last executing test programs: 1m39.678818009s ago: executing program 2 (id=465): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "9595f429ae08a565c9a41d416c70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5e0135118be22dc6c97e730f7053d6ec34ca11b5c7c3830af6b26868600f042ff"}]}}}}}}, 0x0) 1m37.338521609s ago: executing program 4 (id=314): socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x4}, {0x0, 0x1b}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) 1m36.828108299s ago: executing program 0 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) getpeername$packet(r1, 0x0, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x0) 1m18.44353883s ago: executing program 4 (id=314): socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x4}, {0x0, 0x1b}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) 1m16.841842509s ago: executing program 2 (id=465): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) 1m15.618164709s ago: executing program 0 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) getpeername$packet(r1, 0x0, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x0) 1m0.403719155s ago: executing program 2 (id=465): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) 58.758480812s ago: executing program 0 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) getpeername$packet(r1, 0x0, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x0) 56.848498617s ago: executing program 4 (id=314): socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x4}, {0x0, 0x1b}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) 43.659911559s ago: executing program 2 (id=465): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) 42.394580415s ago: executing program 0 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) getpeername$packet(r1, 0x0, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x0) 41.087144041s ago: executing program 4 (id=314): socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x4}, {0x0, 0x1b}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) 25.462970975s ago: executing program 2 (id=465): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) 24.847133106s ago: executing program 0 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) getpeername$packet(r1, 0x0, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x0) 23.149253752s ago: executing program 4 (id=314): socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x4}, {0x0, 0x1b}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) 9.357682938s ago: executing program 2 (id=465): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x15}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) 8.14968519s ago: executing program 0 (id=72): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) getpeername$packet(r1, 0x0, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010000180"], 0x44}}, 0x0) 6.664753942s ago: executing program 3 (id=1267): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257035bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf528666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebdb638d91dbef661935839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dc7718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xff12, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x2800000002000000, 0xe, 0x0, &(0x7f0000000180)="a06ad876d56a0064d082778c3938", 0x0, 0x0, 0x4000000, 0x0, 0x38, 0x0, &(0x7f0000001200)="6e5fda715e9bcd5ff3f5da6f05c11711c4b387323c7785c3febf7a4b7bb25e88fb2236d8a1a84601561c0bef142319cce42d9da2aa36471b"}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "bb91"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000fef7ff7a0af0fff80000ff79a4f0ff00000000b7060000efffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ba23008500000098000000b70000000000000095000000000000006f88300eaa171100756695acf0af839ec5300a584fe44c80de0b061417e9ade22cecede5d5be6ab3d7828ee094518a5800000082c81ddfe3960a29ea15fa7e26f0f3e51416b698f6da6fe8af496d22585ffab3af24974fae00d824313ffef788c6983945dd3663f79f67e78a48b23b38c5f86e96111199f0f0af9f42099a0f54041889b971cf394bd43473a5ac2acab9768cbc52ff7f000000000000711727c4a32a6b7ecdae05d2b3fed4572eb0d88976d2adda68000010000000c47b18cf93996a43e2e080f57fadf535d8b3078ebe16b10160fad64474a7b558f7a56f41022feec18e013abd8fda2b96779e534d0675fbcc13ba9f9eb96319fd5b49521d5cb2ced401d7b6fce658f203a9c2da91116d986730da1be85b0000829512099df32814820fbf7be91cd13b77f4e4e599f8bbca388247856073472312a9ff4273b9cd08000000000000616e888cda842c661577818c2069cb41a73b4b7fc28882cad315db3fffc5183deca7a32838ec0ad70d4f55382c1879b71ec504d2f3e3883428ee350123a5cad346f6d517f6fcea5b6bc4fcffffffffffff03f419a6e45fd98e77da4a8202ebbdafe6b2e38c9d7e506f5da2958cf7f0d9b31ca3275e64e29d39d158cebe43308cf8760588001172e19685e9a334aec76530861b772a1da96f0a227514bd0bc26df2b50a45e4eceae1ddfe88d58879d1cb253e0471714fa124211203000000000000001f502b6c760655ffb20ae13a1a94f7ae229fbf5da7cae4f994ee82fc98c864c3e352ad16f98208cf1469dd6c1212582a3687f7dbdf708929643f3f0f4e947c40742452685ec044fc71eaca9abc92145677e14054331801b1412b39049ed782742f9a1b6aca9123b243c1a68c047f2db79701b62c8cc0d2f608c7f62d107ebc68df9f8d296721c9d465dad604bc0dc500000000000000000000000000000000000000000568a4997dd54fa83aacd2d209f66de2e26dc2fd862a0b8ee149c148197176745fc8ff1dd5bd6611daa882298a37b041b34668d4662ea8fbe2e787dfc4c8bef2124f0439b2d18ec83361da5cc732f365b0a528db31b90bc1405b6d5301c34319ccae29b1d6034b665c79baeeeac5e71d24e2e3b6ffc5bc2dcb600e645c0048b45e286a49e888d21abfc817085d9c00e08525207e33505226fdda16e6da6dd31f7a1736029b87e8d6a05bcb356298d7dccd7de2af0885bd4939ff96ab74da3871b077e4058c8752ba4994eafed8b239d781638fa339fa0f7dd135af3f80e40f4b885770cf27d205a45d4702f97b8b7c57b180c50b2b370dfb35dc895e8f05d6e71829f36150b2cde314693f3e0dc35f8cdd76bdde2018366c3201307c370433762676f72e68c962430a0000000000000000000000000000e737dc2e1a3fdebbb510c663d24f72b954965201f775b3739c14dd4832647c028be09f2809fd396fa26532a30a37737e95f0f41dd024b7bf8a6bf807c9fd9b8c7a39717729339dc3054117cb95693bdd61edcc2860b66545e194a961bdc5457d76ae1a87050e12ead896f3337d5a000000000000000000400000602bfd2f1ace65f2e74dc99cb73a37f40362b7904e8a0ea8d2d9805c924f9985d22972031a1223afa1288af3f48c93fcdb11963d0b748287448f722dc180e87637b662b11effabf45beda2e3a7e1adf8f94b619fa152b33440f2358a745848caf7000eb305c936d26964a2a85e133d01368b8d228d02f96064de261cf02c9632a0eb4ab259e8f4dd63d8b6d2d6b2a0c29fbab7d04d73a381c21f1c344655b64e12f216fbc646cc6bd60ca773d187f2fd317f6cb2309d1a13526a44b7d9b2bf93947dc3ac3340a7a114051d33d152310574f0d784910dc1a8f5bbf3610c544437626236458f285196161496389b02ba46a72da0149b4ddfdd4ef7862a07395752a37cb0244e94e1310e0c0a148a9a48b149bf2f345f3f89813c9eb05160f63f0b363deee5cb77ea6e951857e1942e5c56d72d724af7aa24a8aadb512f3302972c53b0eb7a693e0b0c775b21aed72995cfe9e9347a07d43ce3db9f22d461e86416ffff6f2e4e36306630052a2b03ee36ec52af0d684fabd5f38adffaa6c5a7a8100d1aefaf8576b363690b76e2eb96b07ab790cf63cfc334b7469b5b5b397c622f7c3ee064f9272443bcb928b6f7a2450cd33550a42843b0b5ac9e37134c81bd56b72e1030b05a5b3ac47b5af22a9dff0700004adacc71db2b15b4ffd98e30224763382ade45d164be76b2e9a674448f3ee2cd29707468df87ea6e8e6333b5fcb1b8b43a7c005ea800000000000000000000010000000000387592adc78ccfe479549e6f4efc14c4a5cfe845e6157d6fe70b278147edf0e25065ec6b17f8022493d105c9c31121e7957aeec5f7f2af0446d128778c8bf15b87a0eec6f4c75966b5f0e06744bda63134223416102aea1254d57c390e1f84ec7d5c3a758ce59c9e2c4ce1f28b6783661e272bf1cb5c8ac177aa9c6ccbead9a96b22394afb840247e5d69473b836f070dc0bf9302e33b03d4e07395c82e33667726b51ff24b0bbea730702835159e3517ffb3da0d01833589fec3bdab629b21e5d9e87c3c58d962ff5e75c81f583c64b7d5a643674801e18b06ca98b49d9e28d004c7ebccf076c64ef71421f672b0948b18ab5af448ca9446e71ba6dd4bd15a12553066de7cb767a121d56d9d26ce27fdbe6721191f2ed1cc3f9c5e3d5cba447c4793165b3cbf51c7d0cf9edf823641e1bc7db7803b60dc8b21e49a33a73ac00337067dfd3ecaf4e6dceee1048f300000000000000000000000000000000000000000000007958a50896df65337581398793d0a9abe75251908c07d2957ca70ad7ac31aae536294d6a944cd35f46cb554d8aecae5a72cb24596d896ff9ad83473567b6cb9d032c395a1459399cea31ebafc1e77649b55af527ca0f1ac972ee72a78391473c1b9e0000000000000000004076eac7e605f8de6f0ce5702af52c5d78bac0097d92f078a3a98229ebf281c3c876d2614109b69967871fea621fb2a29a77a1516b51d9b1c3c5ef1436f50fad4a1cd92a211fec61d37c8b410a20fbdeb642228d6cfeb8cda8eea3a7f343fcaa0459b9d916abb668d4799534307084ee7d854dd0850000000000000000000000002f40c3e24f9c0a56edf543425058c35febda26a43bdab770212186b84421d8b841cf9181d47c08cb392e414c1efba9978a976a9e65ae443644dbdb32a50cdc717a34d1aa9ced37820a6d1cd0920a9a07e36a85e967bfa7f2caf1c9b52c06f4d178fbb91a169e9533e401819e57cab814761819b0fc517239a6777dbb92a7462538dbd8a4b84b160a598c75bafa5a9b388a44303dbebc83ac2ad2da3ae80c851bc2fdb8d444597fdac4538aa33bb9204ffe534b15a1878be30157d0815d38fc2effeb7b87d6bd15e21c7b7c7d1ad7b3fd69b4bd06716a203e82f4c0413719eae0967fc70f03570375c2d0986b0200897e505afb6f3f8eb5384e3300000000000000000000000000006b78992d5c13cc1e4da0c915f6008be5cbc0ba1eea48d5967c5e5106411dda3578c91d93ecf4a5efdf306f6b5378db3b22f5aae576342ff9a2eda7080027be316100af0ec6f0e9f227e239fe2d8c78555aaaa969581860f846df35757281a6d3f2e6de960c30f98987ba99d1edfb39dece89262a2e71cb50b7104f611b8db7639e6a5b485135bead15cfada2b5ffa490d60f6b8211f6ada947d06fac138f829b24f2c9d60f3d6672ef8e86ddcdf4dba4f20f370c58f49c9d0100b519f8bc685f176c3f305ced21df0c8acace252a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.663989296s ago: executing program 4 (id=314): socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff3, 0x4}, {0x0, 0x1b}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x2000006) 4.863338329s ago: executing program 3 (id=1269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xf, &(0x7f00000010c0)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x12, &(0x7f0000000380)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2f53}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe1b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f00000000c0)='GPL\x00', 0xff, 0xb6, &(0x7f0000000480)=""/182, 0x41000, 0x4, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x0, 0x8, 0xffff3ebc, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="030000002f000000d4000000200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x1d8, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000040)=0xaf2, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r7, 0x107, 0x12, 0x0, &(0x7f0000000240)) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) recvmmsg(r5, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000440)=r4, 0x4) r9 = socket(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) getsockopt(r9, 0x200000000114, 0x8, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100009060300"/20, @ANYRES32=0x0, @ANYBLOB="adffa888f00306001c0012800e0001006970366772657461700000000800028004001200940daf333b2c58e7888aca09269ee4d2792e6025bbebc885ba29609da61a1dcc27fbe9c620d73f6a66"], 0x3c}}, 0xc854) 4.567938288s ago: executing program 3 (id=1270): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, 0x0, 0x0) 4.347153375s ago: executing program 1 (id=1272): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x80, 0x4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000100)=0x2, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000100)=0x2, 0x4) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) (async) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f00000000c0)=0xa4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000180)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x38}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000001040)={'filter\x00', 0x0, [0xfff7ffff, 0x80000004]}, &(0x7f0000000200)=0x44) (async) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000001040)={'filter\x00', 0x0, [0xfff7ffff, 0x80000004]}, &(0x7f0000000200)=0x44) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'macsec0\x00', &(0x7f00000000c0)=@ethtool_eee={0x45, 0x8, 0x8, 0x4, 0x4, 0x1ff, 0x0, 0x5, [0x8001, 0x3]}}) 2.145316524s ago: executing program 3 (id=1273): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) writev(r2, &(0x7f00000002c0)=[{0x0}], 0x1) r3 = accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001680), 0x0, 0x2, 0x0) r4 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x2000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {}, {0x0, 0xd}}}, 0x24}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000140)={0x9, 0x7fff, 0x2, 0x513e}, 0x8) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xfde687b65d606dd1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8}]}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.088353029s ago: executing program 1 (id=1274): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a800000085000000a700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.976841318s ago: executing program 1 (id=1275): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x5, 0x71, 0x10, 0xbc}}, &(0x7f0000000180)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.880409835s ago: executing program 1 (id=1276): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x1, @dev, 0x4}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000000)=0x7, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @remote, 0x7fff}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) epoll_create(0x47f) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) shutdown(r5, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "967cdef875f8738a", "902295394fc6d0b5aa39eb14eac2d9a2", "cabd27f3", "393bedfa875e7d07"}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x7, 0x1, 0x3, 0x100000001, 0x0, 0x7, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x0, 0x0, 0xdffffffe, 0x1000000000000, 0x7fffffff, 0xffffffffffffffff}, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x2d) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffffff}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvfrom$inet6(r1, 0x0, 0x0, 0x10101, 0x0, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x8000) 1.146348405s ago: executing program 3 (id=1277): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) r1 = accept(r0, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x70030000}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendto$rxrpc(r1, &(0x7f00000000c0)="30e79572ab7c2b2bc52a5b8b36fceba90252ebea0715dde207ed379732003e516113023570ed042864264c94f5b0b718710851843e88e4963b9e9e748391a4c815e7", 0x42, 0x4d040, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) 925.202758ms ago: executing program 1 (id=1278): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[], 0xe) 830.134999ms ago: executing program 1 (id=1279): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x8004) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x401, 0x0, 0x0, {0xa, 0x1f, 0x0, 0x0, r5}, [@IFA_CACHEINFO={0x14, 0x6, {0x4, 0x22, 0x3, 0x80000000}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@ipv6_newaddr={0x2c, 0x14, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x2c}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) 0s ago: executing program 3 (id=1280): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e00000c0002800600010000000000050027"], 0x44}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) sendto$inet6(r4, &(0x7f0000000000)="01028000", 0x4, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000012c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xfffffffe}]}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r9) accept4(r9, &(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000100)=0x80, 0x80800) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d00000000080000006574646576736971300000"], 0x34}}, 0x0) r11 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="040027bd70000e000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r11, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000100)=0x20, 0x4) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000140)=0x10001, 0x4) recvmmsg(r4, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004200)=""/19, 0x13}}], 0x1, 0x0, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r12, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x1, 0x1c8, [0x0, 