last executing test programs: 1m17.886212899s ago: executing program 1 (id=598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048041}, 0x408d0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048041}, 0x408d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc01, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000090800024000000001080002400000000044010000030a03030000000000000000030000010b00070066696c746572000008000540ffffffff0a000700726f7574650000000900010073797a3000000000d2000c002058467e8129ad011ab2577fd2b44b86d5f2ee60ba9d2662223c7345acdccc10cf4114a3a2a1379922d6f29fbd75c65dc1740be499714d5ff9a4c1f93130df4fbfd98b67876cb96a81d1915d32ebc6568c2b16f16a2f6815bbc1622feb505fd31b646a7a13fd18c4a6306f453839f403058935a6e0adabf8dd8407c5536c81501aea8550d8eae5f28e3ccb6f77c58d591e81b3c352b1d2382ef74c7f1d6502000000000000008fdec5cd258663fa0d20a330a03a83683a640084eea2ce2fff961ef901a2fe6179e57bdaff5e56c4000008000540fffffffb25000c00daec06c45b27dcd25d2fc9a46dd3e01559ac885dc65a21d6e0b0bc3fc24d680d7600000034000000000a050000000000000000000a0000080c000440000000000000000108000240000000000900010073797a3000000000280000000e565d01537df9ddcd0000000a00000908000440000000020900010073797a310000000038010000030a01010000000000000000030000071c0008800c000000000020374f000c00c919db3863d19d41c2b13d530b9f9726c19fc20302defb87239cde54575dbdf4430aaf572efa69ff3e63d565daa6eb9fe03fcc5bf2f1fd06f268ae7d8f83db6e0380fe9b41af1245c53d9b0008000a40000000035c000c00f186a01547bdf5f4aec29da53f155d7c2c256d574b4b8f25d413dd47a256d9df0d6da5e51f2476581f009742a58ece41530245091ba8ea3a6dbe7e0f5846220e6a410ff59850eba032a2a1e1ff762ca4c71051dbd48750c90c000480080002407d9811dd080007006e6174000900030073797a3000000000340008800c00024000000000000000ff0c00024000000000000000000c000240000000000000001f0c0002400000000000007fff1400000011000100"/802], 0x324}, 0x1, 0x0, 0x0, 0xf41ca671a6f9ea4c}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 1m5.173609703s ago: executing program 1 (id=598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048041}, 0x408d0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048041}, 0x408d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc01, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"/802], 0x324}, 0x1, 0x0, 0x0, 0xf41ca671a6f9ea4c}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 51.54921676s ago: executing program 1 (id=598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048041}, 0x408d0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048041}, 0x408d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc01, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000090800024000000001080002400000000044010000030a03030000000000000000030000010b00070066696c746572000008000540ffffffff0a000700726f7574650000000900010073797a3000000000d2000c002058467e8129ad011ab2577fd2b44b86d5f2ee60ba9d2662223c7345acdccc10cf4114a3a2a1379922d6f29fbd75c65dc1740be499714d5ff9a4c1f93130df4fbfd98b67876cb96a81d1915d32ebc6568c2b16f16a2f6815bbc1622feb505fd31b646a7a13fd18c4a6306f453839f403058935a6e0adabf8dd8407c5536c81501aea8550d8eae5f28e3ccb6f77c58d591e81b3c352b1d2382ef74c7f1d6502000000000000008fdec5cd258663fa0d20a330a03a83683a640084eea2ce2fff961ef901a2fe6179e57bdaff5e56c4000008000540fffffffb25000c00daec06c45b27dcd25d2fc9a46dd3e01559ac885dc65a21d6e0b0bc3fc24d680d7600000034000000000a050000000000000000000a0000080c000440000000000000000108000240000000000900010073797a3000000000280000000e565d01537df9ddcd0000000a00000908000440000000020900010073797a310000000038010000030a01010000000000000000030000071c0008800c000000000020374f000c00c919db3863d19d41c2b13d530b9f9726c19fc20302defb87239cde54575dbdf4430aaf572efa69ff3e63d565daa6eb9fe03fcc5bf2f1fd06f268ae7d8f83db6e0380fe9b41af1245c53d9b0008000a40000000035c000c00f186a01547bdf5f4aec29da53f155d7c2c256d574b4b8f25d413dd47a256d9df0d6da5e51f2476581f009742a58ece41530245091ba8ea3a6dbe7e0f5846220e6a410ff59850eba032a2a1e1ff762ca4c71051dbd48750c90c000480080002407d9811dd080007006e6174000900030073797a3000000000340008800c00024000000000000000ff0c00024000000000000000000c000240000000000000001f0c0002400000000000007fff1400000011000100"/802], 0x324}, 0x1, 0x0, 0x0, 0xf41ca671a6f9ea4c}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 39.158385395s ago: executing program 1 (id=598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048041}, 0x408d0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048041}, 0x408d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc01, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"/802], 0x324}, 0x1, 0x0, 0x0, 0xf41ca671a6f9ea4c}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 24.950246563s ago: executing program 1 (id=598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048041}, 0x408d0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048041}, 0x408d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc01, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"/802], 0x324}, 0x1, 0x0, 0x0, 0xf41ca671a6f9ea4c}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 12.405006998s ago: executing program 1 (id=598): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048041}, 0x408d0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048041}, 0x408d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xc01, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_HANDLE={0xc}]}], {0x14}}, 0x74}}, 0x0) connect$netlink(r0, &(0x7f0000000100)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a01010000000000000000050000090800024000000001080002400000000044010000030a03030000000000000000030000010b00070066696c746572000008000540ffffffff0a000700726f7574650000000900010073797a3000000000d2000c002058467e8129ad011ab2577fd2b44b86d5f2ee60ba9d2662223c7345acdccc10cf4114a3a2a1379922d6f29fbd75c65dc1740be499714d5ff9a4c1f93130df4fbfd98b67876cb96a81d1915d32ebc6568c2b16f16a2f6815bbc1622feb505fd31b646a7a13fd18c4a6306f453839f403058935a6e0adabf8dd8407c5536c81501aea8550d8eae5f28e3ccb6f77c58d591e81b3c352b1d2382ef74c7f1d6502000000000000008fdec5cd258663fa0d20a330a03a83683a640084eea2ce2fff961ef901a2fe6179e57bdaff5e56c4000008000540fffffffb25000c00daec06c45b27dcd25d2fc9a46dd3e01559ac885dc65a21d6e0b0bc3fc24d680d7600000034000000000a050000000000000000000a0000080c000440000000000000000108000240000000000900010073797a3000000000280000000e565d01537df9ddcd0000000a00000908000440000000020900010073797a310000000038010000030a01010000000000000000030000071c0008800c000000000020374f000c00c919db3863d19d41c2b13d530b9f9726c19fc20302defb87239cde54575dbdf4430aaf572efa69ff3e63d565daa6eb9fe03fcc5bf2f1fd06f268ae7d8f83db6e0380fe9b41af1245c53d9b0008000a40000000035c000c00f186a01547bdf5f4aec29da53f155d7c2c256d574b4b8f25d413dd47a256d9df0d6da5e51f2476581f009742a58ece41530245091ba8ea3a6dbe7e0f5846220e6a410ff59850eba032a2a1e1ff762ca4c71051dbd48750c90c000480080002407d9811dd080007006e6174000900030073797a3000000000340008800c00024000000000000000ff0c00024000000000000000000c000240000000000000001f0c0002400000000000007fff1400000011000100"/802], 0x324}, 0x1, 0x0, 0x0, 0xf41ca671a6f9ea4c}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3a}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) 1.426574562s ago: executing program 0 (id=2429): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000240)=@add_del={0x2, &(0x7f00000001c0)='dvmrp0\x00'}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r2, @ANYBLOB="da"], 0x20}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, r4, 0x37, 0x0, 0x0, @link_id}, 0x20) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, 0x8) close(r6) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x22a0b}}, 0x20}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x1e4) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@fwd={0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func={0x6}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x44}, 0x20) socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x8, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x1}, &(0x7f00000002c0)=0x8) 1.353646321s ago: executing program 4 (id=2431): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x8040480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r1, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000500)="91", 0x0}, 0x20) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000000000000007"], 0x38}}, 