 206.876920][ T8944] hci_mgmt_cmd+0xc47/0x11d0 [ 206.881551][ T8944] hci_sock_sendmsg+0x7b8/0x11c0 [ 206.886513][ T8944] ? __pfx_aa_sk_perm+0x10/0x10 [ 206.891474][ T8944] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 206.896889][ T8944] ? __pfx_aa_file_perm+0x10/0x10 [ 206.901945][ T8944] ? aa_sock_msg_perm+0x91/0x160 [ 206.906918][ T8944] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 206.912336][ T8944] __sock_sendmsg+0x221/0x270 [ 206.917039][ T8944] sock_write_iter+0x2d7/0x3f0 [ 206.921840][ T8944] ? __pfx_sock_write_iter+0x10/0x10 [ 206.927146][ T8944] ? bpf_lsm_file_permission+0x9/0x10 [ 206.932536][ T8944] ? security_file_permission+0x74/0x280 [ 206.938199][ T8944] vfs_write+0xaeb/0xd30 [ 206.942474][ T8944] ? __pfx_sock_write_iter+0x10/0x10 [ 206.947870][ T8944] ? __pfx_vfs_write+0x10/0x10 [ 206.952690][ T8944] ? fdget_pos+0x19a/0x320 [ 206.957134][ T8944] ksys_write+0x183/0x2b0 [ 206.961492][ T8944] ? __pfx_ksys_write+0x10/0x10 [ 206.966375][ T8944] ? do_syscall_64+0x100/0x230 [ 206.971166][ T8944] ? do_syscall_64+0xb6/0x230 [ 206.975872][ T8944] do_syscall_64+0xf3/0x230 [ 206.980429][ T8944] ? clear_bhb_loop+0x35/0x90 [ 206.985137][ T8944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.991057][ T8944] RIP: 0033:0x7f56e117e759 [ 206.995489][ T8944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.015125][ T8944] RSP: 002b:00007f56e1f41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 207.023584][ T8944] RAX: ffffffffffffffda RBX: 00007f56e1336058 RCX: 00007f56e117e759 [ 207.031592][ T8944] RDX: 0000000000000006 RSI: 00000000200000c0 RDI: 0000000000000006 [ 207.039610][ T8944] RBP: 00007f56e1f41090 R08: 0000000000000000 R09: 0000000000000000 [ 207.047611][ T8944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.055616][ T8944] R13: 0000000000000000 R14: 00007f56e1336058 R15: 00007fff96934918 [ 207.063645][ T8944] [ 207.140511][ T8888] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.147645][ T8888] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.192063][ T8888] bridge_slave_0: entered allmulticast mode [ 207.206402][ T8953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.938'. [ 207.210026][ T8888] bridge_slave_0: entered promiscuous mode [ 207.318792][ T8888] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.326028][ T8888] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.348745][ T8888] bridge_slave_1: entered allmulticast mode [ 207.355566][ T8888] bridge_slave_1: entered promiscuous mode [ 207.434342][ T8869] hsr_slave_0: entered promiscuous mode [ 207.441180][ T8869] hsr_slave_1: entered promiscuous mode [ 207.450029][ T8869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.457638][ T8869] Cannot create hsr debugfs directory [ 207.496033][ T8888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.527413][ T8888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.549042][ T1079] bridge_slave_1: left allmulticast mode [ 207.558711][ T1079] bridge_slave_1: left promiscuous mode [ 207.571406][ T1079] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.595480][ T1079] bridge_slave_0: left allmulticast mode [ 207.615627][ T1079] bridge_slave_0: left promiscuous mode [ 207.637920][ T1079] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.968685][ T5857] Bluetooth: hci3: command tx timeout [ 208.071326][ T1079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.085998][ T1079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.096968][ T1079] bond0 (unregistering): Released all slaves [ 208.245858][ T8888] team0: Port device team_slave_0 added [ 208.263482][ T8888] team0: Port device team_slave_1 added [ 208.433857][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.945'. [ 208.498881][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.945'. [ 208.520731][ T8888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.527770][ T8888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.553902][ T8969] netlink: 32 bytes leftover after parsing attributes in process `syz.3.945'. [ 208.581000][ T8888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.611295][ T5853] block nbd10: Receive control failed (result -107) [ 208.611881][ T5845] Bluetooth: hci2: command tx timeout [ 208.622051][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.635399][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.648369][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.662918][ T8969] nbd10: detected capacity change from 0 to 256 [ 208.674765][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.698761][ T8888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.708513][ T8888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.735805][ T5853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.743401][ T8888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.757208][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.843500][ T1079] hsr_slave_0: left promiscuous mode [ 208.859219][ T1079] hsr_slave_1: left promiscuous mode [ 208.870315][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.878014][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.888130][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.899451][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.929766][ T1079] veth1_macvtap: left promiscuous mode [ 208.935525][ T1079] veth0_macvtap: left promiscuous mode [ 208.944736][ T1079] veth1_vlan: left promiscuous mode [ 208.959137][ T1079] veth0_vlan: left promiscuous mode [ 209.041704][ T8988] netlink: 40 bytes leftover after parsing attributes in process `syz.0.951'. [ 209.475347][ T1079] team0 (unregistering): Port device team_slave_1 removed [ 209.525882][ T1079] team0 (unregistering): Port device team_slave_0 removed [ 210.048619][ T5857] Bluetooth: hci3: command tx timeout [ 210.157496][ T8992] tipc: Can't bind to reserved service type 2 [ 210.179730][ T8888] hsr_slave_0: entered promiscuous mode [ 210.189213][ T8888] hsr_slave_1: entered promiscuous mode [ 210.202693][ T8888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.221581][ T8888] Cannot create hsr debugfs directory [ 210.384239][ T8998] FAULT_INJECTION: forcing a failure. [ 210.384239][ T8998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.427623][ T8998] CPU: 0 UID: 0 PID: 8998 Comm: syz.3.954 Not tainted 6.12.0-rc7-syzkaller-01702-gd7ef9eeef072 #0 [ 210.438282][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 210.448370][ T8998] Call Trace: [ 210.451677][ T8998] [ 210.454643][ T8998] dump_stack_lvl+0x241/0x360 [ 210.459375][ T8998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.464591][ T8998] ? __pfx__printk+0x10/0x10 [ 210.469326][ T8998] ? snprintf+0xda/0x120 [ 210.473696][ T8998] should_fail_ex+0x3b0/0x4e0 [ 210.478415][ T8998] _copy_to_user+0x31/0xb0 [ 210.482889][ T8998] simple_read_from_buffer+0xca/0x150 [ 210.488332][ T8998] proc_fail_nth_read+0x1e9/0x250 [ 210.493384][ T8998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.498985][ T8998] ? rw_verify_area+0x55e/0x6f0 [ 210.503930][ T8998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 210.509799][ T8998] vfs_read+0x1fc/0xb70 [ 210.513994][ T8998] ? fdget_pos+0x24e/0x320 [ 210.518430][ T8998] ? __pfx_vfs_read+0x10/0x10 [ 210.523244][ T8998] ? __fget_files+0x3f3/0x470 [ 210.528046][ T8998] ? fdget_pos+0x24e/0x320 [ 210.532605][ T8998] ksys_read+0x183/0x2b0 [ 210.536897][ T8998] ? __pfx_ksys_read+0x10/0x10 [ 210.541676][ T8998] ? do_syscall_64+0x100/0x230 [ 210.547487][ T8998] ? do_syscall_64+0xb6/0x230 [ 210.552385][ T8998] do_syscall_64+0xf3/0x230 [ 210.556923][ T8998] ? clear_bhb_loop+0x35/0x90 [ 210.561620][ T8998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.567720][ T8998] RIP: 0033:0x7f56e117d19c [ 210.572265][ T8998] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 210.591902][ T8998] RSP: 002b:00007f56e1f62030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.600345][ T8998] RAX: ffffffffffffffda RBX: 00007f56e1335f80 RCX: 00007f56e117d19c [ 210.608365][ T8998] RDX: 000000000000000f RSI: 00007f56e1f620a0 RDI: 0000000000000004 [ 210.616353][ T8998] RBP: 00007f56e1f62090 R08: 0000000000000000 R09: 0000000000000000 [ 210.624339][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.632339][ T8998] R13: 0000000000000000 R14: 00007f56e1335f80 R15: 00007fff96934918 [ 210.640358][ T8998] [ 210.690285][ T5853] Bluetooth: hci2: command tx timeout [ 210.858756][ T5853] Bluetooth: hci4: command tx timeout [ 210.966681][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.957'. [ 210.980337][ T8975] chnl_net:caif_netlink_parms(): no params data found [ 211.118398][ T9010] netlink: 'syz.3.958': attribute type 11 has an invalid length. [ 211.139886][ T8975] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.147037][ T8975] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.155956][ T8975] bridge_slave_0: entered allmulticast mode [ 211.156283][ T9010] netlink: 224 bytes leftover after parsing attributes in process `syz.3.958'. [ 211.163462][ T8975] bridge_slave_0: entered promiscuous mode [ 211.180234][ T8975] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.187573][ T8975] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.196879][ T8975] bridge_slave_1: entered allmulticast mode [ 211.204251][ T8975] bridge_slave_1: entered promiscuous mode [ 211.293933][ T8975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.341830][ T1079] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.386473][ T8975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.507040][ T9022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.962'. [ 211.520826][ T1079] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.564364][ T8975] team0: Port device team_slave_0 added [ 211.601376][ T1079] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.621377][ T8975] team0: Port device team_slave_1 added [ 211.720695][ T1079] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.787212][ T8975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.798574][ T8975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.863138][ T9036] FAULT_INJECTION: forcing a failure. [ 211.863138][ T9036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.876592][ T8975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.887545][ T9036] CPU: 1 UID: 0 PID: 9036 Comm: syz.0.966 Not tainted 6.12.0-rc7-syzkaller-01702-gd7ef9eeef072 #0 [ 211.898208][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 211.908305][ T9036] Call Trace: [ 211.911626][ T9036] [ 211.914591][ T9036] dump_stack_lvl+0x241/0x360 [ 211.919317][ T9036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.924586][ T9036] ? __pfx__printk+0x10/0x10 [ 211.929269][ T9036] ? __pfx_lock_release+0x10/0x10 [ 211.934444][ T9036] should_fail_ex+0x3b0/0x4e0 [ 211.939170][ T9036] _copy_from_iter+0x21f/0x1e70 [ 211.943828][ T8975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.944050][ T9036] ? __virt_addr_valid+0x183/0x530 [ 211.956652][ T9036] ? __pfx_lock_release+0x10/0x10 [ 211.957457][ T8975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.987581][ T9036] ? __alloc_skb+0x28f/0x440 [ 211.987626][ T9036] ? __pfx__copy_from_iter+0x10/0x10 [ 211.987662][ T9036] ? __virt_addr_valid+0x183/0x530 [ 211.987684][ T9036] ? __virt_addr_valid+0x183/0x530 [ 211.987706][ T9036] ? __virt_addr_valid+0x45f/0x530 [ 211.987732][ T9036] ? __check_object_size+0x48e/0x900 [ 211.987765][ T9036] netlink_sendmsg+0x73d/0xcb0 [ 211.987812][ T9036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.987849][ T9036] ? aa_sock_msg_perm+0x91/0x160 [ 211.987885][ T9036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.987916][ T9036] __sock_sendmsg+0x221/0x270 [ 211.987947][ T9036] ____sys_sendmsg+0x52a/0x7e0 [ 211.987990][ T9036] ? __pfx_____sys_sendmsg+0x10/0x10 [ 212.015006][ T8975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.018625][ T9036] __sys_sendmsg+0x292/0x380 [ 212.018671][ T9036] ? __pfx___sys_sendmsg+0x10/0x10 [ 212.018718][ T9036] ? __pfx_vfs_write+0x10/0x10 [ 212.018768][ T9036] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 212.018805][ T9036] ? do_syscall_64+0x100/0x230 [ 212.018837][ T9036] ? do_syscall_64+0xb6/0x230 [ 212.096578][ T9036] do_syscall_64+0xf3/0x230 [ 212.101131][ T9036] ? clear_bhb_loop+0x35/0x90 [ 212.105860][ T9036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.111800][ T9036] RIP: 0033:0x7fdd4057e759 [ 212.116250][ T9036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.135951][ T9036] RSP: 