last executing test programs: 1m18.730830273s ago: executing program 1 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83300fe8000000000000000000041000000aaff020000000000000000000000000001"], 0xffe) 1m17.869685549s ago: executing program 3 (id=502): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) 1m15.661049577s ago: executing program 0 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080004", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32, @ANYRES8=r0], 0x4c}}, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) r3 = socket(0x2, 0x3, 0x7) getsockopt(r3, 0xff, 0x100000000000001, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'macsec0\x00'}}) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = accept4(r0, &(0x7f0000000180)=@l2={0x1f, 0x0, @none}, &(0x7f0000000000)=0x80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000021100000800420000000000"], 0x1c}}, 0x0) mmap(&(0x7f00005a9000/0x1000)=nil, 0x1000, 0x1000001, 0x12, 0xffffffffffffffff, 0xce376000) r8 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast, 0x4}, 0x10) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0x4000801) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="00000000fdffffff00"/28], 0x48) socket(0x1e, 0x1, 0x0) 1m2.115017491s ago: executing program 3 (id=502): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) 1m1.06367167s ago: executing program 1 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83300fe8000000000000000000041000000aaff020000000000000000000000000001"], 0xffe) 1m0.497062017s ago: executing program 0 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080004", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32, @ANYRES8=r0], 0x4c}}, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) r3 = socket(0x2, 0x3, 0x7) getsockopt(r3, 0xff, 0x100000000000001, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'macsec0\x00'}}) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = accept4(r0, &(0x7f0000000180)=@l2={0x1f, 0x0, @none}, &(0x7f0000000000)=0x80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000021100000800420000000000"], 0x1c}}, 0x0) mmap(&(0x7f00005a9000/0x1000)=nil, 0x1000, 0x1000001, 0x12, 0xffffffffffffffff, 0xce376000) r8 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast, 0x4}, 0x10) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0x4000801) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="00000000fdffffff00"/28], 0x48) socket(0x1e, 0x1, 0x0) 45.161632183s ago: executing program 3 (id=502): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) 43.436454287s ago: executing program 1 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83300fe8000000000000000000041000000aaff020000000000000000000000000001"], 0xffe) 42.068187705s ago: executing program 0 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080004", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32, @ANYRES8=r0], 0x4c}}, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) r3 = socket(0x2, 0x3, 0x7) getsockopt(r3, 0xff, 0x100000000000001, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'macsec0\x00'}}) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = accept4(r0, &(0x7f0000000180)=@l2={0x1f, 0x0, @none}, &(0x7f0000000000)=0x80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000021100000800420000000000"], 0x1c}}, 0x0) mmap(&(0x7f00005a9000/0x1000)=nil, 0x1000, 0x1000001, 0x12, 0xffffffffffffffff, 0xce376000) r8 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast, 0x4}, 0x10) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0x4000801) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="00000000fdffffff00"/28], 0x48) socket(0x1e, 0x1, 0x0) 31.46204243s ago: executing program 3 (id=502): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) 30.341962513s ago: executing program 1 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83300fe8000000000000000000041000000aaff020000000000000000000000000001"], 0xffe) 29.228159274s ago: executing program 0 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080004", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32, @ANYRES8=r0], 0x4c}}, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) r3 = socket(0x2, 0x3, 0x7) getsockopt(r3, 0xff, 0x100000000000001, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'macsec0\x00'}}) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = accept4(r0, &(0x7f0000000180)=@l2={0x1f, 0x0, @none}, &(0x7f0000000000)=0x80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000021100000800420000000000"], 0x1c}}, 0x0) mmap(&(0x7f00005a9000/0x1000)=nil, 0x1000, 0x1000001, 0x12, 0xffffffffffffffff, 0xce376000) r8 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast, 0x4}, 0x10) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0x4000801) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="00000000fdffffff00"/28], 0x48) socket(0x1e, 0x1, 0x0) 18.51078117s ago: executing program 3 (id=502): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) 17.190712977s ago: executing program 1 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83300fe8000000000000000000041000000aaff020000000000000000000000000001"], 0xffe) 15.756662808s ago: executing program 0 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080004", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32, @ANYRES8=r0], 0x4c}}, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) r3 = socket(0x2, 0x3, 0x7) getsockopt(r3, 0xff, 0x100000000000001, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'macsec0\x00'}}) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = accept4(r0, &(0x7f0000000180)=@l2={0x1f, 0x0, @none}, &(0x7f0000000000)=0x80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000021100000800420000000000"], 0x1c}}, 0x0) mmap(&(0x7f00005a9000/0x1000)=nil, 0x1000, 0x1000001, 0x12, 0xffffffffffffffff, 0xce376000) r8 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast, 0x4}, 0x10) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0x4000801) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="00000000fdffffff00"/28], 0x48) socket(0x1e, 0x1, 0x0) 4.923220375s ago: executing program 3 (id=502): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) 3.949563575s ago: executing program 1 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83300fe8000000000000000000041000000aaff020000000000000000000000000001"], 0xffe) 2.53625467s ago: executing program 4 (id=1363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d3"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x1c, 0x7, 0x1, 0x0, "cc56fad6afa102229f4eb095433142997ce0823f8c0e0000"}]}], {0x14}}, 0x7c}}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9f01010018000000000000003300000033000000050000000e0000000200000f03000000040000000101000000000000feffffff000000000200000063d038020000000000000a04000000000030617100"], 0x0, 0x51, 0x0, 0x0, 0x1, 0x0, @void, @value}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x1c05, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000360009000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000000036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b0113000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a8cb62d81814c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c550282778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b358f571cd15af64f69951d79e5b57ba3640d345fbe1c9bf7ca74846bf4c2a73a80cee7c15839e2326694f6f5cc5408cbfdef7c6868299b1c8cdaf52740cc2e66daafc00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.454113868s ago: executing program 2 (id=1364): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x28040044}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff0000feff000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2, @ANYBLOB="0a0001"], 0x48}}, 0x0) 2.209929766s ago: executing program 4 (id=1365): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22, &(0x7f0000000380)=@ringbuf={{}, {}, {}, [@kfunc, @generic, @map_idx, @ringbuf_query, @printk={@s}, @jmp, @map_fd]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 2.036314983s ago: executing program 2 (id=1366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x67, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8}]}, 0x3c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010100000000000000008100000008000300", @ANYRES32=r5, @ANYBLOB="0a0006000802110000010000060066008e8800004a0033"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xd0, r4, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PEER_MEASUREMENTS={0xa0, 0x111, 0x0, 0x1, {0x9c, 0x5, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x127}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xdd8d}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x158}, @NL80211_ATTR_CENTER_FREQ2={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x200}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x10010) 1.992216966s ago: executing program 4 (id=1367): socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4040) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000300000000000188"], 0xffe) 1.918851624s ago: executing program 2 (id=1368): socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000014001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 1.685198944s ago: executing program 4 (id=1369): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a000000080001"], 0x1c}}, 0x804) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="012890000001000be8ff1b"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}}, 0x0) 1.664694906s ago: executing program 0 (id=801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080004", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYBLOB="4c00000010001fff0d00"/20, @ANYRES32, @ANYRES8=r0], 0x4c}}, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'erspan0\x00'}}, 0x1e) r3 = socket(0x2, 0x3, 0x7) getsockopt(r3, 0xff, 0x100000000000001, 0x0, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'macsec0\x00'}}) syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = accept4(r0, &(0x7f0000000180)=@l2={0x1f, 0x0, @none}, &(0x7f0000000000)=0x80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000021100000800420000000000"], 0x1c}}, 0x0) mmap(&(0x7f00005a9000/0x1000)=nil, 0x1000, 0x1000001, 0x12, 0xffffffffffffffff, 0xce376000) r8 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @broadcast, 0x4}, 0x10) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x48, r7, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1a}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0x4000801) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="00000000fdffffff00"/28], 0x48) socket(0x1e, 0x1, 0x0) 527.497084ms ago: executing program 2 (id=1370): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)={0x30, r2, 0x1, 0x1, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x30}}, 0x8000) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x164, r0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x2a}}}}, [@NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x0, 0xb}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xe8, 0x84, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x43}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xf}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="7df6fcc4cde1"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x7fffffff}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x3ff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x17b}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x401}, @NL80211_BAND_LC={0x8, 0x5, 0x100}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x1d0c}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x5}]}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}, {0x8, 0x0, 0x7f}]}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x8}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="74512b952ad4"}]}, 0x164}, 0x1, 0x0, 0x0, 0x10}, 0x2400c010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x17}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/57, 0x39}], 0x1, &(0x7f0000000400)=""/82, 0x52}, 0x0) 526.797246ms ago: executing program 4 (id=1371): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xffffffffffffffff, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) socket$igmp6(0xa, 0x3, 0x2) sendmsg$can_bcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0xb, &(0x7f0000001800)=0x200, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="07000000000000000000000000001700", @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000200000000000000000000004acede967c288ef4"], 0x20000408}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'dvmrp0\x00', {0x3}, 0xfff7}) 366.646573ms ago: executing program 2 (id=1372): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000011000101000000000000110000000000", @ANYRES32=r2], 0x20}}, 0x0) 25.104322ms ago: executing program 2 (id=1373): r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000000c0)={0x20000000}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000400)={r0, 0x9, 0x76, 0x8000000000000001}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009000000080002"], 0x5c}, 0x1, 0x0, 0x0, 0xfff7}, 0x0) 0s ago: executing program 4 (id=1374): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3b000200010001", 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x80b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x3a, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0a0000000200000000000000", 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)=@newtaction={0x18, 0x76, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300}, [{0x4}]}, 0x18}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) poll(&(0x7f0000000100)=[{r0, 0x22}, {r0, 0x40}, {r0, 0x8000}, {r0, 0x1000}, {r2, 0x5208}, {r0, 0x4}, {r0, 0x2a}, {r0, 0x2030}], 0x8, 0x7f) r7 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r7, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r6) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@dellink={0x28, 0x11, 0x1, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, 0x1, 0x8001}, [@IFLA_OPERSTATE={0x5, 0x10, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) r14 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x80000, 0x0) ioctl$TUNSETPERSIST(r14, 0x400454cb, 0x1) setsockopt$packet_int(r13, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r13, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x1003f, 0x0, &(0x7f0000000140)={0x11, 0x0, r15}, 0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xa0}, 0xc, &(0x7f0000000680)={&(0x7f00000003c0)={0x28c, r8, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x50}, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x1f, 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0]}, 0x40) kernel console output (not intermixed with test programs): ragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.663847][ T9388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.677074][ T9341] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.914503][ T9388] hsr_slave_0: entered promiscuous mode [ 218.927134][ T9388] hsr_slave_1: entered promiscuous mode [ 218.939930][ T9388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.947717][ T9388] Cannot create hsr debugfs directory [ 219.117332][ T1313] hsr_slave_0: left promiscuous mode [ 219.136718][ T1313] hsr_slave_1: left promiscuous mode [ 219.154782][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.166499][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.181934][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.194810][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.197166][ T9495] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.225189][ T1313] hsr_slave_0: left promiscuous mode [ 219.231725][ T1313] hsr_slave_1: left promiscuous mode [ 