last executing test programs: 1m12.145445378s ago: executing program 1 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum64={0x9, 0x2, 0x0, 0x13, 0x0, 0x5, [{0x10, 0x26, 0xffffffe9}, {0xf, 0x0, 0x9}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x61, 0x2e, 0x5f]}}, &(0x7f00000006c0)=""/98, 0x44, 0x62, 0x0, 0x100, 0x10000, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f0000000500), &(0x7f0000000200)=@tcp}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) socket(0x1, 0x801, 0x0) close(0xffffffffffffffff) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648d", 0xf}], 0x2) 1m10.693674427s ago: executing program 3 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wg1\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x2a, 0x0, 0x0, {0x0, @tcp_ip6_spec={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x0, @remote}, @ah_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="438d39bb7145"}}}}) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x20}}, 0x1c}}, 0x0) 1m0.111060474s ago: executing program 1 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum64={0x9, 0x2, 0x0, 0x13, 0x0, 0x5, [{0x10, 0x26, 0xffffffe9}, {0xf, 0x0, 0x9}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x61, 0x2e, 0x5f]}}, &(0x7f00000006c0)=""/98, 0x44, 0x62, 0x0, 0x100, 0x10000, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f0000000500), &(0x7f0000000200)=@tcp}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) socket(0x1, 0x801, 0x0) close(0xffffffffffffffff) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648d", 0xf}], 0x2) 58.580191632s ago: executing program 3 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wg1\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x2a, 0x0, 0x0, {0x0, @tcp_ip6_spec={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x0, @remote}, @ah_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="438d39bb7145"}}}}) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x20}}, 0x1c}}, 0x0) 46.865123484s ago: executing program 3 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wg1\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x2a, 0x0, 0x0, {0x0, @tcp_ip6_spec={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x0, @remote}, @ah_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="438d39bb7145"}}}}) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x20}}, 0x1c}}, 0x0) 46.464921347s ago: executing program 1 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum64={0x9, 0x2, 0x0, 0x13, 0x0, 0x5, [{0x10, 0x26, 0xffffffe9}, {0xf, 0x0, 0x9}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x61, 0x2e, 0x5f]}}, &(0x7f00000006c0)=""/98, 0x44, 0x62, 0x0, 0x100, 0x10000, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f0000000500), &(0x7f0000000200)=@tcp}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) socket(0x1, 0x801, 0x0) close(0xffffffffffffffff) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648d", 0xf}], 0x2) 34.216765224s ago: executing program 3 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wg1\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x2a, 0x0, 0x0, {0x0, @tcp_ip6_spec={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x0, @remote}, @ah_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="438d39bb7145"}}}}) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x20}}, 0x1c}}, 0x0) 33.2871067s ago: executing program 1 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum64={0x9, 0x2, 0x0, 0x13, 0x0, 0x5, [{0x10, 0x26, 0xffffffe9}, {0xf, 0x0, 0x9}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x61, 0x2e, 0x5f]}}, &(0x7f00000006c0)=""/98, 0x44, 0x62, 0x0, 0x100, 0x10000, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f0000000500), &(0x7f0000000200)=@tcp}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) socket(0x1, 0x801, 0x0) close(0xffffffffffffffff) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648d", 0xf}], 0x2) 24.26607046s ago: executing program 3 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wg1\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x2a, 0x0, 0x0, {0x0, @tcp_ip6_spec={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x0, @remote}, @ah_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="438d39bb7145"}}}}) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x20}}, 0x1c}}, 0x0) 23.121534148s ago: executing program 1 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum64={0x9, 0x2, 0x0, 0x13, 0x0, 0x5, [{0x10, 0x26, 0xffffffe9}, {0xf, 0x0, 0x9}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x61, 0x2e, 0x5f]}}, &(0x7f00000006c0)=""/98, 0x44, 0x62, 0x0, 0x100, 0x10000, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f0000000500), &(0x7f0000000200)=@tcp}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) socket(0x1, 0x801, 0x0) close(0xffffffffffffffff) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648d", 0xf}], 0x2) 10.867002481s ago: executing program 3 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'wg1\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x2a, 0x0, 0x0, {0x0, @tcp_ip6_spec={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x0, @remote}, @ah_ip4_spec={@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="438d39bb7145"}}}}) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x20}}, 0x1c}}, 0x0) 9.895425221s ago: executing program 1 (id=196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum64={0x9, 0x2, 0x0, 0x13, 0x0, 0x5, [{0x10, 0x26, 0xffffffe9}, {0xf, 0x0, 0x9}]}]}, {0x0, [0x5f, 0x30, 0x0, 0x61, 0x2e, 0x5f]}}, &(0x7f00000006c0)=""/98, 0x44, 0x62, 0x0, 0x100, 0x10000, @value}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x7, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f0000000500), &(0x7f0000000200)=@tcp}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) socket(0x1, 0x801, 0x0) close(0xffffffffffffffff) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648d", 0xf}], 0x2) 4.459586135s ago: executing program 4 (id=1191): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(r1) bind$bt_hci(r0, &(0x7f0000000100), 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) getsockname(r0, 0x0, &(0x7f0000002100)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) (async) close(r1) (async) bind$bt_hci(r0, &(0x7f0000000100), 0x6) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) getsockname(r0, 0x0, &(0x7f0000002100)) (async) 4.333025635s ago: executing program 4 (id=1192): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0xfc, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0xe8, 0x1, [@m_skbmod={0x9c, 0x1f, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x4, 0x8, 0x7fff, 0x8}, 0x8}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0xffffffffffffffff, 0x6, 0x10}, 0x7}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_nat={0x48, 0x2001, 0x0, 0x0, {{0x8}, {0x4}, {0x20, 0x6, "507e1baf70350ba63c9fdba3ace3ff69773db861d8a2e332d6b16db2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xfc}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb6}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) syz_emit_ethernet(0x3b6, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x26, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483be298af1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c020000190001000000400003000000e00000010000000000000000000000000000000000000000000000000000000000000002000000000a00000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x25c}}, 0x4004) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000340)=0x6, 0x4) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{&(0x7f00000006c0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000880)=""/133, 0x85}, {&(0x7f0000000940)=""/68, 0x44}], 0x2}, 0x80000001}, {{&(0x7f0000000b40)=@un=@abs, 0x80, &(0x7f0000000d40)=[{&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/45, 0x2d}, {&(0x7f0000000bc0)=""/188, 0xbc}, {&(0x7f0000000c80)=""/168, 0xa8}], 0x4, &(0x7f0000004800)=""/4096, 0x1000}, 0x34}], 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc}]}], {0x14}}, 0x70}}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1f}, 0x5c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/96, 0x60}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000540)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/184, 0xb8}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$key(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="020e08091100000027bd7000fddbdf250800120002000400b56b6e00ee04000006000000e0000001000000000000000000000000640101000000000000000000000000020200010000000419000000000002004e23ac1414bb000000000000000002004e21ac1414aa00"/125], 0x88}}, 0x40080c0) 4.014003181s ago: executing program 2 (id=1193): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000000c0)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x2, 0x2, 0x11}, 0x10) writev(r1, &(0x7f0000000100)=[{0x0}, {&(0x7f00000003c0)="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", 0x45e}], 0x2) 3.841195183s ago: executing program 2 (id=1195): r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x401, 0x8001, 0x10400}, 0xa5, 0x10, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0x7, 0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xf, 0xe75}}]}}]}, 0x48}}, 0x400c804) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) listen(r6, 0x20000005) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r8 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$inet6(r8, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8ae9}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 2.677045362s ago: executing program 4 (id=1197): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x5eb, &(0x7f00000003c0)={@link_local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x8, 0x5dd, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @empty}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "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"}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x7, 0x3, 0x0, 0x0, 0x6, 0xb}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x4, 0x0, 0x5, 0x0, 0x1, 0x2}}}, {0x8, 0x6558, 0x0, "b045d1206a51329c95e184f888b4ab90c0537bc85be8c475edf28c093030dfd5c8e97f9eca319a93ae964422a900385d2effa2dafe74d19eff06a11ae7b2fdd64b0d78bad7f77eef3308ce9befef166f07f9e5f47b587962e68a9ca81c67437737d863d9256ac2940036791b820f66ee3dcd6b8de729a82f31c6b885863e6b4249927ac93efd4bc146c70312cdad7a461807aaaf8320c4bfac0625299de40af1c70672eed686bb713f64a4665c0152af00e5c52d1599303dc8ccfafafe5bb478c18810e39a9048bc125a9fa82639ee154aae5c21bbb6a9a37026d9"}}}}}}, 0x0) 2.141249432s ago: executing program 2 (id=1198): sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x18, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x18}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000006c0)="120000001200e796e99d10ef007b00000000", 0x12, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x14, 0x3}}]}}}, @IFLA_LINK={0x8}]}, 0x50}, 0x1, 0xba01, 0x0, 0x260008c0}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.887286586s ago: executing program 4 (id=1199): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{0x0, 0x114}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r0, &(0x7f0000000700)="bb", 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x13}, 0x0) 1.811529382s ago: executing program 4 (id=1200): unshare(0x44040000) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x380, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0xb, "d47ae6e8805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x2000000000000040, "fcf98a102ec1876d4e6fa3b20519bbaa8a029cee00b8d3485e3b63ed09bdb581c9fe68a356f542b043059ff05932e740e077e1d16212fb"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa76ffff9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4828288e62afbf03269f1f98aea6a58cf45d7c5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c258a6f"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02c226a6bce65f81ed"}]}}}}}}, 0x0) 1.753375807s ago: executing program 2 (id=1201): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x130}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @u64=0x3580}]}, @nested={0xffffffffffffffbd, 0x2, 0x0, 0x1, [@nested={0x4, 0x6}]}]}, 0x2c}}, 0xc000) 1.712309795s ago: executing program 2 (id=1202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='rxrpc_conn\x00', r0, 0x0, 0x4}, 0x18) unshare(0x62040200) 839.196618ms ago: executing program 0 (id=1203): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x130}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @u64=0x8}]}, @nested={0xffffffffffffffbd, 0x2, 0x0, 0x1, [@nested={0x4, 0x6}]}]}, 0x2c}}, 0xc000) 701.838946ms ago: executing program 0 (id=1204): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001080)=ANY=[@ANYBLOB="fc000000130001000000000000000000fe8000000000000000000000000000bbfe800000000000000000000000000000000000000000000002"], 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0xfc}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000000)={'lo\x00'}) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x10, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="a00000002100390d0000000000000000ac14141e000000000000000000000000ac1414bb0000000000002b95dc8b0000000000000003fffd020000002c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100fc010000000000000000000000000001ac1414aa000000000000000000000000ac1e0101000000000000000000000000ffffffff00000000000000000000000033000000033500000a"], 0xa0}}, 0x0) 589.689455ms ago: executing program 0 (id=1205): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x80, 0x2, 0x8, 0x8, 0xa, 0xafb8}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x1b6, 0xe48, 0x9, 0x9, 0x1000, 0x7b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x51}, 0x31c6d6e942e24b9a) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x4, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x800, 0x3, 0x0, 0xfffffffe, 0x7}}}}]}, 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@getqdisc={0x24, 0x26, 0x705, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x1}, {0x10, 0x8}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c88b}, 0x0) 431.215346ms ago: executing program 0 (id=1206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000280)={0x0, @bcast, @bpq0, 0xfffe, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdba, 0x2, [@default, @default, @default, @null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt(r4, 0x22, 0xfffffff1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x30, r6, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_TID={0xc}, @GTPA_VERSION={0x8}]}, 0x30}}, 0x0) connect$rose(r2, &(0x7f0000000400)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x20, r9, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x3c}}, 0x24000000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b84085242564b55217f05", @ANYRES32=r7, @ANYBLOB="c4a4c68d92a1a2"], 0x1309) 193.001906ms ago: executing program 4 (id=1207): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1a}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)=@newtclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xfff2}}}, 0x24}}, 0x4048000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x2003032, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0x74}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x856}]}}}]}, 0x40}}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r10, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r10, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x1c800) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff0100000000000000000000000000010600040001"], 0x58}}, 0x0) 184.94869ms ago: executing program 0 (id=1208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 58.744186ms ago: executing program 2 (id=1209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0x4, 0x100000, 0xfffffffe}}]}]}}}]}, 0x68}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 0s ago: executing program 0 (id=1210): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x66, &(0x7f00000003c0)={@link_local, @dev, @void, {@ipv4={0x8035, @gre={{0x5, 0x4, 0x0, 0x8, 0x58, 0x67, 0x0, 0x5, 0x2f, 0x0, @local, @empty}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x7, 0x3, 0x0, 0x0, 0x6, 0xb}, 0x1, {0x38}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x6, 0x1, 0x0, 0x1, 0x3, 0x6}, 0x2, {0x7, 0x4, 0x0, 0x5, 0x0, 0x1, 0x2}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): idge_slave_1) entered blocking state [ 190.410922][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.419272][ T8686] bridge_slave_1: entered allmulticast mode [ 190.427510][ T8686] bridge_slave_1: entered promiscuous mode [ 190.531862][ T8686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.577961][ T8686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.660611][ T8686] team0: Port device team_slave_0 added [ 190.674374][ T8686] team0: Port device team_slave_1 added [ 190.774843][ T8783] netlink: 512 bytes leftover after parsing attributes in process `syz.4.736'. [ 190.813424][ T11] bridge_slave_1: left allmulticast mode [ 190.820413][ T11] bridge_slave_1: left promiscuous mode [ 190.826227][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.842881][ T11] bridge_slave_0: left allmulticast mode [ 190.849519][ T11] bridge_slave_0: left promiscuous mode [ 190.855350][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.257777][ T8797] can: request_module (can-proto-0) failed. [ 191.332847][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.348290][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.361203][ T11] bond0 (unregistering): Released all slaves [ 191.392831][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.400242][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.426613][ T5147] Bluetooth: hci4: command tx timeout [ 191.432131][ T8686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.455930][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.477213][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.510537][ T8686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.748546][ T8686] hsr_slave_0: entered promiscuous mode [ 191.754800][ T8686] hsr_slave_1: entered promiscuous mode [ 191.761794][ T8686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.769797][ T8686] Cannot create hsr debugfs directory [ 191.815624][ T8665] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 191.868855][ T8665] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 191.900079][ T11] hsr_slave_0: left promiscuous mode [ 191.907254][ T11] hsr_slave_1: left promiscuous mode [ 191.913118][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.920778][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.929000][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.937024][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.955813][ T11] veth1_macvtap: left promiscuous mode [ 191.961842][ T11] veth0_macvtap: left promiscuous mode [ 191.967952][ T11] veth1_vlan: left promiscuous mode [ 191.973365][ T11] veth0_vlan: left promiscuous mode [ 192.380587][ T5147] Bluetooth: hci1: command tx timeout [ 192.561707][ T11] team0 (unregistering): Port device team_slave_1 removed [ 192.639472][ T11] team0 (unregistering): Port device team_slave_0 removed [ 193.031745][ T8665] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.042697][ T8665] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.076039][ T8810] 8021q: adding VLAN 0 to HW filter on device macvlan11 [ 193.099187][ T8811] 8021q: adding VLAN 0 to HW filter on device macvlan12 [ 193.454906][ T8665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.476279][ T8665] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.487412][ T5147] Bluetooth: hci4: command tx timeout [ 193.502166][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.509412][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.550202][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.557507][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.707705][ T8842] netlink: 480 bytes leftover after parsing attributes in process `syz.2.751'. [ 194.000837][ T8686] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 194.016213][ T8686] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 194.044988][ T8686] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 194.069360][ T8665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.080539][ T8686] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 194.168435][ T8861] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 194.194511][ T8861] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 194.288600][ T8665] veth0_vlan: entered promiscuous mode [ 194.331550][ T8665] veth1_vlan: entered promiscuous mode [ 194.380318][ T8686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.435017][ T8686] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.447073][ T5147] Bluetooth: hci1: command tx timeout [ 194.483325][ T8665] veth0_macvtap: entered promiscuous mode [ 194.513140][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.520373][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.558987][ T8665] veth1_macvtap: entered promiscuous mode [ 194.583228][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.590497][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.647336][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.666397][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.682940][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.694541][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.713235][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.764635][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.784697][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.798096][ T8665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.809040][ T8665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.820613][ T8665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.859740][ T8665] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.886642][ T8665] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.905627][ T8665] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.925002][ T8665] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.085270][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.117780][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.153478][ T6417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.187425][ T6417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.188328][ T8880] wg2: left promiscuous mode [ 195.252429][ T8880] wg2: left allmulticast mode [ 195.316178][ T8882] wg2: entered promiscuous mode [ 195.326555][ T8882] wg2: entered allmulticast mode [ 195.387430][ T8686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.553811][ T8686] veth0_vlan: entered promiscuous mode [ 195.567149][ T5147] Bluetooth: hci4: command tx timeout [ 195.567852][ T8887] netlink: 20 bytes leftover after parsing attributes in process `syz.0.763'. [ 195.591291][ T8686] veth1_vlan: entered promiscuous mode [ 195.600730][ T8891] netlink: 24 bytes leftover after parsing attributes in process `syz.2.764'. [ 195.616053][ T8686] veth0_macvtap: entered promiscuous mode [ 195.626202][ T8686] veth1_macvtap: entered promiscuous mode [ 195.665824][ T8894] netlink: 'syz.4.765': attribute type 21 has an invalid length. [ 195.687676][ T8894] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 195.705331][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.765'. [ 195.714920][ T8894] netlink: 'syz.4.765': attribute type 1 has an invalid length. [ 195.735293][ T8894] netlink: 'syz.4.765': attribute type 1 has an invalid length. [ 195.736297][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.755015][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.765740][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.776638][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.777718][ T8894] netlink: 'syz.4.765': attribute type 2 has an invalid length. [ 195.790512][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.811117][ T8894] netlink: 68 bytes leftover after parsing attributes in process `syz.4.765'. [ 195.815556][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.837911][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.858968][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'. [ 195.921757][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.968026][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.978916][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.990715][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.001765][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.014310][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.027997][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.060565][ T8686] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.070266][ T8686] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.079644][ T8686] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.088863][ T8686] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.212871][ T3476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.259942][ T8911] FAULT_INJECTION: forcing a failure. [ 196.259942][ T8911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.292948][ T8911] CPU: 1 UID: 0 PID: 8911 Comm: syz.2.770 Not tainted 6.14.0-rc1-syzkaller-00090-g1438f5d07b9a #0 [ 196.292980][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 196.292993][ T8911] Call Trace: [ 196.293001][ T8911] [ 196.293010][ T8911] dump_stack_lvl+0x241/0x360 [ 196.293052][ T8911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.293075][ T8911] ? __pfx__printk+0x10/0x10 [ 196.293110][ T8911] ? __pfx_lock_release+0x10/0x10 [ 196.293148][ T8911] should_fail_ex+0x40a/0x550 [ 196.293176][ T8911] _copy_from_iter+0x1e9/0x1c20 [ 196.293209][ T8911] ? __virt_addr_valid+0x183/0x530 [ 196.293250][ T8911] ? __alloc_skb+0x28f/0x440 [ 196.293278][ T8911] ? __pfx__copy_from_iter+0x10/0x10 [ 196.293310][ T8911] ? __virt_addr_valid+0x183/0x530 [ 196.293340][ T8911] ? __virt_addr_valid+0x183/0x530 [ 196.293367][ T8911] ? __virt_addr_valid+0x45f/0x530 [ 196.293397][ T8911] ? __phys_addr_symbol+0x2f/0x70 [ 196.293426][ T8911] ? __check_object_size+0x47a/0x730 [ 196.293451][ T8911] netlink_sendmsg+0x73d/0xcb0 [ 196.293483][ T8911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.293507][ T8911] ? aa_sock_msg_perm+0x91/0x160 [ 196.293539][ T8911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.293562][ T8911] __sock_sendmsg+0x221/0x270 [ 196.293589][ T8911] ____sys_sendmsg+0x52a/0x7e0 [ 196.293617][ T8911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.293634][ T8911] ? __fget_files+0x2a/0x410 [ 196.293659][ T8911] ? __fget_files+0x2a/0x410 [ 196.293688][ T8911] __sys_sendmsg+0x269/0x350 [ 196.293712][ T8911] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.293744][ T8911] ? do_sys_openat2+0x17a/0x1d0 [ 196.293790][ T8911] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.293819][ T8911] ? do_syscall_64+0x100/0x230 [ 196.293850][ T8911] ? do_syscall_64+0xb6/0x230 [ 196.293881][ T8911] do_syscall_64+0xf3/0x230 [ 196.293909][ T8911] ? clear_bhb_loop+0x35/0x90 [ 196.293940][ T8911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.293967][ T8911] RIP: 0033:0x7f050b78cde9 [ 196.293984][ T8911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.294001][ T8911] RSP: 002b:00007f050c596038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.294029][ T8911] RAX: ffffffffffffffda RBX: 00007f050b9a5fa0 RCX: 00007f050b78cde9 [ 196.294044][ T8911] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 196.294057][ T8911] RBP: 00007f050c596090 R08: 0000000000000000 R09: 0000000000000000 [ 196.294068][ T8911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.294080][ T8911] R13: 0000000000000000 R14: 00007f050b9a5fa0 R15: 00007ffe71934348 [ 196.294109][ T8911] [ 196.631874][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.640543][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.701391][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.714664][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.854594][ T3476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.336175][ T3476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.482143][ T8921] wg2: left promiscuous mode [ 197.497042][ T8921] wg2: left allmulticast mode [ 197.550524][ T3476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.631236][ T8921] wg2: entered promiscuous mode [ 197.636284][ T8921] wg2: entered allmulticast mode [ 197.847366][ T3476] bridge_slave_1: left allmulticast mode [ 197.853086][ T3476] bridge_slave_1: left promiscuous mode [ 197.876773][ T3476] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.903564][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 197.912728][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 197.920993][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 197.929095][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 197.938436][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 197.946573][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 197.947802][ T3476] bridge_slave_0: left allmulticast mode [ 197.965138][ T3476] bridge_slave_0: left promiscuous mode [ 197.972476][ T3476] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.302186][ T3476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.313093][ T3476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.323414][ T3476] bond0 (unregistering): Released all slaves [ 198.475096][ T8928] chnl_net:caif_netlink_parms(): no params data found [ 198.589078][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.596282][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.603622][ T8928] bridge_slave_0: entered allmulticast mode [ 198.612932][ T8928] bridge_slave_0: entered promiscuous mode [ 198.620829][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.628176][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.635379][ T8928] bridge_slave_1: entered allmulticast mode [ 198.642713][ T8928] bridge_slave_1: entered promiscuous mode [ 198.681886][ T3476] hsr_slave_0: left promiscuous mode [ 198.694599][ T3476] hsr_slave_1: left promiscuous mode [ 198.701126][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.708760][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.717224][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.724680][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.744318][ T3476] veth1_macvtap: left promiscuous mode [ 198.749923][ T3476] veth0_macvtap: left promiscuous mode [ 198.756092][ T3476] veth1_vlan: left promiscuous mode [ 198.761784][ T3476] veth0_vlan: left promiscuous mode [ 199.273619][ T5147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 199.283924][ T5147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 199.294305][ T5147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 199.302505][ T5147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 199.313031][ T5147] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 199.323874][ T5147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.481929][ T3476] team0 (unregistering): Port device team_slave_1 removed [ 199.521356][ T3476] team0 (unregistering): Port device team_slave_0 removed [ 199.929702][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.943987][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.976904][ T5147] Bluetooth: hci1: command tx timeout [ 200.084245][ T8928] team0: Port device team_slave_0 added [ 200.124483][ T8928] team0: Port device team_slave_1 added [ 200.303879][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.340810][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.374033][ T8928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.414098][ T8971] FAULT_INJECTION: forcing a failure. [ 200.414098][ T8971] name failslab, interval 1, probability 0, space 0, times 0 [ 200.428073][ T8971] CPU: 0 UID: 0 PID: 8971 Comm: syz.0.784 Not tainted 6.14.0-rc1-syzkaller-00090-g1438f5d07b9a #0 [ 200.428101][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 200.428114][ T8971] Call Trace: [ 200.428120][ T8971] [ 200.428129][ T8971] dump_stack_lvl+0x241/0x360 [ 200.428159][ T8971] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.428181][ T8971] ? __pfx__printk+0x10/0x10 [ 200.428228][ T8971] should_fail_ex+0x40a/0x550 [ 200.428257][ T8971] should_failslab+0xac/0x100 [ 200.428279][ T8971] ? skb_clone+0x20c/0x390 [ 200.428299][ T8971] kmem_cache_alloc_noprof+0x70/0x380 [ 200.428328][ T8971] skb_clone+0x20c/0x390 [ 200.428352][ T8971] __netlink_deliver_tap+0x3cc/0x7f0 [ 200.428385][ T8971] ? netlink_deliver_tap+0x2e/0x1b0 [ 200.428404][ T8971] netlink_deliver_tap+0x19d/0x1b0 [ 200.428426][ T8971] netlink_unicast+0x7c4/0x990 [ 200.428464][ T8971] ? __pfx_netlink_unicast+0x10/0x10 [ 200.428491][ T8971] ? __virt_addr_valid+0x45f/0x530 [ 200.428523][ T8971] ? __phys_addr_symbol+0x2f/0x70 [ 200.428560][ T8971] ? __check_object_size+0x47a/0x730 [ 200.428586][ T8971] netlink_sendmsg+0x8e4/0xcb0 [ 200.428619][ T8971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.428645][ T8971] ? aa_sock_msg_perm+0x91/0x160 [ 200.428680][ T8971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.428699][ T8971] __sock_sendmsg+0x221/0x270 [ 200.428729][ T8971] ____sys_sendmsg+0x52a/0x7e0 [ 200.428760][ T8971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.428778][ T8971] ? __fget_files+0x2a/0x410 [ 200.428803][ T8971] ? __fget_files+0x2a/0x410 [ 200.428835][ T8971] __sys_sendmsg+0x269/0x350 [ 200.428861][ T8971] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.428896][ T8971] ? do_sys_openat2+0x17a/0x1d0 [ 200.428946][ T8971] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.428976][ T8971] ? do_syscall_64+0x100/0x230 [ 200.429008][ T8971] ? do_syscall_64+0xb6/0x230 [ 200.429040][ T8971] do_syscall_64+0xf3/0x230 [ 200.429068][ T8971] ? clear_bhb_loop+0x35/0x90 [ 200.429100][ T8971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.429144][ T8971] RIP: 0033:0x7f3d2d38cde9 [ 200.429164][ T8971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.429181][ T8971] RSP: 002b:00007f3d2e1b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.429204][ T8971] RAX: ffffffffffffffda RBX: 00007f3d2d5a6160 RCX: 00007f3d2d38cde9 [ 200.429220][ T8971] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 200.429233][ T8971] RBP: 00007f3d2e1b0090 R08: 0000000000000000 R09: 0000000000000000 [ 200.429246][ T8971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.429259][ T8971] R13: 0000000000000000 R14: 00007f3d2d5a6160 R15: 00007fff82448a68 [ 200.429291][ T8971] [ 200.729586][ T8928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.748589][ T8928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.783221][ T8928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.785246][ T8976] Bluetooth: MGMT ver 1.23 [ 200.949982][ T8928] hsr_slave_0: entered promiscuous mode [ 200.957949][ T8928] hsr_slave_1: entered promiscuous mode [ 201.000878][ T8981] wg2: left promiscuous mode [ 201.005672][ T8981] wg2: left allmulticast mode [ 201.144371][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'. [ 201.305090][ T8985] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.408093][ T5147] Bluetooth: hci4: command tx timeout [ 201.433344][ T8985] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.559226][ T8985] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.590687][ T8949] chnl_net:caif_netlink_parms(): no params data found [ 201.752828][ T8985] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.790462][ T9000] netlink: 'syz.4.794': attribute type 26 has an invalid length. [ 201.809838][ T5147] Bluetooth: hci2: command 0x0406 tx timeout [ 201.810230][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 201.846367][ T3476] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.046583][ T5834] Bluetooth: hci1: command tx timeout [ 202.071322][ T3476] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.168271][ T3476] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.221315][ T8985] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.249481][ T8985] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.258338][ T8949] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.265467][ T8949] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.275289][ T8949] bridge_slave_0: entered allmulticast mode [ 202.283094][ T8949] bridge_slave_0: entered promiscuous mode [ 202.302194][ T8949] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.314305][ T8949] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.323560][ T8949] bridge_slave_1: entered allmulticast mode [ 202.333938][ T8949] bridge_slave_1: entered promiscuous mode [ 202.357964][ T3476] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.375126][ T8985] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.415364][ T8985] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.431746][ T8949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.529431][ T8949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.647650][ T8949] team0: Port device team_slave_0 added [ 202.667677][ T8949] team0: Port device team_slave_1 added [ 202.740845][ T9024] wg2: left promiscuous mode [ 202.745486][ T9024] wg2: left allmulticast mode [ 202.790823][ T8928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 202.857505][ T8949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.871089][ T8949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.924868][ T8949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.947618][ T9034] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 202.955756][ T9034] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 203.009153][ T8949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.016170][ T8949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.070258][ T8949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.094379][ T8928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.096809][ T9041] nbd: couldn't find device at index 1255035857 [ 203.148045][ T3476] bridge_slave_1: left allmulticast mode [ 203.153954][ T3476] bridge_slave_1: left promiscuous mode [ 203.177680][ T3476] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.212316][ T3476] bridge_slave_0: left allmulticast mode [ 203.221256][ T3476] bridge_slave_0: left promiscuous mode [ 203.231220][ T3476] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.490037][ T5834] Bluetooth: hci4: command tx timeout [ 203.714650][ T3476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.727400][ T3476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.738752][ T3476] bond0 (unregistering): Released all slaves [ 203.750011][ T8928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.829315][ T8928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.921870][ T8949] hsr_slave_0: entered promiscuous mode [ 203.928912][ T8949] hsr_slave_1: entered promiscuous mode [ 203.939616][ T8949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.948430][ T8949] Cannot create hsr debugfs directory [ 204.127344][ T5834] Bluetooth: hci1: command tx timeout [ 204.237008][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.812'. [ 204.295837][ T9070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.306655][ T9070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.314970][ T9070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.323351][ T9070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.395628][ T3476] hsr_slave_0: left promiscuous mode [ 204.401738][ T3476] hsr_slave_1: left promiscuous mode [ 204.410112][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.419053][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.427918][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.439093][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.447103][ T9077] netlink: 'syz.0.814': attribute type 10 has an invalid length. [ 204.489965][ T3476] veth1_macvtap: left promiscuous mode [ 204.495559][ T3476] veth0_macvtap: left promiscuous mode [ 204.513066][ T3476] veth1_vlan: left promiscuous mode [ 204.518608][ T3476] veth0_vlan: left promiscuous mode [ 205.132688][ T3476] team0 (unregistering): Port device team_slave_1 removed [ 205.155350][ T9074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.182896][ T3476] team0 (unregistering): Port device team_slave_0 removed [ 205.566674][ T5834] Bluetooth: hci4: command tx timeout [ 205.802349][ T9093] sctp: [Deprecated]: syz.4.817 (pid 9093) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.802349][ T9093] Use struct sctp_sack_info instead [ 205.824901][ T9096] sctp: [Deprecated]: syz.4.817 (pid 9096) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.824901][ T9096] Use struct sctp_sack_info instead [ 205.994725][ T8928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.048626][ T8928] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.131858][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.139067][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.164260][ T9104] netlink: 104 bytes leftover after parsing attributes in process `syz.0.824'. [ 206.189037][ T9102] netlink: 16 bytes leftover after parsing attributes in process `syz.4.822'. [ 206.215896][ T5834] Bluetooth: hci1: command tx timeout [ 206.229987][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.237214][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.575491][ T8949] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.604109][ T8949] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.629784][ T8949] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.644547][ T8949] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.742093][ T8928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.753067][ T9127] wg2: entered promiscuous mode [ 206.761821][ T9127] wg2: entered allmulticast mode [ 206.882502][ T8928] veth0_vlan: entered promiscuous mode [ 206.915939][ T8928] veth1_vlan: entered promiscuous mode [ 206.963623][ T8949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.995230][ T8928] veth0_macvtap: entered promiscuous mode [ 207.006359][ T8949] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.019722][ T8928] veth1_macvtap: entered promiscuous mode [ 207.044401][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.051652][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.086580][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.093799][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.117525][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.133152][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.148575][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.159565][ T8928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.170758][ T8928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.183970][ T8928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.215700][ T8928] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.229107][ T8928] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.239789][ T8928] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.250114][ T8928] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.466193][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.487899][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.540063][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 207.560773][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.590276][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.647087][ T5834] Bluetooth: hci4: command tx timeout [ 207.708808][ T9153] trusted_key: syz.0.837 sent an empty control message without MSG_MORE. [ 207.813530][ T8949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.903786][ T8949] veth0_vlan: entered promiscuous mode [ 207.912116][ T5922] hid-generic 0005:046D:0007.0001: item fetching failed at offset 0/1 [ 207.930319][ T5922] hid-generic 0005:046D:0007.0001: probe with driver hid-generic failed with error -22 [ 207.933924][ T8949] veth1_vlan: entered promiscuous mode [ 207.992212][ T8949] veth0_macvtap: entered promiscuous mode [ 208.002998][ T8949] veth1_macvtap: entered promiscuous mode [ 208.034531][ T8949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.045324][ T8949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.056366][ T8949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.068121][ T8949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.080659][ T8949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.092479][ T8949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.103399][ T8949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.113868][ T8949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.128368][ T8949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.140164][ T8949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.290240][ T3564] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.310848][ T8949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.322585][ T8949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.332197][ T8949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.341241][ T8949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.514747][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.522992][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.559213][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.567418][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.646842][ T3564] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.033123][ T3564] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.441775][ T3564] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.589086][ T9175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.845'. [ 209.718492][ T3564] bridge_slave_1: left allmulticast mode [ 209.728712][ T3564] bridge_slave_1: left promiscuous mode [ 209.734498][ T3564] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.776933][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.847'. [ 209.792087][ T3564] bridge_slave_0: left allmulticast mode [ 209.812436][ T3564] bridge_slave_0: left promiscuous mode [ 209.832300][ T3564] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.029736][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.056252][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.067183][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.077855][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.085554][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.093358][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.485109][ T3564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.500580][ T3564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.513027][ T3564] bond0 (unregistering): Released all slaves [ 210.850057][ T3564] hsr_slave_0: left promiscuous mode [ 210.856004][ T3564] hsr_slave_1: left promiscuous mode [ 210.862084][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.870773][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.880501][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.888024][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.907152][ T3564] veth1_macvtap: left promiscuous mode [ 210.912696][ T3564] veth0_macvtap: left promiscuous mode [ 210.918482][ T3564] veth1_vlan: left promiscuous mode [ 210.923785][ T3564] veth0_vlan: left promiscuous mode [ 211.522324][ T3564] team0 (unregistering): Port device team_slave_1 removed [ 211.577400][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.585370][ T3564] team0 (unregistering): Port device team_slave_0 removed [ 211.595697][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.605441][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.616808][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.625917][ T5836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.633558][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 212.119542][ T9190] chnl_net:caif_netlink_parms(): no params data found [ 212.126634][ T5836] Bluetooth: hci1: command tx timeout [ 212.353652][ T9226] netlink: 88 bytes leftover after parsing attributes in process `syz.2.854'. [ 212.373717][ T9226] netem: invalid attributes len -24 [ 212.406560][ T9226] netem: change failed [ 212.464254][ T9190] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.490673][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.510146][ T9190] bridge_slave_0: entered allmulticast mode [ 212.522667][ T9190] bridge_slave_0: entered promiscuous mode [ 212.557489][ T9235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'. [ 212.586652][ T9190] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.596798][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.604095][ T9190] bridge_slave_1: entered allmulticast mode [ 212.612033][ T9190] bridge_slave_1: entered promiscuous mode [ 212.622934][ T9235] bond0: option ad_select: unable to set because the bond device is up [ 212.744275][ T9211] chnl_net:caif_netlink_parms(): no params data found [ 212.795747][ T9190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.818438][ T9190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.921409][ T9190] team0: Port device team_slave_0 added [ 212.959451][ T9190] team0: Port device team_slave_1 added [ 213.052148][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.069303][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.106851][ T9190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.157050][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.164069][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.244957][ T9190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.329664][ T3564] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.436065][ T9211] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.449691][ T9211] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.462742][ T9211] bridge_slave_0: entered allmulticast mode [ 213.467907][ T9280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.872'. [ 213.470777][ T9211] bridge_slave_0: entered promiscuous mode [ 213.489706][ T9276] netlink: 13 bytes leftover after parsing attributes in process `syz.0.871'. [ 213.509433][ T9276] netlink: 44 bytes leftover after parsing attributes in process `syz.0.871'. [ 213.522202][ T3564] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.552266][ T9190] hsr_slave_0: entered promiscuous mode [ 213.560370][ T9190] hsr_slave_1: entered promiscuous mode [ 213.578545][ T9211] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.587163][ T9211] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.594460][ T9211] bridge_slave_1: entered allmulticast mode [ 213.605358][ T9211] bridge_slave_1: entered promiscuous mode [ 213.643319][ T3564] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.701428][ T9285] netlink: 256 bytes leftover after parsing attributes in process `syz.4.872'. [ 213.739817][ T5836] Bluetooth: hci4: command tx timeout [ 213.755039][ T3564] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.775445][ T9276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.871'. [ 213.785589][ T9276] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.794132][ T9276] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.801378][ T9276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.848468][ T9211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.869383][ T9282] syzkaller1: entered promiscuous mode [ 213.875060][ T9282] syzkaller1: entered allmulticast mode [ 213.922315][ T9211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.074689][ T9211] team0: Port device team_slave_0 added [ 214.081436][ T9290] batadv_slave_1: entered promiscuous mode [ 214.111252][ T9211] team0: Port device team_slave_1 added [ 214.184105][ T9290] batadv_slave_1: left promiscuous mode [ 214.206750][ T5836] Bluetooth: hci1: command tx timeout [ 214.247856][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.254880][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.281710][ T9211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.352184][ T9288] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 214.355938][ T9211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.374923][ T9211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.402599][ T9211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.425608][ T3564] bridge_slave_1: left allmulticast mode [ 214.431590][ T3564] bridge_slave_1: left promiscuous mode [ 214.439659][ T3564] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.453996][ T3564] bridge_slave_0: left allmulticast mode [ 214.460888][ T3564] bridge_slave_0: left promiscuous mode [ 214.466873][ T3564] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.780697][ T3564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.792026][ T3564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.803162][ T3564] bond0 (unregistering): Released all slaves [ 215.005728][ T9211] hsr_slave_0: entered promiscuous mode [ 215.024273][ T9211] hsr_slave_1: entered promiscuous mode [ 215.037400][ T9211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.045040][ T9211] Cannot create hsr debugfs directory [ 215.225910][ T9309] wg2: entered promiscuous mode [ 215.246730][ T9309] wg2: entered allmulticast mode [ 215.519239][ T9322] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 215.533989][ T3564] hsr_slave_0: left promiscuous mode [ 215.543941][ T3564] hsr_slave_1: left promiscuous mode [ 215.550465][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.559696][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.588414][ T3564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.600524][ T3564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.645967][ T3564] veth1_macvtap: left promiscuous mode [ 215.666710][ T3564] veth0_macvtap: left promiscuous mode [ 215.672391][ T3564] veth1_vlan: left promiscuous mode [ 215.685518][ T3564] veth0_vlan: left promiscuous mode [ 215.707746][ T9335] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 215.715467][ T9335] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 215.822219][ T5836] Bluetooth: hci4: command tx timeout [ 216.147468][ T9348] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 216.283886][ T3564] team0 (unregistering): Port device team_slave_1 removed [ 216.296566][ T5836] Bluetooth: hci1: command tx timeout [ 216.328577][ T3564] team0 (unregistering): Port device team_slave_0 removed [ 216.852781][ T9351] wg2: left promiscuous mode [ 216.860203][ T9351] wg2: left allmulticast mode [ 217.079628][ T9358] wg2: entered promiscuous mode [ 217.084727][ T9358] wg2: entered allmulticast mode [ 217.333116][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.900'. [ 217.351719][ T9372] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 217.377585][ T9372] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 217.432574][ T9378] netlink: 'syz.2.901': attribute type 3 has an invalid length. [ 217.724325][ T9389] netlink: 44 bytes leftover after parsing attributes in process `syz.2.904'. [ 217.726390][ T9190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.747602][ T9389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.904'. [ 217.763078][ T9190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.793117][ T9190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.847466][ T9190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.897493][ T5836] Bluetooth: hci4: command tx timeout [ 217.906075][ T9211] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.935800][ T9211] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 217.984148][ T9211] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.009577][ T9211] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.132087][ T9190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.170033][ T9190] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.191011][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.198243][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.238379][ T9408] wg2: left promiscuous mode [ 218.266776][ T9408] wg2: left allmulticast mode [ 218.307753][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.314963][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.367779][ T5836] Bluetooth: hci1: command tx timeout [ 218.452762][ T9408] wg2: entered promiscuous mode [ 218.459916][ T9408] wg2: entered allmulticast mode [ 218.544903][ T9211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.565816][ T9211] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.589854][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.597056][ T3525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.655977][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.663182][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.127848][ T9436] netlink: 512 bytes leftover after parsing attributes in process `syz.4.918'. [ 219.144392][ T9190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.260971][ T9440] macvlan15: entered allmulticast mode [ 219.280587][ T9440] veth1_vlan: entered allmulticast mode [ 219.303511][ T9445] netlink: 36 bytes leftover after parsing attributes in process `syz.0.921'. [ 219.313350][ T9440] veth1_vlan: left allmulticast mode [ 219.420357][ T9211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.573156][ T9190] veth0_vlan: entered promiscuous mode [ 219.616387][ T9190] veth1_vlan: entered promiscuous mode [ 219.674383][ T9211] veth0_vlan: entered promiscuous mode [ 219.712001][ T9211] veth1_vlan: entered promiscuous mode [ 219.772955][ T9462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.783053][ T9190] veth0_macvtap: entered promiscuous mode [ 219.811514][ T9190] veth1_macvtap: entered promiscuous mode [ 219.867943][ T9211] veth0_macvtap: entered promiscuous mode [ 219.880636][ T9211] veth1_macvtap: entered promiscuous mode [ 219.918686][ T9190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.937457][ T9190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.955512][ T9190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.977505][ T5836] Bluetooth: hci4: command tx timeout [ 219.996961][ T9190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.018821][ T9190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.047853][ T9190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.081980][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.106520][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.128211][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.146566][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.167904][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.186377][ T9190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.195486][ T9190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.214165][ T9190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.223959][ T9190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.243395][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.274799][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.290880][ T9211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.301775][ T9211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.313405][ T9211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.333874][ T9211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.345727][ T9211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.359209][ T9211] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.375460][ T9211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.555071][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.568232][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.638048][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.647604][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.665564][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.675697][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.707753][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.708117][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.934'. [ 220.715614][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.207673][ T9514] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 221.227975][ T9514] 8021q: adding VLAN 0 to HW filter on device macvlan11 [ 221.545703][ T6417] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.747717][ T6417] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.959541][ T6417] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.009270][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.019043][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.027892][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.038040][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.050587][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.058160][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.147744][ T6417] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.251524][ T9526] chnl_net:caif_netlink_parms(): no params data found [ 222.296156][ T6417] bridge_slave_1: left allmulticast mode [ 222.302241][ T6417] bridge_slave_1: left promiscuous mode [ 222.309020][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.318933][ T6417] bridge_slave_0: left allmulticast mode [ 222.324604][ T6417] bridge_slave_0: left promiscuous mode [ 222.330795][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.629869][ T6417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.641868][ T6417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.654435][ T6417] bond0 (unregistering): Released all slaves [ 222.724033][ T9526] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.731854][ T9526] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.745258][ T9526] bridge_slave_0: entered allmulticast mode [ 222.752739][ T9526] bridge_slave_0: entered promiscuous mode [ 222.781214][ T9526] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.789460][ T9526] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.796896][ T9526] bridge_slave_1: entered allmulticast mode [ 222.804164][ T9526] bridge_slave_1: entered promiscuous mode [ 222.950921][ T9526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.060983][ T9541] netlink: 52 bytes leftover after parsing attributes in process `syz.0.948'. [ 223.074952][ T9541] netlink: 52 bytes leftover after parsing attributes in process `syz.0.948'. [ 223.085783][ T9541] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.110527][ T9526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.136824][ T9546] netlink: 'syz.2.946': attribute type 29 has an invalid length. [ 223.284513][ T6417] hsr_slave_0: left promiscuous mode [ 223.301922][ T6417] hsr_slave_1: left promiscuous mode [ 223.327710][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.335918][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.353959][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.362896][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.396436][ T6417] veth1_macvtap: left promiscuous mode [ 223.402296][ T6417] veth0_macvtap: left promiscuous mode [ 223.410040][ T6417] veth1_vlan: left promiscuous mode [ 223.415566][ T6417] veth0_vlan: left promiscuous mode [ 223.445551][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.461295][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.471384][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.480962][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.497558][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.505908][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.909495][ T6417] team0 (unregistering): Port device team_slave_1 removed [ 223.950807][ T6417] team0 (unregistering): Port device team_slave_0 removed [ 224.129295][ T5836] Bluetooth: hci1: command tx timeout [ 224.451005][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.952'. [ 224.480890][ T9565] 8021q: adding VLAN 0 to HW filter on device macvlan15 [ 224.538218][ T9566] 8021q: adding VLAN 0 to HW filter on device macvlan16 [ 224.563796][ T9526] team0: Port device team_slave_0 added [ 224.584777][ T9526] team0: Port device team_slave_1 added [ 224.752816][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.777389][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.828627][ T9526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.841351][ T9580] IPv6: NLM_F_CREATE should be specified when creating new route [ 224.850661][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.863756][ T9578] netlink: 56 bytes leftover after parsing attributes in process `syz.0.957'. [ 224.873766][ T9578] netlink: 48 bytes leftover after parsing attributes in process `syz.0.957'. [ 224.882888][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.896283][ T9581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.909678][ T9581] batadv_slave_0: entered promiscuous mode [ 224.915571][ T9581] batadv_slave_0: entered allmulticast mode [ 224.941846][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.969196][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.996873][ T9526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.137722][ T9526] hsr_slave_0: entered promiscuous mode [ 225.154698][ T9526] hsr_slave_1: entered promiscuous mode [ 225.167409][ T9526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.175477][ T9526] Cannot create hsr debugfs directory [ 225.466748][ T6417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.499001][ T9559] chnl_net:caif_netlink_parms(): no params data found [ 225.514644][ T9610] geneve2: entered promiscuous mode [ 225.520289][ T9610] geneve2: entered allmulticast mode [ 225.566872][ T5836] Bluetooth: hci4: command tx timeout [ 225.633065][ T6417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.695253][ T9612] 8021q: adding VLAN 0 to HW filter on device macvlan13 [ 225.735854][ T6417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.775931][ T9615] 8021q: adding VLAN 0 to HW filter on device macvlan14 [ 225.868705][ T6417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.922268][ T9623] team0: Device vti0 is of different type [ 226.035695][ T9559] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.052709][ T9559] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.062114][ T9559] bridge_slave_0: entered allmulticast mode [ 226.074892][ T9559] bridge_slave_0: entered promiscuous mode [ 226.098717][ T9559] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.106928][ T9559] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.114361][ T9559] bridge_slave_1: entered allmulticast mode [ 226.122214][ T9559] bridge_slave_1: entered promiscuous mode [ 226.208768][ T5836] Bluetooth: hci1: command tx timeout [ 226.310790][ T9559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.332907][ T6417] bridge_slave_1: left allmulticast mode [ 226.357032][ T6417] bridge_slave_1: left promiscuous mode [ 226.363225][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.381664][ T6417] bridge_slave_0: left allmulticast mode [ 226.392581][ T6417] bridge_slave_0: left promiscuous mode [ 226.772644][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.914833][ T9636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.972'. [ 227.348511][ T6417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.360311][ T6417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.372387][ T6417] bond0 (unregistering): Released all slaves [ 227.388593][ T9559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.498038][ T9645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.975'. [ 227.574496][ T9559] team0: Port device team_slave_0 added [ 227.646836][ T5836] Bluetooth: hci4: command tx timeout [ 227.655846][ T9559] team0: Port device team_slave_1 added [ 227.725209][ T5879] IPVS: starting estimator thread 0... [ 227.826648][ T9651] IPVS: using max 20 ests per chain, 48000 per kthread [ 227.844814][ T9559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.891516][ T9559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.918176][ T9559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.967194][ T9559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.984473][ T9559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.012795][ T9559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.034709][ T9659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.979'. [ 228.080743][ T9660] 8021q: adding VLAN 0 to HW filter on device macvlan12 [ 228.088387][ T9662] netlink: 64 bytes leftover after parsing attributes in process `syz.4.981'. [ 228.105335][ T6417] hsr_slave_0: left promiscuous mode [ 228.111641][ T6417] hsr_slave_1: left promiscuous mode [ 228.118007][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.125485][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.134394][ T6417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.144800][ T6417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.175640][ T6417] veth1_macvtap: left promiscuous mode [ 228.182732][ T6417] veth0_macvtap: left promiscuous mode [ 228.188636][ T6417] veth1_vlan: left promiscuous mode [ 228.195070][ T6417] veth0_vlan: left promiscuous mode [ 228.291357][ T5836] Bluetooth: hci1: command tx timeout [ 228.681386][ T6417] team0 (unregistering): Port device team_slave_1 removed [ 228.720806][ T6417] team0 (unregistering): Port device team_slave_0 removed [ 229.104046][ T9559] hsr_slave_0: entered promiscuous mode [ 229.118335][ T9559] hsr_slave_1: entered promiscuous mode [ 229.133159][ T9660] 8021q: adding VLAN 0 to HW filter on device macvlan13 [ 229.212277][ T9526] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 229.284148][ T9526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 229.315838][ T9526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 229.404530][ T9526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 229.727714][ T5836] Bluetooth: hci4: command tx timeout [ 230.077737][ T9526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.143814][ T9526] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.204497][ T9703] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.989'. [ 230.222733][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.229980][ T6412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.250029][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 230.275535][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.282706][ T6417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.347748][ T9559] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 230.362746][ T9559] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 230.370659][ T5836] Bluetooth: hci1: command tx timeout [ 230.418964][ T9559] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 230.432371][ T9559] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 230.639218][ T9559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.719760][ T9559] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.754807][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.762105][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.835447][ T9716] 8021q: adding VLAN 0 to HW filter on device macvlan15 [ 230.856078][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.863315][ T6412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.904518][ T9717] 8021q: adding VLAN 0 to HW filter on device macvlan16 [ 231.026167][ T9526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.221265][ T9559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.258663][ T9559] veth0_vlan: entered promiscuous mode [ 231.270736][ T9559] veth1_vlan: entered promiscuous mode [ 231.279043][ T9526] veth0_vlan: entered promiscuous mode [ 231.437082][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.999'. [ 231.448084][ T9526] veth1_vlan: entered promiscuous mode [ 231.522542][ T9559] veth0_macvtap: entered promiscuous mode [ 231.615273][ T9559] veth1_macvtap: entered promiscuous mode [ 231.722169][ T9526] veth0_macvtap: entered promiscuous mode [ 231.764795][ T9559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.806933][ T5836] Bluetooth: hci4: command tx timeout [ 231.810913][ T9526] veth1_macvtap: entered promiscuous mode [ 231.910396][ T9559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.922781][ T9559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.934217][ T9559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.969399][ T9559] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.994655][ T9559] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.005640][ T9559] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.014739][ T9559] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.049990][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.072088][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.087705][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.101812][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.113982][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.138877][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.153338][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.164789][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.318280][ T9526] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.341257][ T9526] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.356591][ T9526] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.373751][ T9526] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.438958][ T9753] 8021q: adding VLAN 0 to HW filter on device macvlan17 [ 232.502482][ T9754] 8021q: adding VLAN 0 to HW filter on device macvlan18 [ 232.592678][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.626261][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.769658][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.791283][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.806560][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.846715][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.928635][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1009'. [ 232.984870][ T9768] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1009'. [ 233.164271][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.292383][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.974609][ T9779] syzkaller1: entered promiscuous mode [ 233.993321][ T9779] syzkaller1: entered allmulticast mode [ 234.212013][ T3476] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.329357][ T3476] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.438307][ T3476] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.662105][ T3476] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.856785][ T3476] bridge_slave_1: left allmulticast mode [ 234.862506][ T3476] bridge_slave_1: left promiscuous mode [ 234.886717][ T3476] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.895996][ T3476] bridge_slave_0: left allmulticast mode [ 234.906539][ T3476] bridge_slave_0: left promiscuous mode [ 234.912431][ T3476] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.142171][ T9733] Set syz1 is full, maxelem 65536 reached [ 235.394658][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.414217][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.429043][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.446864][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.455232][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 235.470003][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.512747][ T3476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.527552][ T3476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.537969][ T3476] bond0 (unregistering): Released all slaves [ 235.725580][ T9783] chnl_net:caif_netlink_parms(): no params data found [ 235.779258][ T3476] hsr_slave_0: left promiscuous mode [ 235.785205][ T3476] hsr_slave_1: left promiscuous mode [ 235.791468][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.800194][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.808833][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.816267][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.836305][ T3476] veth1_macvtap: left promiscuous mode [ 235.841964][ T3476] veth0_macvtap: left promiscuous mode [ 235.848324][ T3476] veth1_vlan: left promiscuous mode [ 235.853607][ T3476] veth0_vlan: left promiscuous mode [ 236.243276][ T9800] netlink: 'syz.0.1015': attribute type 8 has an invalid length. [ 236.254468][ T5882] IPVS: starting estimator thread 0... [ 236.367572][ T9801] IPVS: using max 19 ests per chain, 45600 per kthread [ 236.532951][ T3476] team0 (unregistering): Port device team_slave_1 removed [ 236.575715][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 236.591634][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 236.599371][ T3476] team0 (unregistering): Port device team_slave_0 removed [ 236.608251][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 236.618043][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 236.638287][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 236.645785][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 237.102327][ T9799] netlink: 'syz.2.1013': attribute type 1 has an invalid length. [ 237.141375][ T9799] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1013'. [ 237.165591][ T9783] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.176639][ T9783] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.183994][ T9783] bridge_slave_0: entered allmulticast mode [ 237.193145][ T9783] bridge_slave_0: entered promiscuous mode [ 237.202727][ T9783] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.210281][ T9783] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.217731][ T9783] bridge_slave_1: entered allmulticast mode [ 237.225036][ T9783] bridge_slave_1: entered promiscuous mode [ 237.334533][ T9783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.362661][ T9818] 8021q: adding VLAN 0 to HW filter on device macvlan17 [ 237.396013][ T9783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.446868][ T9819] 8021q: adding VLAN 0 to HW filter on device macvlan18 [ 237.502357][ T9822] netlink: 'syz.0.1019': attribute type 4 has an invalid length. [ 237.523426][ T9783] team0: Port device team_slave_0 added [ 237.548257][ T9783] team0: Port device team_slave_1 added [ 237.567223][ T5834] Bluetooth: hci1: command tx timeout [ 237.576957][ T9828] netlink: 'syz.0.1019': attribute type 4 has an invalid length. [ 237.671091][ T9783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.689548][ T9783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.716617][ T9783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.734305][ T9832] netlink: 'syz.2.1021': attribute type 21 has an invalid length. [ 237.742326][ T9832] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.752735][ T9783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.760868][ T9783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.789199][ T9783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.855998][ T9783] hsr_slave_0: entered promiscuous mode [ 237.865372][ T9783] hsr_slave_1: entered promiscuous mode [ 237.873811][ T9783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.882136][ T9783] Cannot create hsr debugfs directory [ 238.045247][ T9807] chnl_net:caif_netlink_parms(): no params data found [ 238.083371][ T3476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.210195][ T3476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.234768][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 238.248031][ T9847] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1025'. [ 238.349587][ T3476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.404175][ T9807] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.411577][ T9807] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.422012][ T9807] bridge_slave_0: entered allmulticast mode [ 238.433506][ T9807] bridge_slave_0: entered promiscuous mode [ 238.474684][ T3476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.493256][ T9807] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.500566][ T9807] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.508277][ T9807] bridge_slave_1: entered allmulticast mode [ 238.515093][ T9807] bridge_slave_1: entered promiscuous mode [ 238.565796][ T9807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.578740][ T9807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.627232][ T9807] team0: Port device team_slave_0 added [ 238.644220][ T9807] team0: Port device team_slave_1 added [ 238.684033][ T9807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.691323][ T5834] Bluetooth: hci4: command tx timeout [ 238.698444][ T9807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.728339][ T9807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.740845][ T3476] bridge_slave_1: left allmulticast mode [ 238.747335][ T3476] bridge_slave_1: left promiscuous mode [ 238.753573][ T3476] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.762485][ T3476] bridge_slave_0: left allmulticast mode [ 238.771848][ T3476] bridge_slave_0: left promiscuous mode [ 238.778947][ T3476] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.102699][ T3476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.114705][ T3476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.125458][ T3476] bond0 (unregistering): Released all slaves [ 239.142075][ T9807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.149850][ T9807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.176582][ T9807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.380711][ T9807] hsr_slave_0: entered promiscuous mode [ 239.388026][ T9807] hsr_slave_1: entered promiscuous mode [ 239.394178][ T9807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.403030][ T9807] Cannot create hsr debugfs directory [ 239.493170][ T9783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 239.518679][ T9864] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1030'. [ 239.535696][ T9864] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1030'. [ 239.546987][ T3476] hsr_slave_0: left promiscuous mode [ 239.553290][ T3476] hsr_slave_1: left promiscuous mode [ 239.560543][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.569097][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.582576][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.590428][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.619868][ T3476] veth1_macvtap: left promiscuous mode [ 239.625602][ T3476] veth0_macvtap: left promiscuous mode [ 239.631937][ T3476] veth1_vlan: left promiscuous mode [ 239.637651][ T3476] veth0_vlan: left promiscuous mode [ 239.646852][ T5834] Bluetooth: hci1: command tx timeout [ 240.220491][ T3476] team0 (unregistering): Port device team_slave_1 removed [ 240.277227][ T3476] team0 (unregistering): Port device team_slave_0 removed [ 240.734192][ T9887] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 240.756233][ T9783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.767502][ T5834] Bluetooth: hci4: command tx timeout [ 240.784770][ T9783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.882094][ T9885] bond2: entered allmulticast mode [ 240.908855][ T9885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.921055][ T9783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 