0x11, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x240) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000400004803c0001800a00010072616e67650000002c000280080001400000000808000240000000030c00048014000100690000000c00038005000100430000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x94}}, 0x0) kernel console output (not intermixed with test programs): T12438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.040631][ T5142] Bluetooth: hci3: command tx timeout [ 370.229941][T12514] netlink: zone id is out of range [ 370.235135][T12514] netlink: zone id is out of range [ 370.267106][T12514] netlink: zone id is out of range [ 370.291304][T12514] netlink: zone id is out of range [ 370.317241][T12514] netlink: zone id is out of range [ 370.342185][T12438] team0: Port device team_slave_0 added [ 370.381508][T12438] team0: Port device team_slave_1 added [ 370.390143][T12514] netlink: zone id is out of range [ 370.408180][T12514] netlink: zone id is out of range [ 370.426546][T12514] netlink: zone id is out of range [ 370.444416][T12514] netlink: zone id is out of range [ 370.710111][T12475] chnl_net:caif_netlink_parms(): no params data found [ 370.776906][T12438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.794410][T12438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.839687][ T5142] Bluetooth: hci2: command tx timeout [ 370.857664][T12438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.913929][T12438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.928669][T12438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.965212][T12438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.978110][T12534] netlink: 'syz.3.1100': attribute type 10 has an invalid length. [ 371.038609][T12534] syz_tun: entered promiscuous mode [ 371.056701][T12534] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 371.202271][ T6026] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.467965][ T6026] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.519849][T12475] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.527057][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.535819][T12475] bridge_slave_0: entered allmulticast mode [ 371.543227][T12475] bridge_slave_0: entered promiscuous mode [ 371.559131][ T5142] Bluetooth: hci4: command tx timeout [ 371.561953][T12438] hsr_slave_0: entered promiscuous mode [ 371.577846][T12438] hsr_slave_1: entered promiscuous mode [ 371.588224][T12438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.603624][T12438] Cannot create hsr debugfs directory [ 371.730967][ T6026] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.767003][T12475] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.776077][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.792221][T12475] bridge_slave_1: entered allmulticast mode [ 371.819619][T12475] bridge_slave_1: entered promiscuous mode [ 371.879356][T12556] infiniband syz1: set down [ 371.894632][T12556] infiniband syz1: added team_slave_0 [ 372.007874][ T6026] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.036019][T12556] RDS/IB: syz1: added [ 372.063420][T12556] smc: adding ib device syz1 with port count 1 [ 372.070383][T12556] smc: ib device syz1 port 1 has pnetid [ 372.075050][T12475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.113229][T12475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.122802][ T5142] Bluetooth: hci3: command tx timeout [ 372.521233][T12475] team0: Port device team_slave_0 added [ 372.605477][T12475] team0: Port device team_slave_1 added [ 372.809796][T12475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.817638][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.888977][T12475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.911298][T12475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.919341][ T5142] Bluetooth: hci2: command tx timeout [ 372.929061][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.974323][T12475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.058842][ T6026] bridge_slave_1: left allmulticast mode [ 373.066192][ T6026] bridge_slave_1: left promiscuous mode [ 373.078183][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.088523][ T6026] bridge_slave_0: left allmulticast mode [ 373.103018][ T6026] bridge_slave_0: left promiscuous mode [ 373.108976][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.132293][ T6026] bridge_slave_1: left allmulticast mode [ 373.137993][ T6026] bridge_slave_1: left promiscuous mode [ 373.157409][ T6026] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.167855][ T6026] bridge_slave_0: left allmulticast mode [ 373.175864][ T6026] bridge_slave_0: left promiscuous mode [ 373.181739][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.647785][ T5142] Bluetooth: hci4: command tx timeout [ 373.728851][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.744886][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.755693][ T6026] bond0 (unregistering): Released all slaves [ 373.877259][ T6026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.896915][ T6026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.907749][ T6026] bond0 (unregistering): Released all slaves [ 374.000188][T12414] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 374.029864][T12414] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 374.176103][T12475] hsr_slave_0: entered promiscuous mode [ 374.199433][ T5142] Bluetooth: hci3: command tx timeout [ 374.199567][T12475] hsr_slave_1: entered promiscuous mode [ 374.224018][T12475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.232411][T12475] Cannot create hsr debugfs directory [ 374.238428][T12414] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 374.348549][T12414] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 374.864513][T12438] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 374.912667][T12438] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 374.947362][T12438] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 375.002538][T12438] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 375.063157][T12414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.154732][T12414] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.211694][ T9004] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.218822][ T9004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.300713][T12475] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 375.409486][T12475] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 375.458743][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.466007][ T6012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.553286][T12475] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 375.612327][T12475] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 375.683009][T12438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.727233][T12438] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.727566][ T5142] Bluetooth: hci4: command tx timeout [ 375.742792][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.749951][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.759268][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.766390][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.914306][T12475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.968254][T12475] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.033830][T12414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.047442][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.054611][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.110577][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.117832][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.404656][T12438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.544208][T12438] veth0_vlan: entered promiscuous mode [ 376.552195][T12633] netlink: 'syz.3.1106': attribute type 10 has an invalid length. [ 376.593339][T12438] veth1_vlan: entered promiscuous mode [ 376.598503][T12633] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1106'. [ 376.699286][T12633] syz_tun: left promiscuous mode [ 376.890386][T12633] bond0: (slave syz_tun): Releasing backup interface [ 376.945155][T12633] net_ratelimit: 43 callbacks suppressed [ 376.945181][T12633] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 377.027531][ T6026] hsr_slave_0: left promiscuous mode [ 377.037534][ T6026] hsr_slave_1: left promiscuous mode [ 377.062142][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.070234][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.080087][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.087539][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.110747][ T6026] hsr_slave_0: left promiscuous mode [ 377.117857][ T6026] hsr_slave_1: left promiscuous mode [ 377.132204][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.146288][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.157350][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.176648][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.223471][ T6026] veth1_macvtap: left promiscuous mode [ 377.229683][ T6026] veth0_macvtap: left promiscuous mode [ 377.235320][ T6026] veth1_vlan: left promiscuous mode [ 377.241507][ T6026] veth0_vlan: left promiscuous mode [ 377.256810][ T6026] veth1_macvtap: left promiscuous mode [ 377.262488][ T6026] veth0_macvtap: left promiscuous mode [ 377.268096][ T6026] veth1_vlan: left promiscuous mode [ 377.274164][ T6026] veth0_vlan: left promiscuous mode [ 377.908872][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 377.954044][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 378.704546][ T6026] team0 (unregistering): Port device team_slave_1 removed [ 378.749761][ T6026] team0 (unregistering): Port device team_slave_0 removed [ 379.177562][T12438] veth0_macvtap: entered promiscuous mode [ 379.188721][T12438] veth1_macvtap: entered promiscuous mode [ 379.205234][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.216069][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.226445][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.237425][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.250000][T12438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.260857][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.271879][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.282461][T12438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.293196][T12438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.304827][T12438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.348598][T12438] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.366890][T12438] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.377817][T12438] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.387463][T12438] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.412144][T12475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.556318][T12414] veth0_vlan: entered promiscuous mode [ 379.670580][T12414] veth1_vlan: entered promiscuous mode [ 379.727758][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.736623][T12475] veth0_vlan: entered promiscuous mode [ 379.749780][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.797218][T12475] veth1_vlan: entered promiscuous mode [ 379.868247][T12414] veth0_macvtap: entered promiscuous mode [ 379.917920][ T9008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.928421][T12414] veth1_macvtap: entered promiscuous mode [ 379.946437][ T9008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.015107][T12475] veth0_macvtap: entered promiscuous mode [ 380.062413][T12475] veth1_macvtap: entered promiscuous mode [ 380.095258][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.123937][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.144804][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.170480][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.180953][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.199304][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.227003][T12414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.428735][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.451624][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.482472][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.508987][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.518877][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.539326][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.569014][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.588953][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.618085][T12475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.634655][T12679] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 380.686909][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.717984][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.748810][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.769975][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'. [ 380.782120][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.812376][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.853519][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.885147][T12475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.922287][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.953169][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.984951][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.015463][T12701] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 381.028981][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.038859][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.091230][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.111617][T12414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.138868][T12414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.158523][T12414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.204777][T12414] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.232283][T12414] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.243617][T12414] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.257348][T12414] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.282387][T12475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.295862][T12475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.307161][T12475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.317542][T12475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.436939][ T9008] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.566725][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.598767][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.607737][ T9008] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.641018][ T6026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.649764][ T6026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.690218][ T6010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.704664][ T6012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.712712][ T6010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.722736][ T6012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.918271][ T9008] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.052468][ T9008] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.330814][ T9008] bridge_slave_1: left allmulticast mode [ 382.336532][ T9008] bridge_slave_1: left promiscuous mode [ 382.349315][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.382471][ T9008] bridge_slave_0: left allmulticast mode [ 382.388176][ T9008] bridge_slave_0: left promiscuous mode [ 382.409572][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.678655][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 382.694716][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 382.713749][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 382.727504][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 382.746529][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 382.759549][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 382.906999][ T9008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.917836][ T9008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.928380][ T9008] bond0 (unregistering): Released all slaves [ 383.416613][ T9008] hsr_slave_0: left promiscuous mode [ 383.422806][ T9008] hsr_slave_1: left promiscuous mode [ 383.429411][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.436887][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.445076][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.453260][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.483917][ T9008] veth1_macvtap: left promiscuous mode [ 383.489774][ T9008] veth0_macvtap: left promiscuous mode [ 383.495430][ T9008] veth1_vlan: left promiscuous mode [ 383.500877][ T9008] veth0_vlan: left promiscuous mode [ 383.921553][ T9008] team0 (unregistering): Port device team_slave_1 removed [ 383.962820][ T9008] team0 (unregistering): Port device team_slave_0 removed [ 384.560012][T12754] netlink: 'syz.1.1117': attribute type 5 has an invalid length. [ 384.592622][T12730] chnl_net:caif_netlink_parms(): no params data found [ 384.605639][ T5142] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 384.614931][ T5142] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 384.623790][ T5142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 384.632446][ T5142] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 384.640652][ T5142] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 384.647984][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 384.785434][T12730] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.793847][T12730] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.804468][T12730] bridge_slave_0: entered allmulticast mode [ 384.821945][T12730] bridge_slave_0: entered promiscuous mode [ 384.835574][T12730] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.839157][ T5142] Bluetooth: hci2: command tx timeout [ 384.858544][T12730] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.873267][T12730] bridge_slave_1: entered allmulticast mode [ 384.888291][T12730] bridge_slave_1: entered promiscuous mode [ 384.984277][T12730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.022633][T12730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.120761][T12730] team0: Port device team_slave_0 added [ 385.141992][T12730] team0: Port device team_slave_1 added [ 385.244998][T12730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.263349][T12730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.295252][T12730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.347805][ T9008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.374086][T12730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.381681][T12730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.408063][T12730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.457118][ T9008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.507897][T12730] hsr_slave_0: entered promiscuous mode [ 385.516550][T12730] hsr_slave_1: entered promiscuous mode [ 385.526550][T12730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.534254][T12730] Cannot create hsr debugfs directory [ 385.569872][ T9008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.638493][ T9008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.044028][T12761] chnl_net:caif_netlink_parms(): no params data found [ 386.205789][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.216340][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.232841][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.251062][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.263860][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 386.271355][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.470589][ T9008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.601382][ T9008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.680023][ T5838] Bluetooth: hci3: command tx timeout [ 386.766253][ T9008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.919075][ T5838] Bluetooth: hci2: command tx timeout [ 386.975522][ T9008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.999304][T12761] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.999482][T12832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1124'. [ 387.006425][T12761] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.060620][T12761] bridge_slave_0: entered allmulticast mode [ 387.068707][T12761] bridge_slave_0: entered promiscuous mode [ 387.077974][T12761] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.086244][T12761] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.094280][T12761] bridge_slave_1: entered allmulticast mode [ 387.102108][T12761] bridge_slave_1: entered promiscuous mode [ 387.318070][T12761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.375084][T12761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.456048][T12730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 387.539853][T12761] team0: Port device team_slave_0 added [ 387.571178][T12730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 387.608502][T12730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 387.635640][T12761] team0: Port device team_slave_1 added [ 387.642854][ T9008] bridge_slave_1: left allmulticast mode [ 387.648544][ T9008] bridge_slave_1: left promiscuous mode [ 387.657096][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.668753][ T9008] bridge_slave_0: left allmulticast mode [ 387.689158][ T9008] bridge_slave_0: left promiscuous mode [ 387.694978][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.712433][ T9008] bridge_slave_1: left allmulticast mode [ 387.727707][ T9008] bridge_slave_1: left promiscuous mode [ 387.739165][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.759690][ T9008] bridge_slave_0: left allmulticast mode [ 387.766342][ T9008] bridge_slave_0: left promiscuous mode [ 387.781305][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.372642][ T5838] Bluetooth: hci4: command tx timeout [ 388.760297][ T5838] Bluetooth: hci3: command tx timeout [ 388.991997][ T9008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.002297][ T5838] Bluetooth: hci2: command tx timeout [ 389.013610][ T9008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.025137][ T9008] bond0 (unregistering): Released all slaves [ 389.164676][ T9008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.175903][ T9008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.191470][ T9008] bond0 (unregistering): Released all slaves [ 389.207694][T12730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 389.340502][T12761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.347510][T12761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.396094][T12761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.513733][T12761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.521444][T12761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.548461][T12761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.696379][T12761] hsr_slave_0: entered promiscuous mode [ 389.709620][T12761] hsr_slave_1: entered promiscuous mode [ 389.739022][T12761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.746639][T12761] Cannot create hsr debugfs directory [ 389.803100][T12799] chnl_net:caif_netlink_parms(): no params data found [ 390.106393][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 390.125838][T12930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1134'. [ 390.137185][T12930] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1134'. [ 390.259182][T12938] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1135'. [ 390.430327][T12799] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.439353][ T5838] Bluetooth: hci4: command tx timeout [ 390.439824][T12799] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.469316][T12799] bridge_slave_0: entered allmulticast mode [ 390.476464][T12799] bridge_slave_0: entered promiscuous mode [ 390.492012][T12799] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.506897][T12799] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.525824][T12799] bridge_slave_1: entered allmulticast mode [ 390.547930][T12799] bridge_slave_1: entered promiscuous mode [ 390.623726][T12799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.638135][T12799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.842170][ T5838] Bluetooth: hci3: command tx timeout [ 390.895275][T12799] team0: Port device team_slave_0 added [ 390.963030][T12799] team0: Port device team_slave_1 added [ 391.002294][ T9008] hsr_slave_0: left promiscuous mode [ 391.019369][ T9008] hsr_slave_1: left promiscuous mode [ 391.025538][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.037468][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.046928][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.058954][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.070588][ T9008] hsr_slave_0: left promiscuous mode [ 391.079302][ T9008] hsr_slave_1: left promiscuous mode [ 391.084761][ T5838] Bluetooth: hci2: command tx timeout [ 391.110223][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.117671][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.142882][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.157478][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.167925][T12960] FAULT_INJECTION: forcing a failure. [ 391.167925][T12960] name failslab, interval 1, probability 0, space 0, times 0 [ 391.181572][T12960] CPU: 1 UID: 0 PID: 12960 Comm: syz.1.1142 Not tainted 6.13.0-rc1-syzkaller-00263-g3ca459eaba1b #0 [ 391.192382][T12960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 391.202471][T12960] Call Trace: [ 391.205781][T12960] [ 391.208735][T12960] dump_stack_lvl+0x241/0x360 [ 391.213432][T12960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.218643][T12960] ? __pfx__printk+0x10/0x10 [ 391.223246][T12960] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 391.229254][T12960] ? __pfx___might_resched+0x10/0x10 [ 391.234563][T12960] should_fail_ex+0x3b0/0x4e0 [ 391.239268][T12960] should_failslab+0xac/0x100 [ 391.243994][T12960] kmem_cache_alloc_node_noprof+0x77/0x380 [ 391.249852][T12960] ? __alloc_skb+0x1c3/0x440 [ 391.254474][T12960] __alloc_skb+0x1c3/0x440 [ 391.258904][T12960] ? validate_chain+0x11e/0x5920 [ 391.263874][T12960] ? __pfx___alloc_skb+0x10/0x10 [ 391.268821][T12960] ? __pfx_validate_chain+0x10/0x10 [ 391.274056][T12960] ? mark_lock+0x9a/0x360 [ 391.278400][T12960] alloc_skb_with_frags+0xc3/0x820 [ 391.283542][T12960] ? aa_label_sk_perm+0x4f3/0x6c0 [ 391.288588][T12960] sock_alloc_send_pskb+0x91a/0xa60 [ 391.293828][T12960] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 391.299610][T12960] hci_sock_sendmsg+0x22b/0x11c0 [ 391.304590][T12960] ? __pfx_aa_sk_perm+0x10/0x10 [ 391.309458][T12960] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 391.314839][T12960] ? __pfx_aa_file_perm+0x10/0x10 [ 391.319872][T12960] ? aa_sock_msg_perm+0x91/0x160 [ 391.324839][T12960] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 391.330229][T12960] __sock_sendmsg+0x221/0x270 [ 391.334957][T12960] sock_write_iter+0x2d7/0x3f0 [ 391.339752][T12960] ? __pfx_sock_write_iter+0x10/0x10 [ 391.345100][T12960] ? bpf_lsm_file_permission+0x9/0x10 [ 391.350525][T12960] ? security_file_permission+0x74/0x280 [ 391.356205][T12960] vfs_write+0xaeb/0xd30 [ 391.360462][T12960] ? __pfx_sock_write_iter+0x10/0x10 [ 391.365766][T12960] ? __pfx_vfs_write+0x10/0x10 [ 391.370575][T12960] ? __fget_files+0x2a/0x410 [ 391.375178][T12960] ? __fget_files+0x2a/0x410 [ 391.379803][T12960] ksys_write+0x18f/0x2b0 [ 391.384146][T12960] ? __pfx_ksys_write+0x10/0x10 [ 391.389018][T12960] ? do_syscall_64+0x100/0x230 [ 391.393834][T12960] ? do_syscall_64+0xb6/0x230 [ 391.398563][T12960] do_syscall_64+0xf3/0x230 [ 391.403123][T12960] ? clear_bhb_loop+0x35/0x90 [ 391.407830][T12960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.413740][T12960] RIP: 0033:0x7f366e97fed9 [ 391.418159][T12960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.437770][T12960] RSP: 002b:00007f366f7ca058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 391.446210][T12960] RAX: ffffffffffffffda RBX: 00007f366eb45fa0 RCX: 00007f366e97fed9 [ 391.454313][T12960] RDX: 000000000000000e RSI: 0000000020000240 RDI: 0000000000000004 [ 391.462306][T12960] RBP: 00007f366f7ca0a0 R08: 0000000000000000 R09: 0000000000000000 [ 391.470280][T12960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.478251][T12960] R13: 0000000000000000 R14: 00007f366eb45fa0 R15: 00007fffdc3b0ee8 [ 391.486241][T12960] [ 391.582542][ T9008] veth1_macvtap: left promiscuous mode [ 391.588130][ T9008] veth0_macvtap: left promiscuous mode [ 391.595839][ T9008] veth1_vlan: left promiscuous mode [ 391.601632][ T9008] veth0_vlan: left promiscuous mode [ 391.608184][ T9008] veth1_macvtap: left promiscuous mode [ 391.615113][ T9008] veth0_macvtap: left promiscuous mode [ 391.621878][ T9008] veth1_vlan: left promiscuous mode [ 391.627214][ T9008] veth0_vlan: left promiscuous mode [ 391.692122][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 392.267547][ T9008] team0 (unregistering): Port device team_slave_1 removed [ 392.313398][ T9008] team0 (unregistering): Port device team_slave_0 removed [ 392.520619][ T5838] Bluetooth: hci4: command tx timeout [ 392.924562][ T5838] Bluetooth: hci3: command tx timeout [ 393.064900][ T9008] team0 (unregistering): Port device team_slave_1 removed [ 393.108745][ T9008] team0 (unregistering): Port device team_slave_0 removed [ 393.568213][T12969] IPVS: Error connecting to the multicast addr [ 393.590722][T12799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.598374][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.631593][T12799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.649396][T12799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.656581][T12799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.683942][T12799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.814603][T12799] hsr_slave_0: entered promiscuous mode [ 393.825858][T12799] hsr_slave_1: entered promiscuous mode [ 393.844371][T12799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.857339][T12799] Cannot create hsr debugfs directory [ 393.878428][T12730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.009411][T12730] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.068501][ T9004] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.075663][ T9004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.180646][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.187854][ T6010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.412362][T12761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 394.424386][T12989] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1149'. [ 394.448998][T12989] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1149'. [ 394.461227][T12761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 394.519058][T12761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 394.541264][T12989] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1149'. [ 394.572489][T12761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 394.599179][ T5838] Bluetooth: hci4: command tx timeout [ 394.702187][T12730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 394.724393][T12730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 394.909620][T12998] netlink: 'syz.1.1150': attribute type 7 has an invalid length. [ 395.427074][T12730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.465888][T12761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.530710][T12761] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.567109][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.574380][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.607781][T12730] veth0_vlan: entered promiscuous mode [ 395.628808][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.635976][ T6017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.716878][T12799] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 395.759223][T12799] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 