219.237777][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.255249][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.263631][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.272396][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.322993][ T9500] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1059'. [ 219.338787][ T1313] veth1_macvtap: left promiscuous mode [ 219.344437][ T1313] veth0_macvtap: left promiscuous mode [ 219.350277][ T1313] veth1_vlan: left promiscuous mode [ 219.355632][ T1313] veth0_vlan: left promiscuous mode [ 219.363032][ T1313] veth1_macvtap: left promiscuous mode [ 219.370702][ T1313] veth0_macvtap: left promiscuous mode [ 219.376397][ T1313] veth1_vlan: left promiscuous mode [ 219.382077][ T1313] veth0_vlan: left promiscuous mode [ 219.413826][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1060'. [ 219.423871][ T9502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1060'. [ 219.435788][ T9498] Bluetooth: MGMT ver 1.23 [ 220.028503][ T1313] team0 (unregistering): Port device team_slave_1 removed [ 220.067692][ T1313] team0 (unregistering): Port device team_slave_0 removed [ 220.570524][ T50] Bluetooth: hci3: command tx timeout [ 220.730563][ T1313] team0 (unregistering): Port device team_slave_1 removed [ 220.770182][ T1313] team0 (unregistering): Port device team_slave_0 removed [ 221.235854][ T9516] openvswitch: netlink: Actions may not be safe on all matching packets [ 221.363242][ T9338] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 221.444236][ T9338] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 221.494081][ T9338] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 221.524079][ T9338] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 221.597242][ T9341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.734769][ T9341] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.787786][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.795051][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.848815][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 221.871416][ T8534] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.878633][ T8534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.023945][ T9545] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1074'. [ 222.148111][ T9338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.181919][ T9388] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.219969][ T9388] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.267257][ T9338] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.343311][ T9388] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.374433][ T9388] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.395806][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.403051][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.441875][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.449156][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.536139][ T9341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.618276][ T9338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.707057][ T9341] veth0_vlan: entered promiscuous mode [ 222.774277][ T9341] veth1_vlan: entered promiscuous mode [ 222.893455][ T9341] veth0_macvtap: entered promiscuous mode [ 222.909369][ T9388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.920753][ T9341] veth1_macvtap: entered promiscuous mode [ 222.993058][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.022367][ T9388] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.072671][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.083688][ T9341] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.096790][ T9341] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.119171][ T9341] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.131924][ T9341] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.140160][ T9595] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1086'. [ 223.153309][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.160513][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.216842][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.223999][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.332425][ T9338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.392423][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.415970][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.499560][ T8534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.520141][ T8534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.595071][ T9338] veth0_vlan: entered promiscuous mode [ 223.642484][ T9338] veth1_vlan: entered promiscuous mode [ 223.795229][ T9607] FAULT_INJECTION: forcing a failure. [ 223.795229][ T9607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.843388][ T9607] CPU: 0 UID: 0 PID: 9607 Comm: syz.2.1089 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 223.843416][ T9607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.843426][ T9607] Call Trace: [ 223.843434][ T9607] [ 223.843443][ T9607] dump_stack_lvl+0x189/0x250 [ 223.843473][ T9607] ? __pfx____ratelimit+0x10/0x10 [ 223.843499][ T9607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.843523][ T9607] ? __pfx__printk+0x10/0x10 [ 223.843540][ T9607] ? __might_fault+0xb0/0x130 [ 223.843564][ T9607] should_fail_ex+0x414/0x560 [ 223.843589][ T9607] _copy_from_user+0x2d/0xb0 [ 223.843605][ T9607] ___sys_recvmsg+0x12e/0x510 [ 223.843629][ T9607] ? __pfx____sys_recvmsg+0x10/0x10 [ 223.843682][ T9607] ? __might_fault+0xb0/0x130 [ 223.843700][ T9607] do_recvmmsg+0x307/0x770 [ 223.843728][ T9607] ? __pfx_do_recvmmsg+0x10/0x10 [ 223.843758][ T9607] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 223.843797][ T9607] __x64_sys_recvmmsg+0x190/0x240 [ 223.843819][ T9607] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 223.843836][ T9607] ? rcu_is_watching+0x15/0xb0 [ 223.843861][ T9607] ? do_syscall_64+0xbe/0x3b0 [ 223.843877][ T9607] do_syscall_64+0xfa/0x3b0 [ 223.843889][ T9607] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.843908][ T9607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.843921][ T9607] ? clear_bhb_loop+0x60/0xb0 [ 223.843938][ T9607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.843951][ T9607] RIP: 0033:0x7f013af8e929 [ 223.843965][ T9607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.843977][ T9607] RSP: 002b:00007f0138df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 223.843993][ T9607] RAX: ffffffffffffffda RBX: 00007f013b1b5fa0 RCX: 00007f013af8e929 [ 223.844003][ T9607] RDX: 0000000000000008 RSI: 0000200000002380 RDI: 0000000000000003 [ 223.844013][ T9607] RBP: 00007f0138df6090 R08: 0000000000000000 R09: 0000000000000000 [ 223.844021][ T9607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.844029][ T9607] R13: 0000000000000000 R14: 00007f013b1b5fa0 R15: 00007ffe292bffe8 [ 223.844059][ T9607] [ 224.065043][ T9338] veth0_macvtap: entered promiscuous mode [ 224.075933][ T9338] veth1_macvtap: entered promiscuous mode [ 224.096270][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.110304][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.121763][ T9338] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.132266][ T9338] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.141083][ T9338] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.149845][ T9338] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.296761][ T8534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.314884][ T8534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.394533][ T8534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.418012][ T9388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.419553][ T8534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.652033][ T1313] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.824228][ T9388] veth0_vlan: entered promiscuous mode [ 224.843856][ T9388] veth1_vlan: entered promiscuous mode [ 224.870545][ T9388] veth0_macvtap: entered promiscuous mode [ 224.882277][ T9388] veth1_macvtap: entered promiscuous mode [ 224.910014][ T9388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.926669][ T9388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.943519][ T9388] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.952982][ T9388] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.962005][ T9388] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.971727][ T9388] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.031624][ T1313] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.074717][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.084295][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.118242][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.126693][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.371513][ T1313] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.464146][ T1313] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.677170][ T1313] bridge_slave_1: left allmulticast mode [ 225.682962][ T1313] bridge_slave_1: left promiscuous mode [ 225.690343][ T1313] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.700627][ T1313] bridge_slave_0: left allmulticast mode [ 225.706303][ T1313] bridge_slave_0: left promiscuous mode [ 225.713240][ T1313] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.813745][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 225.825683][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 225.835321][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 225.854021][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 225.865140][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.215521][ T1313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.227398][ T1313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.244441][ T1313] bond0 (unregistering): Released all slaves [ 226.484641][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.505373][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.519390][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.534087][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.543451][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.674053][ T9634] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 226.701832][ T9634] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 226.710513][ T9634] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1093'. [ 226.786962][ T1313] hsr_slave_0: left promiscuous mode [ 226.800067][ T1313] hsr_slave_1: left promiscuous mode [ 226.806240][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.822147][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.835211][ T1313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.843040][ T1313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.867482][ T1313] veth1_macvtap: left promiscuous mode [ 226.873410][ T1313] veth0_macvtap: left promiscuous mode [ 226.879299][ T1313] veth1_vlan: left promiscuous mode [ 226.884924][ T1313] veth0_vlan: left promiscuous mode [ 227.097811][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.115702][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.125439][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.135661][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.144502][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.416819][ T1313] team0 (unregistering): Port device team_slave_1 removed [ 227.454079][ T1313] team0 (unregistering): Port device team_slave_0 removed [ 227.931633][ T50] Bluetooth: hci0: command tx timeout [ 227.971586][ T9615] chnl_net:caif_netlink_parms(): no params data found [ 228.001145][ T9648] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1096'. [ 228.260658][ T9663] netlink: 'syz.4.1101': attribute type 1 has an invalid length. [ 228.329867][ T9663] 8021q: adding VLAN 0 to HW filter on device bond13 [ 228.440996][ T9615] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.458846][ T9615] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.476427][ T9615] bridge_slave_0: entered allmulticast mode [ 228.511849][ T9615] bridge_slave_0: entered promiscuous mode [ 228.544932][ T9615] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.552604][ T9615] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.561994][ T9615] bridge_slave_1: entered allmulticast mode [ 228.569525][ T50] Bluetooth: hci1: command tx timeout [ 228.570261][ T9615] bridge_slave_1: entered promiscuous mode [ 228.595828][ T9673] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1104'. [ 228.629579][ T9615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.642356][ T9625] chnl_net:caif_netlink_parms(): no params data found [ 228.672169][ T9615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.709715][ T9675] FAULT_INJECTION: forcing a failure. [ 228.709715][ T9675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.713985][ T9615] team0: Port device team_slave_0 added [ 228.723191][ T9675] CPU: 0 UID: 0 PID: 9675 Comm: syz.4.1105 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 228.723215][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.723226][ T9675] Call Trace: [ 228.723233][ T9675] [ 228.723240][ T9675] dump_stack_lvl+0x189/0x250 [ 228.723270][ T9675] ? __pfx____ratelimit+0x10/0x10 [ 228.723295][ T9675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.723320][ T9675] ? __pfx__printk+0x10/0x10 [ 228.723339][ T9675] ? __might_fault+0xb0/0x130 [ 228.723366][ T9675] should_fail_ex+0x414/0x560 [ 228.723393][ T9675] _copy_from_user+0x2d/0xb0 [ 228.723411][ T9675] ___sys_recvmsg+0x12e/0x510 [ 228.723439][ T9675] ? __pfx____sys_recvmsg+0x10/0x10 [ 228.723491][ T9675] ? __might_fault+0xb0/0x130 [ 228.723511][ T9675] do_recvmmsg+0x307/0x770 [ 228.723549][ T9675] ? __pfx_do_recvmmsg+0x10/0x10 [ 228.723582][ T9675] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 228.723625][ T9675] __x64_sys_recvmmsg+0x190/0x240 [ 228.723649][ T9675] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 228.723668][ T9675] ? rcu_is_watching+0x15/0xb0 [ 228.723698][ T9675] ? do_syscall_64+0xbe/0x3b0 [ 228.723718][ T9675] do_syscall_64+0xfa/0x3b0 [ 228.723732][ T9675] ? lockdep_hardirqs_on+0x9c/0x150 [ 228.723755][ T9675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.723772][ T9675] ? clear_bhb_loop+0x60/0xb0 [ 228.723792][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.723809][ T9675] RIP: 0033:0x7fe9bd98e929 [ 228.723825][ T9675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.723839][ T9675] RSP: 002b:00007fe9be826038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 228.723858][ T9675] RAX: ffffffffffffffda RBX: 00007fe9bdbb5fa0 RCX: 00007fe9bd98e929 [ 228.723870][ T9675] RDX: 0000000000000008 RSI: 0000200000002380 RDI: 0000000000000003 [ 228.723881][ T9675] RBP: 00007fe9be826090 R08: 0000000000000000 R09: 0000000000000000 [ 228.723891][ T9675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.723901][ T9675] R13: 0000000000000000 R14: 00007fe9bdbb5fa0 R15: 00007ffd90f45898 [ 228.723930][ T9675] [ 228.788093][ T9679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1106'. [ 228.991127][ T9615] team0: Port device team_slave_1 added [ 229.193673][ T9679] netlink: 185448 bytes leftover after parsing attributes in process `syz.4.1106'. [ 229.208826][ T50] Bluetooth: hci3: command tx timeout [ 229.218748][ T9615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.226455][ T9615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.285220][ T9615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.328493][ T9625] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.339104][ T9625] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.346424][ T9625] bridge_slave_0: entered allmulticast mode [ 229.357762][ T9625] bridge_slave_0: entered promiscuous mode [ 229.445123][ T8534] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.490857][ T9615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.497844][ T9615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.531161][ T9615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.551733][ T9625] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.559419][ T9625] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.566630][ T9625] bridge_slave_1: entered allmulticast mode [ 229.574029][ T9625] bridge_slave_1: entered promiscuous mode [ 229.653512][ T8534] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.796103][ T8534] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.815955][ T9625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.880432][ T9615] hsr_slave_0: entered promiscuous mode [ 229.891090][ T9615] hsr_slave_1: entered promiscuous mode [ 229.907637][ T9625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.946773][ T8534] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.964497][ T9644] chnl_net:caif_netlink_parms(): no params data found [ 230.015332][ T50] Bluetooth: hci0: command tx timeout [ 230.075345][ T9625] team0: Port device team_slave_0 added [ 230.084423][ T9625] team0: Port device team_slave_1 added [ 230.225640][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.232802][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.260141][ T9625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.286911][ T9731] netlink: 'syz.2.1120': attribute type 1 has an invalid length. [ 230.354434][ T9734] gretap1: entered promiscuous mode [ 230.366594][ T9625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.373961][ T9625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.401786][ T9625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.437914][ T9731] 8021q: adding VLAN 0 to HW filter on device bond8 [ 230.499659][ T9644] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.506892][ T9644] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.514890][ T9644] bridge_slave_0: entered allmulticast mode [ 230.524782][ T9644] bridge_slave_0: entered promiscuous mode [ 230.539045][ T9644] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.547414][ T9644] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.554911][ T9644] bridge_slave_1: entered allmulticast mode [ 230.563064][ T9644] bridge_slave_1: entered promiscuous mode [ 230.649178][ T50] Bluetooth: hci1: command tx timeout [ 230.711173][ T9644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.734866][ T9625] hsr_slave_0: entered promiscuous mode [ 230.743633][ T9625] hsr_slave_1: entered promiscuous mode [ 230.755628][ T9625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.765639][ T9625] Cannot create hsr debugfs directory [ 230.862850][ T8534] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.908133][ T9644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.984961][ T8534] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.094253][ T9644] team0: Port device team_slave_0 added [ 231.103634][ T9644] team0: Port device team_slave_1 added [ 231.135536][ T8534] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.235150][ T8534] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.299576][ T50] Bluetooth: hci3: command tx timeout [ 231.322642][ T9644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.348614][ T9644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.383494][ T9644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.434899][ T9644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.438437][ T9767] netlink: 'syz.4.1132': attribute type 21 has an invalid length. [ 231.442260][ T9644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.442319][ T9644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.489794][ T9767] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1132'. [ 231.544627][ T9767] netlink: 'syz.4.1132': attribute type 5 has an invalid length. [ 231.555639][ T9767] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1132'. [ 231.581245][ T9644] hsr_slave_0: entered promiscuous mode [ 231.593542][ T9644] hsr_slave_1: entered promiscuous mode [ 231.602801][ T9644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.612157][ T9644] Cannot create hsr debugfs directory [ 231.618030][ T9770] IPVS: ip_vs_add_dest(): server weight less than zero [ 231.626170][ T6878] IPVS: starting estimator thread 0... [ 231.728660][ T9772] IPVS: using max 30 ests per chain, 72000 per kthread [ 232.011825][ T9787] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.029771][ T9788] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1140'. [ 232.070416][ T8534] bridge_slave_1: left allmulticast mode [ 232.076134][ T8534] bridge_slave_1: left promiscuous mode [ 232.089088][ T50] Bluetooth: hci0: command tx timeout [ 232.089505][ T8534] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.126809][ T8534] bridge_slave_0: left allmulticast mode [ 232.142806][ T8534] bridge_slave_0: left promiscuous mode [ 232.149348][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.162734][ T8534] bridge_slave_1: left allmulticast mode [ 232.168443][ T8534] bridge_slave_1: left promiscuous mode [ 232.175061][ T8534] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.186706][ T8534] bridge_slave_0: left allmulticast mode [ 232.193475][ T8534] bridge_slave_0: left promiscuous mode [ 232.199805][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.535717][ T8534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.546473][ T8534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.556730][ T8534] bond0 (unregistering): Released all slaves [ 232.728715][ T50] Bluetooth: hci1: command tx timeout [ 232.817082][ T8534] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.827929][ T8534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.838081][ T8534] bond0 (unregistering): Released all slaves [ 232.862934][ T9790] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1141'. [ 232.954126][ T9615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.996257][ T9615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 233.016663][ T9615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 233.098193][ T9615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 233.142289][ T9797] syzkaller0: entered promiscuous mode [ 233.147816][ T9797] syzkaller0: entered allmulticast mode [ 233.379365][ T50] Bluetooth: hci3: command tx timeout [ 234.178981][ T50] Bluetooth: hci0: command tx timeout [ 234.485290][ T9809] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1146'. [ 234.675034][ T9615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.745733][ T8534] hsr_slave_0: left promiscuous mode [ 234.761991][ T8534] hsr_slave_1: left promiscuous mode [ 234.779109][ T8534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.786867][ T8534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.803115][ T8534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.810882][ T50] Bluetooth: hci1: command tx timeout [ 234.818935][ T8534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.845661][ T8534] hsr_slave_0: left promiscuous mode [ 234.856828][ T8534] hsr_slave_1: left promiscuous mode [ 234.864268][ T8534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.872148][ T8534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.881511][ T8534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.890009][ T8534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.892935][ T9825] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1153'. [ 234.949039][ T8534] veth1_macvtap: left promiscuous mode [ 234.954599][ T8534] veth0_macvtap: left promiscuous mode [ 234.960354][ T8534] veth1_vlan: left promiscuous mode [ 234.965706][ T8534] veth0_vlan: left promiscuous mode [ 234.973896][ T8534] veth1_macvtap: left promiscuous mode [ 234.979542][ T8534] veth0_macvtap: left promiscuous mode [ 234.985108][ T8534] veth1_vlan: left promiscuous mode [ 234.990515][ T8534] veth0_vlan: left promiscuous mode [ 235.450324][ T50] Bluetooth: hci3: command tx timeout [ 235.467058][ T8534] team0 (unregistering): Port device team_slave_1 removed [ 235.503302][ T8534] team0 (unregistering): Port device team_slave_0 removed [ 236.122172][ T8534] team0 (unregistering): Port device team_slave_1 removed [ 236.156212][ T8534] team0 (unregistering): Port device team_slave_0 removed [ 236.537311][ T9615] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.596411][ T3429] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.603614][ T3429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.626861][ T3429] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.634062][ T3429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.660265][ T9830] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1155'. [ 236.711738][ T9625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 236.746216][ T9625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 236.833470][ T9625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 236.856433][ T9625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 236.956210][ T9837] syzkaller0: entered promiscuous mode [ 236.961916][ T9837] syzkaller0: entered allmulticast mode [ 236.983472][ T9845] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1158'. [ 237.067067][ T9849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1158'. [ 237.072512][ T9846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1158'. [ 238.485673][ T9625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.613245][ T9625] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.633172][ T9865] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1163'. [ 238.662762][ T9615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.687385][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.694631][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.732888][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.740100][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.779750][ T9644] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 238.795848][ T9871] netlink: 'syz.4.1165': attribute type 1 has an invalid length. [ 238.816581][ T9644] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 238.827595][ T9644] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 238.865715][ T9871] 8021q: adding VLAN 0 to HW filter on device bond14 [ 238.874941][ T9644] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 238.982894][ T9615] veth0_vlan: entered promiscuous mode [ 238.998499][ T9615] veth1_vlan: entered promiscuous mode [ 239.106555][ T9886] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1168'. [ 239.121968][ T9615] veth0_macvtap: entered promiscuous mode [ 239.154167][ T9615] veth1_macvtap: entered promiscuous mode [ 239.206977][ T9615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.232730][ T9644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.273525][ T9615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.317501][ T9615] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.326859][ T9615] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.336499][ T9615] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.345405][ T9615] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.366744][ T9644] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.424979][ T3431] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.432220][ T3431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.445377][ T9893] lo: entered promiscuous mode [ 239.453718][ T9893] tunl0: entered promiscuous mode [ 239.461785][ T9893] gre0: entered promiscuous mode [ 239.471882][ T9893] gretap0: entered promiscuous mode [ 239.481250][ T9893] erspan0: entered promiscuous mode [ 239.491102][ T9893] ip_vti0: entered promiscuous mode [ 239.522473][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.529679][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.550359][ T9625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.687666][ T9896] syzkaller0: entered promiscuous mode [ 239.693717][ T9896] syzkaller0: entered allmulticast mode [ 239.715672][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.726771][ T9644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.737733][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.972883][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.998813][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.063781][ T9625] veth0_vlan: entered promiscuous mode [ 241.098140][ T9625] veth1_vlan: entered promiscuous mode [ 241.301272][ T9625] veth0_macvtap: entered promiscuous mode [ 241.324707][ T9915] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1175'. [ 241.338592][ T9625] veth1_macvtap: entered promiscuous mode [ 241.369599][ T9917] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1176'. [ 241.387338][ T9644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.401793][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.467048][ T9920] netlink: 'syz.4.1177': attribute type 1 has an invalid length. [ 241.547515][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.604052][ T9920] 8021q: adding VLAN 0 to HW filter on device bond15 [ 241.643750][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.666964][ T9625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 241.711160][ T9625] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.720402][ T9625] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.729727][ T9625] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.738450][ T9625] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.775328][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.800751][ T9644] veth0_vlan: entered promiscuous mode [ 241.817958][ T9644] veth1_vlan: entered promiscuous mode [ 241.844653][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.927759][ T9644] veth0_macvtap: entered promiscuous mode [ 241.952730][ T9644] veth1_macvtap: entered promiscuous mode [ 241.968404][ T3429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.976597][ T3429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.023023][ T9644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.071087][ T9644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.096038][ T3429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.096719][ T36] bridge_slave_1: left allmulticast mode [ 242.111677][ T36] bridge_slave_1: left promiscuous mode [ 242.114989][ T3429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.118343][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.135076][ T36] bridge_slave_0: left allmulticast mode [ 242.141372][ T36] bridge_slave_0: left promiscuous mode [ 242.147045][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.412762][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.423241][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.433431][ T36] bond0 (unregistering): Released all slaves [ 242.447437][ T9644] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.457078][ T9644] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.465885][ T9644] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.474653][ T9644] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.712066][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1179'. [ 242.722460][ T9928] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1179'. [ 242.738143][ T9928] netlink: 50 bytes leftover after parsing attributes in process `syz.4.1179'. [ 242.908156][ T8534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.927174][ T8534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.959631][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.973215][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.993969][ T36] hsr_slave_0: left promiscuous mode [ 242.993996][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 243.006463][ T36] hsr_slave_1: left promiscuous mode [ 243.012841][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.020525][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 243.022449][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.036510][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 