002b:00007fdd413dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 212.144435][ T9036] RAX: ffffffffffffffda RBX: 00007fdd40735f80 RCX: 00007fdd4057e759 [ 212.152449][ T9036] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 212.160467][ T9036] RBP: 00007fdd413dd090 R08: 0000000000000000 R09: 0000000000000000 [ 212.168475][ T9036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.176480][ T9036] R13: 0000000000000000 R14: 00007fdd40735f80 R15: 00007ffd81abf868 [ 212.184685][ T9036] [ 212.202802][ T5853] Bluetooth: hci3: command tx timeout [ 212.301280][ T8975] hsr_slave_0: entered promiscuous mode [ 212.319391][ T8975] hsr_slave_1: entered promiscuous mode [ 212.328692][ T8975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.337242][ T8975] Cannot create hsr debugfs directory [ 212.413483][ T8869] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.471702][ T8869] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.597189][ T8869] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.642188][ T8869] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.741324][ T1079] bridge_slave_1: left allmulticast mode [ 212.747733][ T1079] bridge_slave_1: left promiscuous mode [ 212.761226][ T1079] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.774332][ T1079] bridge_slave_0: left allmulticast mode [ 212.799238][ T1079] bridge_slave_0: left promiscuous mode [ 212.805144][ T1079] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.840402][ T9056] netlink: 40 bytes leftover after parsing attributes in process `syz.0.974'. [ 212.928598][ T5853] Bluetooth: hci4: command 0x041b tx timeout [ 213.149500][ T9057] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 213.425768][ T1079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.436931][ T1079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.447760][ T1079] bond0 (unregistering): Released all slaves [ 213.692566][ T8888] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.726409][ T8888] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.855504][ T8888] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.013305][ T8888] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.110638][ T8869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.138255][ T1079] hsr_slave_0: left promiscuous mode [ 214.168022][ T1079] hsr_slave_1: left promiscuous mode [ 214.258055][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.265919][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.277081][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.287821][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.323356][ T1079] veth1_macvtap: left promiscuous mode [ 214.329228][ T1079] veth0_macvtap: left promiscuous mode [ 214.334965][ T1079] veth1_vlan: left promiscuous mode [ 214.342268][ T1079] veth0_vlan: left promiscuous mode [ 214.862215][ T1079] team0 (unregistering): Port device team_slave_1 removed [ 214.906848][ T1079] team0 (unregistering): Port device team_slave_0 removed [ 215.024588][ T5857] Bluetooth: hci4: command 0x041b tx timeout [ 215.395722][ T8869] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.511185][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.518373][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.580028][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.587322][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.779977][ T8975] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 215.789912][ T8975] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 215.832681][ T8975] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 215.866265][ T8888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.919874][ T8975] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 216.009267][ T8888] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.073333][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.080570][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.137144][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.144499][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.162823][ T9095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.986'. [ 216.303074][ T8975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.327912][ T68] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 216.376575][ T8975] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.412114][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.419312][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.469913][ T8869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.506392][ T8869] veth0_vlan: entered promiscuous mode [ 216.517567][ T8869] veth1_vlan: entered promiscuous mode [ 216.541789][ T8869] veth0_macvtap: entered promiscuous mode [ 216.579075][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.586249][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.656268][ T9106] tipc: Started in network mode [ 216.661463][ T9106] tipc: Node identity -name-of, cluster identity 4711 [ 216.682659][ T9106] tipc: Enabling of bearer rejected, failed to enable media [ 216.703501][ T8869] veth1_macvtap: entered promiscuous mode [ 216.767184][ T8888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.808803][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.824139][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.842280][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.861809][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.876573][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.887726][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.920232][ T8869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.952179][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.970955][ T9117] netlink: 48 bytes leftover after parsing attributes in process `syz.0.993'. [ 216.988670][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.028172][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.048776][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.068492][ T8869] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.087573][ T8869] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.100741][ T5857] Bluetooth: hci4: command 0x041b tx timeout [ 217.103250][ T8869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.144528][ T8869] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.157509][ T8869] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.166615][ T8869] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.176171][ T8869] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.223389][ T8975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.255865][ T8888] veth0_vlan: entered promiscuous mode [ 217.315170][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.996'. [ 217.363057][ T8888] veth1_vlan: entered promiscuous mode [ 217.389298][ T9129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 217.398153][ T9129] netlink: 32 bytes leftover after parsing attributes in process `syz.3.996'. [ 217.451246][ T9134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.997'. [ 217.464739][ T8888] veth0_macvtap: entered promiscuous mode [ 217.477101][ T8888] veth1_macvtap: entered promiscuous mode [ 217.521505][ T5857] block nbd11: Receive control failed (result -107) [ 217.548752][ T9129] nbd11: detected capacity change from 0 to 256 [ 217.549777][ T8888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.595162][ T8888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.605724][ T8888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.616910][ T8888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.633173][ T8888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.643977][ T8888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.654258][ T8888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.666391][ T8888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.677970][ T8888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.709986][ T8888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.730027][ T8888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.754083][ T8888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.767379][ T8888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.777780][ T8888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.790923][ T8888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.801760][ T8888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.812798][ T8888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.837930][ T8888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.861542][ T8888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.880281][ T8888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.889864][ T8888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.899282][ T8888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.988054][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.030025][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.173608][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.197516][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.382816][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.394948][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.403130][ T8975] veth0_vlan: entered promiscuous mode [ 218.594023][ T8975] veth1_vlan: entered promiscuous mode [ 218.631105][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.643367][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.656666][ T8975] veth0_macvtap: entered promiscuous mode [ 218.666675][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1008'. [ 218.671430][ T8975] veth1_macvtap: entered promiscuous mode [ 218.732984][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.744546][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.769451][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.788495][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.788732][ T9164] --map-set only usable from mangle table [ 218.799449][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.815907][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.828541][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.852986][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.868769][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.889260][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.900652][ T8975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.931331][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.957520][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.972913][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.984573][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.998029][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.027784][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.040647][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.060210][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.087891][ T8975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.117555][ T8975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.160324][ T8975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.171897][ T5857] Bluetooth: hci4: command 0x041b tx timeout [ 219.228581][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.276931][ T8975] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.287609][ T8975] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.298984][ T8975] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.307794][ T8975] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.382826][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.421354][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.438667][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.464269][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.474570][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.508408][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.663772][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.855711][ T11] bridge_slave_1: left allmulticast mode [ 219.868946][ T11] bridge_slave_1: left promiscuous mode [ 219.874766][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.900663][ T11] bridge_slave_0: left allmulticast mode [ 219.906380][ T11] bridge_slave_0: left promiscuous mode [ 