241.190970][ T9899] 8021q: adding VLAN 0 to HW filter on device macvlan19 [ 241.223797][ T9904] 8021q: adding VLAN 0 to HW filter on device macvlan20 [ 241.282501][ T9905] batadv_slave_0: entered promiscuous mode [ 241.340956][ T9908] batadv_slave_0: left promiscuous mode [ 241.423563][ T9783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.478919][ T9783] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.596122][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.603334][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.663087][ T3476] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.670292][ T3476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.696740][ T9807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.717465][ T9807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.728354][ T5834] Bluetooth: hci1: command tx timeout [ 241.752844][ T9807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.802392][ T9925] netlink: 'syz.4.1051': attribute type 11 has an invalid length. [ 241.812525][ T9807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.827721][ T9925] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1051'. [ 241.931767][ T9930] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1052'. [ 241.995819][ T9807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.059127][ T9807] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.078834][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.085985][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.127569][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.134795][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.275314][ T9783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.307989][ T9946] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 242.370378][ T9783] veth0_vlan: entered promiscuous mode [ 242.397326][ T9783] veth1_vlan: entered promiscuous mode [ 242.446223][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1056'. [ 242.472785][ T9783] veth0_macvtap: entered promiscuous mode [ 242.493148][ T9946] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.498790][ T9783] veth1_macvtap: entered promiscuous mode [ 242.553954][ T9783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.587193][ T9783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.598226][ T9783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.619177][ T9783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.640252][ T9783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.658868][ T9783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.678487][ T9783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.689254][ T9783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.725875][ T9807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.778806][ T9962] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.781803][ T9963] xt_TPROXY: Can be used only with -p tcp or -p udp [ 242.846799][ T5834] Bluetooth: hci4: command tx timeout [ 242.958008][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.965898][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.052426][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1061'. [ 243.064429][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 243.067612][ T9807] veth0_vlan: entered promiscuous mode [ 243.106150][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.118747][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.236326][ T9807] veth1_vlan: entered promiscuous mode [ 243.247593][ T9972] lo: entered promiscuous mode [ 243.254523][ T9972] tunl0: entered promiscuous mode [ 243.263937][ T9972] gre0: entered promiscuous mode [ 243.281348][ T9972] gretap0: entered promiscuous mode [ 243.297040][ T9972] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 243.341718][ T9975] ax25_connect(): syz.0.1062 uses autobind, please contact jreuter@yaina.de [ 243.551745][ T9972] syz.2.1059 (9972) used greatest stack depth: 17936 bytes left [ 243.631317][ T9807] veth0_macvtap: entered promiscuous mode [ 243.768712][ T9807] veth1_macvtap: entered promiscuous mode [ 243.855720][ T9807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.877154][ T9807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.919151][ T9807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.960903][ T9807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.973010][ T9807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.993825][ T9807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.009348][ T9807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.025487][ T9807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.045460][ T9807] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.097656][ T9807] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.118450][ T9807] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.132684][ T9807] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.163845][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1072'. [ 244.189323][T10000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.223843][T10000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.321963][ T3476] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.361570][T10009] veth7: entered allmulticast mode [ 244.436153][ T3476] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.459811][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.469752][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.491438][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.500373][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.591863][ T3476] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.791008][ T3476] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.040602][ T3476] bridge_slave_1: left allmulticast mode [ 245.046328][ T3476] bridge_slave_1: left promiscuous mode [ 245.053844][ T3476] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.065911][ T3476] bridge_slave_0: left allmulticast mode [ 245.073419][ T3476] bridge_slave_0: left promiscuous mode [ 245.082528][ T3476] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.473208][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.500509][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.509855][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.518633][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.533365][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 245.540994][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.566228][ T3476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.579056][ T3476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.589312][ T3476] bond0 (unregistering): Released all slaves [ 245.805235][T10016] chnl_net:caif_netlink_parms(): no params data found [ 245.853227][ T3476] hsr_slave_0: left promiscuous mode [ 245.859477][ T3476] hsr_slave_1: left promiscuous mode [ 245.865188][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.874091][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.882177][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.890833][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.911606][ T3476] veth1_macvtap: left promiscuous mode [ 245.917330][ T3476] veth0_macvtap: left promiscuous mode [ 245.922900][ T3476] veth1_vlan: left promiscuous mode [ 245.928629][ T3476] veth0_vlan: left promiscuous mode [ 246.328475][ T3476] team0 (unregistering): Port device team_slave_1 removed [ 246.433285][ T3476] team0 (unregistering): Port device team_slave_0 removed [ 246.747670][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.760927][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.773342][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.799469][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.815145][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 246.826773][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.240740][T10031] wg2: left promiscuous mode [ 247.245403][T10031] wg2: left allmulticast mode [ 247.281481][T10035] wg2: entered promiscuous mode [ 247.291489][T10035] wg2: entered allmulticast mode [ 247.348908][T10044] netlink: 'syz.2.1080': attribute type 9 has an invalid length. [ 247.385264][T10044] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1080'. [ 247.520931][T10016] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.531003][T10016] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.556772][T10016] bridge_slave_0: entered allmulticast mode [ 247.563993][T10016] bridge_slave_0: entered promiscuous mode [ 247.576824][ T5836] Bluetooth: hci1: command tx timeout [ 247.583479][T10016] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.592421][T10016] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.615476][T10016] bridge_slave_1: entered allmulticast mode [ 247.624537][T10016] bridge_slave_1: entered promiscuous mode [ 247.778365][T10016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.799708][T10016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.920713][T10016] team0: Port device team_slave_0 added [ 247.941507][T10016] team0: Port device team_slave_1 added [ 248.060794][T10016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.096859][T10016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.140957][T10016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.189586][ T3476] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.220516][T10016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.228637][T10016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.230497][T10081] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1090'. [ 248.260274][T10016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.284373][T10079] wg2: left promiscuous mode [ 248.291255][T10079] wg2: left allmulticast mode [ 248.460730][ T3476] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.479610][T10082] wg2: entered promiscuous mode [ 248.494219][T10082] wg2: entered allmulticast mode [ 248.576089][ T3476] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.614416][T10036] chnl_net:caif_netlink_parms(): no params data found [ 248.669860][T10016] hsr_slave_0: entered promiscuous mode [ 248.681734][T10016] hsr_slave_1: entered promiscuous mode [ 248.847531][ T5836] Bluetooth: hci4: command tx timeout [ 248.881652][ T3476] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.959985][T10097] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1095'. [ 249.184556][T10036] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.206980][T10036] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.214283][T10036] bridge_slave_0: entered allmulticast mode [ 249.231476][T10036] bridge_slave_0: entered promiscuous mode [ 249.277134][T10036] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.290185][T10036] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.301491][T10036] bridge_slave_1: entered allmulticast mode [ 249.312440][T10036] bridge_slave_1: entered promiscuous mode [ 249.367107][T10036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.428122][T10036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.484000][ T3476] bridge_slave_1: left allmulticast mode [ 249.498791][ T3476] bridge_slave_1: left promiscuous mode [ 249.517793][ T3476] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.527042][ T3476] bridge_slave_0: left allmulticast mode [ 249.532974][ T3476] bridge_slave_0: left promiscuous mode [ 249.540448][ T3476] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.647178][ T5836] Bluetooth: hci1: command tx timeout [ 249.745989][T10127] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 249.758547][T10127] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:0 [ 249.834812][T10130] IPVS: set_ctl: invalid protocol: 47 0.0.0.0:0 [ 249.859769][T10131] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 249.992969][ T3476] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.004552][ T3476] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.015813][ T3476] bond0 (unregistering): Released all slaves [ 250.158312][T10036] team0: Port device team_slave_0 added [ 250.192368][T10036] team0: Port device team_slave_1 added [ 250.359736][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'. [ 250.581936][T10036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.600272][T10036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.657015][T10036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.755182][ T3476] hsr_slave_0: left promiscuous mode [ 250.789145][ T3476] hsr_slave_1: left promiscuous mode [ 250.795594][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.817787][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.838192][ T3476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.845746][ T3476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.875364][T10164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 250.916291][ T3476] veth1_macvtap: left promiscuous mode [ 250.926870][ T3476] veth0_macvtap: left promiscuous mode [ 250.927910][ T5836] Bluetooth: hci4: command tx timeout [ 250.932523][ T3476] veth1_vlan: left promiscuous mode [ 250.981845][ T3476] veth0_vlan: left promiscuous mode [ 251.019908][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'. [ 251.445850][ T3476] team0 (unregistering): Port device team_slave_1 removed [ 251.493061][ T3476] team0 (unregistering): Port device team_slave_0 removed [ 251.731280][ T5836] Bluetooth: hci1: command tx timeout [ 251.898731][T10036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.905713][T10036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.932155][T10036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.172110][T10036] hsr_slave_0: entered promiscuous mode [ 252.178867][T10036] hsr_slave_1: entered promiscuous mode [ 252.192966][T10036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.199812][T10178] nbd: must specify an index to disconnect [ 252.213120][T10036] Cannot create hsr debugfs directory [ 252.335436][T10016] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 252.373174][T10016] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 252.402784][T10016] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 252.484454][T10016] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 253.008842][ T5836] Bluetooth: hci4: command tx timeout [ 253.225941][T10195] wg2: left promiscuous mode [ 253.231641][T10195] wg2: left allmulticast mode [ 253.470055][T10196] wg2: entered promiscuous mode [ 253.475557][T10196] wg2: entered allmulticast mode [ 253.528476][T10016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.589067][T10016] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.602856][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.610076][ T6417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.708601][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.715781][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.807144][ T5836] Bluetooth: hci1: command tx timeout [ 253.821178][T10016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.949093][T10036] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 253.961751][T10036] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 253.973635][T10036] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 253.997329][T10036] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 254.158916][T10016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.251955][T10036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.274125][T10016] veth0_vlan: entered promiscuous mode [ 254.299856][T10036] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.326725][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.333980][ T6412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.366327][T10016] veth1_vlan: entered promiscuous mode [ 254.410233][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.417449][ T6412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.465911][T10016] veth0_macvtap: entered promiscuous mode [ 254.500718][T10016] veth1_macvtap: entered promiscuous mode [ 254.560783][T10016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.598773][T10016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.636491][T10016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.659436][T10016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.702077][T10228] syzkaller1: entered promiscuous mode [ 254.726478][T10228] syzkaller1: entered allmulticast mode [ 254.735341][T10016] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.749749][T10016] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.759522][T10016] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.773018][T10016] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.790200][T10230] 