243.037162][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.052455][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.080248][ T36] veth1_macvtap: left promiscuous mode [ 243.085798][ T36] veth0_macvtap: left promiscuous mode [ 243.092257][ T36] veth1_vlan: left promiscuous mode [ 243.097553][ T36] veth0_vlan: left promiscuous mode [ 243.597281][ T36] team0 (unregistering): Port device team_slave_1 removed [ 243.634096][ T36] team0 (unregistering): Port device team_slave_0 removed [ 243.967753][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.989921][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.247627][ T9934] chnl_net:caif_netlink_parms(): no params data found [ 244.318374][ T9934] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.326698][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.334175][ T9934] bridge_slave_0: entered allmulticast mode [ 244.341960][ T9934] bridge_slave_0: entered promiscuous mode [ 244.350525][ T9934] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.357732][ T9934] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.365980][ T9934] bridge_slave_1: entered allmulticast mode [ 244.373734][ T9934] bridge_slave_1: entered promiscuous mode [ 244.407262][ T9934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.421515][ T9934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.463534][ T9934] team0: Port device team_slave_0 added [ 244.472860][ T9934] team0: Port device team_slave_1 added [ 244.593321][ T9945] lo: entered promiscuous mode [ 244.619260][ T9945] tunl0: entered promiscuous mode [ 244.625769][ T9945] gre0: entered promiscuous mode [ 244.649869][ T9945] gretap0: entered promiscuous mode [ 244.655699][ T9945] erspan0: entered promiscuous mode [ 244.699115][ T9945] ip_vti0: entered promiscuous mode [ 244.761847][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.790501][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.827264][ T9934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.864701][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.886290][ T9934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.897952][ T5155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.907149][ T5155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.915236][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.922741][ T9934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.951362][ T9934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.964631][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.980531][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.022417][ T9934] hsr_slave_0: entered promiscuous mode [ 245.033099][ T9934] hsr_slave_1: entered promiscuous mode [ 245.102005][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.128885][ T50] Bluetooth: hci0: command tx timeout [ 245.195994][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.272353][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.402839][ T9948] chnl_net:caif_netlink_parms(): no params data found [ 245.506383][ T9959] FAULT_INJECTION: forcing a failure. [ 245.506383][ T9959] name failslab, interval 1, probability 0, space 0, times 0 [ 245.595693][ T9959] CPU: 1 UID: 0 PID: 9959 Comm: syz.2.1183 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 245.595727][ T9959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.595738][ T9959] Call Trace: [ 245.595745][ T9959] [ 245.595754][ T9959] dump_stack_lvl+0x189/0x250 [ 245.595785][ T9959] ? __pfx____ratelimit+0x10/0x10 [ 245.595811][ T9959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.595835][ T9959] ? __pfx__printk+0x10/0x10 [ 245.595861][ T9959] ? __pfx___might_resched+0x10/0x10 [ 245.595890][ T9959] should_fail_ex+0x414/0x560 [ 245.595918][ T9959] should_failslab+0xa8/0x100 [ 245.595939][ T9959] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 245.595957][ T9959] ? __alloc_skb+0x112/0x2d0 [ 245.595981][ T9959] __alloc_skb+0x112/0x2d0 [ 245.596004][ T9959] netlink_sendmsg+0x5c6/0xb30 [ 245.596034][ T9959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.596058][ T9959] ? aa_sock_msg_perm+0x94/0x160 [ 245.596082][ T9959] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 245.596103][ T9959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.596124][ T9959] __sock_sendmsg+0x21c/0x270 [ 245.596152][ T9959] ____sys_sendmsg+0x505/0x830 [ 245.596178][ T9959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.596209][ T9959] ? import_iovec+0x74/0xa0 [ 245.596231][ T9959] ___sys_sendmsg+0x21f/0x2a0 [ 245.596254][ T9959] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.596312][ T9959] ? __fget_files+0x2a/0x420 [ 245.596330][ T9959] ? __fget_files+0x3a0/0x420 [ 245.596360][ T9959] __x64_sys_sendmsg+0x19b/0x260 [ 245.596384][ T9959] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 245.596415][ T9959] ? __pfx_ksys_write+0x10/0x10 [ 245.596429][ T9959] ? rcu_is_watching+0x15/0xb0 [ 245.596458][ T9959] ? do_syscall_64+0xbe/0x3b0 [ 245.596478][ T9959] do_syscall_64+0xfa/0x3b0 [ 245.596492][ T9959] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.596515][ T9959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.596532][ T9959] ? clear_bhb_loop+0x60/0xb0 [ 245.596553][ T9959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.596569][ T9959] RIP: 0033:0x7f013af8e929 [ 245.596585][ T9959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.596600][ T9959] RSP: 002b:00007f0138df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.596626][ T9959] RAX: ffffffffffffffda RBX: 00007f013b1b5fa0 RCX: 00007f013af8e929 [ 245.596639][ T9959] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 245.596650][ T9959] RBP: 00007f0138df6090 R08: 0000000000000000 R09: 0000000000000000 [ 245.596661][ T9959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.596671][ T9959] R13: 0000000000000000 R14: 00007f013b1b5fa0 R15: 00007ffe292bffe8 [ 245.596704][ T9959] [ 245.892864][ T9948] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.903922][ T9948] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.911262][ T9948] bridge_slave_0: entered allmulticast mode [ 245.918902][ T9948] bridge_slave_0: entered promiscuous mode [ 245.919367][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 245.927094][ T9948] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.940465][ T9948] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.947671][ T9948] bridge_slave_1: entered allmulticast mode [ 245.955372][ T9948] bridge_slave_1: entered promiscuous mode [ 245.989321][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 246.002708][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 246.024909][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 246.032779][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 246.135335][ T9948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.180106][ T9948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.196668][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1187'. [ 246.236085][ T9973] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1187'. [ 246.252417][ T9973] netlink: 'syz.4.1187': attribute type 14 has an invalid length. [ 246.332287][ T9948] team0: Port device team_slave_0 added [ 246.440834][ T9948] team0: Port device team_slave_1 added [ 246.545796][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.556925][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.583799][ T9948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.627075][ T9948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.646922][ T9948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.677455][ T9948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.757015][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.810456][ T9934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 246.834549][ T9934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 246.886889][ T9934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 246.951154][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.982346][ T9934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 247.002396][ T9948] hsr_slave_0: entered promiscuous mode [ 247.013336][ T9948] hsr_slave_1: entered promiscuous mode [ 247.025034][ T9948] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.038065][ T9948] Cannot create hsr debugfs directory [ 247.059082][ T50] Bluetooth: hci1: command tx timeout [ 247.093874][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.201732][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.212348][ T50] Bluetooth: hci0: command tx timeout [ 247.392049][ T9995] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1193'. [ 247.455764][ T9961] chnl_net:caif_netlink_parms(): no params data found [ 247.674063][ T36] bridge_slave_1: left allmulticast mode [ 247.682399][ T36] bridge_slave_1: left promiscuous mode [ 247.683606][T10003] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1195'. [ 247.688162][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.723595][ T36] bridge_slave_0: left allmulticast mode [ 247.737648][ T36] bridge_slave_0: left promiscuous mode [ 247.744617][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.774077][ T36] bridge_slave_1: left allmulticast mode [ 247.785992][ T36] bridge_slave_1: left promiscuous mode [ 247.792225][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.814103][ T36] bridge_slave_0: left allmulticast mode [ 247.821731][ T36] bridge_slave_0: left promiscuous mode [ 247.827560][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.089614][ T50] Bluetooth: hci3: command tx timeout [ 248.198476][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.210435][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.220415][ T36] bond0 (unregistering): Released all slaves [ 248.479273][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.491081][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.501103][ T36] bond0 (unregistering): Released all slaves [ 248.543694][T10018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.608803][ T9961] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.615905][ T9961] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.645087][ T9961] bridge_slave_0: entered allmulticast mode [ 248.655597][ T9961] bridge_slave_0: entered promiscuous mode [ 248.684994][ T9961] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.707174][T10023] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1202'. [ 248.716519][ T9961] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.723952][ T9961] bridge_slave_1: entered allmulticast mode [ 248.750182][ T9961] bridge_slave_1: entered promiscuous mode [ 248.896645][T10031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.968257][ T9961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.994998][ T9961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.054728][T10037] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1205'. [ 249.100183][T10035] netlink: 'syz.2.1206': attribute type 83 has an invalid length. [ 249.108607][ T9961] team0: Port device team_slave_0 added [ 249.128886][ T50] Bluetooth: hci1: command tx timeout [ 249.145221][ T9961] team0: Port device team_slave_1 added [ 249.173267][T10035] netlink: 'syz.2.1206': attribute type 2 has an invalid length. [ 249.235477][T10035] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1206'. [ 249.291133][ T50] Bluetooth: hci0: command tx timeout [ 249.311060][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.335577][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.381752][T10044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 249.391089][T10044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1207'. [ 249.404246][ T9961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.435525][ T9961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.459129][ T9961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.491270][ T9961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.507712][ T9934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.675949][ T9961] hsr_slave_0: entered promiscuous mode [ 249.684106][ T9961] hsr_slave_1: entered promiscuous mode [ 249.694455][ T9961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.703360][ T9961] Cannot create hsr debugfs directory [ 249.705335][T10061] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1214'. [ 249.726790][ T36] hsr_slave_0: left promiscuous mode [ 249.734244][ T36] hsr_slave_1: left promiscuous mode [ 249.740401][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.747851][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.756077][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.764011][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.774916][T10062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1213'. [ 249.784927][ T36] hsr_slave_0: left promiscuous mode [ 249.791565][ T36] hsr_slave_1: left promiscuous mode [ 249.797436][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.805525][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.813889][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.822077][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.853223][ T36] veth1_macvtap: left promiscuous mode [ 249.859295][ T36] veth0_macvtap: left promiscuous mode [ 249.864918][ T36] veth1_vlan: left promiscuous mode [ 249.871171][ T36] veth0_vlan: left promiscuous mode [ 249.877451][ T36] veth1_macvtap: left promiscuous mode [ 249.883081][ T36] veth0_macvtap: left promiscuous mode [ 249.888784][ T36] veth1_vlan: left promiscuous mode [ 249.894069][ T36] veth0_vlan: left promiscuous mode [ 250.168638][ T50] Bluetooth: hci3: command tx timeout [ 250.343624][ T36] team0 (unregistering): Port device team_slave_1 removed [ 250.381854][ T36] team0 (unregistering): Port device team_slave_0 removed [ 250.649980][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 251.019896][ T36] team0 (unregistering): Port device team_slave_1 removed [ 251.058087][ T36] team0 (unregistering): Port device team_slave_0 removed [ 251.209082][ T50] Bluetooth: hci1: command tx timeout [ 251.378844][ T50] Bluetooth: hci0: command tx timeout [ 251.392246][T10059] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 251.483794][ T9934] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.575789][ T8534] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.583004][ T8534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.601824][ T9948] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 251.661345][ T3431] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.668584][ T3431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.684856][ T9948] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 251.718176][ T9948] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 251.729915][ T9948] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 251.866723][T10077] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1217'. [ 252.073267][T10089] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.237599][T10095] FAULT_INJECTION: forcing a failure. [ 252.237599][T10095] name failslab, interval 1, probability 0, space 0, times 0 [ 252.241313][T10093] FAULT_INJECTION: forcing a failure. [ 252.241313][T10093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.263901][ T50] Bluetooth: hci3: command tx timeout [ 252.284043][T10093] CPU: 0 UID: 0 PID: 10093 Comm: syz.2.1221 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 252.284068][T10093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.284078][T10093] Call Trace: [ 252.284086][T10093] [ 252.284093][T10093] dump_stack_lvl+0x189/0x250 [ 252.284123][T10093] ? __pfx____ratelimit+0x10/0x10 [ 252.284148][T10093] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.284173][T10093] ? __pfx__printk+0x10/0x10 [ 252.284191][T10093] ? __might_fault+0xb0/0x130 [ 252.284220][T10093] should_fail_ex+0x414/0x560 [ 252.284247][T10093] _copy_from_user+0x2d/0xb0 [ 252.284266][T10093] __sys_connect+0x123/0x440 [ 252.284284][T10093] ? __fget_files+0x3a0/0x420 [ 252.284303][T10093] ? __pfx___sys_connect+0x10/0x10 [ 252.284335][T10093] ? __pfx_ksys_write+0x10/0x10 [ 252.284349][T10093] ? rcu_is_watching+0x15/0xb0 [ 252.284381][T10093] __x64_sys_connect+0x7a/0x90 [ 252.284401][T10093] do_syscall_64+0xfa/0x3b0 [ 252.284416][T10093] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.284438][T10093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.284456][T10093] ? clear_bhb_loop+0x60/0xb0 [ 252.284476][T10093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.284493][T10093] RIP: 0033:0x7f013af8e929 [ 252.284508][T10093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.284522][T10093] RSP: 002b:00007f0138df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 252.284541][T10093] RAX: ffffffffffffffda RBX: 00007f013b1b5fa0 RCX: 00007f013af8e929 [ 252.284553][T10093] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000008 [ 252.284564][T10093] RBP: 00007f0138df6090 R08: 0000000000000000 R09: 0000000000000000 [ 252.284575][T10093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.284586][T10093] R13: 0000000000000000 R14: 00007f013b1b5fa0 R15: 00007ffe292bffe8 [ 252.284615][T10093] [ 252.295773][T10095] CPU: 1 UID: 0 PID: 10095 Comm: syz.4.1222 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 252.295800][T10095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 252.295809][T10095] Call Trace: [ 252.295818][T10095] [ 252.295825][T10095] dump_stack_lvl+0x189/0x250 [ 252.295856][T10095] ? __pfx____ratelimit+0x10/0x10 [ 252.295881][T10095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.295905][T10095] ? __pfx__printk+0x10/0x10 [ 252.295926][T10095] ? __pfx___might_resched+0x10/0x10 [ 252.295951][T10095] ? fs_reclaim_acquire+0x7d/0x100 [ 252.295976][T10095] should_fail_ex+0x414/0x560 [ 252.296003][T10095] should_failslab+0xa8/0x100 [ 252.296023][T10095] __kmalloc_noprof+0xcb/0x4f0 [ 252.296038][T10095] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 252.296073][T10095] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 252.296103][T10095] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 252.296136][T10095] genl_family_rcv_msg_doit+0xb8/0x300 [ 252.296167][T10095] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 252.296193][T10095] ? rcu_is_watching+0x15/0xb0 [ 252.296220][T10095] ? apparmor_capable+0x137/0x1b0 [ 252.296247][T10095] ? bpf_lsm_capable+0x9/0x20 [ 252.296262][T10095] ? security_capable+0x7e/0x2e0 [ 252.296290][T10095] genl_rcv_msg+0x60e/0x790 [ 252.296320][T10095] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.296340][T10095] ? ref_tracker_free+0x63a/0x7d0 [ 252.296360][T10095] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 252.296381][T10095] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 252.296402][T10095] ? __pfx_nl80211_post_doit+0x10/0x10 [ 252.296424][T10095] ? __pfx_ref_tracker_free+0x10/0x10 [ 252.296457][T10095] netlink_rcv_skb+0x208/0x470 [ 252.296478][T10095] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.296502][T10095] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.296539][T10095] ? down_read+0x1ad/0x2e0 [ 252.296559][T10095] genl_rcv+0x28/0x40 [ 252.296580][T10095] netlink_unicast+0x75b/0x8d0 [ 252.296609][T10095] netlink_sendmsg+0x805/0xb30 [ 252.296639][T10095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.296662][T10095] ? aa_sock_msg_perm+0x94/0x160 [ 252.296685][T10095] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.296704][T10095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.296725][T10095] __sock_sendmsg+0x21c/0x270 [ 252.296753][T10095] ____sys_sendmsg+0x505/0x830 [ 252.296781][T10095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.296816][T10095] ? import_iovec+0x74/0xa0 [ 252.296837][T10095] ___sys_sendmsg+0x21f/0x2a0 [ 252.296860][T10095] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.296918][T10095] ? __fget_files+0x2a/0x420 [ 252.296937][T10095] ? __fget_files+0x3a0/0x420 [ 252.296966][T10095] __x64_sys_sendmsg+0x19b/0x260 [ 252.296989][T10095] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.297020][T10095] ? __pfx_ksys_write+0x10/0x10 [ 252.297035][T10095] ? rcu_is_watching+0x15/0xb0 [ 252.297068][T10095] ? do_syscall_64+0xbe/0x3b0 [ 252.297089][T10095] do_syscall_64+0xfa/0x3b0 [ 252.297103][T10095] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.297126][T10095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.297143][T10095] ? clear_bhb_loop+0x60/0xb0 [ 252.297163][T10095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.297179][T10095] RIP: 0033:0x7fe9bd98e929 [ 252.297195][T10095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.297210][T10095] RSP: 002b:00007fe9be826038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.297228][T10095] RAX: ffffffffffffffda RBX: 00007fe9bdbb5fa0 RCX: 00007fe9bd98e929 [ 252.297241][T10095] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 252.297251][T10095] RBP: 00007fe9be826090 R08: 0000000000000000 R09: 0000000000000000 [ 252.297262][T10095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.297271][T10095] R13: 0000000000000000 R14: 00007fe9bdbb5fa0 R15: 00007ffd90f45898 [ 252.297301][T10095] [ 252.974895][T10100] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1225'. [ 253.028055][ T9961] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 253.062665][ T9961] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 253.076842][ T9961] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 253.090836][ T9961] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 253.136852][ T9948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.200542][ T9948] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.235671][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.242879][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.273033][ T9934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.289034][ T50] Bluetooth: hci1: command tx timeout [ 253.315668][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.322863][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.362918][ T9934] veth0_vlan: entered promiscuous mode [ 253.376375][ T9934] veth1_vlan: entered promiscuous mode [ 253.561856][T10129] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1231'. [ 253.574204][ T9934] veth0_macvtap: entered promiscuous mode [ 253.595415][ T9961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.614575][ T9934] veth1_macvtap: entered promiscuous mode [ 253.668180][ T9934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.691377][ T9961] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.731320][ T1313] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.738506][ T1313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.783292][ T1313] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.790498][ T1313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.805505][ T9934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.825888][T10142] FAULT_INJECTION: forcing a failure. [ 253.825888][T10142] name failslab, interval 1, probability 0, space 0, times 0 [ 253.871364][ T9934] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.880949][T10142] CPU: 0 UID: 0 PID: 10142 Comm: syz.4.1233 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 253.880972][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.880981][T10142] Call Trace: [ 253.880987][T10142] [ 253.880994][T10142] dump_stack_lvl+0x189/0x250 [ 253.881020][T10142] ? __pfx____ratelimit+0x10/0x10 [ 253.881041][T10142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.881062][T10142] ? __pfx__printk+0x10/0x10 [ 253.881082][T10142] ? __pfx___might_resched+0x10/0x10 [ 253.881103][T10142] ? fs_reclaim_acquire+0x7d/0x100 [ 253.881123][T10142] should_fail_ex+0x414/0x560 [ 253.881145][T10142] should_failslab+0xa8/0x100 [ 253.881162][T10142] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 253.881177][T10142] ? __alloc_skb+0x112/0x2d0 [ 253.881196][T10142] __alloc_skb+0x112/0x2d0 [ 253.881215][T10142] netlink_ack+0x146/0xa50 [ 253.881229][T10142] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.881247][T10142] ? ref_tracker_free+0x63a/0x7d0 [ 253.881263][T10142] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 253.881281][T10142] ? __pfx_nl80211_post_doit+0x10/0x10 [ 253.881300][T10142] ? __pfx_ref_tracker_free+0x10/0x10 [ 253.881328][T10142] netlink_rcv_skb+0x28c/0x470 [ 253.881344][T10142] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.881365][T10142] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.881395][T10142] ? down_read+0x1ad/0x2e0 [ 253.881411][T10142] genl_rcv+0x28/0x40 [ 253.881428][T10142] netlink_unicast+0x75b/0x8d0 [ 253.881452][T10142] netlink_sendmsg+0x805/0xb30 [ 253.881476][T10142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.881495][T10142] ? aa_sock_msg_perm+0x94/0x160 [ 253.881515][T10142] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 253.881535][T10142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.881553][T10142] __sock_sendmsg+0x21c/0x270 [ 253.881576][T10142] ____sys_sendmsg+0x505/0x830 [ 253.881598][T10142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.881623][T10142] ? import_iovec+0x74/0xa0 [ 253.881641][T10142] ___sys_sendmsg+0x21f/0x2a0 [ 253.881661][T10142] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.881716][T10142] ? __fget_files+0x2a/0x420 [ 253.881731][T10142] ? __fget_files+0x3a0/0x420 [ 253.881755][T10142] __x64_sys_sendmsg+0x19b/0x260 [ 253.881775][T10142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.881800][T10142] ? __pfx_ksys_write+0x10/0x10 [ 253.881811][T10142] ? rcu_is_watching+0x15/0xb0 [ 253.881837][T10142] ? do_syscall_64+0xbe/0x3b0 [ 253.881853][T10142] do_syscall_64+0xfa/0x3b0 [ 253.881865][T10142] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.881884][T10142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.881902][T10142] ? clear_bhb_loop+0x60/0xb0 [ 253.881920][T10142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.881933][T10142] RIP: 0033:0x7fe9bd98e929 [ 253.881946][T10142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.881958][T10142] RSP: 002b:00007fe9be826038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.881978][T10142] RAX: ffffffffffffffda RBX: 00007fe9bdbb5fa0 RCX: 00007fe9bd98e929 [ 253.881989][T10142] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 253.881998][T10142] RBP: 00007fe9be826090 R08: 0000000000000000 R09: 0000000000000000 [ 253.882007][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.882015][T10142] R13: 0000000000000000 R14: 00007fe9bdbb5fa0 R15: 00007ffd90f45898 [ 253.882039][T10142] [ 253.890167][ T9934] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.054334][T10150] __nla_validate_parse: 1 callbacks suppressed [ 254.054351][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 254.059134][ T9934] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.059163][ T9934] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.287497][T10145] delete_channel: no stack [ 254.329183][ T50] Bluetooth: hci3: command tx timeout [ 254.345989][ T9948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.503837][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.531588][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.553673][ T9948] veth0_vlan: entered promiscuous mode [ 254.638317][ T9948] veth1_vlan: entered promiscuous mode [ 254.660671][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.671371][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.866898][ T9948] veth0_macvtap: entered promiscuous mode [ 254.971216][ T9948] veth1_macvtap: entered promiscuous mode [ 255.042513][ T9961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.054089][T10175] netlink: 'syz.4.1242': attribute type 1 has an invalid length. [ 255.073045][T10178] netlink: 'syz.2.1243': attribute type 11 has an invalid length. [ 255.084927][T10179] netlink: 'syz.2.1243': attribute type 11 has an invalid length. [ 255.089635][T10175] 8021q: adding VLAN 0 to HW filter on device bond16 [ 255.104868][ T9948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.143404][T10175] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1242'. [ 255.166129][ T9948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.256693][ T9948] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.277629][ T9948] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.301919][ T9948] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.310913][ T9948] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.409976][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.456971][ T9961] veth0_vlan: entered promiscuous mode [ 255.470911][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.483663][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.501441][ T9961] veth1_vlan: entered promiscuous mode [ 255.523900][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.533070][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.574443][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.614839][ T9961] veth0_macvtap: entered promiscuous mode [ 255.639139][ T9961] veth1_macvtap: entered promiscuous mode [ 255.682763][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.699379][ T9961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.714358][ T9961] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.723749][ T9961] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.733965][ T9961] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.743109][ T9961] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.772147][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.778573][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.832882][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.846588][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.883272][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.902950][ T8534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.911564][ T8534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.042627][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.227528][ T13] bridge_slave_1: left allmulticast mode [ 256.236321][ T13] bridge_slave_1: left promiscuous mode [ 256.243626][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.263184][ T13] bridge_slave_0: left allmulticast mode [ 256.278651][ T13] bridge_slave_0: left promiscuous mode [ 256.284735][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.547309][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.556258][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.565504][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.575346][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.584222][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.766875][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.777898][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.788239][ T13] bond0 (unregistering): Released all slaves [ 257.015926][T10181] chnl_net:caif_netlink_parms(): no params data found [ 257.092513][ T13] hsr_slave_0: left promiscuous mode [ 257.098408][ T13] hsr_slave_1: left promiscuous mode [ 257.104749][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.117064][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.130612][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.138032][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.161871][ T13] veth1_macvtap: left promiscuous mode [ 257.167444][ T13] veth0_macvtap: left promiscuous mode [ 257.173338][ T13] veth1_vlan: left promiscuous mode [ 257.179971][ T13] veth0_vlan: left promiscuous mode [ 257.789071][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.797755][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.806386][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.819718][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.827789][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.907358][ T13] team0 (unregistering): Port device team_slave_1 removed [ 257.945193][ T13] team0 (unregistering): Port device team_slave_0 removed [ 258.375484][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 258.385580][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 258.394905][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 258.405292][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 258.421866][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 258.509833][T10181] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.517475][T10181] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.527450][T10181] bridge_slave_0: entered allmulticast mode [ 258.536015][T10181] bridge_slave_0: entered promiscuous mode [ 258.597665][T10181] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.605696][T10181] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.613497][T10181] bridge_slave_1: entered allmulticast mode [ 258.621724][T10181] bridge_slave_1: entered promiscuous mode [ 258.659727][ T5155] Bluetooth: hci0: command tx timeout [ 258.772397][T10181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.814965][T10181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.948443][T10181] team0: Port device team_slave_0 added [ 258.959200][T10181] team0: Port device team_slave_1 added [ 259.003026][T10220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.077095][T10181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.084215][T10181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.114221][T10181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.137405][T10225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.178114][T10181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.186649][T10181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.214577][T10181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.319755][T10181] hsr_slave_0: entered promiscuous mode [ 259.326113][T10181] hsr_slave_1: entered promiscuous mode [ 259.355725][T10198] chnl_net:caif_netlink_parms(): no params data found [ 259.554349][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.655775][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.682894][T10201] chnl_net:caif_netlink_parms(): no params data found [ 259.716960][T10198] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.724665][T10198] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.731491][T10234] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 259.732055][T10198] bridge_slave_0: entered allmulticast mode [ 259.746636][T10198] bridge_slave_0: entered promiscuous mode [ 259.756503][T10234] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 259.780221][T10198] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.787766][T10198] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.795572][T10198] bridge_slave_1: entered allmulticast mode [ 259.804920][T10198] bridge_slave_1: entered promiscuous mode [ 259.860694][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.907142][T10198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.924583][T10198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.943180][ T50] Bluetooth: hci1: command tx timeout [ 259.980321][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.066073][T10198] team0: Port device team_slave_0 added [ 260.089806][T10201] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.103132][T10201] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.111637][T10201] bridge_slave_0: entered allmulticast mode [ 260.119385][T10201] bridge_slave_0: entered promiscuous mode [ 260.131578][T10198] team0: Port device team_slave_1 added [ 260.173256][T10201] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.183332][T10201] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.194879][T10201] bridge_slave_1: entered allmulticast mode [ 260.205413][T10201] bridge_slave_1: entered promiscuous mode [ 260.284841][T10198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.297859][T10198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.325428][T10198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.344394][T10198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.351861][T10198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.383401][T10198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.422220][T10201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.496964][ T50] Bluetooth: hci3: command tx timeout [ 260.534827][T10201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.608345][T10242] x_tables: duplicate underflow at hook 1 [ 260.644631][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.732040][ T50] Bluetooth: hci0: command tx timeout [ 260.765997][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.794061][T10198] hsr_slave_0: entered promiscuous mode [ 260.801830][T10198] hsr_slave_1: entered promiscuous mode [ 260.808233][T10198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.816628][T10198] Cannot create hsr debugfs directory [ 260.832976][T10201] team0: Port device team_slave_0 added [ 260.844710][T10256] bridge0: entered allmulticast mode [ 260.869019][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.910341][T10257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1259'. [ 260.924660][T10201] team0: Port device team_slave_1 added [ 261.032878][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.116593][T10201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.123740][T10201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.155584][T10201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.169706][T10201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.176905][T10201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.207470][T10201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.361132][T10181] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.407318][T10181] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.439000][T10201] hsr_slave_0: entered promiscuous mode [ 261.445674][T10201] hsr_slave_1: entered promiscuous mode [ 261.453968][T10201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.462702][T10201] Cannot create hsr debugfs directory [ 261.486135][T10181] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.560411][T10181] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.640972][ T13] bridge_slave_1: left allmulticast mode [ 261.643942][T10281] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 261.646652][ T13] bridge_slave_1: left promiscuous mode [ 261.662747][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.675504][ T13] bridge_slave_0: left allmulticast mode [ 261.681736][ T13] bridge_slave_0: left promiscuous mode [ 261.687576][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.709817][ T13] bridge_slave_1: left allmulticast mode [ 261.715516][ T13] bridge_slave_1: left promiscuous mode [ 261.721693][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.732814][ T13] bridge_slave_0: left allmulticast mode [ 261.738494][ T13] bridge_slave_0: left promiscuous mode [ 261.745840][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.021019][ T50] Bluetooth: hci1: command tx timeout [ 262.218311][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.234518][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.245960][ T13] bond0 (unregistering): Released all slaves [ 262.528492][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.539815][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.550832][ T13] bond0 (unregistering): Released all slaves [ 262.564438][T10279] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1266'. [ 262.573874][ T50] Bluetooth: hci3: command 0x041b tx timeout [ 262.812588][ T50] Bluetooth: hci0: command tx timeout [ 262.901250][T10310] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1271'. [ 263.176345][T10181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.295764][T10181] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.360065][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.367318][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.385840][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.392993][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.425005][ T13] hsr_slave_0: left promiscuous mode [ 263.432464][ T13] hsr_slave_1: left promiscuous mode [ 263.438302][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.446115][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.455353][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.469652][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.484985][ T13] hsr_slave_0: left promiscuous mode [ 263.496122][ T13] hsr_slave_1: left promiscuous mode [ 263.502880][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.516012][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.525275][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.534241][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.574332][ T13] veth1_macvtap: left promiscuous mode [ 263.580408][ T13] veth0_macvtap: left promiscuous mode [ 263.586349][ T13] veth1_vlan: left promiscuous mode [ 263.592004][ T13] veth0_vlan: left promiscuous mode [ 263.598783][ T13] veth1_macvtap: left promiscuous mode [ 263.604431][ T13] veth0_macvtap: left promiscuous mode [ 263.610640][ T13] veth1_vlan: left promiscuous mode [ 263.616079][ T13] veth0_vlan: left promiscuous mode [ 264.097282][ T50] Bluetooth: hci1: command tx timeout [ 264.341086][ T13] team0 (unregistering): Port device team_slave_1 removed [ 264.394153][ T13] team0 (unregistering): Port device team_slave_0 removed [ 264.451765][T10337] x_tables: duplicate underflow at hook 1 [ 264.659027][ T50] Bluetooth: hci3: command 0x041b tx timeout [ 264.889071][ T50] Bluetooth: hci0: command tx timeout [ 265.075172][ T13] team0 (unregistering): Port device team_slave_1 removed [ 265.114145][ T13] team0 (unregistering): Port device team_slave_0 removed [ 265.562746][T10198] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 265.586314][T10198] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 265.590987][T10340] rdma_op ffff88802b0fc1f0 conn xmit_rdma 0000000000000000 [ 265.605535][T10198] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 265.669585][T10198] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 265.894510][T10355] netlink: 'syz.2.1284': attribute type 1 has an invalid length. [ 265.951659][T10355] 8021q: adding VLAN 0 to HW filter on device bond9 [ 265.990131][T10355] gretap1: entered promiscuous mode [ 266.021260][T10355] bond9: (slave gretap1): making interface the new active one [ 266.042396][T10360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1284'. [ 266.056000][T10355] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 266.180512][ T50] Bluetooth: hci1: command tx timeout [ 266.192137][T10181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.266871][T10198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.401679][T10198] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.480457][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.487673][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.523442][T10370] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1289'. [ 266.549070][T10370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1289'. [ 266.581449][T10201] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 266.621017][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.628171][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.647218][T10201] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 266.711146][T10201] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 266.728800][ T50] Bluetooth: hci3: command 0x041b tx timeout [ 266.737729][T10201] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 266.763576][T10376] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1292'. [ 266.772218][T10181] veth0_vlan: entered promiscuous mode [ 266.816317][T10181] veth1_vlan: entered promiscuous mode [ 266.979548][T10181] veth0_macvtap: entered promiscuous mode [ 267.005804][T10181] veth1_macvtap: entered promiscuous mode [ 267.078096][T10181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.115421][T10181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.155777][T10181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.209586][T10181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.223050][T10181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.232349][T10181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.295935][T10201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.365570][T10198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.380395][T10201] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.429861][ T8534] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.437079][ T8534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.466826][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.474035][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.492454][ T1313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.522490][ T1313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.626330][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.639160][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.663949][T10198] veth0_vlan: entered promiscuous mode [ 267.716454][T10198] veth1_vlan: entered promiscuous mode [ 267.801532][T10198] veth0_macvtap: entered promiscuous mode [ 267.827802][T10198] veth1_macvtap: entered promiscuous mode [ 267.892221][T10198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.076432][T10198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.080351][T10404] netlink: 'syz.2.1297': attribute type 1 has an invalid length. [ 268.133962][T10198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.144881][T10198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.155417][T10198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.164401][T10198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.190554][T10408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1297'. [ 268.205705][T10404] 8021q: adding VLAN 0 to HW filter on device bond10 [ 268.254405][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.386389][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.406501][T10201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.454251][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.525871][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.537436][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.576570][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.592048][T10201] veth0_vlan: entered promiscuous mode [ 268.620200][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.628210][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.641313][T10201] veth1_vlan: entered promiscuous mode [ 268.704598][T10201] veth0_macvtap: entered promiscuous mode [ 268.747561][T10201] veth1_macvtap: entered promiscuous mode [ 268.774812][T10201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.789382][T10201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.802643][T10201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.812079][T10201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.820032][ T50] Bluetooth: hci3: command 0x041b tx timeout [ 268.826747][T10201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.837941][T10201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.965886][ T13] bridge_slave_1: left allmulticast mode [ 268.973731][ T13] bridge_slave_1: left promiscuous mode [ 268.981238][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.992349][ T13] bridge_slave_0: left allmulticast mode [ 268.997992][ T13] bridge_slave_0: left promiscuous mode [ 