395.769602][T12730] veth1_vlan: entered promiscuous mode [ 395.782231][T12799] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 395.812009][T12799] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 395.916140][T12730] veth0_macvtap: entered promiscuous mode [ 395.952579][T12730] veth1_macvtap: entered promiscuous mode [ 396.062317][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.074631][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.086585][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.098087][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.116607][T12730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.174297][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.185541][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.200331][T12730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.211297][T12730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.224073][T12730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.270969][T12730] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.291237][T12730] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.303342][T12730] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.312436][T12730] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.341033][T12799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.414117][T12761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.431344][T12799] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.466053][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.473232][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.522558][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.529760][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.558411][T13044] netlink: 'syz.1.1160': attribute type 10 has an invalid length. [ 396.591918][ T9004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.611005][ T9004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.737759][ T6026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.767352][ T6026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.782987][T12761] veth0_vlan: entered promiscuous mode [ 396.833982][T12761] veth1_vlan: entered promiscuous mode [ 396.926045][T12761] veth0_macvtap: entered promiscuous mode [ 396.935945][T12761] veth1_macvtap: entered promiscuous mode [ 396.951289][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.961885][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.971870][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.982598][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.992711][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.003444][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.014478][T12761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.074239][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.088960][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.118998][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.130756][T13057] netlink: 'syz.3.1161': attribute type 3 has an invalid length. [ 397.149534][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.179019][T12761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.192691][T12761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.202970][T13061] netlink: 'syz.1.1162': attribute type 5 has an invalid length. [ 397.221345][T12761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.306850][T12799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.317295][T12761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.330544][T12761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.340570][T12761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.359051][T12761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.518706][ T9008] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.703722][ T9008] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.772668][ T6012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.797595][ T6012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.867914][ T9008] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.893571][ T9004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.902659][ T9004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.944805][T12799] veth0_vlan: entered promiscuous mode [ 397.981756][ T9008] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.021889][T12799] veth1_vlan: entered promiscuous mode [ 398.080805][T12799] veth0_macvtap: entered promiscuous mode [ 398.090041][T12799] veth1_macvtap: entered promiscuous mode [ 398.115834][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.126763][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.137319][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.147993][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.158124][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.168958][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.179139][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.189792][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.200964][T12799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.221012][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.232514][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.242941][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.253824][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.263947][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.274753][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.285190][T12799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.295699][T12799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.306801][T12799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.318677][T12799] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.328232][T12799] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.337285][T12799] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.347133][T12799] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.483784][ T9008] bridge_slave_1: left allmulticast mode [ 398.491897][ T9008] bridge_slave_1: left promiscuous mode [ 398.497652][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.513524][ T9008] bridge_slave_0: left allmulticast mode [ 398.520218][ T9008] bridge_slave_0: left promiscuous mode [ 398.525996][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.965185][ T9008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.976995][ T9008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.989789][ T9008] bond0 (unregistering): Released all slaves [ 399.010488][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 399.017925][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.027484][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.049130][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 399.070661][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 399.095830][ T6017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.096120][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 399.113142][ T6017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.136492][ T5142] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 399.147673][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 399.527417][ T9008] hsr_slave_0: left promiscuous mode [ 399.537126][ T9008] hsr_slave_1: left promiscuous mode [ 399.544012][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.551799][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.561638][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.569286][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.592827][ T9008] veth1_macvtap: left promiscuous mode [ 399.598340][ T9008] veth0_macvtap: left promiscuous mode [ 399.604268][ T9008] veth1_vlan: left promiscuous mode [ 399.609862][ T9008] veth0_vlan: left promiscuous mode [ 400.026046][T13079] FAULT_INJECTION: forcing a failure. [ 400.026046][T13079] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 400.052187][T13079] CPU: 0 UID: 0 PID: 13079 Comm: syz.1.1164 Not tainted 6.13.0-rc1-syzkaller-00263-g3ca459eaba1b #0 [ 400.063019][T13079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 400.073109][T13079] Call Trace: [ 400.076417][T13079] [ 400.079402][T13079] dump_stack_lvl+0x241/0x360 [ 400.084134][T13079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.089383][T13079] ? __pfx__printk+0x10/0x10 [ 400.094020][T13079] ? __pfx_lock_release+0x10/0x10 [ 400.099095][T13079] should_fail_ex+0x3b0/0x4e0 [ 400.103814][T13079] _copy_from_iter+0x21f/0x1e70 [ 400.108704][T13079] ? __virt_addr_valid+0x183/0x530 [ 400.113852][T13079] ? __pfx_lock_release+0x10/0x10 [ 400.118923][T13079] ? __pfx__copy_from_iter+0x10/0x10 [ 400.124254][T13079] ? __virt_addr_valid+0x183/0x530 [ 400.129412][T13079] ? __virt_addr_valid+0x183/0x530 [ 400.134597][T13079] ? __virt_addr_valid+0x45f/0x530 [ 400.139752][T13079] ? __check_object_size+0x48e/0x900 [ 400.145085][T13079] hci_sock_sendmsg+0x4f1/0x11c0 [ 400.150066][T13079] ? __pfx_aa_sk_perm+0x10/0x10 [ 400.154958][T13079] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 400.160379][T13079] ? __pfx_aa_file_perm+0x10/0x10 [ 400.165441][T13079] ? aa_sock_msg_perm+0x91/0x160 [ 400.170440][T13079] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 400.175854][T13079] __sock_sendmsg+0x221/0x270 [ 400.180590][T13079] sock_write_iter+0x2d7/0x3f0 [ 400.185482][T13079] ? __pfx_sock_write_iter+0x10/0x10 [ 400.190835][T13079] ? bpf_lsm_file_permission+0x9/0x10 [ 400.196249][T13079] ? security_file_permission+0x74/0x280 [ 400.201941][T13079] vfs_write+0xaeb/0xd30 [ 400.206229][T13079] ? __pfx_sock_write_iter+0x10/0x10 [ 400.211562][T13079] ? __pfx_vfs_write+0x10/0x10 [ 400.216377][T13079] ? __fget_files+0x2a/0x410 [ 400.220999][T13079] ? __fget_files+0x2a/0x410 [ 400.225608][T13079] ksys_write+0x18f/0x2b0 [ 400.229954][T13079] ? __pfx_ksys_write+0x10/0x10 [ 400.234819][T13079] ? do_syscall_64+0x100/0x230 [ 400.239611][T13079] ? do_syscall_64+0xb6/0x230 [ 400.244310][T13079] do_syscall_64+0xf3/0x230 [ 400.248836][T13079] ? clear_bhb_loop+0x35/0x90 [ 400.253527][T13079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.259445][T13079] RIP: 0033:0x7f366e97fed9 [ 400.263872][T13079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.283491][T13079] RSP: 002b:00007f366f7ca058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 400.292009][T13079] RAX: ffffffffffffffda RBX: 00007f366eb45fa0 RCX: 00007f366e97fed9 [ 400.300004][T13079] RDX: 000000000000000e RSI: 0000000020000240 RDI: 0000000000000004 [ 400.307982][T13079] RBP: 00007f366f7ca0a0 R08: 0000000000000000 R09: 0000000000000000 [ 400.315960][T13079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.323945][T13079] R13: 0000000000000000 R14: 00007f366eb45fa0 R15: 00007fffdc3b0ee8 [ 400.331940][T13079] [ 400.493136][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 400.524316][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 400.536629][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 400.557734][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 400.579542][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 400.587235][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 400.614104][ T9008] team0 (unregistering): Port device team_slave_1 removed [ 400.673165][ T9008] team0 (unregistering): Port device team_slave_0 removed [ 401.239414][ T5838] Bluetooth: hci2: command tx timeout [ 401.253811][T13073] chnl_net:caif_netlink_parms(): no params data found [ 401.441541][T13073] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.459687][T13073] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.467198][T13073] bridge_slave_0: entered allmulticast mode [ 401.477428][T13073] bridge_slave_0: entered promiscuous mode [ 401.519267][T13073] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.526492][T13073] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.535008][T13073] bridge_slave_1: entered allmulticast mode [ 401.542934][T13073] bridge_slave_1: entered promiscuous mode [ 401.606514][T13073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.631651][T13073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.916168][T13073] team0: Port device team_slave_0 added [ 401.946059][ T5142] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 401.955460][ T5142] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 401.969237][ T5142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 401.978342][ T5142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 401.989369][ T5142] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 402.000095][ T5142] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 402.016324][T13073] team0: Port device team_slave_1 added [ 402.164862][ T9008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.319597][ T9008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.335575][T13073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.351176][T13073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.386882][T13073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.467800][ T9008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.486999][T13073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.494407][T13073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.522315][T13073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.634188][ T9008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.690128][ T5838] Bluetooth: hci3: command tx timeout [ 402.707200][T13082] chnl_net:caif_netlink_parms(): no params data found [ 402.815102][T13073] hsr_slave_0: entered promiscuous mode [ 402.859483][T13073] hsr_slave_1: entered promiscuous mode [ 402.875443][T13073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.896759][T13073] Cannot create hsr debugfs directory [ 402.950515][T13154] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1172'. [ 403.192938][T13082] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.207280][T13082] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.221492][T13082] bridge_slave_0: entered allmulticast mode [ 403.240501][T13082] bridge_slave_0: entered promiscuous mode [ 403.278377][T13173] netlink: 'syz.3.1175': attribute type 1 has an invalid length. [ 403.317143][T13173] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1175'. [ 403.331047][ T5838] Bluetooth: hci2: command tx timeout [ 403.392791][T13082] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.401536][T13082] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.410249][T13082] bridge_slave_1: entered allmulticast mode [ 403.417597][T13082] bridge_slave_1: entered promiscuous mode [ 403.551194][ T9008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.584529][T13178] FAULT_INJECTION: forcing a failure. [ 403.584529][T13178] name failslab, interval 1, probability 0, space 0, times 0 [ 403.597579][T13178] CPU: 1 UID: 0 PID: 13178 Comm: syz.1.1177 Not tainted 6.13.0-rc1-syzkaller-00263-g3ca459eaba1b #0 [ 403.599882][T13181] FAULT_INJECTION: forcing a failure. [ 403.599882][T13181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.608359][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 403.608405][T13178] Call Trace: [ 403.608416][T13178] [ 403.637846][T13178] dump_stack_lvl+0x241/0x360 [ 403.642575][T13178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.647796][T13178] ? __pfx__printk+0x10/0x10 [ 403.652413][T13178] ? __kernel_text_address+0xd/0x40 [ 403.657631][T13178] ? unwind_get_return_address+0x4d/0x90 [ 403.663294][T13178] ? arch_stack_walk+0xfd/0x150 [ 403.668174][T13178] should_fail_ex+0x3b0/0x4e0 [ 403.672879][T13178] should_failslab+0xac/0x100 [ 403.677582][T13178] ? radix_tree_node_alloc+0x8b/0x3c0 [ 403.682976][T13178] kmem_cache_alloc_noprof+0x70/0x380 [ 403.688376][T13178] radix_tree_node_alloc+0x8b/0x3c0 [ 403.693600][T13178] idr_get_free+0x296/0xab0 [ 403.698141][T13178] idr_alloc_u32+0x195/0x330 [ 403.702756][T13178] ? __pfx_idr_alloc_u32+0x10/0x10 [ 403.707898][T13178] ? __pfx_lock_acquire+0x10/0x10 [ 403.712947][T13178] idr_alloc_cyclic+0x106/0x300 [ 403.717835][T13178] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 