219.924674][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.940138][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.954493][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.965963][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.979569][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.990215][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.997712][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.464189][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.484660][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.493354][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.518790][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.541509][ T5857] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.556139][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 220.607970][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.631843][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.642455][ T11] bond0 (unregistering): Released all slaves [ 221.079251][ T9199] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1018'. [ 221.099098][ T9195] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1019'. [ 221.134073][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.144431][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.153353][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.161902][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.169933][ T5853] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 221.177320][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 221.285131][ T11] hsr_slave_0: left promiscuous mode [ 221.306571][ T11] hsr_slave_1: left promiscuous mode [ 221.356665][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.364974][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.453428][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.466672][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.493918][ T11] veth1_macvtap: left promiscuous mode [ 221.499912][ T11] veth0_macvtap: left promiscuous mode [ 221.505817][ T11] veth1_vlan: left promiscuous mode [ 221.522875][ T11] veth0_vlan: left promiscuous mode [ 222.025799][ T11] team0 (unregistering): Port device team_slave_1 removed [ 222.063425][ T5853] Bluetooth: hci2: command tx timeout [ 222.091268][ T11] team0 (unregistering): Port device team_slave_0 removed [ 222.587181][ T9185] chnl_net:caif_netlink_parms(): no params data found [ 222.602576][ T9175] chnl_net:caif_netlink_parms(): no params data found [ 222.610270][ T5853] Bluetooth: hci3: command tx timeout [ 222.870148][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.877472][ T9175] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.885831][ T9175] bridge_slave_0: entered allmulticast mode [ 222.893185][ T9175] bridge_slave_0: entered promiscuous mode [ 222.923954][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.931208][ T9175] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.938551][ T9175] bridge_slave_1: entered allmulticast mode [ 222.945441][ T9175] bridge_slave_1: entered promiscuous mode [ 223.022769][ T9175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.111871][ T9185] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.121274][ T9185] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.130191][ T9185] bridge_slave_0: entered allmulticast mode [ 223.137593][ T9185] bridge_slave_0: entered promiscuous mode [ 223.165811][ T9175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.218656][ T9185] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.236081][ T9185] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.243737][ T9185] bridge_slave_1: entered allmulticast mode [ 223.258586][ T5853] Bluetooth: hci4: command tx timeout [ 223.262209][ T9185] bridge_slave_1: entered promiscuous mode [ 223.309675][ T9175] team0: Port device team_slave_0 added [ 223.320682][ T9175] team0: Port device team_slave_1 added [ 223.425756][ T9185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.438161][ T9185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.477748][ T9201] chnl_net:caif_netlink_parms(): no params data found [ 223.517590][ T9175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.525709][ T9175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.557019][ T9175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.605100][ T9185] team0: Port device team_slave_0 added [ 223.650950][ T9247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1029'. [ 223.672480][ T1079] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.705978][ T9250] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1030'. [ 223.788331][ T9252] FAULT_INJECTION: forcing a failure. [ 223.788331][ T9252] name failslab, interval 1, probability 0, space 0, times 0 [ 223.791811][ T9175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.801950][ T9252] CPU: 1 UID: 0 PID: 9252 Comm: syz.0.1031 Not tainted 6.12.0-rc7-syzkaller-01702-gd7ef9eeef072 #0 [ 223.819501][ T9252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 223.824828][ T9175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.829577][ T9252] Call Trace: [ 223.829592][ T9252] [ 223.829603][ T9252] dump_stack_lvl+0x241/0x360 [ 223.829642][ T9252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.829671][ T9252] ? __pfx__printk+0x10/0x10 [ 223.829704][ T9252] ? ref_tracker_alloc+0x332/0x490 [ 223.829734][ T9252] should_fail_ex+0x3b0/0x4e0 [ 223.829763][ T9252] ? skb_clone+0x20c/0x390 [ 223.829786][ T9252] should_failslab+0xac/0x100 [ 223.829816][ T9252] ? skb_clone+0x20c/0x390 [ 223.829838][ T9252] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 223.829875][ T9252] skb_clone+0x20c/0x390 [ 223.829901][ T9252] __netlink_deliver_tap+0x3cc/0x7f0 [ 223.829946][ T9252] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.874769][ T9175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.876744][ T9252] netlink_deliver_tap+0x19d/0x1b0 [ 223.876792][ T9252] netlink_unicast+0x7c4/0x990 [ 223.940879][ T9252] ? __pfx_netlink_unicast+0x10/0x10 [ 223.946477][ T9252] ? __virt_addr_valid+0x183/0x530 [ 223.951847][ T9252] ? __check_object_size+0x48e/0x900 [ 223.957186][ T9252] netlink_sendmsg+0x8e4/0xcb0 [ 223.962002][ T9252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.967414][ T9252] ? aa_sock_msg_perm+0x91/0x160 [ 223.972511][ T9252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.977850][ T9252] __sock_sendmsg+0x221/0x270 [ 223.982577][ T9252] ____sys_sendmsg+0x52a/0x7e0 [ 223.987395][ T9252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.992752][ T9252] __sys_sendmsg+0x292/0x380 [ 223.997580][ T9252] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.002844][ T9252] ? __pfx_vfs_write+0x10/0x10 [ 224.007681][ T9252] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.014518][ T9252] ? do_syscall_64+0x100/0x230 [ 224.019341][ T9252] ? do_syscall_64+0xb6/0x230 [ 224.024496][ T9252] do_syscall_64+0xf3/0x230 [ 224.029049][ T9252] ? clear_bhb_loop+0x35/0x90 [ 224.033774][ T9252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.039712][ T9252] RIP: 0033:0x7fdd4057e759 [ 224.044158][ T9252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.063899][ T9252] RSP: 002b:00007fdd413dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.072366][ T9252] RAX: ffffffffffffffda RBX: 00007fdd40735f80 RCX: 00007fdd4057e759 [ 224.080385][ T9252] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 224.088381][ T9252] RBP: 00007fdd413dd090 R08: 0000000000000000 R09: 0000000000000000 [ 224.096374][ T9252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.104373][ T9252] R13: 0000000000000000 R14: 00007fdd40735f80 R15: 00007ffd81abf868 [ 224.112403][ T9252] [ 224.128939][ T5853] Bluetooth: hci2: command tx timeout [ 224.131671][ T9185] team0: Port device team_slave_1 added [ 224.170389][ T1079] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.242538][ T9175] hsr_slave_0: entered promiscuous mode [ 224.275280][ T9175] hsr_slave_1: entered promiscuous mode [ 224.300433][ T9175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.318778][ T9175] Cannot create hsr debugfs directory [ 224.439332][ T1079] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.489854][ T9185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.496855][ T9185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.525455][ T9185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.574992][ T9201] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.583293][ T9201] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.591701][ T9201] bridge_slave_0: entered allmulticast mode [ 224.599322][ T9201] bridge_slave_0: entered promiscuous mode [ 224.634505][ T1079] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.649296][ T9185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.656312][ T9185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.689445][ T5853] Bluetooth: hci3: command tx timeout [ 224.706689][ T9185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.737732][ T9201] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.745213][ T9201] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.753788][ T9201] bridge_slave_1: entered allmulticast mode [ 224.761274][ T9201] bridge_slave_1: entered promiscuous mode [ 224.845200][ T9201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.882078][ T9201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.911405][ T9185] hsr_slave_0: entered promiscuous mode [ 224.917882][ T9185] hsr_slave_1: entered promiscuous mode [ 224.924653][ T9185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.933790][ T9185] Cannot create hsr debugfs directory [ 224.969739][ T9201] team0: Port device team_slave_0 added [ 224.987101][ T9272] netlink: 'syz.3.1036': attribute type 1 has an invalid length. [ 225.033966][ T9201] team0: Port device team_slave_1 added [ 225.040343][ T9271] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1036'. [ 225.136231][ T9201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.144027][ T9201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.171345][ T9201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.184958][ T9201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.192106][ T9201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.218368][ T9201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.262552][ T1079] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.329254][ T5853] Bluetooth: hci4: command tx timeout [ 225.402571][ T9201] hsr_slave_0: entered promiscuous mode [ 225.409748][ T9201] hsr_slave_1: entered promiscuous mode [ 225.416117][ T9201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.423993][ T9201] Cannot create hsr debugfs directory [ 225.534399][ T1079] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.693746][ T1079] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.780722][ T1079] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.988662][ T9289] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1044'. [ 226.098857][ T1079] bridge_slave_1: left allmulticast mode [ 226.104575][ T1079] bridge_slave_1: left promiscuous mode [ 226.121822][ T1079] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.143899][ T1079] bridge_slave_0: left allmulticast mode [ 226.159728][ T1079] bridge_slave_0: left promiscuous mode [ 226.165591][ T1079] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.176648][ T1079] bridge_slave_1: left allmulticast mode [ 226.184645][ T1079] bridge_slave_1: left promiscuous mode [ 226.191345][ T1079] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.202044][ T1079] bridge_slave_0: left allmulticast mode [ 226.207765][ T1079] bridge_slave_0: left promiscuous mode [ 226.213910][ T5853] Bluetooth: hci2: command tx timeout [ 226.221123][ T1079] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.771265][ T5853] Bluetooth: hci3: command tx timeout [ 226.860715][ T1079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.871901][ T1079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.884081][ T1079] bond0 (unregistering): Released all slaves [ 226.994325][ T1079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.005361][ T1079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.016713][ T1079] bond0 (unregistering): Released all slaves [ 227.167746][ T9300] netlink: 'syz.0.1048': attribute type 3 has an invalid length. [ 227.217352][ T9301] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1047'. [ 227.257155][ T9175] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 227.301238][ T9301] bridge0: entered promiscuous mode [ 227.308988][ T9301] bridge0: left promiscuous mode [ 227.351619][ T9175] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 227.390314][ T9175] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 227.408850][ T5853] Bluetooth: hci4: command tx timeout [ 227.433677][ T9175] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 227.797956][ T1079] hsr_slave_0: left promiscuous mode [ 227.816081][ T1079] hsr_slave_1: left promiscuous mode [ 227.832140][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.840161][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.850160][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.857625][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.873429][ T1079] hsr_slave_0: left promiscuous mode [ 227.885974][ T1079] hsr_slave_1: left promiscuous mode [ 227.896208][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.905132][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.922590][ T1079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.937104][ T1079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.985503][ T1079] veth1_macvtap: left promiscuous mode [ 227.992385][ T1079] veth0_macvtap: left promiscuous mode [ 227.998036][ T1079] veth1_vlan: left promiscuous mode [ 228.004140][ T1079] veth0_vlan: left promiscuous mode [ 228.011377][ T1079] veth1_macvtap: left promiscuous mode [ 228.016961][ T1079] veth0_macvtap: left promiscuous mode [ 228.022786][ T1079] veth1_vlan: left promiscuous mode [ 228.028125][ T1079] veth0_vlan: left promiscuous mode [ 228.288943][ T5853] Bluetooth: hci2: command tx timeout [ 228.592473][ T1079] team0 (unregistering): Port device team_slave_1 removed [ 228.634269][ T1079] team0 (unregistering): Port device team_slave_0 removed [ 228.848859][ T5853] Bluetooth: hci3: command tx timeout [ 229.383153][ T1079] team0 (unregistering): Port device team_slave_1 removed [ 229.427386][ T1079] team0 (unregistering): Port device team_slave_0 removed [ 229.489632][ T5853] Bluetooth: hci4: command tx timeout [ 229.840882][ T9314] FAULT_INJECTION: forcing a failure. [ 229.840882][ T9314] name failslab, interval 1, probability 0, space 0, times 0 [ 229.843956][ T9175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.867771][ T9314] CPU: 0 UID: 0 PID: 9314 Comm: syz.3.1054 Not tainted 6.12.0-rc7-syzkaller-01702-gd7ef9eeef072 #0 [ 229.878615][ T9314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 229.882740][ T9175] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.888685][ T9314] Call Trace: [ 229.888720][ T9314] [ 229.888732][ T9314] dump_stack_lvl+0x241/0x360 [ 229.906320][ T9314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.911576][ T9314] ? __pfx__printk+0x10/0x10 [ 229.916319][ T9314] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 229.922363][ T9314] ? __pfx___might_resched+0x10/0x10 [ 229.927710][ T9314] ? kfree+0x1a0/0x440 [ 229.928274][ T9175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.931808][ T9314] should_fail_ex+0x3b0/0x4e0 [ 229.931843][ T9314] should_failslab+0xac/0x100 [ 229.942213][ T9175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.946851][ T9314] ? __alloc_skb+0x1c3/0x440 [ 229.946887][ T9314] kmem_cache_alloc_node_noprof+0x71/0x320 [ 229.946933][ T9314] __alloc_skb+0x1c3/0x440 [ 229.946970][ T9314] ? __pfx___alloc_skb+0x10/0x10 [ 229.947020][ T9314] ? netlink_ack_tlv_len+0x6e/0x200 [ 229.947063][ T9314] netlink_ack+0x13f/0xa30 [ 229.947093][ T9314] ? __pfx_lock_acquire+0x10/0x10 [ 229.947128][ T9314] ? __pfx_nl802154_del_llsec_key+0x10/0x10 [ 229.947156][ T9314] ? __pfx_nl802154_post_doit+0x10/0x10 [ 229.947195][ T9314] netlink_rcv_skb+0x262/0x430 [ 229.947229][ T9314] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.947257][ T9314] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.947322][ T9314] genl_rcv+0x28/0x40 [ 229.947344][ T9314] netlink_unicast+0x7f6/0x990 [ 229.947380][ T9314] ? __pfx_netlink_unicast+0x10/0x10 [ 229.947406][ T9314] ? __virt_addr_valid+0x183/0x530 [ 229.947434][ T9314] ? __check_object_size+0x48e/0x900 [ 229.947468][ T9314] netlink_sendmsg+0x8e4/0xcb0 [ 229.947514][ T9314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.058108][ T9314] ? aa_sock_msg_perm+0x91/0x160 [ 230.063114][ T9314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.068452][ T9314] __sock_sendmsg+0x221/0x270 [ 230.073182][ T9314] ____sys_sendmsg+0x52a/0x7e0 [ 230.078009][ T9314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.083458][ T9314] __sys_sendmsg+0x292/0x380 [ 230.087743][ T9175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.088087][ T9314] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.100017][ T9314] ? __pfx_vfs_write+0x10/0x10 [ 230.104866][ T9314] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.111253][ T9314] ? do_syscall_64+0x100/0x230 [ 230.116074][ T9314] ? do_syscall_64+0xb6/0x230 [ 230.120806][ T9314] do_syscall_64+0xf3/0x230 [ 230.125223][ T9175] veth0_vlan: entered promiscuous mode [ 230.125366][ T9314] ? clear_bhb_loop+0x35/0x90 [ 230.135555][ T9314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.137099][ T9175] veth1_vlan: entered promiscuous mode [ 230.141642][ T9314] RIP: 0033:0x7f56e117e759 [ 230.141668][ T9314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.141689][ T9314] RSP: 002b:00007f56e1f62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.141715][ T9314] RAX: ffffffffffffffda RBX: 00007f56e1335f80 RCX: 00007f56e117e759 [ 230.169639][ T9175] veth0_macvtap: entered promiscuous mode [ 230.171635][ T9314] RDX: 0000000000000040 RSI: 0000000020000980 RDI: 0000000000000004 [ 230.184138][ T9175] veth1_macvtap: entered promiscuous mode [ 230.188010][ T9314] RBP: 00007f56e1f62090 R08: 0000000000000000 R09: 0000000000000000 [ 230.205339][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.207426][ T9314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.231849][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.233862][ T9314] R13: 0000000000000000 R14: 00007f56e1335f80 R15: 00007fff96934918 [ 230.244052][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.251758][ T9314] [ 230.266659][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.289118][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.299725][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.311031][ T9175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.322431][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.329619][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.341657][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.348865][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.469723][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.489239][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.506742][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.528607][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.551363][ T9175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.574835][ T9175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.608633][ T9175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.657983][ T9175] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.679231][ T9175] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.687999][ T9175] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.714760][ T9175] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.977865][ T9201] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 231.031809][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.053288][ T9201] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 231.068653][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.106323][ T9201] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 231.150618][ T9201] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 231.219618][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.238165][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.246548][ T9185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 231.284843][ T9344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1063'. [ 231.297317][ T9185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 231.349348][ T9185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.366584][ T9185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 231.690361][ T9361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1067'. [ 231.750067][ T9201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.802393][ T9201] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.821425][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.828663][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.847506][ T9185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.883161][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.890403][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.010777][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.051545][ T9185] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.063911][ T9201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.078376][ T9201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.105898][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.113095][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.162217][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.169504][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.387652][ T9201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.497738][ T9185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.561284][ T9185] veth0_vlan: entered promiscuous mode [ 232.581729][ T9185] veth1_vlan: entered promiscuous mode [ 232.632655][ T9185] veth0_macvtap: entered promiscuous mode [ 232.661875][ T9185] veth1_macvtap: entered promiscuous mode [ 232.714291][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.726190][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.736484][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.747886][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.759983][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.771218][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.781809][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.808621][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.829720][ T9185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.911269][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.966387][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.987486][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.028650][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.048561][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.060574][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.071551][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.082263][ T9185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.095250][ T9185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.107775][ T9185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.175576][ T9185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.198270][ T9185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.210851][ T9185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.240523][ T9185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.251375][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.260828][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.269323][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.279132][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.286826][ T5857] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 233.294858][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.315347][ T9393] netlink: 'syz.0.1074': attribute type 1 has an invalid length. [ 233.336791][ T9201] veth0_vlan: entered promiscuous mode [ 233.349321][ T9201] veth1_vlan: entered promiscuous mode [ 233.385083][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1074'. [ 233.407830][ T9401] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 233.417259][ T9401] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 233.493366][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1076'. [ 233.503514][ T9400] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1076'. [ 233.519373][ T9393] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 233.535509][ T9393] bond1 (unregistering): Released all slaves [ 233.614885][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.681215][ T9201] veth0_macvtap: entered promiscuous mode [ 233.770767][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.801730][ T9201] veth1_macvtap: entered promiscuous mode [ 