0x0) (async) unshare(0x4000400) syz_emit_ethernet(0xda, &(0x7f0000000840)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb8847000000000000000000000d004e9c00c00066000000019078000000000a01010200443cb3b3ac14143c00000005e000000200000200e00000010000001fffffffff00008000e000000100000001ac1414bb00000006ac1e010100000000860c00000002000200020002071bd1ac1e0001e0000001ffffffffac1e000100000000ac1414bb4434840164010101000000b7ac1e0001800000000a010102000003ffac1414bb80000000ac1e000100001000e000000100000005940400004404a0c0000000001100907800000005a7947fdd0aee2519f650c19a13d24358a20a98e90067f25655b35236ffa8411e50b27ee03289adb67161325fbe8cc363a23f0b5f1d0b7c59afbd45c2550c08866bf7e74b9a109524"], &(0x7f0000000000)={0x1, 0x3, [0xed1, 0x32f, 0xfd, 0x8e]}) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e20, 0x21a446c0, @empty, 0xaa}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x18) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000140), 0x8) (async) sendmsg$inet6(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="6000000000000000290000000b0000000008000000000000c910fe880000000000000000000000000001c910fe8000000000000000000000000000000720000000000600"/96], 0x60}, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000004c0)=0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="98020000000000000000000000000000850000009e000000950000004000009daf852b0ea35b02c87ba1cadb00"], 0x0}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) write(r0, &(0x7f0000000340)="07000000010000", 0x7) 1.174737539s ago: executing program 2 (id=2433): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x1f}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0xb412}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.174582618s ago: executing program 4 (id=2434): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f00000000c0)={0x0, @empty, 0x0, 0x0, 'sed\x00', 0x41, 0x700}, 0x2c) 1.101918957s ago: executing program 0 (id=2435): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev, 'veth1_to_batadv\x00'}}, 0x1e) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x62, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x20, {[@mptcp=@ack={0x1e, 0x18, 0x10, 0x4, "f38dcb55cb5ae8aa42ee1acd1126da324e87e81c"}]}}}}}}}}, 0x0) 1.079928633s ago: executing program 4 (id=2436): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x804) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1000}, 0x800) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x100, 0x3e}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x10040000}, 0x800) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x1, 0x8000, 0x1, 0x3, {{0x1a, 0x4, 0x1, 0x16, 0x68, 0x64, 0x0, 0xf1, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@end, @ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0xcd, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x14}, @local, @remote, @dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @local]}, @timestamp={0x44, 0xc, 0x38, 0x0, 0x1, [0xbd7, 0xb68]}, @lsrr={0x83, 0x1b, 0x5d, [@empty, @local, @multicast1, @loopback, @remote, @local]}]}}}}}) setsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f00000004c0)={@empty, @private=0xa010102, r5}, 0xc) (async) r6 = socket$qrtr(0x2a, 0x2, 0x0) recvmsg$qrtr(r6, &(0x7f0000002600)={&(0x7f0000000500), 0xc, &(0x7f0000001540)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1, &(0x7f0000001580)=[{0x60, 0x0, 0x0, ""/79}, {0x1010, 0x0, 0x0, ""/4096}], 0x1070, 0x10160}, 0x38, 0x63) (async) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000002640)={0xc, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @multicast2}}}, 0x108) (async) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000002780)) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r7, &(0x7f0000002900)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002840)={0x50, r8, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'nl80211\x00'}]}, 0x50}}, 0x40001) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000002ac0)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002980)={0xf0, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xcf, 0x2a, [@mic={0x8c, 0x10, {0x203, "53adc1178744", @short="b8a8428422e832e4"}}, @fast_bss_trans={0x37, 0x7b, {0xff, 0x1, "e6bb281800f9d76a3a78802467529ca9", "d54f4df5a44c3fd9f88c7220e66a1aa4c5da62910fa0582f85205d3323871cad", "e911d0d74fdc8dff082e0f4865a00f042c35307ec2bd579aa1a2a4a92c3bcdbc", [{0x2, 0x27, "fab9e47f2e22c3f06329ae9c9295306e3a16ab2140478d3d371377469c5a18fbe808d662b47ab7"}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @cf={0x4, 