403.723235][T13178] ? __radix_tree_preload+0x80/0x860 [ 403.728552][T13178] ? __radix_tree_preload+0x80/0x860 [ 403.733897][T13178] ? bpf_link_prime+0x4c/0x240 [ 403.738712][T13178] bpf_link_prime+0x6b/0x240 [ 403.743363][T13178] bpf_raw_tp_link_attach+0x465/0x700 [ 403.748793][T13178] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 403.754757][T13178] ? __fget_files+0x2a/0x410 [ 403.759389][T13178] ? fput+0x21b/0x290 [ 403.763410][T13178] bpf_raw_tracepoint_open+0x177/0x1f0 [ 403.768916][T13178] __sys_bpf+0x3c0/0x810 [ 403.773285][T13178] ? __pfx___sys_bpf+0x10/0x10 [ 403.778099][T13178] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 403.784110][T13178] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 403.790460][T13178] ? do_syscall_64+0x100/0x230 [ 403.795259][T13178] __x64_sys_bpf+0x7c/0x90 [ 403.799713][T13178] do_syscall_64+0xf3/0x230 [ 403.804250][T13178] ? clear_bhb_loop+0x35/0x90 [ 403.808990][T13178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.814940][T13178] RIP: 0033:0x7f366e97fed9 [ 403.819380][T13178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.839015][T13178] RSP: 002b:00007f366f7ca058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.847464][T13178] RAX: ffffffffffffffda RBX: 00007f366eb45fa0 RCX: 00007f366e97fed9 [ 403.855458][T13178] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000011 [ 403.863466][T13178] RBP: 00007f366f7ca0a0 R08: 0000000000000000 R09: 0000000000000000 [ 403.871482][T13178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.879498][T13178] R13: 0000000000000000 R14: 00007f366eb45fa0 R15: 00007fffdc3b0ee8 [ 403.887534][T13178] [ 403.890584][T13181] CPU: 0 UID: 0 PID: 13181 Comm: syz.3.1176 Not tainted 6.13.0-rc1-syzkaller-00263-g3ca459eaba1b #0 [ 403.901382][T13181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 403.911903][T13181] Call Trace: [ 403.915203][T13181] [ 403.918167][T13181] dump_stack_lvl+0x241/0x360 [ 403.922878][T13181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.928106][T13181] ? __pfx__printk+0x10/0x10 [ 403.932723][T13181] ? snprintf+0xda/0x120 [ 403.936983][T13181] should_fail_ex+0x3b0/0x4e0 [ 403.941674][T13181] _copy_to_user+0x31/0xb0 [ 403.946120][T13181] simple_read_from_buffer+0xca/0x150 [ 403.951520][T13181] proc_fail_nth_read+0x1e9/0x250 [ 403.956566][T13181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.962130][T13181] ? rw_verify_area+0x55e/0x6f0 [ 403.966988][T13181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 403.972551][T13181] vfs_read+0x1fc/0xb70 [ 403.976745][T13181] ? __pfx___mutex_lock+0x10/0x10 [ 403.981786][T13181] ? __pfx_vfs_read+0x10/0x10 [ 403.986481][T13181] ? __fget_files+0x2a/0x410 [ 403.991080][T13181] ? __fget_files+0x395/0x410 [ 403.995770][T13181] ? __fget_files+0x2a/0x410 [ 404.000381][T13181] ksys_read+0x18f/0x2b0 [ 404.004640][T13181] ? __pfx_ksys_read+0x10/0x10 [ 404.009416][T13181] ? do_syscall_64+0x100/0x230 [ 404.014200][T13181] ? do_syscall_64+0xb6/0x230 [ 404.018914][T13181] do_syscall_64+0xf3/0x230 [ 404.023443][T13181] ? clear_bhb_loop+0x35/0x90 [ 404.028130][T13181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.034043][T13181] RIP: 0033:0x7f220c77e8ec [ 404.038472][T13181] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 404.058096][T13181] RSP: 002b:00007f220d624050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 404.066529][T13181] RAX: ffffffffffffffda RBX: 00007f220c945fa0 RCX: 00007f220c77e8ec [ 404.074512][T13181] RDX: 000000000000000f RSI: 00007f220d6240b0 RDI: 0000000000000003 [ 404.082499][T13181] RBP: 00007f220d6240a0 R08: 0000000000000000 R09: 0000000000000000 [ 404.090478][T13181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.098476][T13181] R13: 0000000000000000 R14: 00007f220c945fa0 R15: 00007fffbd22dd08 [ 404.106475][T13181] [ 404.148174][ T5838] Bluetooth: hci4: command tx timeout [ 404.391985][ T9008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.432605][T13082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.479587][T13082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.603610][ T9008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.648319][T13196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1180'. [ 404.657700][T13196] bridge0: entered allmulticast mode [ 404.696160][T13198] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1181'. [ 404.705742][T13198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1181'. [ 404.725232][T13115] chnl_net:caif_netlink_parms(): no params data found [ 404.743393][T13199] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1180'. [ 404.759251][ T5838] Bluetooth: hci3: command tx timeout [ 404.783636][ T9008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.803347][T13082] team0: Port device team_slave_0 added [ 404.836379][T13082] team0: Port device team_slave_1 added [ 404.918179][T13082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.928164][T13082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.963555][T13082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.063206][T13082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.076172][T13082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.105833][T13082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.123327][T13210] vlan5: entered promiscuous mode [ 405.344695][T13082] hsr_slave_0: entered promiscuous mode [ 405.352605][T13082] hsr_slave_1: entered promiscuous mode [ 405.358823][T13082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.367552][T13082] Cannot create hsr debugfs directory [ 405.374444][T13115] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.389114][T13115] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.396336][T13115] bridge_slave_0: entered allmulticast mode [ 405.402639][ T5838] Bluetooth: hci2: command tx timeout [ 405.410443][T13115] bridge_slave_0: entered promiscuous mode [ 405.418455][ T9008] bridge_slave_1: left allmulticast mode [ 405.426197][ T9008] bridge_slave_1: left promiscuous mode [ 405.432566][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.443445][ T9008] bridge_slave_0: left allmulticast mode [ 405.449593][ T9008] bridge_slave_0: left promiscuous mode [ 405.455392][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.466637][ T9008] bridge_slave_1: left allmulticast mode [ 405.472597][ T9008] bridge_slave_1: left promiscuous mode [ 405.478390][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.488638][ T9008] bridge_slave_0: left allmulticast mode [ 405.498933][ T9008] bridge_slave_0: left promiscuous mode [ 405.504618][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.977795][T13217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1186'. [ 406.204914][ T9008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.209430][ T5838] Bluetooth: hci4: command tx timeout [ 406.224078][T13220] netlink: 'syz.1.1187': attribute type 1 has an invalid length. [ 406.233565][ T9008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.248832][T13220] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1187'. [ 406.261115][ T9008] bond0 (unregistering): Released all slaves [ 406.387523][ T9008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.398330][ T9008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.410866][ T9008] bond0 (unregistering): Released all slaves [ 406.434719][T13115] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.442174][T13115] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.450945][T13115] bridge_slave_1: entered allmulticast mode [ 406.457728][T13115] bridge_slave_1: entered promiscuous mode [ 406.492967][T13219] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1187'. [ 406.537646][T13219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 406.545262][T13219] IPv6: NLM_F_CREATE should be set when creating new route [ 406.552626][T13219] IPv6: NLM_F_CREATE should be set when creating new route [ 406.585186][T13225] FAULT_INJECTION: forcing a failure. [ 406.585186][T13225] name failslab, interval 1, probability 0, space 0, times 0 [ 406.597895][T13225] CPU: 1 UID: 0 PID: 13225 Comm: syz.3.1188 Not tainted 6.13.0-rc1-syzkaller-00263-g3ca459eaba1b #0 [ 406.608702][T13225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 406.618795][T13225] Call Trace: [ 406.622107][T13225] [ 406.625069][T13225] dump_stack_lvl+0x241/0x360 [ 406.629798][T13225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.635046][T13225] ? __pfx__printk+0x10/0x10 [ 406.639695][T13225] should_fail_ex+0x3b0/0x4e0 [ 406.644423][T13225] should_failslab+0xac/0x100 [ 406.649153][T13225] ? radix_tree_node_alloc+0x8b/0x3c0 [ 406.654574][T13225] kmem_cache_alloc_noprof+0x70/0x380 [ 406.660001][T13225] radix_tree_node_alloc+0x8b/0x3c0 [ 406.665230][T13225] idr_get_free+0x296/0xab0 [ 406.669758][T13225] idr_alloc_u32+0x195/0x330 [ 406.674386][T13225] ? __pfx_idr_alloc_u32+0x10/0x10 [ 406.679513][T13225] ? __pfx_lock_acquire+0x10/0x10 [ 406.684564][T13225] idr_alloc_cyclic+0x106/0x300 [ 406.689429][T13225] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 406.694812][T13225] ? __radix_tree_preload+0x80/0x860 [ 406.700121][T13225] ? __radix_tree_preload+0x80/0x860 [ 406.705448][T13225] ? bpf_link_prime+0x4c/0x240 [ 406.710277][T13225] bpf_link_prime+0x6b/0x240 [ 406.714911][T13225] bpf_raw_tp_link_attach+0x465/0x700 [ 406.720308][T13225] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 406.726231][T13225] ? __fget_files+0x2a/0x410 [ 406.730851][T13225] ? fput+0x21b/0x290 [ 406.734952][T13225] bpf_raw_tracepoint_open+0x177/0x1f0 [ 406.740432][T13225] __sys_bpf+0x3c0/0x810 [ 406.744775][T13225] ? __pfx___sys_bpf+0x10/0x10 [ 406.749591][T13225] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 406.755608][T13225] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 406.761960][T13225] ? do_syscall_64+0x100/0x230 [ 406.766771][T13225] __x64_sys_bpf+0x7c/0x90 [ 406.771218][T13225] do_syscall_64+0xf3/0x230 [ 406.775745][T13225] ? clear_bhb_loop+0x35/0x90 [ 406.780428][T13225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.786335][T13225] RIP: 0033:0x7f220c77fed9 [ 406.790783][T13225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.810402][T13225] RSP: 002b:00007f220d624058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 406.818856][T13225] RAX: ffffffffffffffda RBX: 00007f220c945fa0 RCX: 00007f220c77fed9 [ 406.826453][T13230] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1189'. [ 406.826844][T13225] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000011 [ 406.843793][T13225] RBP: 00007f220d6240a0 R08: 0000000000000000 R09: 0000000000000000 [ 406.849450][ T5838] Bluetooth: hci3: command tx timeout [ 406.851783][T13225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.865165][T13225] R13: 0000000000000000 R14: 00007f220c945fa0 R15: 00007fffbd22dd08 [ 406.873198][T13225] [ 407.018201][T13115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.138774][T13115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.277224][T13115] team0: Port device team_slave_0 added [ 407.345267][T13115] team0: Port device team_slave_1 added [ 407.479202][ T5838] Bluetooth: hci2: command tx timeout [ 407.553018][T13115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.562023][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.588419][T13115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.601959][T13115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.609096][T13115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.635932][T13115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.728394][T13073] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 407.773073][T13250] tap0: tun_chr_ioctl cmd 1074025677 [ 407.779425][T13250] tap0: linktype set to 804 [ 407.805656][T13073] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 407.908477][T13073] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 407.931575][T13073] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 407.982010][T13115] hsr_slave_0: entered promiscuous mode [ 407.999115][T13115] hsr_slave_1: entered promiscuous mode [ 408.053812][T13115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.088775][T13115] Cannot create hsr debugfs directory [ 408.289029][ T5838] Bluetooth: hci4: command tx timeout [ 408.443968][ T9008] hsr_slave_0: left promiscuous mode [ 408.451130][ T9008] hsr_slave_1: left promiscuous mode [ 408.457123][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.471142][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.480371][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.488496][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.508970][ T9008] hsr_slave_0: left promiscuous mode [ 408.515075][ T9008] hsr_slave_1: left promiscuous mode [ 408.525278][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.538612][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.557465][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.566542][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.611061][ T9008] veth1_macvtap: left promiscuous mode [ 408.616670][ T9008] veth0_macvtap: left promiscuous mode [ 408.622419][ T9008] veth1_vlan: left promiscuous mode [ 408.627774][ T9008] veth0_vlan: left promiscuous mode [ 408.635849][ T9008] veth1_macvtap: left promiscuous mode [ 408.642084][ T9008] veth0_macvtap: left promiscuous mode [ 408.647681][ T9008] veth1_vlan: left promiscuous mode [ 408.653398][ T9008] veth0_vlan: left promiscuous mode [ 408.919413][ T5838] Bluetooth: hci3: command tx timeout [ 408.956998][T13286] __nla_validate_parse: 1 callbacks suppressed [ 408.957014][T13286] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1196'. [ 409.162553][ T9008] team0 (unregistering): Port device team_slave_1 removed [ 409.210641][ T9008] team0 (unregistering): Port device team_slave_0 removed [ 409.911973][ T9008] team0 (unregistering): Port device team_slave_1 removed [ 409.953182][ T9008] team0 (unregistering): Port device team_slave_0 removed [ 410.360875][ T5838] Bluetooth: hci4: command tx timeout [ 410.593812][T13290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 410.623926][T13290] netlink: 'syz.1.1198': attribute type 2 has an invalid length. [ 410.635368][T13290] netlink: 'syz.1.1198': attribute type 9 has an invalid length. [ 410.660734][T13290] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1198'. [ 410.840818][T13073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.935203][T13082] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 411.036071][T13082] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 411.085590][T13308] FAULT_INJECTION: forcing a failure. [ 411.085590][T13308] name failslab, interval 1, probability 0, space 0, times 0 [ 411.104811][T13308] CPU: 1 UID: 0 PID: 13308 Comm: syz.1.1200 Not tainted 6.13.0-rc1-syzkaller-00263-g3ca459eaba1b #0 [ 411.115635][T13308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 411.125796][T13308] Call Trace: [ 411.129085][T13308] [ 411.132049][T13308] dump_stack_lvl+0x241/0x360 [ 411.136749][T13308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.141966][T13308] ? __pfx__printk+0x10/0x10 [ 411.146577][T13308] ? kmem_cache_alloc_noprof+0x48/0x380 [ 411.152168][T13308] ? __pfx___might_resched+0x10/0x10 [ 411.157472][T13308] should_fail_ex+0x3b0/0x4e0 [ 411.162167][T13308] should_failslab+0xac/0x100 [ 411.166868][T13308] ? security_file_alloc+0x32/0x310 [ 411.172085][T13308] kmem_cache_alloc_noprof+0x70/0x380 [ 411.177482][T13308] security_file_alloc+0x32/0x310 [ 411.182525][T13308] init_file+0x91/0x280 [ 411.186697][T13308] alloc_empty_file+0xb8/0x1d0 [ 411.191472][T13308] alloc_file_pseudo+0x1da/0x290 [ 411.196423][T13308] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 411.201917][T13308] ? __local_bh_enable_ip+0x168/0x200 [ 411.207308][T13308] ? bpf_link_prime+0x7a/0x240 [ 411.212094][T13308] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 411.217860][T13308] anon_inode_getfile+0xc8/0x180 [ 411.222821][T13308] bpf_link_prime+0xff/0x240 [ 411.227451][T13308] bpf_raw_tp_link_attach+0x465/0x700 [ 411.232893][T13308] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 