8021q: adding VLAN 0 to HW filter on device macvlan19 [ 254.869666][T10231] 8021q: adding VLAN 0 to HW filter on device macvlan20 [ 255.088107][ T5836] Bluetooth: hci4: command tx timeout [ 255.171447][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.178986][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.196253][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.249887][T10247] FAULT_INJECTION: forcing a failure. [ 255.249887][T10247] name failslab, interval 1, probability 0, space 0, times 0 [ 255.294850][T10247] CPU: 1 UID: 0 PID: 10247 Comm: syz.0.1139 Not tainted 6.14.0-rc1-syzkaller-00090-g1438f5d07b9a #0 [ 255.294883][T10247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 255.294909][T10247] Call Trace: [ 255.294917][T10247] [ 255.294927][T10247] dump_stack_lvl+0x241/0x360 [ 255.294960][T10247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.294984][T10247] ? __pfx__printk+0x10/0x10 [ 255.295020][T10247] ? fs_reclaim_acquire+0x93/0x130 [ 255.295052][T10247] ? __pfx___might_resched+0x10/0x10 [ 255.295082][T10247] should_fail_ex+0x40a/0x550 [ 255.295111][T10247] should_failslab+0xac/0x100 [ 255.295136][T10247] __kmalloc_noprof+0xdd/0x4c0 [ 255.295167][T10247] ? kstrtouint_from_user+0x128/0x190 [ 255.295196][T10247] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 255.295234][T10247] tomoyo_realpath_from_path+0xcf/0x5e0 [ 255.295280][T10247] tomoyo_path_number_perm+0x236/0x860 [ 255.295307][T10247] ? __lock_acquire+0x1397/0x2100 [ 255.295338][T10247] ? tomoyo_path_number_perm+0x206/0x860 [ 255.295369][T10247] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 255.295442][T10247] ? __fget_files+0x2a/0x410 [ 255.295469][T10247] ? __fget_files+0x2a/0x410 [ 255.295498][T10247] security_file_ioctl+0xc6/0x2a0 [ 255.295526][T10247] __se_sys_ioctl+0x46/0x170 [ 255.295558][T10247] do_syscall_64+0xf3/0x230 [ 255.295590][T10247] ? clear_bhb_loop+0x35/0x90 [ 255.295624][T10247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.295652][T10247] RIP: 0033:0x7f3d2d38cde9 [ 255.295671][T10247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.295688][T10247] RSP: 002b:00007f3d2e1d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.295712][T10247] RAX: ffffffffffffffda RBX: 00007f3d2d5a6080 RCX: 00007f3d2d38cde9 [ 255.295727][T10247] RDX: 0000000000000000 RSI: 000000004004743a RDI: 0000000000000007 [ 255.295740][T10247] RBP: 00007f3d2e1d1090 R08: 0000000000000000 R09: 0000000000000000 [ 255.295752][T10247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.295765][T10247] R13: 0000000000000000 R14: 00007f3d2d5a6080 R15: 00007fff82448a68 [ 255.295797][T10247] [ 255.295872][T10247] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.546429][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.610637][T10036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.730955][T10036] veth0_vlan: entered promiscuous mode [ 255.839531][T10036] veth1_vlan: entered promiscuous mode [ 255.925231][T10036] veth0_macvtap: entered promiscuous mode [ 255.954021][T10036] veth1_macvtap: entered promiscuous mode [ 255.984929][T10036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.001149][T10036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.013019][T10036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 256.030462][T10036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.062328][T10036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.082209][T10036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.095449][T10036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.108951][T10036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.126071][T10036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.136995][T10036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.145882][T10036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.175552][T10260] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 256.176494][T10036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.325447][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.343948][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.383455][ T3564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.393792][ T3564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.581269][T10271] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1146'. [ 256.742418][T10282] 8021q: adding VLAN 0 to HW filter on device macvlan21 [ 256.764632][T10282] 8021q: adding VLAN 0 to HW filter on device macvlan22 [ 256.773276][T10284] hsr0: entered allmulticast mode [ 256.783610][T10284] hsr_slave_0: entered allmulticast mode [ 256.789973][T10284] hsr_slave_1: entered allmulticast mode [ 256.802730][T10284] hsr_slave_0: left promiscuous mode [ 256.809688][T10284] hsr_slave_1: left promiscuous mode [ 256.830487][T10284] hsr0 (unregistering): left allmulticast mode [ 256.946685][T10289] vxcan1: tx address claim with dest, not broadcast [ 257.100363][T10298] FAULT_INJECTION: forcing a failure. [ 257.100363][T10298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.136763][T10298] CPU: 0 UID: 0 PID: 10298 Comm: syz.0.1153 Not tainted 6.14.0-rc1-syzkaller-00090-g1438f5d07b9a #0 [ 257.136796][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 257.136810][T10298] Call Trace: [ 257.136818][T10298] [ 257.136826][T10298] dump_stack_lvl+0x241/0x360 [ 257.136865][T10298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.136888][T10298] ? __pfx__printk+0x10/0x10 [ 257.136925][T10298] ? __pfx_lock_release+0x10/0x10 [ 257.136964][T10298] should_fail_ex+0x40a/0x550 [ 257.136993][T10298] _copy_from_user+0x2d/0xb0 [ 257.137017][T10298] copy_msghdr_from_user+0xae/0x680 [ 257.137052][T10298] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 257.137077][T10298] ? __fget_files+0x2a/0x410 [ 257.137103][T10298] ? __fget_files+0x2a/0x410 [ 257.137135][T10298] __sys_sendmsg+0x209/0x350 [ 257.137163][T10298] ? __pfx___sys_sendmsg+0x10/0x10 [ 257.137198][T10298] ? do_sys_openat2+0x17a/0x1d0 [ 257.137248][T10298] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.137279][T10298] ? do_syscall_64+0x100/0x230 [ 257.137313][T10298] ? do_syscall_64+0xb6/0x230 [ 257.137346][T10298] do_syscall_64+0xf3/0x230 [ 257.137375][T10298] ? clear_bhb_loop+0x35/0x90 [ 257.137409][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.137437][T10298] RIP: 0033:0x7f3d2d38cde9 [ 257.137457][T10298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.137474][T10298] RSP: 002b:00007f3d2e1d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.137497][T10298] RAX: ffffffffffffffda RBX: 00007f3d2d5a6080 RCX: 00007f3d2d38cde9 [ 257.137512][T10298] RDX: 0000000000000000 RSI: 00002000000015c0 RDI: 0000000000000004 [ 257.137526][T10298] RBP: 00007f3d2e1d1090 R08: 0000000000000000 R09: 0000000000000000 [ 257.137539][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.137551][T10298] R13: 0000000000000001 R14: 00007f3d2d5a6080 R15: 00007fff82448a68 [ 257.137582][T10298] [ 257.465728][T10308] IPVS: ip_vs_add_dest(): server weight less than zero [ 257.473177][ T5879] IPVS: starting estimator thread 0... [ 257.502540][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.656624][T10309] IPVS: using max 21 ests per chain, 50400 per kthread [ 258.148076][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.289536][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.391884][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.590680][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1159'. [ 258.630738][T10319] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1159'. [ 258.656964][ T11] bridge_slave_1: left allmulticast mode [ 258.663992][ T11] bridge_slave_1: left promiscuous mode [ 258.677289][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.704700][ T11] bridge_slave_0: left allmulticast mode [ 258.711048][ T11] bridge_slave_0: left promiscuous mode [ 258.723653][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.774420][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 258.800488][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 258.809376][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 258.819332][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 258.828793][ T5834] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 258.836369][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.119604][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.133378][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.143719][ T11] bond0 (unregistering): Released all slaves [ 259.359959][T10320] chnl_net:caif_netlink_parms(): no params data found [ 259.394750][ T11] hsr_slave_0: left promiscuous mode [ 259.402932][ T11] hsr_slave_1: left promiscuous mode [ 259.411240][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.418749][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.426779][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.434325][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.453760][ T11] veth1_macvtap: left promiscuous mode [ 259.459521][ T11] veth0_macvtap: left promiscuous mode [ 259.465101][ T11] veth1_vlan: left promiscuous mode [ 259.470497][ T11] veth0_vlan: left promiscuous mode [ 259.945626][T10337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1164'. [ 259.975995][T10338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1164'. [ 260.140920][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 260.151143][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 260.162297][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 260.179171][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 260.192287][ T5836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 260.201402][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 260.209693][ T11] team0 (unregistering): Port device team_slave_1 removed [ 260.260675][ T11] team0 (unregistering): Port device team_slave_0 removed [ 260.673647][T10329] 8021q: adding VLAN 0 to HW filter on device macvlan21 [ 260.700770][T10333] 8021q: adding VLAN 0 to HW filter on device macvlan22 [ 260.927045][ T5836] Bluetooth: hci1: command tx timeout [ 260.953615][T10320] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.964415][T10320] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.972371][T10320] bridge_slave_0: entered allmulticast mode [ 260.980321][T10320] bridge_slave_0: entered promiscuous mode [ 260.998925][T10320] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.006120][T10320] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.034679][T10320] bridge_slave_1: entered allmulticast mode [ 261.047995][T10361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1168'. [ 261.071868][T10320] bridge_slave_1: entered promiscuous mode [ 261.089628][T10361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1168'. [ 261.116538][T10361] netlink: 'syz.0.1168': attribute type 8 has an invalid length. [ 261.156027][T10361] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1168'. [ 261.247176][T10369] FAULT_INJECTION: forcing a failure. [ 261.247176][T10369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.248871][T10320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.266637][T10369] CPU: 0 UID: 0 PID: 10369 Comm: syz.2.1170 Not tainted 6.14.0-rc1-syzkaller-00090-g1438f5d07b9a #0 [ 261.266671][T10369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 261.266685][T10369] Call Trace: [ 261.266693][T10369] [ 261.266702][T10369] dump_stack_lvl+0x241/0x360 [ 261.266734][T10369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.266757][T10369] ? __pfx__printk+0x10/0x10 [ 261.266796][T10369] ? snprintf+0xda/0x120 [ 261.266823][T10369] should_fail_ex+0x40a/0x550 [ 261.266853][T10369] _copy_to_user+0x31/0xb0 [ 261.266877][T10369] simple_read_from_buffer+0xca/0x150 [ 261.266915][T10369] proc_fail_nth_read+0x1e9/0x250 [ 261.266952][T10369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.266989][T10369] ? rw_verify_area+0x243/0x630 [ 261.267016][T10369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.267051][T10369] vfs_read+0x1f8/0xb40 [ 261.267080][T10369] ? fdget_pos+0x254/0x320 [ 261.267104][T10369] ? __pfx___mutex_lock+0x10/0x10 [ 261.267135][T10369] ? __pfx_vfs_read+0x10/0x10 [ 261.267166][T10369] ? __fget_files+0x2a/0x410 [ 261.267190][T10369] ? __fget_files+0x395/0x410 [ 261.267211][T10369] ? __fget_files+0x2a/0x410 [ 261.267244][T10369] ksys_read+0x18f/0x2b0 [ 261.267274][T10369] ? __pfx_ksys_read+0x10/0x10 [ 261.267303][T10369] ? do_syscall_64+0x100/0x230 [ 261.267336][T10369] ? do_syscall_64+0xb6/0x230 [ 261.267369][T10369] do_syscall_64+0xf3/0x230 [ 261.267399][T10369] ? clear_bhb_loop+0x35/0x90 [ 261.267432][T10369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.267461][T10369] RIP: 0033:0x7f050b78b7fc [ 261.267481][T10369] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 261.267514][T10369] RSP: 002b:00007f050c596030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 261.267538][T10369] RAX: ffffffffffffffda RBX: 00007f050b9a5fa0 RCX: 00007f050b78b7fc [ 261.267554][T10369] RDX: 000000000000000f RSI: 00007f050c5960a0 RDI: 0000000000000008 [ 261.267568][T10369] RBP: 00007f050c596090 R08: 0000000000000000 R09: 0000000000000000 [ 261.267581][T10369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.267593][T10369] R13: 0000000000000000 R14: 00007f050b9a5fa0 R15: 00007ffe71934348 [ 261.267626][T10369] [ 261.517691][T10376] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1171'. [ 261.564691][T10380] sit0: left allmulticast mode [ 261.574263][T10380] netlink: 'syz.2.1172': attribute type 1 has an invalid length. [ 261.612434][T10380] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1172'. [ 261.654497][T10320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.871950][T10320] team0: Port device team_slave_0 added [ 261.955739][T10320] team0: Port device team_slave_1 added [ 262.015293][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1176'. [ 262.024532][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 262.246071][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.299154][ T5836] Bluetooth: hci4: command tx timeout [ 262.419379][T10320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.426915][T10320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.575724][T10320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.613994][T10343] chnl_net:caif_netlink_parms(): no params data found [ 262.665474][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.705662][T10320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.715871][T10320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.746728][T10320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.825248][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.954803][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.009348][ T5836] Bluetooth: hci1: command tx timeout [ 263.176884][T10320] hsr_slave_0: entered promiscuous mode [ 263.183366][T10320] hsr_slave_1: entered promiscuous mode [ 263.217813][T10343] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.225070][T10343] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.238761][T10343] bridge_slave_0: entered allmulticast mode [ 263.245943][T10343] bridge_slave_0: entered promiscuous mode [ 263.303736][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.317508][T10343] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.325523][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.336901][T10343] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.344186][T10343] bridge_slave_1: entered allmulticast mode [ 263.352470][T10426] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1185'. [ 263.353701][T10343] bridge_slave_1: entered promiscuous mode [ 263.536123][T10343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.552072][ T11] bridge_slave_1: left allmulticast mode [ 263.556618][T10431] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1186'. [ 263.558815][ T11] bridge_slave_1: left promiscuous mode [ 263.591909][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.615753][ T11] bridge_slave_0: left allmulticast mode [ 263.631715][ T11] bridge_slave_0: left promiscuous mode [ 263.637766][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.655192][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 263.665502][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 263.946044][T10449] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1192'. [ 263.961058][T10449] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1192'. [ 264.126190][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.143397][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.154594][ T11] bond0 (unregistering): Released all slaves [ 264.179089][T10343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.369974][ T5836] Bluetooth: hci4: command tx timeout [ 264.441508][T10343] team0: Port device team_slave_0 added [ 264.452579][T10459] Illegal XDP return value 4294967274 on prog (id 128) dev lo, expect packet loss! [ 264.650958][T10453] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.658660][T10453] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.685061][T10453] team_slave_0: left promiscuous mode [ 264.706963][T10453] team_slave_1: left promiscuous mode [ 264.797809][T10453] wg2: left allmulticast mode [ 265.013281][T10453] gretap1: left allmulticast mode [ 265.029734][T10453] ipvlan2: left allmulticast mode [ 265.035184][T10453] veth0_vlan: left allmulticast mode [ 265.047941][T10453] veth3: left allmulticast mode [ 265.058626][T10453] bond1: left allmulticast mode [ 265.100107][ T5836] Bluetooth: hci1: command tx timeout [ 265.105811][T10453] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.136843][T10453] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.145256][T10453] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.186850][T10453] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.195813][T10453] geneve2: left allmulticast mode [ 265.227413][T10453] bond2: left allmulticast mode [ 265.234126][T10453] veth7: left allmulticast mode [ 265.240198][T10458] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 265.294576][T10343] team0: Port device team_slave_1 added [ 265.457627][T10483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1196'. [ 265.475337][T10463] team_slave_0: left promiscuous mode [ 265.485280][T10463] team_slave_1: left promiscuous mode [ 265.532275][T10463] wg2: left allmulticast mode [ 265.619239][T10463] batadv_slave_0: left allmulticast mode [ 265.628753][T10463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.830044][T10463] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.844099][T10463] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.866801][T10463] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.875768][T10463] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.163587][T10486] bridge_slave_1: left allmulticast mode [ 266.169560][T10486] bridge_slave_1: left promiscuous mode [ 266.175483][T10486] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.188573][T10486] bridge_slave_0: left allmulticast mode [ 266.194336][T10486] bridge_slave_0: left promiscuous mode [ 266.200602][T10486] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.308042][T10343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.315368][T10343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.342070][T10343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.360060][T10343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.371187][T10343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.398140][T10343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.446623][ T5836] Bluetooth: hci4: command tx timeout [ 266.461994][ T11] hsr_slave_0: left promiscuous mode [ 266.489019][ T11] hsr_slave_1: left promiscuous mode [ 266.495090][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.504382][T10503] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 266.526093][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.541416][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.558990][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.592102][T10508] IPv6: addrconf: prefix option has invalid lifetime [ 266.608392][ T11] veth1_macvtap: left promiscuous mode [ 266.614019][ T11] veth0_macvtap: left promiscuous mode [ 266.616780][T10508] IPv6: addrconf: prefix option has invalid lifetime [ 266.624833][ T11] veth1_vlan: left promiscuous mode [ 266.632187][ T11] veth0_vlan: left promiscuous mode [ 267.055710][ T11] team0 (unregistering): Port device team_slave_1 removed [ 267.098976][ T11] team0 (unregistering): Port device team_slave_0 removed [ 267.176632][ T5836] Bluetooth: hci1: command tx timeout [ 267.460806][T10510] __nla_validate_parse: 3 callbacks suppressed [ 267.460828][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 267.480353][T10510] openvswitch: netlink: Missing key (keys=40, expected=80) [ 267.544176][T10512] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1204'. [ 267.730383][T10343] hsr_slave_0: entered promiscuous mode [ 267.737572][T10343] hsr_slave_1: entered promiscuous mode [ 267.743992][T10343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.752348][T10343] Cannot create hsr debugfs directory [ 268.130027][T10520] netlink: 'syz.0.1208': attribute type 10 has an invalid length. [ 268.182959][T10320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 268.229618][T10320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 268.245478][T10320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 268.256839][ T5890] ------------[ cut here ]------------ [ 268.262849][ T5890] Invalid VIF (ffff88802841e9d0) magic 0x0, 08:02:11:00:00:01, 3/0 [ 268.271661][ T5890] WARNING: CPU: 1 PID: 5890 at drivers/net/wireless/virtual/mac80211_hwsim.c:237 mac80211_hwsim_tx+0x1b6f/0x23c0 [ 268.283774][ T5890] Modules linked in: [ 268.287778][ T5890] CPU: 1 UID: 0 PID: 5890 Comm: kworker/1:4 Not tainted 6.14.0-rc1-syzkaller-00090-g1438f5d07b9a #0 [ 268.298637][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 268.308800][ T5890] Workqueue: mld mld_ifc_work [ 268.313540][ T5890] RIP: 0010:mac80211_hwsim_tx+0x1b6f/0x23c0 [ 268.319551][ T5890] Code: 28 84 c0 0f 85 06 08 00 00 45 0f b6 8e 61 04 00 00 48 c7 c7 a0 15 aa 8c 4c 89 f6 44 89 e2 48 89 e9 41 89 d8 e8 d2 7f 48 fa 90 <0f> 0b 90 90 e9 69 f2 ff ff e8 53 d4 87 fa 90 0f 0b 90 e9 d5 f2 ff [ 268.339367][ T5890] RSP: 0000:ffffc900042ceb70 EFLAGS: 00010246 [ 268.345449][ T5890] RAX: 502cbb6abed5c100 RBX: 0000000000000003 RCX: ffff88802fe79e00 [ 268.353504][ T5890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.361579][ T5890] RBP: ffff88802841ee2a R08: ffffffff81800c22 R09: fffffbfff1cfa588 [ 268.369697][ T5890] R10: dffffc0000000000 R11: fffffbfff1cfa588 R12: 0000000000000000 [ 268.377798][ T5890] R13: dffffc0000000000 R14: ffff88802841e9d0 R15: 0000000000000000 [ 268.385839][ T5890] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 268.394886][ T5890] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.401563][ T5890] CR2: 0000000000000000 CR3: 000000007f288000 CR4: 00000000003526f0 [ 268.409646][ T5890] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 268.417726][ T5890] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 268.425758][ T5890] Call Trace: [ 268.429140][ T5890] [ 268.432129][ T5890] ? __warn+0x165/0x4d0 [ 268.436345][ T5890] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 268.441738][ T5890] ? report_bug+0x2b3/0x500 [ 268.446323][ T5890] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 268.451734][ T5890] ? handle_bug+0x60/0x90 [ 268.456216][ T5890] ? exc_invalid_op+0x1a/0x50 [ 268.460988][ T5890] ? asm_exc_invalid_op+0x1a/0x20 [ 268.466129][ T5890] ? __warn_printk+0x292/0x360 [ 268.470996][ T5890] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 268.476353][ T5890] ieee80211_handle_wake_tx_queue+0x1ae/0x2d0 [ 268.482535][ T5890] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 268.489216][ T5890] ? ieee80211_queue_skb+0x18b6/0x24b0 [ 268.494722][ T5890] ? do_raw_spin_unlock+0x13c/0x8b0 [ 268.500155][ T5890] ieee80211_queue_skb+0x1ae9/0x24b0 [ 268.505514][ T5890] ieee80211_tx+0x2c4/0x470 [ 268.510158][ T5890] ? __pfx_ieee80211_tx+0x10/0x10 [ 268.515263][ T5890] ? ieee80211_xmit+0x30f/0x3f0 [ 268.520186][ T5890] __ieee80211_subif_start_xmit+0xe93/0x1600 [ 268.526239][ T5890] ? call_rcu+0x168/0xac0 [ 268.530679][ T5890] ? __dev_queue_xmit+0x87b/0x3f50 [ 268.535851][ T5890] ? __ieee80211_subif_start_xmit+0x300/0x1600 [ 268.536603][ T5836] Bluetooth: hci4: command tx timeout [ 268.542139][ T5890] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 268.553981][ T5890] ? __lock_acquire+0x1397/0x2100 [ 268.559103][ T5890] ieee80211_subif_start_xmit+0xde/0x4d0 [ 268.564771][ T5890] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 268.571115][ T5890] ? __pfx_lock_acquire+0x10/0x10 [ 268.576203][ T5890] dev_hard_start_xmit+0x27a/0x7d0 [ 268.581394][ T5890] __dev_queue_xmit+0x1b73/0x3f50 [ 268.586595][ T5890] ? __dev_queue_xmit+0x2f4/0x3f50 [ 268.591733][ T5890] ? __pfx___dev_queue_xmit+0x10/0x10 [ 268.597201][ T5890] ? neigh_resolve_output+0x450/0x740 [ 268.602641][ T5890] ? read_seqbegin+0x15a/0x2c0 [ 268.607485][ T5890] ? lockdep_hardirqs_on+0x99/0x150 [ 268.612734][ T5890] ? read_seqbegin+0x200/0x2c0 [ 268.617582][ T5890] ? __pfx_read_seqbegin+0x10/0x10 [ 268.622741][ T5890] ? neigh_resolve_output+0x2e5/0x740 [ 268.628224][ T5890] ? eth_header+0x11c/0x1f0 [ 268.632873][ T5890] ? __asan_memcpy+0x40/0x70 [ 268.637519][ T5890] ? eth_header+0x11c/0x1f0 [ 268.642056][ T5890] ? __pfx_eth_header+0x10/0x10 [ 268.646989][ T5890] ? neigh_resolve_output+0x61f/0x740 [ 268.652515][ T5890] ip6_finish_output2+0x12ad/0x1780 [ 268.657801][ T5890] ? ip6_finish_output2+0x61d/0x1780 [ 268.663153][ T5890] ? __pfx_ip6_finish_output2+0x10/0x10 [ 268.668764][ T5890] ? ip6_mtu+0x81/0x3f0 [ 268.673013][ T5890] ip6_finish_output+0x41e/0x840 [ 268.678041][ T5890] NF_HOOK+0x9e/0x430 [ 268.682092][ T5890] ? NF_HOOK+0xfa/0x430 [ 268.686264][ T5890] ? __pfx_NF_HOOK+0x10/0x10 [ 268.690959][ T5890] ? __pfx_dst_output+0x10/0x10 [ 268.695863][ T5890] ? icmp6_dst_alloc+0x3aa/0x420 [ 268.700956][ T5890] mld_sendpack+0x843/0xdb0 [ 268.705512][ T5890] ? __pfx_mld_newpack+0x10/0x10 [ 268.710569][ T5890] ? mld_sendpack+0x1e8/0xdb0 [ 268.715307][ T5890] ? __pfx_mld_sendpack+0x10/0x10 [ 268.720475][ T5890] mld_ifc_work+0x7d9/0xd90 [ 268.725204][ T5890] ? process_scheduled_works+0x976/0x1840 [ 268.731014][ T5890] process_scheduled_works+0xa66/0x1840 [ 268.736711][ T5890] ? __pfx_process_scheduled_works+0x10/0x10 [ 268.742746][ T5890] ? assign_work+0x364/0x3d0 [ 268.747435][ T5890] worker_thread+0x870/0xd30 [ 268.752077][ T5890] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 268.758105][ T5890] ? __kthread_parkme+0x169/0x1d0 [ 268.763195][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 268.768423][ T5890] kthread+0x7a9/0x920 [ 268.772538][ T5890] ? __pfx_kthread+0x10/0x10 [ 268.777232][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 268.782387][ T5890] ? __pfx_kthread+0x10/0x10 [ 268.787080][ T5890] ? __pfx_kthread+0x10/0x10 [ 268.791725][ T5890] ? __pfx_kthread+0x10/0x10 [ 268.796346][ T5890] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.801644][ T5890] ? lockdep_hardirqs_on+0x99/0x150 [ 268.806927][ T5890] ? __pfx_kthread+0x10/0x10 [ 268.811571][ T5890] ret_from_fork+0x4b/0x80 [ 268.816025][ T5890] ? __pfx_kthread+0x10/0x10 [ 268.820813][ T5890] ret_from_fork_asm+0x1a/0x30 [ 268.825638][ T5890] [ 268.828753][ T5890] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 268.836069][ T5890] CPU: 1 UID: 0 PID: 5890 Comm: kworker/1:4 Not tainted 6.14.0-rc1-syzkaller-00090-g1438f5d07b9a #0 [ 268.846871][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 268.856959][ T5890] Workqueue: mld mld_ifc_work [ 268.861661][ T5890] Call Trace: [ 268.864953][ T5890] [ 268.867892][ T5890] dump_stack_lvl+0x241/0x360 [ 268.872583][ T5890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.877823][ T5890] ? __pfx__printk+0x10/0x10 [ 268.882463][ T5890] ? vscnprintf+0x5d/0x90 [ 268.886845][ T5890] panic+0x349/0x880 [ 268.890789][ T5890] ? __warn+0x174/0x4d0 [ 268.894961][ T5890] ? __pfx_panic+0x10/0x10 [ 268.899426][ T5890] ? ret_from_fork_asm+0x1a/0x30 [ 268.904385][ T5890] __warn+0x344/0x4d0 [ 268.908389][ T5890] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 268.913721][ T5890] report_bug+0x2b3/0x500 [ 268.918069][ T5890] ? mac80211_hwsim_tx+0x1b6f/0x23c0 [ 268.923395][ T5890] handle_bug+0x60/0x90 [ 268.927595][ T5890] exc_invalid_op+0x1a/0x50 [ 268.932161][ T5890] asm_exc_invalid_op+0x1a/0x20 [ 268.937040][ T5890] RIP: 0010:mac80211_hwsim_tx+0x1b6f/0x23c0 [ 268.942976][ T5890] Code: 28 84 c0 0f 85 06 08 00 00 45 0f b6 8e 61 04 00 00 48 c7 c7 a0 15 aa 8c 4c 89 f6 44 89 e2 48 89 e9 41 89 d8 e8 d2 7f 48 fa 90 <0f> 0b 90 90 e9 69 f2 ff ff e8 53 d4 87 fa 90 0f 0b 90 e9 d5 f2 ff [ 268.962597][ T5890] RSP: 0000:ffffc900042ceb70 EFLAGS: 00010246 [ 268.968704][ T5890] RAX: 502cbb6abed5c100 RBX: 0000000000000003 RCX: ffff88802fe79e00 [ 268.976698][ T5890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.984737][ T5890] RBP: ffff88802841ee2a R08: ffffffff81800c22 R09: fffffbfff1cfa588 [ 268.992747][ T5890] R10: dffffc0000000000 R11: fffffbfff1cfa588 R12: 0000000000000000 [ 269.000760][ T5890] R13: dffffc0000000000 R14: ffff88802841e9d0 R15: 0000000000000000 [ 269.008783][ T5890] ? __warn_printk+0x292/0x360 [ 269.013690][ T5890] ieee80211_handle_wake_tx_queue+0x1ae/0x2d0 [ 269.019797][ T5890] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 269.026421][ T5890] ? ieee80211_queue_skb+0x18b6/0x24b0 [ 269.031927][ T5890] ? do_raw_spin_unlock+0x13c/0x8b0 [ 269.037176][ T5890] ieee80211_queue_skb+0x1ae9/0x24b0 [ 269.042542][ T5890] ieee80211_tx+0x2c4/0x470 [ 269.047541][ T5890] ? __pfx_ieee80211_tx+0x10/0x10 [ 269.052612][ T5890] ? ieee80211_xmit+0x30f/0x3f0 [ 269.057501][ T5890] __ieee80211_subif_start_xmit+0xe93/0x1600 [ 269.063500][ T5890] ? call_rcu+0x168/0xac0 [ 269.067869][ T5890] ? __dev_queue_xmit+0x87b/0x3f50 [ 269.073092][ T5890] ? __ieee80211_subif_start_xmit+0x300/0x1600 [ 269.079293][ T5890] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 269.085762][ T5890] ? __lock_acquire+0x1397/0x2100 [ 269.090833][ T5890] ieee80211_subif_start_xmit+0xde/0x4d0 [ 269.096532][ T5890] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 269.102833][ T5890] ? __pfx_lock_acquire+0x10/0x10 [ 269.107879][ T5890] dev_hard_start_xmit+0x27a/0x7d0 [ 269.113038][ T5890] __dev_queue_xmit+0x1b73/0x3f50 [ 269.118113][ T5890] ? __dev_queue_xmit+0x2f4/0x3f50 [ 269.123274][ T5890] ? __pfx___dev_queue_xmit+0x10/0x10 [ 269.128699][ T5890] ? neigh_resolve_output+0x450/0x740 [ 269.134084][ T5890] ? read_seqbegin+0x15a/0x2c0 [ 269.138956][ T5890] ? lockdep_hardirqs_on+0x99/0x150 [ 269.144194][ T5890] ? read_seqbegin+0x200/0x2c0 [ 269.148966][ T5890] ? __pfx_read_seqbegin+0x10/0x10 [ 269.154088][ T5890] ? neigh_resolve_output+0x2e5/0x740 [ 269.159472][ T5890] ? eth_header+0x11c/0x1f0 [ 269.163985][ T5890] ? __asan_memcpy+0x40/0x70 [ 269.168589][ T5890] ? eth_header+0x11c/0x1f0 [ 269.173102][ T5890] ? __pfx_eth_header+0x10/0x10 [ 269.177964][ T5890] ? neigh_resolve_output+0x61f/0x740 [ 269.183359][ T5890] ip6_finish_output2+0x12ad/0x1780 [ 269.188589][ T5890] ? ip6_finish_output2+0x61d/0x1780 [ 269.193906][ T5890] ? __pfx_ip6_finish_output2+0x10/0x10 [ 269.199479][ T5890] ? ip6_mtu+0x81/0x3f0 [ 269.203645][ T5890] ip6_finish_output+0x41e/0x840 [ 269.208614][ T5890] NF_HOOK+0x9e/0x430 [ 269.212602][ T5890] ? NF_HOOK+0xfa/0x430 [ 269.216811][ T5890] ? __pfx_NF_HOOK+0x10/0x10 [ 269.221545][ T5890] ? __pfx_dst_output+0x10/0x10 [ 269.226461][ T5890] ? icmp6_dst_alloc+0x3aa/0x420 [ 269.231433][ T5890] mld_sendpack+0x843/0xdb0 [ 269.235958][ T5890] ? __pfx_mld_newpack+0x10/0x10 [ 269.240944][ T5890] ? mld_sendpack+0x1e8/0xdb0 [ 269.245637][ T5890] ? __pfx_mld_sendpack+0x10/0x10 [ 269.250722][ T5890] mld_ifc_work+0x7d9/0xd90 [ 269.255239][ T5890] ? process_scheduled_works+0x976/0x1840 [ 269.261059][ T5890] process_scheduled_works+0xa66/0x1840 [ 269.266644][ T5890] ? __pfx_process_scheduled_works+0x10/0x10 [ 269.272667][ T5890] ? assign_work+0x364/0x3d0 [ 269.277288][ T5890] worker_thread+0x870/0xd30 [ 269.281891][ T5890] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 269.287820][ T5890] ? __kthread_parkme+0x169/0x1d0 [ 269.292894][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 269.298048][ T5890] kthread+0x7a9/0x920 [ 269.302134][ T5890] ? __pfx_kthread+0x10/0x10 [ 269.306747][ T5890] ? __pfx_worker_thread+0x10/0x10 [ 269.311869][ T5890] ? __pfx_kthread+0x10/0x10 [ 269.316483][ T5890] ? __pfx_kthread+0x10/0x10 [ 269.321089][ T5890] ? __pfx_kthread+0x10/0x10 [ 269.325692][ T5890] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.330911][ T5890] ? lockdep_hardirqs_on+0x99/0x150 [ 269.336220][ T5890] ? __pfx_kthread+0x10/0x10 [ 269.340832][ T5890] ret_from_fork+0x4b/0x80 [ 269.345299][ T5890] ? __pfx_kthread+0x10/0x10 [ 269.349934][ T5890] ret_from_fork_asm+0x1a/0x30 [ 269.354723][ T5890] [ 269.358164][ T5890] Kernel Offset: disabled [ 269.362610][ T5890] Rebooting in 86400 seconds..