233.838950][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.858702][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.961327][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.976024][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.987067][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.998155][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.008929][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.038562][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.058520][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.072553][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.098859][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.117695][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.134943][ T9417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1081'. [ 234.139776][ T9201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.152265][ T9417] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1081'. [ 234.297572][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.317723][ T9426] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1084'. [ 234.334267][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.345396][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.357492][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.367653][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.380316][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.391573][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.393726][ T9429] Bluetooth: MGMT ver 1.23 [ 234.422147][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.433646][ T9201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.444562][ T9201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.465145][ T9201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.475090][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.475927][ T35] bridge_slave_1: left allmulticast mode [ 234.491114][ T35] bridge_slave_1: left promiscuous mode [ 234.496884][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.505166][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.515598][ T35] bridge_slave_0: left allmulticast mode [ 234.521591][ T35] bridge_slave_0: left promiscuous mode [ 234.527446][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.618205][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1087'. [ 234.628046][ T9435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1087'. [ 235.082750][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.103493][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.135799][ T35] bond0 (unregistering): Released all slaves [ 235.241828][ T9201] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.262633][ T9201] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.273909][ T9201] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.283042][ T9201] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.312989][ T9391] chnl_net:caif_netlink_parms(): no params data found [ 235.329518][ T5857] Bluetooth: hci2: command tx timeout [ 235.471413][ T9456] netlink: 'syz.0.1094': attribute type 10 has an invalid length. [ 235.548096][ T9457] netlink: 'syz.0.1094': attribute type 10 has an invalid length. [ 235.586114][ T9456] team0: Device netdevsim0 is of different type [ 235.800706][ T9391] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.807839][ T9391] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.839327][ T9391] bridge_slave_0: entered allmulticast mode [ 235.846276][ T9391] bridge_slave_0: entered promiscuous mode [ 235.902051][ T35] hsr_slave_0: left promiscuous mode [ 235.925132][ T35] hsr_slave_1: left promiscuous mode [ 235.937648][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.954562][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.971556][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.989772][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.040217][ T5857] block nbd12: Receive control failed (result -107) [ 236.051783][ T35] veth1_macvtap: left promiscuous mode [ 236.078923][ T9462] nbd12: detected capacity change from 0 to 256 [ 236.098639][ T35] veth0_macvtap: left promiscuous mode [ 236.119056][ T35] veth1_vlan: left promiscuous mode [ 236.139624][ T35] veth0_vlan: left promiscuous mode [ 236.826335][ T35] team0 (unregistering): Port device team_slave_1 removed [ 236.877233][ T35] team0 (unregistering): Port device team_slave_0 removed [ 237.314157][ T9391] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.326400][ T9391] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.345408][ T9391] bridge_slave_1: entered allmulticast mode [ 237.380059][ T9391] bridge_slave_1: entered promiscuous mode [ 237.409232][ T5857] Bluetooth: hci2: command tx timeout [ 237.580870][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.592241][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.600513][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.610148][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.620563][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.677675][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.687576][ T9391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.712309][ T5853] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 237.730538][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.740686][ T9391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.813885][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.879650][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.902967][ T9391] team0: Port device team_slave_0 added [ 237.941471][ T9391] team0: Port device team_slave_1 added [ 238.028050][ T9483] netlink: 'syz.3.1103': attribute type 11 has an invalid length. [ 238.203093][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.212579][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.244501][ T9391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.322441][ T9488] bridge_slave_0: left allmulticast mode [ 238.328265][ T9488] bridge_slave_0: left promiscuous mode [ 238.334873][ T9488] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.347200][ T9488] bridge_slave_1: left allmulticast mode [ 238.355300][ T9488] bridge_slave_1: left promiscuous mode [ 238.361700][ T9488] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.377002][ T9488] bond0: (slave bond_slave_0): Releasing backup interface [ 238.402856][ T9488] bond0: (slave bond_slave_1): Releasing backup interface [ 238.421211][ T9494] __nla_validate_parse: 4 callbacks suppressed [ 238.421233][ T9494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1106'. [ 238.467228][ T9488] team0: Port device team_slave_0 removed [ 238.547239][ T9488] team0: Port device team_slave_1 removed [ 238.572759][ T9488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.596284][ T9488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.623611][ T9488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.646386][ T9488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.707200][ T9488] team0: Port device netdevsim0 removed [ 238.733022][ T9488] bond2: (slave ip6gretap1): Releasing backup interface [ 238.777162][ T9391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.800112][ T9391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.843357][ T9391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.858035][ T9492] netlink: 'syz.0.1107': attribute type 3 has an invalid length. [ 238.936236][ T9493] team0: Port device wg2 added [ 239.176778][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.222192][ T9391] hsr_slave_0: entered promiscuous mode [ 239.243583][ T9391] hsr_slave_1: entered promiscuous mode [ 239.251673][ T9391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.259512][ T9391] Cannot create hsr debugfs directory [ 239.465920][ T9470] chnl_net:caif_netlink_parms(): no params data found [ 239.489763][ T5853] Bluetooth: hci2: command tx timeout [ 239.533349][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.636315][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.670601][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.682466][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.700912][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.713579][ T5857] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 239.721840][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.782215][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.809677][ T5853] Bluetooth: hci3: command tx timeout [ 239.954855][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.178407][ T9535] netlink: 'syz.3.1118': attribute type 10 has an invalid length. [ 240.214538][ T9535] team0: Device netdevsim0 is of different type [ 240.247780][ T9470] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.255133][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.262539][ T9470] bridge_slave_0: entered allmulticast mode [ 240.269845][ T9470] bridge_slave_0: entered promiscuous mode [ 240.277888][ T9470] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.285229][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.293976][ T9470] bridge_slave_1: entered allmulticast mode [ 240.301396][ T9470] bridge_slave_1: entered promiscuous mode [ 240.404727][ T9470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.442235][ T9470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.529234][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.595081][ T9470] team0: Port device team_slave_0 added [ 240.642965][ T9470] team0: Port device team_slave_1 added [ 240.771053][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.881193][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.918776][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.986587][ T9470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.102886][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.159248][ T9470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.167681][ T9470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.229778][ T9470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.366169][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.392828][ T9513] chnl_net:caif_netlink_parms(): no params data found [ 241.568687][ T5853] Bluetooth: hci2: command tx timeout [ 241.703692][ T9470] hsr_slave_0: entered promiscuous mode [ 241.711393][ T9470] hsr_slave_1: entered promiscuous mode [ 241.723837][ T9470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.756571][ T9470] Cannot create hsr debugfs directory [ 241.815240][ T5853] Bluetooth: hci4: command tx timeout [ 241.872103][ T9391] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.887569][ T9391] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.895299][ T5853] Bluetooth: hci3: command tx timeout [ 242.065936][ T9575] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 242.071255][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'. [ 242.077610][ T9576] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 242.099416][ T9391] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.115933][ T9575] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1126'. [ 242.118286][ T9513] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.133217][ T9575] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1126'. [ 242.133345][ T9576] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1126'. [ 242.133367][ T9576] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1126'. [ 242.138958][ T9573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1125'. [ 242.145112][ T9513] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.174983][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 242.186155][ T9513] bridge_slave_0: entered allmulticast mode [ 242.216667][ T9513] bridge_slave_0: entered promiscuous mode [ 242.244788][ T9391] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.306891][ T9581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1127'. [ 242.364655][ T9513] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.373535][ T9513] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.381497][ T9513] bridge_slave_1: entered allmulticast mode [ 242.389713][ T9513] bridge_slave_1: entered promiscuous mode [ 242.397317][ T35] bridge_slave_1: left allmulticast mode [ 242.403782][ T35] bridge_slave_1: left promiscuous mode [ 242.409759][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.424306][ T35] bridge_slave_0: left allmulticast mode [ 242.430414][ T35] bridge_slave_0: left promiscuous mode [ 242.436297][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.448397][ T35] bridge_slave_1: left allmulticast mode [ 242.455051][ T35] bridge_slave_1: left promiscuous mode [ 