411.238816][T13308] ? __fget_files+0x2a/0x410 [ 411.243421][T13308] ? fput+0x21b/0x290 [ 411.247413][T13308] bpf_raw_tracepoint_open+0x177/0x1f0 [ 411.252891][T13308] __sys_bpf+0x3c0/0x810 [ 411.257149][T13308] ? __pfx___sys_bpf+0x10/0x10 [ 411.261937][T13308] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 411.267936][T13308] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 411.274281][T13308] ? do_syscall_64+0x100/0x230 [ 411.279123][T13308] __x64_sys_bpf+0x7c/0x90 [ 411.283572][T13308] do_syscall_64+0xf3/0x230 [ 411.288097][T13308] ? clear_bhb_loop+0x35/0x90 [ 411.292876][T13308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.298790][T13308] RIP: 0033:0x7f366e97fed9 [ 411.303217][T13308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.322842][T13308] RSP: 002b:00007f366f7ca058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 411.331278][T13308] RAX: ffffffffffffffda RBX: 00007f366eb45fa0 RCX: 00007f366e97fed9 [ 411.339280][T13308] RDX: 0000000000000010 RSI: 0000000020000200 RDI: 0000000000000011 [ 411.347263][T13308] RBP: 00007f366f7ca0a0 R08: 0000000000000000 R09: 0000000000000000 [ 411.355242][T13308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.363226][T13308] R13: 0000000000000000 R14: 00007f366eb45fa0 R15: 00007fffdc3b0ee8 [ 411.371223][T13308] [ 411.379795][T13082] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 411.431909][T13073] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.538005][T13315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1201'. [ 411.582490][T13082] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 411.608351][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.615512][ T6022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.708189][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.715407][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.834278][T13323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1202'. [ 411.945194][T13073] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 412.097190][T13329] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1203'. [ 412.131217][T13082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.167694][T13115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 412.209148][T13115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 412.297217][T13082] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.357251][T13082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 412.376105][T13082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 412.544029][T13115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 412.578548][ T6022] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.585754][ T6022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.603704][ T6022] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.611068][ T6022] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.656903][T13115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 412.786833][T13073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.813201][T13348] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1207'. [ 413.026946][T13082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.105544][T13073] veth0_vlan: entered promiscuous mode [ 413.141017][T13115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.203948][T13073] veth1_vlan: entered promiscuous mode [ 413.260588][T13115] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.303413][T13082] veth0_vlan: entered promiscuous mode [ 413.361651][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.368864][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.415393][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.422648][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.485030][T13082] veth1_vlan: entered promiscuous mode [ 413.534767][T13364] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1209'. [ 413.596064][T13073] veth0_macvtap: entered promiscuous mode [ 413.641365][T13073] veth1_macvtap: entered promiscuous mode [ 413.747276][T13082] veth0_macvtap: entered promiscuous mode [ 413.787399][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.812634][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.828228][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.852617][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.878409][T13073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.908795][T13082] veth1_macvtap: entered promiscuous mode [ 413.981174][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.023243][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.041577][T13383] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1212'. [ 414.047651][T13073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.067739][T13073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.080948][T13073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.117682][T13073] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.127034][T13073] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.153135][T13073] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.169222][T13073] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.242714][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.264031][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.297084][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.317667][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.336598][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.350764][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.367172][T13082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.428384][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.447460][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.458261][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.469547][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.480000][T13082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.491067][T13082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.502861][T13082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.609536][T13115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.631534][T13082] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.656393][T13082] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.670232][T13082] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.679415][T13082] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.759082][ T5838] Bluetooth: hci4: command tx timeout [ 414.909206][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.917093][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.032458][ T6012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.077907][ T6012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.236094][ T6010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.251594][ T6010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.459773][ T6012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.467665][ T6012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.497346][T13115] veth0_vlan: entered promiscuous mode [ 415.542793][T13115] veth1_vlan: entered promiscuous mode [ 415.557924][T13429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1214'. [ 415.590629][T13429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1214'. [ 415.751180][ T6010] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.912101][ T6010] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.938246][T13115] veth0_macvtap: entered promiscuous mode [ 415.948607][T13115] veth1_macvtap: entered promiscuous mode [ 416.002938][ T6010] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.030648][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.059185][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.075346][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.086157][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.102894][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.116692][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.126831][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.137929][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.149813][T13115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.174779][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.186041][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.204291][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.217464][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.228438][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.240637][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.250936][T13115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.261695][T13115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.272810][T13115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.284532][T13115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.293811][T13115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.302826][T13115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.312683][T13115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.350586][ T6010] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.560052][ T9008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.567936][ T9008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.616204][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 416.627113][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 416.635752][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 416.659217][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 416.668298][ T5142] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 416.669248][ T6010] bridge_slave_1: left allmulticast mode [ 416.687600][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 416.696405][ T6010] bridge_slave_1: left promiscuous mode [ 416.717589][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.726689][ T6010] bridge_slave_0: left allmulticast mode [ 416.736273][ T6010] bridge_slave_0: left promiscuous mode [ 416.742315][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.106282][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.117305][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.131234][ T6010] bond0 (unregistering): Released all slaves [ 417.142851][ T6033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.155475][ T6033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.865036][ T6010] hsr_slave_0: left promiscuous mode [ 417.872931][ T6010] hsr_slave_1: left promiscuous mode [ 417.887042][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.905752][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.950324][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.961433][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.002280][ T6010] veth1_macvtap: left promiscuous mode [ 418.007965][ T6010] veth0_macvtap: left promiscuous mode [ 418.019868][ T6010] veth1_vlan: left promiscuous mode [ 418.025228][ T6010] veth0_vlan: left promiscuous mode [ 418.046429][T13461] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1216'. [ 418.143941][T13462] netlink: 'syz.1.1216': attribute type 1 has an invalid length. [ 418.164915][T13462] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1216'. [ 418.348745][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 418.361727][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 418.375605][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 418.384613][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 418.407169][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 418.420524][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 418.707302][ T6010] team0 (unregistering): Port device team_slave_1 removed [ 418.750156][ T6010] team0 (unregistering): Port device team_slave_0 removed [ 418.759220][ T5142] Bluetooth: hci2: command tx timeout [ 419.167602][T13458] netlink: 'syz.1.1216': attribute type 4 has an invalid length. [ 419.208633][T13435] chnl_net:caif_netlink_parms(): no params data found [ 419.406080][T13435] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.435719][T13435] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.462610][T13435] bridge_slave_0: entered allmulticast mode [ 419.486050][T13435] bridge_slave_0: entered promiscuous mode [ 419.507575][T13435] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.524459][T13435] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.543424][T13435] bridge_slave_1: entered allmulticast mode [ 419.554122][T13435] bridge_slave_1: entered promiscuous mode [ 419.607957][T13435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.624911][T13435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.786334][T13435] team0: Port device team_slave_0 added [ 419.812142][T13435] team0: Port device team_slave_1 added [ 419.851562][T13486] bridge0: entered allmulticast mode [ 420.079624][ T6010] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.144723][T13435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.155523][T13435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.221395][T13435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.243572][T13435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.249638][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.251120][T13435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.284202][T13435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.291100][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.303546][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.329089][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 420.354470][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 420.365234][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 420.367895][ T6010] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.414804][T13502] veth0_to_batadv: entered promiscuous mode [ 420.421135][T13502] veth0_to_batadv: entered allmulticast mode [ 420.461502][ T6010] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.519705][ T5838] Bluetooth: hci3: command tx timeout [ 420.570011][ T6010] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.657187][T13435] hsr_slave_0: entered promiscuous mode [ 420.680709][T13435] hsr_slave_1: entered promiscuous mode [ 420.695919][T13435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.719043][T13435] Cannot create hsr debugfs directory [ 420.763224][T13512] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1223'. [ 420.779384][T13512] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1223'. [ 420.839140][ T5838] Bluetooth: hci2: command tx timeout [ 420.986870][T13526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1225'. [ 421.025664][T13524] veth0_to_batadv: left promiscuous mode [ 421.036540][T13524] veth0_to_batadv: left allmulticast mode [ 421.047173][T13524] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 421.057100][T13524] bridge0: left allmulticast mode [ 421.230611][ T6010] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.298532][T13463] chnl_net:caif_netlink_parms(): no params data found [ 421.365810][ T6010] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.468470][ T6010] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.599190][ T6010] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.725552][T13463] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.739291][T13463] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.748766][T13463] bridge_slave_0: entered allmulticast mode [ 421.756185][T13463] bridge_slave_0: entered promiscuous mode [ 421.767329][T13463] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.775169][T13463] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.786074][T13463] bridge_slave_1: entered allmulticast mode [ 421.793489][T13463] bridge_slave_1: entered promiscuous mode [ 421.967696][T13503] chnl_net:caif_netlink_parms(): no params data found [ 422.057176][T13555] sctp: [Deprecated]: syz.1.1227 (pid 13555) Use of int in maxseg socket option. [ 422.057176][T13555] Use struct sctp_assoc_value instead [ 422.096266][T13463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.122180][T13463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.313608][T13463] team0: Port device team_slave_0 added [ 422.332415][T13463] team0: Port device team_slave_1 added [ 422.364773][T13463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.372003][T13463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.399344][T13463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.439412][ T5838] Bluetooth: hci4: command tx timeout [ 422.460132][ T6010] bridge_slave_1: left allmulticast mode [ 422.465840][ T6010] bridge_slave_1: left promiscuous mode [ 422.473051][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.489866][ T6010] bridge_slave_0: left allmulticast mode [ 422.495667][ T6010] bridge_slave_0: left promiscuous mode [ 422.502081][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.522057][ T6010] bridge_slave_1: left allmulticast mode [ 422.527830][ T6010] bridge_slave_1: left promiscuous mode [ 422.534439][ T6010] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.544806][ T6010] bridge_slave_0: left allmulticast mode [ 422.551154][ T6010] bridge_slave_0: left promiscuous mode [ 422.556856][ T6010] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.599332][ T5838] Bluetooth: hci3: command tx timeout [ 422.880741][T13568] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1230'. [ 422.919928][ T5838] Bluetooth: hci2: command tx timeout [ 423.190907][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'. [ 423.428220][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.453940][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.490595][ T6010] bond0 (unregistering): Released all slaves [ 423.659574][ T6010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.674814][ T6010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.685161][ T6010] bond0 (unregistering): Released all slaves [ 423.697612][T13463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.708794][T13463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.735253][T13463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.765296][T13503] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.779300][T13503] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.788009][T13503] bridge_slave_0: entered allmulticast mode [ 423.795612][T13503] bridge_slave_0: entered promiscuous mode [ 423.889365][T13503] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.903835][T13503] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.919449][T13503] bridge_slave_1: entered allmulticast mode [ 423.926640][T13503] bridge_slave_1: entered promiscuous mode [ 424.041806][T13503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.086752][T13463] hsr_slave_0: entered promiscuous mode [ 424.108804][T13463] hsr_slave_1: entered promiscuous mode [ 424.124361][T13463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.135133][T13463] Cannot create hsr debugfs directory [ 424.142858][T13503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.180993][T13435] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 424.228662][T13503] team0: Port device team_slave_0 added [ 424.235080][T13435] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 424.268613][T13503] team0: Port device team_slave_1 added [ 424.275473][T13435] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 424.318018][T13435] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 424.456073][T13503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.477967][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.504804][T13503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.529316][ T5838] Bluetooth: hci4: command tx timeout [ 424.581210][T13503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.589545][T13503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.616665][T13503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.616711][ T5829] IPVS: starting estimator thread 0... [ 424.679367][ T5838] Bluetooth: hci3: command tx timeout [ 424.739053][T13593] IPVS: using max 21 ests per chain, 50400 per kthread [ 424.982986][T13503] hsr_slave_0: entered promiscuous mode [ 425.009268][ T5838] Bluetooth: hci2: command tx timeout [ 425.088715][T13503] hsr_slave_1: entered promiscuous mode [ 425.138161][T13503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.159225][T13503] Cannot create hsr debugfs directory [ 425.458285][ T6010] hsr_slave_0: left promiscuous mode [ 425.466351][ T6010] hsr_slave_1: left promiscuous mode [ 425.490684][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.504434][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.517995][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.535238][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.578170][ T6010] hsr_slave_0: left promiscuous mode [ 425.584440][ T6010] hsr_slave_1: left promiscuous mode [ 425.592338][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.604101][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.618705][ T6010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.627023][ T6010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.684007][ T6010] veth1_macvtap: left promiscuous mode [ 425.689799][ T6010] veth0_macvtap: left promiscuous mode [ 425.695652][ T6010] veth1_vlan: left promiscuous mode [ 425.701292][ T6010] veth0_vlan: left promiscuous mode [ 425.707862][ T6010] veth1_macvtap: left promiscuous mode [ 425.716862][ T6010] veth0_macvtap: left promiscuous mode [ 425.722751][ T6010] veth1_vlan: left promiscuous mode [ 425.734759][ T6010] veth0_vlan: left promiscuous mode [ 426.593335][ T6010] team0 (unregistering): Port device team_slave_1 removed [ 426.609998][ T5838] Bluetooth: hci4: command tx timeout [ 426.692246][ T6010] team0 (unregistering): Port device team_slave_0 removed [ 426.770970][ T5838] Bluetooth: hci3: command tx timeout [ 427.686131][ T6010] team0 (unregistering): Port device team_slave_1 removed [ 427.733168][ T6010] team0 (unregistering): Port device team_slave_0 removed [ 428.314583][T13666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1240'. [ 428.359777][T13666] netlink: 'syz.1.1240': attribute type 6 has an invalid length. [ 428.365862][T13435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.436747][T13435] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.507374][ T9008] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.514660][ T9008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.552627][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.559792][ T6017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.624307][T13463] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 428.714814][ T5838] Bluetooth: hci4: command tx timeout [ 428.746795][T13463] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 428.768384][T13678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1245'. [ 428.771923][T13463] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 428.792081][T13463] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 429.178739][T13435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.223407][T13463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.240492][T13463] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.337940][ T6017] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.345223][ T6017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.404300][ T6017] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.411498][ T6017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.428171][T13697] netlink: 'syz.1.1250': attribute type 2 has an invalid length. [ 429.455189][T13697] fþ: entered promiscuous mode [ 429.659965][T13503] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 429.678365][T13503] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 429.705953][T13435] veth0_vlan: entered promiscuous mode [ 429.717655][T13435] veth1_vlan: entered promiscuous mode [ 429.768014][T13503] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 429.789885][T13435] veth0_macvtap: entered promiscuous mode [ 429.822090][T13503] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 429.855581][T13435] veth1_macvtap: entered promiscuous mode [ 429.970173][T13503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.987103][T13503] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.051200][T13719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1256'. [ 430.107708][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.108097][T13717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1256'. [ 430.114962][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.140467][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.147583][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.231693][T13503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 430.242585][T13503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.265417][T13727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 430.284623][T13727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1258'. [ 430.285855][T13435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.304892][T13435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.314827][T13435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.325377][T13435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.336602][T13435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.347046][T13435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.357605][T13435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.367759][T13435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.378339][T13435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.389444][T13435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.399669][T13435] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.408393][T13435] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.417205][T13435] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.426008][T13435] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.703617][T13463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.769378][ T6017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.777259][ T6017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.784970][ T6017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.792986][ T6017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.975743][T13463] veth0_vlan: entered promiscuous mode [ 430.989628][T13739] --map-set only usable from mangle table [ 431.037449][T13503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.069208][T13463] veth1_vlan: entered promiscuous mode [ 431.173469][T13747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1263'. [ 431.234982][T13463] veth0_macvtap: entered promiscuous mode [ 431.248212][T13463] veth1_macvtap: entered promiscuous mode [ 431.279734][T13463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.291634][T13463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.302711][T13463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.313783][T13463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.327571][T13463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.339822][T13463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.352754][T13463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.363386][T13463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.374406][T13463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.384693][T13463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.396649][T13463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.407604][T13463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.418537][T13463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.436438][T13463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.461910][T13463] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.470945][T13463] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.482606][T13463] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.492901][T13463] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.657180][ T6033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.667711][ T6033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.797886][ T9008] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.831967][ T6010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.844454][ T6010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.977575][ T9008] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.033141][T13503] veth0_vlan: entered promiscuous mode [ 432.092780][ T9008] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.145039][T13503] veth1_vlan: entered promiscuous mode [ 432.182562][ T9008] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.242385][T13503] veth0_macvtap: entered promiscuous mode [ 432.259181][T13503] veth1_macvtap: entered promiscuous mode [ 432.277761][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.300636][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.311605][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.322311][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.332213][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.342846][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.357350][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.368662][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.381394][T13503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.417436][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.432360][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.451101][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.463677][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.480127][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.496148][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.507888][T13503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.528802][T13503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.546626][T13503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.611765][T13503] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.634231][T13503] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.646345][T13503] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.659589][T13503] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.771318][ T9008] bridge_slave_1: left allmulticast mode [ 432.777019][ T9008] bridge_slave_1: left promiscuous mode [ 432.791980][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.807200][ T9008] bridge_slave_0: left allmulticast mode [ 432.814676][ T9008] bridge_slave_0: left promiscuous mode [ 432.820510][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.079920][ T5838] Bluetooth: hci4: command tx timeout [ 433.166717][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 433.175744][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 433.200583][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 433.220331][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 433.228268][ T5142] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 433.240089][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 433.317763][ T9008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.338251][ T9008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.348574][ T9008] bond0 (unregistering): Released all slaves [ 433.568312][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.586949][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.701689][ T6033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.729838][ T6033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.993538][ T9008] hsr_slave_0: left promiscuous mode [ 434.004351][ T9008] hsr_slave_1: left promiscuous mode [ 434.014279][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.025710][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.036934][ T9008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.057292][ T9008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.095998][ T9008] veth1_macvtap: left promiscuous mode [ 434.103881][ T9008] veth0_macvtap: left promiscuous mode [ 434.115805][ T9008] veth1_vlan: left promiscuous mode [ 434.121261][ T9008] veth0_vlan: left promiscuous mode [ 434.642944][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 434.652314][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 