269.004218][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.364349][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.392449][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.414046][ T13] bond0 (unregistering): Released all slaves [ 269.511572][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.522170][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.633291][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.647486][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.773301][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.782561][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.792730][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.802621][ T13] hsr_slave_0: left promiscuous mode [ 269.815686][ T13] hsr_slave_1: left promiscuous mode [ 269.819121][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.826297][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.830377][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.847392][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.866364][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.873970][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.892036][ T13] veth1_macvtap: left promiscuous mode [ 269.897577][ T13] veth0_macvtap: left promiscuous mode [ 269.903683][ T13] veth1_vlan: left promiscuous mode [ 269.910066][ T13] veth0_vlan: left promiscuous mode [ 270.284512][ T13] team0 (unregistering): Port device team_slave_1 removed [ 270.318456][ T13] team0 (unregistering): Port device team_slave_0 removed [ 270.906762][T10416] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1298'. [ 270.942680][T10418] lo: left promiscuous mode [ 270.949178][T10418] tunl0: left promiscuous mode [ 270.975122][T10418] gre0: left promiscuous mode [ 270.984666][T10418] gretap0: left promiscuous mode [ 271.008866][T10418] erspan0: left promiscuous mode [ 271.014075][T10418] ip_vti0: left promiscuous mode [ 271.043367][T10422] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1299'. [ 271.273035][ T5155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.282689][ T5155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.293077][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.302047][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.312266][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.357463][T10418] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.367328][T10418] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.377155][T10418] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.387061][T10418] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.399995][T10418] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 271.424313][T10418] gretap1: left promiscuous mode [ 271.432301][T10418] veth3: left promiscuous mode [ 271.440517][T10418] bond10: left promiscuous mode [ 271.445418][T10418] bond10: left allmulticast mode [ 271.474699][T10410] chnl_net:caif_netlink_parms(): no params data found [ 271.634030][T10410] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.641923][T10410] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.649551][T10410] bridge_slave_0: entered allmulticast mode [ 271.656522][T10410] bridge_slave_0: entered promiscuous mode [ 271.673518][T10410] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.681281][T10410] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.691097][T10410] bridge_slave_1: entered allmulticast mode [ 271.699337][T10410] bridge_slave_1: entered promiscuous mode [ 271.745533][T10410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.760344][T10410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.817129][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.836218][T10410] team0: Port device team_slave_0 added [ 271.847199][T10410] team0: Port device team_slave_1 added [ 271.904873][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.921628][T10410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.928979][ T50] Bluetooth: hci0: command tx timeout [ 271.934785][T10410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.961207][T10410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.977571][T10410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.985002][T10410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.013257][T10410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.150884][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.183007][T10435] lo: left promiscuous mode [ 272.196203][T10435] tunl0: left promiscuous mode [ 272.196325][T10437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1301'. [ 272.203151][T10435] gre0: left promiscuous mode [ 272.221299][T10435] gretap0: left promiscuous mode [ 272.229581][T10435] erspan0: left promiscuous mode [ 272.238874][T10435] ip_vti0: left promiscuous mode [ 272.289581][T10435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.296954][T10435] geneve0: entered promiscuous mode [ 272.307120][T10435] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.322281][T10435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 272.358111][T10410] hsr_slave_0: entered promiscuous mode [ 272.367217][T10410] hsr_slave_1: entered promiscuous mode [ 272.417652][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.480081][T10440] bond17: entered promiscuous mode [ 272.485250][T10440] bond17: entered allmulticast mode [ 272.489446][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 272.491862][T10440] 8021q: adding VLAN 0 to HW filter on device bond17 [ 272.500824][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 272.515693][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 272.526036][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 272.536125][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 272.541986][T10424] chnl_net:caif_netlink_parms(): no params data found [ 272.609517][T10449] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1303'. [ 272.897812][T10424] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.906962][T10424] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.917332][T10424] bridge_slave_0: entered allmulticast mode [ 272.927599][T10424] bridge_slave_0: entered promiscuous mode [ 272.953071][T10463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'. [ 272.972235][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'. [ 273.018865][T10424] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.026371][T10424] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.035687][T10424] bridge_slave_1: entered allmulticast mode [ 273.042896][T10424] bridge_slave_1: entered promiscuous mode [ 273.089127][T10466] geneve0: left promiscuous mode [ 273.097315][T10466] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.106681][T10466] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.116205][T10466] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.125121][T10466] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.140938][T10466] team0: Port device geneve0 removed [ 273.148411][T10466] bond9: (slave gretap1): Releasing active interface [ 273.169230][ T6879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 273.235301][T10469] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1308'. [ 273.254801][T10474] netlink: 'syz.2.1309': attribute type 1 has an invalid length. [ 273.287481][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.299028][ T6878] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 273.318261][T10424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.336907][T10424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.368110][T10478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1309'. [ 273.375439][T10474] 8021q: adding VLAN 0 to HW filter on device bond11 [ 273.377935][ T50] Bluetooth: hci1: command tx timeout [ 273.490273][T10481] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1310'. [ 273.501955][T10424] team0: Port device team_slave_0 added [ 273.542893][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.595725][T10424] team0: Port device team_slave_1 added [ 273.704540][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.746417][T10424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.753646][T10424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.784320][T10424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.844566][T10424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.859230][T10424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.885524][T10424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.911070][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.008656][ T50] Bluetooth: hci0: command tx timeout [ 274.114116][T10424] hsr_slave_0: entered promiscuous mode [ 274.120992][T10424] hsr_slave_1: entered promiscuous mode [ 274.127385][T10424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.137166][T10424] Cannot create hsr debugfs directory [ 274.192883][T10445] chnl_net:caif_netlink_parms(): no params data found [ 274.397887][T10499] syzkaller1: entered promiscuous mode [ 274.405553][T10499] syzkaller1: entered allmulticast mode [ 274.506585][T10504] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1316'. [ 274.566597][T10410] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 274.579100][ T50] Bluetooth: hci3: command tx timeout [ 274.592075][ T13] bridge_slave_1: left allmulticast mode [ 274.597796][ T13] bridge_slave_1: left promiscuous mode [ 274.604204][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.614409][ T13] bridge_slave_0: left allmulticast mode [ 274.620428][ T13] bridge_slave_0: left promiscuous mode [ 274.626193][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.638072][ T13] bridge_slave_1: left allmulticast mode [ 274.644039][ T13] bridge_slave_1: left promiscuous mode [ 274.651383][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.662550][ T13] bridge_slave_0: left allmulticast mode [ 274.670935][ T13] bridge_slave_0: left promiscuous mode [ 274.676849][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.154631][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.166822][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.193492][ T13] bond0 (unregistering): Released all slaves [ 275.449354][ T50] Bluetooth: hci1: command tx timeout [ 275.474245][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.484871][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.495656][ T13] bond0 (unregistering): Released all slaves [ 275.512934][T10445] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.520455][T10445] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.527712][T10445] bridge_slave_0: entered allmulticast mode [ 275.535470][T10445] bridge_slave_0: entered promiscuous mode [ 275.543427][T10410] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 275.564038][T10516] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1321'. [ 275.606479][T10445] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.614102][T10445] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.630266][T10445] bridge_slave_1: entered allmulticast mode [ 275.637376][T10445] bridge_slave_1: entered promiscuous mode [ 275.657898][T10410] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 275.742694][T10445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.752078][T10410] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 275.781327][T10526] netlink: 'syz.2.1322': attribute type 1 has an invalid length. [ 275.797134][T10445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.883111][T10526] 8021q: adding VLAN 0 to HW filter on device bond12 [ 275.899834][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 275.963021][T10445] team0: Port device team_slave_0 added [ 275.981910][T10445] team0: Port device team_slave_1 added [ 276.092075][ T50] Bluetooth: hci0: command tx timeout [ 276.116288][T10445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.124027][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.156071][T10445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.226518][T10445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.279786][T10445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.306333][T10445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.579753][T10445] hsr_slave_0: entered promiscuous mode [ 276.594539][T10445] hsr_slave_1: entered promiscuous mode [ 276.601607][T10445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.614992][T10445] Cannot create hsr debugfs directory [ 276.648897][ T50] Bluetooth: hci3: command tx timeout [ 276.755759][ T13] hsr_slave_0: left promiscuous mode [ 276.762550][ T13] hsr_slave_1: left promiscuous mode [ 276.772762][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.780672][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.800131][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.807689][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.824203][ T13] hsr_slave_0: left promiscuous mode [ 276.831165][ T13] hsr_slave_1: left promiscuous mode [ 276.836951][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.845929][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.854841][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.865683][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.915357][ T13] veth1_macvtap: left promiscuous mode [ 276.921195][ T13] veth0_macvtap: left promiscuous mode [ 276.926937][ T13] veth1_vlan: left promiscuous mode [ 276.932986][ T13] veth0_vlan: left promiscuous mode [ 276.941390][ T13] veth1_macvtap: left promiscuous mode [ 276.947163][ T13] veth0_macvtap: left promiscuous mode [ 276.953077][ T13] veth1_vlan: left promiscuous mode [ 276.962636][ T13] veth0_vlan: left promiscuous mode [ 277.520827][ T13] team0 (unregistering): Port device team_slave_1 removed [ 277.528814][ T50] Bluetooth: hci1: command tx timeout [ 277.566942][ T13] team0 (unregistering): Port device team_slave_0 removed [ 278.170767][ T50] Bluetooth: hci0: command tx timeout [ 278.266223][ T13] team0 (unregistering): Port device team_slave_1 removed [ 278.305476][ T13] team0 (unregistering): Port device team_slave_0 removed [ 278.738659][ T50] Bluetooth: hci3: command tx timeout [ 278.753358][T10424] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.803985][T10424] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.824797][T10573] netlink: 'syz.4.1334': attribute type 1 has an invalid length. [ 278.843877][T10424] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.877384][T10424] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.937996][T10573] 8021q: adding VLAN 0 to HW filter on device bond18 [ 278.961093][T10573] __nla_validate_parse: 3 callbacks suppressed [ 278.961110][T10573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1334'. [ 278.965105][T10410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.984977][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 279.076030][T10591] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1338'. [ 279.174503][T10410] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.265614][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.272828][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.347031][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.354274][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.519763][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 279.609938][ T50] Bluetooth: hci1: command tx timeout [ 279.638470][T10606] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 279.680137][T10424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.705870][T10424] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.735126][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.742375][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.792996][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.800204][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.075081][T10445] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.115021][T10445] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 