242.464969][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.475973][ T35] bridge_slave_0: left allmulticast mode [ 242.484343][ T35] bridge_slave_0: left promiscuous mode [ 242.491474][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.170944][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.188132][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.206839][ T35] bond0 (unregistering): Released all slaves [ 243.342819][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.354734][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.366875][ T35] bond0 (unregistering): Released all slaves [ 243.383572][ T9580] vlan2: entered allmulticast mode [ 243.389039][ T9580] veth0_to_team: entered allmulticast mode [ 243.396823][ T9580] veth0_to_team: left allmulticast mode [ 243.583644][ T9513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.676674][ T9513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.692478][ T9585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1130'. [ 243.701822][ T9585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1130'. [ 243.810718][ T9513] team0: Port device team_slave_0 added [ 243.849760][ T9589] Bluetooth: MGMT ver 1.23 [ 243.857750][ T9513] team0: Port device team_slave_1 added [ 243.870008][ T9589] FAULT_INJECTION: forcing a failure. [ 243.870008][ T9589] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.889419][ T5853] Bluetooth: hci4: command tx timeout [ 243.921066][ T9589] CPU: 1 UID: 0 PID: 9589 Comm: syz.0.1131 Not tainted 6.12.0-rc7-syzkaller-01702-gd7ef9eeef072 #0 [ 243.931983][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 243.942326][ T9589] Call Trace: [ 243.945647][ T9589] [ 243.948628][ T9589] dump_stack_lvl+0x241/0x360 [ 243.953341][ T9589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.958646][ T9589] ? __pfx__printk+0x10/0x10 [ 243.963557][ T9589] ? snprintf+0xda/0x120 [ 243.968200][ T9589] should_fail_ex+0x3b0/0x4e0 [ 243.973017][ T9589] _copy_to_user+0x31/0xb0 [ 243.977551][ T9589] simple_read_from_buffer+0xca/0x150 [ 243.983515][ T9589] proc_fail_nth_read+0x1e9/0x250 [ 243.988576][ T9589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.994290][ T9589] ? rw_verify_area+0x55e/0x6f0 [ 243.999165][ T9589] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.004762][ T9589] vfs_read+0x1fc/0xb70 [ 244.008940][ T9589] ? fdget_pos+0x24e/0x320 [ 244.013376][ T9589] ? __pfx_vfs_read+0x10/0x10 [ 244.018350][ T9589] ? __fget_files+0x3f3/0x470 [ 244.023161][ T9589] ? fdget_pos+0x24e/0x320 [ 244.027717][ T9589] ksys_read+0x183/0x2b0 [ 244.031976][ T9589] ? __pfx_ksys_read+0x10/0x10 [ 244.036775][ T9589] ? do_syscall_64+0x100/0x230 [ 244.041559][ T9589] ? do_syscall_64+0xb6/0x230 [ 244.046260][ T9589] do_syscall_64+0xf3/0x230 [ 244.050782][ T9589] ? clear_bhb_loop+0x35/0x90 [ 244.055483][ T9589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.061406][ T9589] RIP: 0033:0x7fdd4057d19c [ 244.066524][ T9589] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 244.086239][ T9589] RSP: 002b:00007fdd413dd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.094677][ T9589] RAX: ffffffffffffffda RBX: 00007fdd40735f80 RCX: 00007fdd4057d19c [ 244.102670][ T9589] RDX: 000000000000000f RSI: 00007fdd413dd0a0 RDI: 0000000000000005 [ 244.110682][ T9589] RBP: 00007fdd413dd090 R08: 0000000000000000 R09: 0000000000000000 [ 244.119129][ T9589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.127130][ T9589] R13: 0000000000000000 R14: 00007fdd40735f80 R15: 00007ffd81abf868 [ 244.135135][ T9589] [ 244.148039][ T5853] Bluetooth: hci3: command tx timeout [ 244.289809][ T9513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.308551][ T9513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.336909][ T9513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.350164][ T9513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.357239][ T9513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.396733][ T9513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.471822][ T9391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.595398][ T9513] hsr_slave_0: entered promiscuous mode [ 244.614555][ T9513] hsr_slave_1: entered promiscuous mode [ 244.627065][ T9513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.635150][ T9513] Cannot create hsr debugfs directory [ 244.750013][ T35] hsr_slave_0: left promiscuous mode [ 244.778860][ T35] hsr_slave_1: left promiscuous mode [ 244.793455][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.815558][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.829625][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.848030][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.874347][ T35] hsr_slave_0: left promiscuous mode [ 244.880998][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1138'. [ 244.890636][ T35] hsr_slave_1: left promiscuous mode [ 244.899197][ T9612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1138'. [ 244.911564][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.923934][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.945648][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.968806][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.987256][ T9617] Cannot find del_set index 1 as target [ 245.057473][ T35] veth1_macvtap: left promiscuous mode [ 245.060466][ T9620] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 245.070023][ T35] veth0_macvtap: left promiscuous mode [ 245.079364][ T35] veth1_vlan: left promiscuous mode [ 245.084862][ T35] veth0_vlan: left promiscuous mode [ 245.093988][ T35] veth1_macvtap: left promiscuous mode [ 245.099719][ T35] veth0_macvtap: left promiscuous mode [ 245.105400][ T35] veth1_vlan: left promiscuous mode [ 245.111135][ T35] veth0_vlan: left promiscuous mode [ 245.709824][ T35] team0 (unregistering): Port device team_slave_1 removed [ 245.762912][ T35] team0 (unregistering): Port device team_slave_0 removed [ 245.975414][ T5853] Bluetooth: hci4: command tx timeout [ 246.213937][ T5853] Bluetooth: hci3: command tx timeout [ 246.666416][ T35] team0 (unregistering): Port device team_slave_1 removed [ 246.713717][ T35] team0 (unregistering): Port device team_slave_0 removed [ 247.211193][ T9391] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.355911][ T3568] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 247.374921][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1142'. [ 247.400193][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.400249][ T9622] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1143'. [ 247.407412][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.428690][ T9622] netlink: 'syz.3.1143': attribute type 4 has an invalid length. [ 247.437991][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.445188][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.454403][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1143'. [ 247.617121][ T9470] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 247.734877][ T9470] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 247.765005][ T9470] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 247.831782][ T9470] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.049678][ T5853] Bluetooth: hci4: command tx timeout [ 248.147279][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 248.165890][ T9644] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1151'. [ 248.198022][ T9470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.293159][ T9470] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.338121][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.345325][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.422991][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.430225][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.441349][ T9513] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 248.456304][ T9513] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 248.512851][ T9513] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 248.538193][ T9513] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 248.603279][ T9391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.747235][ T9391] veth0_vlan: entered promiscuous mode [ 248.805297][ T9391] veth1_vlan: entered promiscuous mode [ 248.903930][ T9391] veth0_macvtap: entered promiscuous mode [ 248.959468][ T9391] veth1_macvtap: entered promiscuous mode [ 248.998184][ T9513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.063315][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.090613][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.103280][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 249.111684][ T9669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1155'. [ 249.122002][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.132660][ T9664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1154'. [ 249.142927][ T9669] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1155'. [ 249.158473][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.182995][ T9391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.237945][ T9470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.265635][ T9513] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.289867][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.296996][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.316390][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.333198][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.344688][ T9391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.356918][ T9391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.369339][ T9391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.392569][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.399816][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.430298][ T9391] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.439476][ T9391] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.448373][ T9391] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.457196][ T9391] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.580467][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.588352][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.663355][ T9470] veth0_vlan: entered promiscuous mode [ 249.681270][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.698936][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.740477][ T9470] veth1_vlan: entered promiscuous mode [ 249.829590][ T9470] veth0_macvtap: entered promiscuous mode [ 249.850768][ T9470] veth1_macvtap: entered promiscuous mode [ 250.045681][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.071475][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.075460][ T9690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1162'. [ 250.091584][ T9693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1163'. [ 250.100403][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.111398][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.114349][ T9693] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1163'. [ 250.122058][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.141712][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1162'. [ 250.152476][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.164142][ T9470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.275816][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.288326][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.298662][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.309351][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.319315][ T9470] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.330089][ T9470] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.341244][ T9470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.351420][ T9470] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.360537][ T9470] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.369872][ T9470] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.378870][ T9470] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.436825][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.506146][ T9513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.550426][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.666751][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.718107][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.759210][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.789443][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.840144][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.857717][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.954824][ T11] bridge_slave_1: left allmulticast mode [ 250.961343][ T11] bridge_slave_1: left promiscuous mode [ 250.967216][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.980006][ T11] bridge_slave_0: left allmulticast mode [ 250.985736][ T11] bridge_slave_0: left promiscuous mode [ 250.992109][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.335272][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.352705][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.368028][ T11] bond0 (unregistering): Released all slaves [ 251.489049][ T30] INFO: task udevd:5846 blocked for more than 143 seconds. [ 251.497147][ T30] Not tainted 6.12.0-rc7-syzkaller-01702-gd7ef9eeef072 #0 [ 251.507146][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 251.529559][ T30] task:udevd state:D stack:22096 pid:5846 tgid:5846 ppid:1 flags:0x00000002 [ 251.571044][ T30] Call Trace: [ 251.574397][ T30] [ 251.577749][ T30] __schedule+0x184f/0x4c30 [ 251.596703][ T30] ? __pfx___schedule+0x10/0x10 [ 251.609744][ T30] ? __blk_flush_plug+0x449/0x500 [ 251.615122][ T30] ? __pfx_lock_release+0x10/0x10 [ 251.621395][ T30] ? __asan_memset+0x23/0x50 [ 251.626442][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 251.633300][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.640981][ T30] ? schedule+0x90/0x320 [ 251.645485][ T30] schedule+0x14b/0x320 [ 251.719988][ T30] schedule_timeout+0x1be/0x310 [ 251.724961][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 251.738791][ T30] ? __pfx_process_timeout+0x10/0x10 [ 251.744180][ T30] ? prepare_to_wait_event+0x3bd/0x400 [ 251.778764][ T30] nbd_queue_rq+0x7d9/0x2f30 [ 251.783490][ T30] ? __pfx_validate_chain+0x10/0x10 [ 251.808707][ T30] ? validate_chain+0x11e/0x5920 [ 251.813740][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 251.830069][ T30] ? __lock_acquire+0x1384/0x2050 [ 251.835224][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 251.848577][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 251.854257][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 251.889349][ T30] ? sbitmap_get+0x1f7/0x3f0 [ 251.894035][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 251.918597][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 251.924493][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 251.931459][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 251.938715][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 251.944463][ T30] ? __pfx___might_resched+0x10/0x10 [ 251.951503][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 251.957694][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 251.965293][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 251.971400][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 251.976967][ T30] blk_mq_flush_plug_list+0x1127/0x1890 [ 251.985383][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 251.992079][ T30] ? blk_mq_submit_bio+0x132f/0x2500 [ 251.997423][ T30] __blk_flush_plug+0x420/0x500 [ 252.003492][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 252.010081][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 252.015639][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 252.022121][ T30] __submit_bio+0x422/0x560 [ 252.026960][ T30] ? __pfx___submit_bio+0x10/0x10 [ 252.033068][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 252.040216][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 252.047114][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 252.053243][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 252.060304][ T30] ? __pfx___might_resched+0x10/0x10 [ 252.066087][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 252.072610][ T30] block_read_full_folio+0x93b/0xcd0 [ 252.077967][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 252.083653][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 252.091273][ T30] ? folio_add_lru+0x28f/0x870 [ 252.096099][ T30] filemap_read_folio+0x14b/0x630 [ 252.101455][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 252.107010][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 252.112695][ T30] do_read_cache_folio+0x3f5/0x850 [ 252.117844][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 252.123463][ T30] read_part_sector+0xb3/0x330 [ 252.128277][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 252.133559][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 252.138386][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 252.144079][ T30] ? snprintf+0xda/0x120 [ 252.148369][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 252.154218][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 252.158964][ T30] ? vsnprintf+0x184/0x1da0 [ 252.163618][ T30] ? __pfx_snprintf+0x10/0x10 [ 252.169390][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 252.174222][ T30] bdev_disk_changed+0x72c/0x13f0 [ 252.180772][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 252.186315][ T30] ? wait_on_inode+0xc1/0x230 [ 252.191124][ T30] blkdev_get_whole+0x2d2/0x450 [ 252.196035][ T30] bdev_open+0x2d4/0xc50 [ 252.200493][ T30] blkdev_open+0x3d9/0x560 [ 252.205004][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 252.211195][ T30] do_dentry_open+0x978/0x1460 [ 252.216132][ T30] vfs_open+0x3e/0x330 [ 252.221268][ T30] path_openat+0x2c84/0x3590 [ 252.225969][ T30] ? __pfx_path_openat+0x10/0x10 [ 252.231943][ T30] do_filp_open+0x235/0x490 [ 252.236510][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 252.242551][ T30] ? _raw_spin_unlock+0x28/0x50 [ 252.247453][ T30] ? alloc_fd+0x5a1/0x640 [ 252.252954][ T30] do_sys_openat2+0x13e/0x1d0 [ 252.257709][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 252.263980][ T30] __x64_sys_openat+0x247/0x2a0 [ 252.269602][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 252.275940][ T30] ? do_syscall_64+0x100/0x230 [ 252.281843][ T30] ? do_syscall_64+0xb6/0x230 [ 252.286567][ T30] do_syscall_64+0xf3/0x230 [ 252.292683][ T30] ? clear_bhb_loop+0x35/0x90 [ 252.297468][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.304013][ T30] RIP: 0033:0x7f325bb169a4 [ 252.308591][ T30] RSP: 002b:00007fff0ecfb490 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.317110][ T30] RAX: ffffffffffffffda RBX: 000055b416f86860 RCX: 00007f325bb169a4 [ 252.325356][ T30] RDX: 00000000000a0800 RSI: 000055b416fad640 RDI: 00000000ffffff9c [ 252.333595][ T30] RBP: 000055b416fad640 R08: 0000000000000001 R09: 7fffffffffffffff [ 252.341714][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 252.349816][ T30] R13: 000055b416f8d9e0 R14: 0000000000000001 R15: 000055b416f7c910 [ 252.357959][ T30] [ 252.361492][ T30] INFO: task udevd:5861 blocked for more than 144 seconds. [ 252.376165][ T30] Not tainted 6.12.0-rc7-syzkaller-01702-gd7ef9eeef072 #0 [ 252.384572][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 252.393449][ T30] task:udevd state:D stack:21392 pid:5861 tgid:5861 ppid:1 flags:0x00004002 [ 252.403985][ T30] Call Trace: [ 252.407298][ T30] [ 252.410501][ T30] __schedule+0x184f/0x4c30 [ 252.415062][ T30] ? __pfx___schedule+0x10/0x10 [ 252.420176][ T30] ? __blk_flush_plug+0x449/0x500 [ 252.425282][ T30] ? __pfx_lock_release+0x10/0x10 [ 252.430730][ T30] ? __asan_memset+0x23/0x50 [ 252.435384][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 252.441364][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.447759][ T30] ? schedule+0x90/0x320 [ 252.452396][ T30] schedule+0x14b/0x320 [ 252.456619][ T30] schedule_timeout+0x1be/0x310 [ 252.461622][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 252.467040][ T30] ? __pfx_process_timeout+0x10/0x10 [ 252.472523][ T30] ? prepare_to_wait_event+0x3bd/0x400 [ 252.479168][ T30] nbd_queue_rq+0x7d9/0x2f30 [ 252.483844][ T30] ? validate_chain+0x11e/0x5920 [ 252.489126][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 252.494220][ T30] ? __lock_acquire+0x1384/0x2050 [ 252.499452][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 252.505591][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 252.513280][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 252.518374][ T30] ? sbitmap_get+0x289/0x3f0 [ 252.523879][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 252.530499][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 252.536391][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 252.543799][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 252.551402][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 252.556746][ T30] ? __pfx___might_resched+0x10/0x10 [ 252.562298][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 252.568371][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 252.574042][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 252.580491][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 252.585925][ T30] blk_mq_flush_plug_list+0x1127/0x1890 [ 252.591675][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 252.597606][ T30] ? blk_mq_submit_bio+0x132f/0x2500 [ 252.603114][ T30] __blk_flush_plug+0x420/0x500 [ 252.608017][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 252.613998][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 252.619405][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 252.624666][ T30] __submit_bio+0x422/0x560 [ 252.629341][ T30] ? __pfx___submit_bio+0x10/0x10 [ 252.634422][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 252.640833][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 252.647475][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 252.653351][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 252.662578][ T30] ? __pfx___might_resched+0x10/0x10 [ 252.668007][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 252.674321][ T30] block_read_full_folio+0x93b/0xcd0 [ 252.680598][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 252.686036][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 252.692751][ T30] ? folio_add_lru+0x28f/0x870 [ 252.697573][ T30] filemap_read_folio+0x14b/0x630 [ 252.702721][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 252.708221][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 252.713923][ T30] do_read_cache_folio+0x3f5/0x850 [ 252.719197][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 252.724719][ T30] read_part_sector+0xb3/0x330 [ 252.729872][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 252.734858][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 252.739793][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 252.745376][ T30] ? snprintf+0xda/0x120 [ 252.749776][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 252.755444][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 252.760204][ T30] ? vsnprintf+0x184/0x1da0 [ 252.764757][ T30] ? __pfx_snprintf+0x10/0x10 [ 252.770455][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 252.775283][ T30] bdev_disk_changed+0x72c/0x13f0 [ 252.780498][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 252.787249][ T30] ? wait_on_inode+0xc1/0x230 [ 252.792123][ T30] blkdev_get_whole+0x2d2/0x450 [ 252.797045][ T30] bdev_open+0x2d4/0xc50 [ 252.802137][ T30] blkdev_open+0x3d9/0x560 [ 252.806610][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 252.811768][ T30] do_dentry_open+0x978/0x1460 [ 252.816893][ T30] vfs_open+0x3e/0x330 [ 252.822193][ T30] path_openat+0x2c84/0x3590 [ 252.826867][ T30] ? __pfx_path_openat+0x10/0x10 [ 252.832013][ T30] do_filp_open+0x235/0x490 [ 252.836575][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 252.842139][ T30] ? _raw_spin_unlock+0x28/0x50 [ 252.847027][ T30] ? alloc_fd+0x5a1/0x640 [ 252.851538][ T30] do_sys_openat2+0x13e/0x1d0 [ 252.856287][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 252.861841][ T30] __x64_sys_openat+0x247/0x2a0 [ 252.866749][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 252.872312][ T30] ? do_syscall_64+0x100/0x230 [ 252.877133][ T30] ? do_syscall_64+0xb6/0x230 [ 252.882247][ T30] do_syscall_64+0xf3/0x230 [ 252.887195][ T30] ? clear_bhb_loop+0x35/0x90 [ 252.892075][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.898053][ T30] RIP: 0033:0x7f325bb169a4 [ 252.902772][ T30] RSP: 002b:00007fff0ecfb490 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.911452][ T30] RAX: ffffffffffffffda RBX: 000055b416f9ce80 RCX: 00007f325bb169a4 [ 252.919857][ T30] RDX: 00000000000a0800 RSI: 000055b416f7d460 RDI: 00000000ffffff9c [ 252.927901][ T30] RBP: 000055b416f7d460 R08: 0000000000000001 R09: 