434.666999][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 434.693568][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 434.707452][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 434.715688][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 434.897261][ T9008] team0 (unregistering): Port device team_slave_1 removed [ 434.945307][ T9008] team0 (unregistering): Port device team_slave_0 removed [ 435.325477][ T5142] Bluetooth: hci2: command tx timeout [ 435.527823][T13774] chnl_net:caif_netlink_parms(): no params data found [ 435.778568][T13774] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.785944][T13774] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.793517][T13774] bridge_slave_0: entered allmulticast mode [ 435.801619][T13774] bridge_slave_0: entered promiscuous mode [ 435.814412][T13774] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.827328][T13774] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.835882][T13774] bridge_slave_1: entered allmulticast mode [ 435.850073][T13774] bridge_slave_1: entered promiscuous mode [ 435.987717][ T9008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.017588][T13774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.063396][T13774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.106029][ T9008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.219047][ T9008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.257370][T13774] team0: Port device team_slave_0 added [ 436.273089][T13774] team0: Port device team_slave_1 added [ 436.309470][ T9008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.325498][T13797] chnl_net:caif_netlink_parms(): no params data found [ 436.343777][T13827] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? [ 436.437269][T13827] ip6gretap1: entered promiscuous mode [ 436.448116][T13827] ip6gretap1: entered allmulticast mode [ 436.552903][T13774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.559990][T13774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.586583][T13774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.631298][T13836] x_tables: duplicate underflow at hook 2 [ 436.691464][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 436.708941][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.724742][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 436.732330][T13774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.750026][T13774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 436.760747][ T5838] Bluetooth: hci3: command tx timeout [ 436.781849][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 436.789701][T13774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.801716][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 436.809354][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 436.843771][T13841] tipc: Enabled bearer , priority 0 [ 436.896403][T13833] tipc: Resetting bearer [ 436.919441][T13797] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.937289][T13797] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.946280][T13797] bridge_slave_0: entered allmulticast mode [ 436.955368][T13797] bridge_slave_0: entered promiscuous mode [ 437.055828][ T9008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.072238][T13832] tipc: Resetting bearer [ 437.403296][ T5142] Bluetooth: hci2: command tx timeout [ 438.755131][T13832] tipc: Disabling bearer [ 438.765541][T13797] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.776477][T13797] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.788226][T13797] bridge_slave_1: entered allmulticast mode [ 438.803223][T13797] bridge_slave_1: entered promiscuous mode [ 438.839204][ T5142] Bluetooth: hci3: command tx timeout [ 438.849495][ T5142] Bluetooth: hci4: command tx timeout [ 438.861575][T13774] hsr_slave_0: entered promiscuous mode [ 438.887362][T13774] hsr_slave_1: entered promiscuous mode [ 438.894146][T13774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.902133][T13774] Cannot create hsr debugfs directory [ 438.985617][ T9008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.184334][ T9008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.219715][T13797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.317340][ T9008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.371391][T13797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.483411][ T5142] Bluetooth: hci2: command tx timeout [ 439.511404][T13797] team0: Port device team_slave_0 added [ 439.537171][T13797] team0: Port device team_slave_1 added [ 439.657584][T13797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.672336][T13797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.700469][T13797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.755081][T13797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.762818][T13797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.789996][T13797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.906444][T13880] netlink: 'syz.3.1277': attribute type 58 has an invalid length. [ 439.914974][T13880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1277'. [ 439.925195][ T9008] bridge_slave_1: left allmulticast mode [ 439.930956][ T9008] bridge_slave_1: left promiscuous mode [ 439.936757][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.947319][ T9008] bridge_slave_0: left allmulticast mode [ 439.953464][ T9008] bridge_slave_0: left promiscuous mode [ 439.959482][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.970764][ T9008] bridge_slave_1: left allmulticast mode [ 439.976445][ T9008] bridge_slave_1: left promiscuous mode [ 439.982403][ T9008] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.995406][ T9008] bridge_slave_0: left allmulticast mode [ 440.002704][ T9008] bridge_slave_0: left promiscuous mode [ 440.008384][ T9008] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.708858][ T9008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.723820][ T9008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.740440][ T9008] bond0 (unregistering): Released all slaves [ 440.863194][ T9008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.874336][ T9008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.885380][ T9008] bond0 (unregistering): Released all slaves [ 440.919102][ T5838] Bluetooth: hci3: command tx timeout [ 440.924661][ T5142] Bluetooth: hci4: command tx timeout [ 441.011049][T13885] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 441.092755][T13797] hsr_slave_0: entered promiscuous mode [ 441.104137][T13797] hsr_slave_1: entered promiscuous mode [ 441.110375][T13797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.118464][T13797] Cannot create hsr debugfs directory [ 441.174589][T13888] ------------[ cut here ]------------ [ 441.180727][T13888] WARNING: CPU: 0 PID: 13888 at drivers/net/wireless/virtual/mac80211_hwsim.c:1445 mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 441.193327][T13893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1280'. [ 441.194072][T13888] Modules linked in: [ 441.206723][T13888] CPU: 0 UID: 0 PID: 13888 Comm: syz.1.1279 Not tainted 6.13.0-rc1-syzkaller-00263-g3ca459eaba1b #0 [ 441.218169][T13888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 441.228839][T13888] RIP: 0010:mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 441.236186][T13888] Code: 48 8b 3c 24 4c 89 fe 44 89 ea 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 eb f8 ff ff e8 d6 60 87 fa eb 05 e8 cf 60 87 fa 90 <0f> 0b 90 e9 10 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 90 fd [ 441.256321][T13888] RSP: 0018:ffffc900015bf6b0 EFLAGS: 00010283 [ 441.262637][T13888] RAX: ffffffff87181151 RBX: 0000000000000000 RCX: 0000000000080000 [ 441.271005][T13888] RDX: ffffc9000f4c9000 RSI: 0000000000004acf RDI: 0000000000004ad0 [ 441.279235][T13888] RBP: 0000000000000000 R08: ffffffff87180f5d R09: 1ffffffff2032a4e [ 441.287438][T13888] R10: dffffc0000000000 R11: ffffffff87177fa0 R12: ffff88802787ae32 [ 441.296076][T13888] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888025e7b0a0 [ 441.304174][T13888] FS: 00007f366f7676c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 441.313413][T13888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.321202][T13888] CR2: 000000110c27a76c CR3: 0000000068ea6000 CR4: 00000000003526f0 [ 441.329675][T13888] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 441.337725][T13888] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 441.345927][T13888] Call Trace: [ 441.349329][T13888] [ 441.352304][T13888] ? __warn+0x165/0x4d0 [ 441.356515][T13888] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 441.362739][T13888] ? report_bug+0x2b3/0x500 [ 441.367302][T13888] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 441.369389][T13894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 441.373494][T13888] ? handle_bug+0x60/0x90 [ 441.386721][T13888] ? exc_invalid_op+0x1a/0x50 [ 441.391544][T13888] ? asm_exc_invalid_op+0x1a/0x20 [ 441.396637][T13888] ? __pfx_mac80211_hwsim_add_interface+0x10/0x10 [ 441.403445][T13888] ? mac80211_hwsim_config_mac_nl+0xbd/0x370 [ 441.409562][T13888] ? mac80211_hwsim_config_mac_nl+0x2b1/0x370 [ 441.415681][T13888] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 441.421877][T13888] ? mac80211_hwsim_add_interface+0x86/0x320 [ 441.428532][T13888] mac80211_hwsim_add_interface+0x9a/0x320 [ 441.435014][T13888] drv_add_interface+0x2f8/0x8e0 [ 441.440445][T13888] ieee80211_do_open+0x73d/0x2420 [ 441.445564][T13888] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 441.452145][T13888] ieee80211_open+0x192/0x200 [ 441.456894][T13888] __dev_open+0x2d3/0x450 [ 441.461465][T13888] ? __pfx___dev_open+0x10/0x10 [ 441.466408][T13888] ? dev_set_rx_mode+0xb8/0x2e0 [ 441.471413][T13888] __dev_change_flags+0x1e2/0x6f0 [ 441.476502][T13888] ? __pfx___mutex_lock+0x10/0x10 [ 441.481784][T13888] ? __pfx___dev_change_flags+0x10/0x10 [ 441.487399][T13888] ? apparmor_capable+0x13b/0x1b0 [ 441.492609][T13888] dev_change_flags+0x8b/0x1a0 [ 441.497436][T13888] devinet_ioctl+0xcce/0x1ac0 [ 441.502238][T13888] inet_ioctl+0x3d7/0x4f0 [ 441.506797][T13888] ? __pfx_inet_ioctl+0x10/0x10 [ 441.511821][T13888] ? tomoyo_path_number_perm+0x679/0x860 [ 441.517545][T13888] ? __lock_acquire+0x1397/0x2100 [ 441.522720][T13888] ? tomoyo_path_number_perm+0x206/0x860 [ 441.529067][T13888] sock_do_ioctl+0x158/0x460 [ 441.533816][T13888] ? __pfx_sock_do_ioctl+0x10/0x10 [ 441.539519][T13888] sock_ioctl+0x626/0x8e0 [ 441.543916][T13888] ? __pfx_sock_ioctl+0x10/0x10 [ 441.548842][T13888] ? __fget_files+0x2a/0x410 [ 441.553551][T13888] ? __fget_files+0x2a/0x410 [ 441.558183][T13888] ? __pfx_sock_ioctl+0x10/0x10 [ 441.562529][ T5142] Bluetooth: hci2: command tx timeout [ 441.563163][T13888] __se_sys_ioctl+0xf5/0x170 [ 441.573119][T13888] do_syscall_64+0xf3/0x230 [ 441.577677][T13888] ? clear_bhb_loop+0x35/0x90 [ 441.582518][T13888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.588476][T13888] RIP: 0033:0x7f366e97fadb [ 441.592982][T13888] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 441.612745][T13888] RSP: 002b:00007f366f765e80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.621266][T13888] RAX: ffffffffffffffda RBX: 00007f366f765fa0 RCX: 00007f366e97fadb [ 441.629929][T13888] RDX: 00007f366f765f00 RSI: 0000000000008914 RDI: 0000000000000008 [ 441.637941][T13888] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 441.646514][T13888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 441.654723][T13888] R13: 0000000000000048 R14: 00007f366f765fc0 R15: 00007f366f765f00 [ 441.662770][T13888] [ 441.665804][T13888] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 441.673123][T13888] CPU: 0 UID: 0 PID: 13888 Comm: syz.1.1279 Not tainted 6.13.0-rc1-syzkaller-00263-g3ca459eaba1b #0 [ 441.683909][T13888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 441.694074][T13888] Call Trace: [ 441.697375][T13888] [ 441.700321][T13888] dump_stack_lvl+0x241/0x360 [ 441.705031][T13888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.710254][T13888] ? __pfx__printk+0x10/0x10 [ 441.714872][T13888] ? vscnprintf+0x5d/0x90 [ 441.719313][T13888] panic+0x349/0x880 [ 441.723229][T13888] ? __warn+0x174/0x4d0 [ 441.727403][T13888] ? __pfx_panic+0x10/0x10 [ 441.731878][T13888] __warn+0x344/0x4d0 [ 441.735898][T13888] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 441.742031][T13888] report_bug+0x2b3/0x500 [ 441.746394][T13888] ? mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 441.752495][T13888] handle_bug+0x60/0x90 [ 441.756670][T13888] exc_invalid_op+0x1a/0x50 [ 441.761217][T13888] asm_exc_invalid_op+0x1a/0x20 [ 441.766100][T13888] RIP: 0010:mac80211_hwsim_config_mac_nl+0x2b2/0x370 [ 441.772822][T13888] Code: 48 8b 3c 24 4c 89 fe 44 89 ea 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 eb f8 ff ff e8 d6 60 87 fa eb 05 e8 cf 60 87 fa 90 <0f> 0b 90 e9 10 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 90 fd [ 441.792538][T13888] RSP: 0018:ffffc900015bf6b0 EFLAGS: 00010283 [ 441.798660][T13888] RAX: ffffffff87181151 RBX: 0000000000000000 RCX: 0000000000080000 [ 441.806741][T13888] RDX: ffffc9000f4c9000 RSI: 0000000000004acf RDI: 0000000000004ad0 [ 441.814823][T13888] RBP: 0000000000000000 R08: ffffffff87180f5d R09: 1ffffffff2032a4e [ 441.822903][T13888] R10: dffffc0000000000 R11: ffffffff87177fa0 R12: ffff88802787ae32 [ 441.830894][T13888] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888025e7b0a0 [ 441.838893][T13888] ? __pfx_mac80211_hwsim_add_interface+0x10/0x10 [ 441.845373][T13888] ? mac80211_hwsim_config_mac_nl+0xbd/0x370 [ 441.851372][T13888] ? mac80211_hwsim_config_mac_nl+0x2b1/0x370 [ 441.857463][T13888] ? mac80211_hwsim_add_interface+0x86/0x320 [ 441.863560][T13888] mac80211_hwsim_add_interface+0x9a/0x320 [ 441.869411][T13888] drv_add_interface+0x2f8/0x8e0 [ 441.874372][T13888] ieee80211_do_open+0x73d/0x2420 [ 441.879419][T13888] ? ieee80211_check_concurrent_iface+0x70e/0x7e0 [ 441.885868][T13888] ieee80211_open+0x192/0x200 [ 441.890567][T13888] __dev_open+0x2d3/0x450 [ 441.894918][T13888] ? __pfx___dev_open+0x10/0x10 [ 441.899877][T13888] ? dev_set_rx_mode+0xb8/0x2e0 [ 441.904744][T13888] __dev_change_flags+0x1e2/0x6f0 [ 441.909783][T13888] ? __pfx___mutex_lock+0x10/0x10 [ 441.914832][T13888] ? __pfx___dev_change_flags+0x10/0x10 [ 441.920390][T13888] ? apparmor_capable+0x13b/0x1b0 [ 441.925440][T13888] dev_change_flags+0x8b/0x1a0 [ 441.930220][T13888] devinet_ioctl+0xcce/0x1ac0 [ 441.934928][T13888] inet_ioctl+0x3d7/0x4f0 [ 441.939391][T13888] ? __pfx_inet_ioctl+0x10/0x10 [ 441.944260][T13888] ? tomoyo_path_number_perm+0x679/0x860 [ 441.949927][T13888] ? __lock_acquire+0x1397/0x2100 [ 441.954967][T13888] ? tomoyo_path_number_perm+0x206/0x860 [ 441.960629][T13888] sock_do_ioctl+0x158/0x460 [ 441.965242][T13888] ? __pfx_sock_do_ioctl+0x10/0x10 [ 441.970391][T13888] sock_ioctl+0x626/0x8e0 [ 441.974739][T13888] ? __pfx_sock_ioctl+0x10/0x10 [ 441.979605][T13888] ? __fget_files+0x2a/0x410 [ 441.984210][T13888] ? __fget_files+0x2a/0x410 [ 441.988840][T13888] ? __pfx_sock_ioctl+0x10/0x10 [ 441.993829][T13888] __se_sys_ioctl+0xf5/0x170 [ 441.998465][T13888] do_syscall_64+0xf3/0x230 [ 442.003004][T13888] ? clear_bhb_loop+0x35/0x90 [ 442.007701][T13888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.013620][T13888] RIP: 0033:0x7f366e97fadb [ 442.018066][T13888] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 442.037777][T13888] RSP: 002b:00007f366f765e80 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.046219][T13888] RAX: ffffffffffffffda RBX: 00007f366f765fa0 RCX: 00007f366e97fadb [ 442.054228][T13888] RDX: 00007f366f765f00 RSI: 0000000000008914 RDI: 0000000000000008 [ 442.062240][T13888] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 442.070220][T13888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 442.078210][T13888] R13: 0000000000000048 R14: 00007f366f765fc0 R15: 00007f366f765f00 [ 442.086207][T13888] [ 442.089578][T13888] Kernel Offset: disabled [ 442.093991][T13888] Rebooting in 86400 seconds..