0x6, {0x1e, 0x3, 0x5, 0x5}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x1, @device_b, 0x8, @value=@broadcast, 0xc, 0x3, @device_a, 0xab4}}, @supported_rates={0x1, 0x8, [{0x36}, {0x2}, {0x24}, {0x1}, {0x6c, 0x1}, {0x60, 0x1}, {0x36}, {0x5}]}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r1) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000002c40)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b80)={0x48, r9, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xff, 0x79}}}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x53c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2000}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x48000}, 0x59e86c9bd5404cd2) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x28, r9, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x4041) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000002dc0)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002e00)={'veth0_to_team\x00'}) r11 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r11, &(0x7f0000002e40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002e80)=0x14) r12 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000002ec0)='cgroup.threads\x00', 0x2, 0x0) (async) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002f00)=0x0) write$cgroup_pid(r12, &(0x7f0000002f40)=r13, 0x12) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f00000030c0)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003080)={&(0x7f0000002fc0)={0x8c, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xd, 0x2d}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_TYPE={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0x1f, 0x34, @random="8b59fb22d9eaa732f16f489ac9ae69defc02cf5fe992b5ce8e0170"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x8c}, 0x1, 0x0, 0x0, 0x445}, 0x4008001) 1.034796993s ago: executing program 2 (id=2437): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x9}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000040)="270502005902a8b00600002fb96dbcf706e10500000088641100114408000300b8bf4a31accb", 0x26}, {&(0x7f0000000180)="4fc9316bdf97a94aa4c01a71f2b55527cb347f01679ab78bec91455755985051", 0x20}, {&(0x7f00000001c0)="b6986e54ee7137807146de0ab782b34caded5e870ee7caf6296abeb8a420c3316d8feddfc875d2cb880b7880d6ce92860ccd4f7d6a5f4ae59c2ef4178d2a6e151b9177cfe4a70abc1e1267d0993ebb2a6d21ee884efb8ffba185c10803067b80f3428de425c426dd3cc9eddeab744f710419fde96d", 0x75}, {&(0x7f0000000240)="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", 0xe9f}], 0x4}, 0x0) 1.034578859s ago: executing program 3 (id=2438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x301, 0x0, 0x40000000, {0x24}}, 0x14}}, 0x0) 961.911822ms ago: executing program 2 (id=2439): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)={0x50, r1, 0x607, 0x0, 0x0, {0x2d, 0x0, 0x2f00}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x50}}, 0x0) 942.487661ms ago: executing program 4 (id=2440): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x28c, 0x12, 0x200, 0x70bd27, 0x25dfdbfb, {0x10, 0x7, 0x7, 0x10, {0x4e22, 0x4e23, [0x5, 0x2db, 0x4, 0x5], [0x2, 0x6, 0x53, 0x5], 0x0, [0x9, 0x9]}, 0x1000, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x75, 0x1, "b0e34cc85e500c772cdb868a93c61e78e75119731a85daf118c7e1df1402ec6afce18f2d31eac01ccf8c58c27f602ce382146ed20e5e6ac0c7e2a3b779559a09162bc9a62c4829b95f2673888b14e9c9706e9134005179f7e6e006e7b64d2dc31ce05c41ce5cf20fbb86a489312c15ecf1"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "2422967f471c57371195a39aa1d314e7a18240dae6f66124a83e17d864216ecb0240eb88051abeb53c5f1acc423aa9d4acdc0c935ef720dc6982c844ec34019d4ece3bd2f769b986fc6226a820ef64c39210fa7993579201f985b46e67029d0df5e654e42f3b68aa01b680e0a9c4e95c12e4ef80f451da0a473efa79880de94bd3fc1f392e9d187a0f26e7a96337ef4ad259cd7bad30d7b8876c5d673e1791a250b114ec015b2d41bd865ccc1522723ad01a61a86b6072a14f3db87514b23d27aa5ab417eeb3423ae18bb75c88d44b63fad1570694648dedb7aab2a4f6bddde9ece234393481571706db29d1172cd80a3ae7"}, @INET_DIAG_REQ_BYTECODE={0xd0, 