280.124027][T10626] netlink: 'syz.2.1349': attribute type 1 has an invalid length. [ 280.166659][T10626] 8021q: adding VLAN 0 to HW filter on device bond13 [ 280.180606][T10410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.200283][T10445] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 280.224388][T10445] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 280.236371][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1349'. [ 280.307098][T10424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.358433][T10410] veth0_vlan: entered promiscuous mode [ 280.408247][T10410] veth1_vlan: entered promiscuous mode [ 280.461879][T10424] veth0_vlan: entered promiscuous mode [ 280.486844][T10424] veth1_vlan: entered promiscuous mode [ 280.506770][T10410] veth0_macvtap: entered promiscuous mode [ 280.540314][T10410] veth1_macvtap: entered promiscuous mode [ 280.603600][T10445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.612947][T10410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.627287][T10424] veth0_macvtap: entered promiscuous mode [ 280.653430][T10424] veth1_macvtap: entered promiscuous mode [ 280.664256][T10410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.684191][T10410] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.694488][T10410] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.703771][T10410] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.712709][T10410] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.763250][T10445] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.781356][T10424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.809137][ T50] Bluetooth: hci3: command tx timeout [ 280.825651][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.832855][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.867517][T10424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.890438][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.897612][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.922274][T10424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.934088][T10424] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.949753][T10424] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.969094][T10424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.992029][T10653] IPVS: set_ctl: invalid protocol: 44 172.30.0.3:20004 [ 281.026808][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.072945][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.151753][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1356'. [ 281.169023][ T3429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.181513][T10656] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1356'. [ 281.190111][ T3429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.283898][ T1313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.293230][ T1313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.436556][ T3429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.447059][ T3429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.815379][ T3429] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.913118][ T3429] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.958930][T10445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.985940][ T3429] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.035702][T10445] veth0_vlan: entered promiscuous mode [ 282.056423][ T3429] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.078750][T10445] veth1_vlan: entered promiscuous mode [ 282.111842][T10445] veth0_macvtap: entered promiscuous mode [ 282.133420][T10445] veth1_macvtap: entered promiscuous mode [ 282.206836][T10445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.223050][ T3429] bridge_slave_1: left allmulticast mode [ 282.230349][ T3429] bridge_slave_1: left promiscuous mode [ 282.236038][ T3429] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.246427][ T3429] bridge_slave_0: left allmulticast mode [ 282.252982][ T3429] bridge_slave_0: left promiscuous mode [ 282.259971][ T3429] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.622272][ T3429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.636239][ T3429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.647163][ T3429] bond0 (unregistering): Released all slaves [ 282.682951][T10445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.736701][T10445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.747784][T10445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.759654][T10445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.768379][T10445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.945061][ T5155] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 282.963550][ T5155] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 282.972958][ T5155] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 282.982908][ T5155] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 282.991567][ T5155] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.020928][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.032751][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.066684][ T3429] hsr_slave_0: left promiscuous mode [ 283.074357][ T3429] hsr_slave_1: left promiscuous mode [ 283.081050][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.088473][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.097474][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.105226][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.125609][ T3429] veth1_macvtap: left promiscuous mode [ 283.131823][ T3429] veth0_macvtap: left promiscuous mode [ 283.137423][ T3429] veth1_vlan: left promiscuous mode [ 283.143321][ T3429] veth0_vlan: left promiscuous mode [ 283.527553][ T3429] team0 (unregistering): Port device team_slave_1 removed [ 283.567207][ T3429] team0 (unregistering): Port device team_slave_0 removed [ 283.923887][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.958681][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.534474][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1366'. [ 284.537807][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 284.554631][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 284.577519][ T3429] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.589475][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.600445][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.613371][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.651499][T10674] chnl_net:caif_netlink_parms(): no params data found [ 284.734948][ T3429] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.840009][ T3429] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.928245][T10707] netem: change failed [ 284.976415][ T3429] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.996653][T10674] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.004944][T10674] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.017824][T10674] bridge_slave_0: entered allmulticast mode [ 285.032381][T10674] bridge_slave_0: entered promiscuous mode [ 285.041526][T10674] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.049203][ T50] Bluetooth: hci0: command tx timeout [ 285.058369][T10674] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.066275][T10674] bridge_slave_1: entered allmulticast mode [ 285.078383][T10674] bridge_slave_1: entered promiscuous mode [ 285.137946][T10674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.151829][T10674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.202562][T10674] team0: Port device team_slave_0 added [ 285.215948][T10674] team0: Port device team_slave_1 added [ 285.288108][T10674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.295919][T10674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.324060][T10674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.336540][T10674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.344190][T10674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.370533][T10674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.482821][T10674] hsr_slave_0: entered promiscuous mode [ 285.491631][T10674] hsr_slave_1: entered promiscuous mode [ 285.517534][ T3429] bridge_slave_1: left allmulticast mode [ 285.524388][ T3429] bridge_slave_1: left promiscuous mode [ 285.530513][ T3429] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.550974][ T3429] bridge_slave_0: left allmulticast mode [ 285.556717][ T3429] bridge_slave_0: left promiscuous mode [ 285.563554][ T3429] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.862796][ T3429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.873599][ T3429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.885089][ T3429] bond0 (unregistering): Released all slaves [ 285.897065][T10693] chnl_net:caif_netlink_parms(): no params data found [ 286.292080][T10693] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.309177][T10693] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.319150][T10693] bridge_slave_0: entered allmulticast mode [ 286.326872][T10693] bridge_slave_0: entered promiscuous mode [ 286.345715][T10693] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.360836][T10693] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.375852][T10693] bridge_slave_1: entered allmulticast mode [ 286.397506][ T5155] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 286.407467][ T5155] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 286.417328][T10693] bridge_slave_1: entered promiscuous mode [ 286.424675][ T5155] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 286.435298][ T5155] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 286.443461][ T5155] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 286.542448][T10693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.566842][ T3429] hsr_slave_0: left promiscuous mode [ 286.573764][ T3429] hsr_slave_1: left promiscuous mode [ 286.585341][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.594021][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.605754][ T3429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.613591][ T3429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.633349][ T3429] veth1_macvtap: left promiscuous mode [ 286.639176][ T3429] veth0_macvtap: left promiscuous mode [ 286.644849][ T3429] veth1_vlan: left promiscuous mode [ 286.651401][ T5155] Bluetooth: hci1: command tx timeout [ 286.657538][ T3429] veth0_vlan: left promiscuous mode [ 286.709337][ T3429] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI [ 286.721259][ T3429] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67] [ 286.730820][ T3429] CPU: 0 UID: 0 PID: 3429 Comm: kworker/u8:6 Not tainted 6.16.0-rc1-syzkaller-00120-g0aff00432cc7 #0 PREEMPT(full) [ 286.742991][ T3429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.753057][ T3429] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 286.757820][ T3429] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 286.763548][ T3429] Code: 29 ab d0 f7 c6 05 23 32 9b 05 01 48 c7 c7 40 95 9c 8c be 97 05 00 00 48 c7 c2 c0 95 9c 8c e8 ca ab ae f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 64 22 34 f8 4d 8b 2c 24 4d 39 f5 [ 286.783181][ T3429] RSP: 0018:ffffc9000c097378 EFLAGS: 00010206 [ 286.789249][ T3429] RAX: ffffffff89efb38e RBX: 000000001fffe1ac RCX: ffff888031273c00 [ 286.797212][ T3429] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 286.805206][ T3429] RBP: ffff88802e4d4420 R08: ffffffff8f50f927 R09: 1ffffffff1ea1f24 [ 286.813271][ T3429] R10: dffffc0000000000 R11: fffffbfff1ea1f25 R12: 00000000ffff0d60 [ 286.821244][ T3429] R13: dffffc0000000000 R14: ffff888022b83000 R15: 1ffff11005c9a884 [ 286.829212][ T3429] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 286.838133][ T3429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.844708][ T3429] CR2: 00007fe9be805d58 CR3: 0000000077f7a000 CR4: 00000000003526f0 [ 286.852680][ T3429] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.860643][ T3429] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.868613][ T3429] Call Trace: [ 286.871891][ T3429] [ 286.874814][ T3429] inetdev_event+0x2a7/0x15b0 [ 286.879495][ T3429] ? __pfx_inetdev_event+0x10/0x10 [ 286.884606][ T3429] notifier_call_chain+0x1b3/0x3e0 [ 286.889719][ T3429] dev_close_many+0x29c/0x410 [ 286.894385][ T3429] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 286.900367][ T3429] ? __pfx_dev_close_many+0x10/0x10 [ 286.905560][ T3429] unregister_netdevice_many_notify+0x834/0x2320 [ 286.911890][ T3429] ? __local_bh_enable_ip+0x12d/0x1c0 [ 286.917262][ T3429] ? __local_bh_enable_ip+0x12d/0x1c0 [ 286.922664][ T3429] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 286.929443][ T3429] ? unregister_netdevice_queue+0x1b3/0x380 [ 286.935351][ T3429] ? batadv_meshif_destroy_netlink+0x1dd/0x270 [ 286.941509][ T3429] default_device_exit_batch+0x819/0x890 [ 286.947144][ T3429] ? __pfx___might_resched+0x10/0x10 [ 286.952428][ T3429] ? __pfx_default_device_exit_batch+0x10/0x10 [ 286.958584][ T3429] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 286.964050][ T3429] ? net_generic+0x1e/0x240 [ 286.968555][ T3429] ? __pfx_default_device_exit_batch+0x10/0x10 [ 286.974704][ T3429] ops_undo_list+0x522/0x990 [ 286.979288][ T3429] ? __pfx_ops_undo_list+0x10/0x10 [ 286.984661][ T3429] cleanup_net+0x4c5/0x800 [ 286.989102][ T3429] ? __pfx_cleanup_net+0x10/0x10 [ 286.994042][ T3429] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.999239][ T3429] ? process_scheduled_works+0x9ef/0x17b0 [ 287.004953][ T3429] ? process_scheduled_works+0x9ef/0x17b0 [ 287.010670][ T3429] process_scheduled_works+0xae1/0x17b0 [ 287.016225][ T3429] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.022210][ T3429] worker_thread+0x8a0/0xda0 [ 287.026805][ T3429] kthread+0x70e/0x8a0 [ 287.030865][ T3429] ? __pfx_worker_thread+0x10/0x10 [ 287.035974][ T3429] ? __pfx_kthread+0x10/0x10 [ 287.040558][ T3429] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.045750][ T3429] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.050948][ T3429] ? __pfx_kthread+0x10/0x10 [ 287.055536][ T3429] ret_from_fork+0x3fc/0x770 [ 287.060127][ T3429] ? __pfx_ret_from_fork+0x10/0x10 [ 287.065240][ T3429] ? __switch_to_asm+0x39/0x70 [ 287.069997][ T3429] ? __switch_to_asm+0x33/0x70 [ 287.074750][ T3429] ? __pfx_kthread+0x10/0x10 [ 287.079334][ T3429] ret_from_fork_asm+0x1a/0x30 [ 287.084100][ T3429] [ 287.087106][ T3429] Modules linked in: [ 287.092083][ T3429] ---[ end trace 0000000000000000 ]--- [ 287.103226][ T3429] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 287.110456][ T3429] Code: 29 ab d0 f7 c6 05 23 32 9b 05 01 48 c7 c7 40 95 9c 8c be 97 05 00 00 48 c7 c2 c0 95 9c 8c e8 ca ab ae f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 64 22 34 f8 4d 8b 2c 24 4d 39 f5 [ 287.139049][ T50] Bluetooth: hci0: command tx timeout [ 287.168954][ T3429] RSP: 0018:ffffc9000c097378 EFLAGS: 00010206 [ 287.175188][ T3429] RAX: ffffffff89efb38e RBX: 000000001fffe1ac RCX: ffff888031273c00 [ 287.183820][ T3429] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 287.192245][ T3429] RBP: ffff88802e4d4420 R08: ffffffff8f50f927 R09: 1ffffffff1ea1f24 [ 287.201173][ T3429] R10: dffffc0000000000 R11: fffffbfff1ea1f25 R12: 00000000ffff0d60 [ 287.217925][ T3429] R13: dffffc0000000000 R14: ffff888022b83000 R15: 1ffff11005c9a884 [ 287.226176][ T3429] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 287.236434][ T3429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 287.243797][ T3429] CR2: 000055717fec1000 CR3: 00000000340e6000 CR4: 00000000003526f0 [ 287.252004][ T3429] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 287.260323][ T3429] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 287.268478][ T3429] Kernel panic - not syncing: Fatal exception [ 287.275679][ T3429] Kernel Offset: disabled [ 287.279997][ T3429] Rebooting in 86400 seconds..