7fffffffffffffff [ 252.936639][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 252.945012][ T30] R13: 000055b416f87ce0 R14: 0000000000000001 R15: 000055b416f7c910 [ 252.953289][ T30] [ 252.956735][ T30] [ 252.956735][ T30] Showing all locks held in the system: [ 252.967634][ T30] 3 locks held by kworker/u8:0/11: [ 252.979385][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 252.993237][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 253.003973][ T30] #2: ffffffff8fcc88d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 253.013760][ T30] 1 lock held by khungtaskd/30: [ 253.018754][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 253.028876][ T30] 3 locks held by kworker/u8:8/3435: [ 253.034235][ T30] #0: ffff88802fd16948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 253.046212][ T30] #1: ffffc9000c157d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 253.059256][ T30] #2: ffffffff8fcd5408 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 253.069037][ T30] 3 locks held by kworker/u8:10/3568: [ 253.074666][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 253.086632][ T30] #1: ffffc9000c6c7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 253.102638][ T30] #2: ffffffff8fcd5408 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 253.111909][ T30] 2 locks held by getty/5601: [ 253.116618][ T30] #0: ffff888030b8a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 253.126639][ T30] #1: ffffc90002fc62f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 253.136974][ T30] 3 locks held by udevd/5846: [ 253.141839][ T30] #0: ffff8880254934c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc50 [ 253.151471][ T30] #1: ffff888025358c90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 253.161191][ T30] #2: ffff888025510180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfe/0x2f30 [ 253.170369][ T30] 3 locks held by udevd/5861: [ 253.175071][ T30] #0: ffff888143f354c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc50 [ 253.184563][ T30] #1: ffff888143b95d90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 253.194733][ T30] #2: ffff8880254d8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfe/0x2f30 [ 253.204377][ T30] 3 locks held by kworker/0:6/5926: [ 253.209973][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 253.221302][ T30] #1: ffffc90004327d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 253.232648][ T30] #2: ffffffff8fcd5408 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 253.243330][ T30] 1 lock held by syz-executor/9470: [ 253.249066][ T30] #0: ffffffff8fcd5408 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 253.258221][ T30] 1 lock held by syz-executor/9513: [ 253.264193][ T30] #0: ffffffff8fcd5408 (rtnl_mutex){+.+.}-{3:3}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 253.274032][ T30] 2 locks held by syz.3.1165/9707: [ 253.279467][ T30] #0: ffff8880294c86c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 253.290104][ T30] #1: ffffffff8fcd5408 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 253.299688][ T30] 1 lock held by syz.3.1165/9710: [ 253.304839][ T30] #0: ffffffff8fcd5408 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 253.315013][ T30] 3 locks held by syz.0.1164/9709: [ 253.320380][ T30] #0: ffffffff8fd3bf90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 253.328945][ T30] #1: ffffffff8fd3be48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 253.338093][ T30] #2: ffffffff8fcd5408 (rtnl_mutex){+.+.}-{3:3}, at: wg_set_device+0x102/0x2160 [ 253.348051][ T30] 2 locks held by syz.0.1164/9712: [ 253.353404][ T30] #0: ffffffff8fd3bf90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 253.362020][ T30] #1: ffffffff8fcd5408 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 253.371690][ T30] 2 locks held by syz.0.1164/9713: [ 253.376829][ T30] #0: ffffffff8fd3bf90 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 253.385390][ T30] #1: ffffffff8fd3be48 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 253.394588][ T30] [ 253.397500][ T30] ============================================= [ 253.397500][ T30] [ 253.406650][ T30] NMI backtrace for cpu 1 [ 253.411027][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-01702-gd7ef9eeef072 #0 [ 253.421657][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 253.431771][ T30] Call Trace: [ 253.435080][ T30] [ 253.438054][ T30] dump_stack_lvl+0x241/0x360 [ 253.442772][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.447993][ T30] ? __pfx__printk+0x10/0x10 [ 253.452611][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 253.457573][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 253.463049][ T30] ? _printk+0xd5/0x120 [ 253.467302][ T30] ? __pfx__printk+0x10/0x10 [ 253.471916][ T30] ? __wake_up_klogd+0xcc/0x110 [ 253.476783][ T30] ? __pfx__printk+0x10/0x10 [ 253.481489][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 253.486576][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 253.492577][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 253.498631][ T30] watchdog+0xff4/0x1040 [ 253.502909][ T30] ? watchdog+0x1ea/0x1040 [ 253.507348][ T30] ? __pfx_watchdog+0x10/0x10 [ 253.512047][ T30] kthread+0x2f0/0x390 [ 253.516234][ T30] ? __pfx_watchdog+0x10/0x10 [ 253.520925][ T30] ? __pfx_kthread+0x10/0x10 [ 253.525532][ T30] ret_from_fork+0x4b/0x80 [ 253.529969][ T30] ? __pfx_kthread+0x10/0x10 [ 253.534570][ T30] ret_from_fork_asm+0x1a/0x30 [ 253.539359][ T30] [ 253.543778][ T30] Sending NMI from CPU 1 to CPUs 0: [ 253.549612][ C0] NMI backtrace for cpu 0 [ 253.549627][ C0] CPU: 0 UID: 0 PID: 5200 Comm: syslogd Not tainted 6.12.0-rc7-syzkaller-01702-gd7ef9eeef072 #0 [ 253.549648][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 253.549659][ C0] RIP: 0010:__asan_memset+0x5/0x50 [ 253.549682][ C0] Code: 01 00 00 00 e9 3c e6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 <41> 56 53 48 89 d3 41 89 f6 48 89 fd 48 8b 4c 24 18 48 89 d6 ba 01 [ 253.549697][ C0] RSP: 0018:ffffc900035ff270 EFLAGS: 00000046 [ 253.549714][ C0] RAX: 1ffff110069c35c3 RBX: ffff888034e1ae18 RCX: ffff888079eb5a00 [ 253.549728][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc900035ff2e0 [ 253.549740][ C0] RBP: ffffc900035ff370 R08: ffffffff901d73ef R09: 1ffffffff203ae7d [ 253.549754][ C0] R10: dffffc0000000000 R11: fffffbfff203ae7e R12: ffffc90003b81000 [ 253.549768][ C0] R13: ffff888034e1ae00 R14: dffffc0000000000 R15: 1ffff920006bfe58 [ 253.549782][ C0] FS: 00007f6bb4559380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 253.549798][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.549810][ C0] CR2: 00007fdd41399fb8 CR3: 0000000033426000 CR4: 00000000003526f0 [ 253.549826][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.549836][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.549849][ C0] Call Trace: [ 253.549855][ C0] [ 253.549863][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 253.549891][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 253.549920][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 253.549945][ C0] ? nmi_handle+0x2a/0x5a0 [ 253.549973][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 253.549997][ C0] ? nmi_handle+0x14f/0x5a0 [ 253.550016][ C0] ? nmi_handle+0x2a/0x5a0 [ 253.550035][ C0] ? __asan_memset+0x5/0x50 [ 253.550050][ C0] ? default_do_nmi+0x63/0x160 [ 253.550077][ C0] ? exc_nmi+0x123/0x1f0 [ 253.550109][ C0] ? end_repeat_nmi+0xf/0x53 [ 253.550138][ C0] ? __asan_memset+0x5/0x50 [ 253.550154][ C0] ? __asan_memset+0x5/0x50 [ 253.550170][ C0] ? __asan_memset+0x5/0x50 [ 253.550186][ C0] [ 253.550192][ C0] [ 253.550198][ C0] bpf_trace_run1+0xdf/0x520 [ 253.550222][ C0] ? __pfx_bpf_trace_run1+0x10/0x10 [ 253.550243][ C0] ? __pfx_validate_chain+0x10/0x10 [ 253.550266][ C0] trace_rcu_utilization+0x1b4/0x1e0 [ 253.550288][ C0] rcu_note_context_switch+0xca/0xff0 [ 253.550313][ C0] ? __pfx_validate_chain+0x10/0x10 [ 253.550332][ C0] ? __pfx_validate_chain+0x10/0x10 [ 253.550352][ C0] ? unwind_next_frame+0x18e6/0x22d0 [ 253.550382][ C0] ? preempt_count_add+0x93/0x190 [ 253.550404][ C0] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 253.550430][ C0] ? mark_lock+0x9a/0x360 [ 253.550448][ C0] ? rcu_is_watching+0x15/0xb0 [ 253.550468][ C0] __schedule+0x34b/0x4c30 [ 253.550500][ C0] ? __pfx___schedule+0x10/0x10 [ 253.550519][ C0] ? schedule+0x90/0x320 [ 253.550538][ C0] ? __pfx_lock_release+0x10/0x10 [ 253.550568][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.550596][ C0] ? schedule+0x90/0x320 [ 253.550614][ C0] schedule+0x14b/0x320 [ 253.550635][ C0] schedule_timeout+0xb0/0x310 [ 253.550651][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 253.550674][ C0] ? prepare_to_wait_exclusive+0x84/0x230 [ 253.550703][ C0] __skb_wait_for_more_packets+0x399/0x600 [ 253.550726][ C0] ? __pfx___skb_wait_for_more_packets+0x10/0x10 [ 253.550744][ C0] ? __pfx_receiver_wake_function+0x10/0x10 [ 253.550762][ C0] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 253.550785][ C0] __unix_dgram_recvmsg+0x34a/0x12f0 [ 253.550815][ C0] ? aa_sk_perm+0x96d/0xab0 [ 253.550836][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 253.550858][ C0] ? aa_file_perm+0x3ef/0xf50 [ 253.550883][ C0] ? __pfx_aa_sk_perm+0x10/0x10 [ 253.550905][ C0] ? shmem_file_write_iter+0x104/0x120 [ 253.550929][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 253.550952][ C0] ? unix_dgram_recvmsg+0xb6/0xe0 [ 253.550977][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 253.551005][ C0] sock_recvmsg+0x22f/0x280 [ 253.551028][ C0] sock_read_iter+0x2c4/0x3d0 [ 253.551048][ C0] ? __pfx_sock_read_iter+0x10/0x10 [ 253.551074][ C0] ? bpf_lsm_file_permission+0x9/0x10 [ 253.551096][ C0] ? security_file_permission+0x74/0x280 [ 253.551120][ C0] vfs_read+0x991/0xb70 [ 253.551141][ C0] ? __pfx_vfs_read+0x10/0x10 [ 253.551169][ C0] ? rcu_is_watching+0x15/0xb0 [ 253.551194][ C0] ? fdget_pos+0x19a/0x320 [ 253.551216][ C0] ksys_read+0x183/0x2b0 [ 253.551233][ C0] ? __pfx_ksys_read+0x10/0x10 [ 253.551250][ C0] ? do_syscall_64+0x100/0x230 [ 253.551273][ C0] ? do_syscall_64+0xb6/0x230 [ 253.551296][ C0] do_syscall_64+0xf3/0x230 [ 253.551317][ C0] ? clear_bhb_loop+0x35/0x90 [ 253.551341][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.551362][ C0] RIP: 0033:0x7f6bb46adb6a [ 253.551376][ C0] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 253.551391][ C0] RSP: 002b:00007fff30aec6c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.551409][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6bb46adb6a [ 253.551421][ C0] RDX: 00000000000000ff RSI: 00005647d1159950 RDI: 0000000000000000 [ 253.551432][ C0] RBP: 00005647d1159910 R08: 0000000000000001 R09: 0000000000000000 [ 253.551443][ C0] R10: 00007f6bb484c3a3 R11: 0000000000000246 R12: 00005647d115999c [ 253.551455][ C0] R13: 00005647d1159950 R14: 0000000000000000 R15: 00007f6bb4890a80 [ 253.551476][ C0] [ 253.551651][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 254.104819][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-01702-gd7ef9eeef072 #0 [ 254.115333][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 254.125405][ T30] Call Trace: [ 254.128723][ T30] [ 254.131672][ T30] dump_stack_lvl+0x241/0x360 [ 254.136379][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.141605][ T30] ? __pfx__printk+0x10/0x10 [ 254.146208][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 254.152214][ T30] ? vscnprintf+0x5d/0x90 [ 254.156562][ T30] panic+0x349/0x880 [ 254.160472][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 254.166643][ T30] ? __pfx_panic+0x10/0x10 [ 254.171071][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 254.176456][ T30] ? __irq_work_queue_local+0x137/0x410 [ 254.182025][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 254.187409][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 254.193580][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 254.199755][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 254.205934][ T30] watchdog+0x1033/0x1040 [ 254.210286][ T30] ? watchdog+0x1ea/0x1040 [ 254.214781][ T30] ? __pfx_watchdog+0x10/0x10 [ 254.219479][ T30] kthread+0x2f0/0x390 [ 254.223557][ T30] ? __pfx_watchdog+0x10/0x10 [ 254.228246][ T30] ? __pfx_kthread+0x10/0x10 [ 254.232847][ T30] ret_from_fork+0x4b/0x80 [ 254.237282][ T30] ? __pfx_kthread+0x10/0x10 [ 254.241969][ T30] ret_from_fork_asm+0x1a/0x30 [ 254.246798][ T30] [ 254.249963][ T30] Kernel Offset: disabled [ 254.254290][ T30] Rebooting in 86400 seconds..