0x1, "1e4744b4dbd89ff155eb3b58f543924973e8383538824be26c270a4ab480673b5f978e0a191ba53bad5baa8d6420505d7f35c0e2b860cf31368b3104a43b09e135c8e73bb7b561083355b7408f053fb0a6c043cda01fecde39a5ca33349f79a65f907e6cce18b5bb00b4d67d7b7fdffdc0ede7e38e011ef110815d8be90ae1aaaed78c6b3ced9f883bcc0bf6ec2a59a95f349c9f485351bdf382bf50d2a54d325a4be8faca7c4c2e60b8a081f6a713c7e9b74642fd4b09e3de128130e9441439426ca86c32af6c38d06a0e27"}]}, 0x28c}, 0x1, 0x0, 0x0, 0x80}, 0xf5ecf68b2ebeae18) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x54, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'NLBL_MGMT\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev}]}, 0x54}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000e3ffff84000000ca00000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000848f108f23f0ac13971ca19c782d16b1a0c328d413c1f9cb031c11b96386f7d7b9c1ef5eea4eba247ef18428d47e97d09562dc80d250ba601c5dfb46b341b0812c7a03e7bc34394be42886f9667e79d127c5b9274c893959fc5b8d81cbdffcaec26b89f1181b35ef23808b8820eb72265f5ea8da33fca6478fc956c1045c", @ANYRES16=r1, @ANYRESOCT=r2], 0x64}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 890.736083ms ago: executing program 0 (id=2441): syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYBLOB="0380c2000000aaaaaaaaaabb86dd6000000000213a00fe800000000000000000000000000000ff0200000000000000f3070000000001026009421800012f00fe8800000000000000000000006ae701fe8000000000000000000000000000008200"/110], 0x0) socket$inet6(0xa, 0x3, 0x8) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b031407e0ff64000200475400f6a13bb1000000080088", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x0, 0x0) write(r5, &(0x7f00000001c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 850.519556ms ago: executing program 3 (id=2442): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000140)="0100000000000000", 0x8, 0x0, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) 805.846214ms ago: executing program 2 (id=2443): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa9, &(0x7f0000000040), &(0x7f0000000080)=0x4) 721.439906ms ago: executing program 4 (id=2444): r0 = socket$inet6_udplite(0x11, 0x2, 0x88) getsockopt$bt_BT_SECURITY(r0, 0x107, 0x12, 0x0, 0x20000000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x7, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2f, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x160) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5903398ce50568173ea54c7beef915d56b290c200", 0x18) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000010c0)='>', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000014c0)='K', 0x1}, {0x0}], 0x2}}], 0x2, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r6 = socket(0x200000100000011, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="4e84e5679f60"}, 0x14) close(r4) socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000500)=[{&(0x7f0000000600)="f603ff5c6450a18bf4715b070000000000000082", 0x14}], 0x1, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c0002800800014000000000080001400000001105000300020000000900010073797a"], 0xcc}}, 0x0) r12 = socket$inet(0x2, 0x3, 0x7f) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', r8, 0x2f, 0x5, 0xb, 0xffffffff, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x8, 0x8, 0x5, 0x10000}}) bind$inet(r12, &(0x7f0000000000)={0x2, 0x0, @local}, 0x51) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) splice(r9, 0x0, r12, 0x0, 0x21, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 714.852107ms ago: executing program 0 (id=2445): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000b80)="b9ff03076044238cb89e14f008000de0ffff00184000632f77fbac141412e000000162079f4b4d2f87e5feca6aab845013f2325f1a3903050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x50) 714.595167ms ago: executing program 2 (id=2446): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000240)=@add_del={0x2, &(0x7f00000001c0)='dvmrp0\x00'}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r2, @ANYBLOB="da"], 0x20}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x17}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map, r4, 0x37, 0x0, 0x0, @link_id}, 0x20) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, 0x8) close(r6) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x22a0b}}, 0x20}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x1e4) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@fwd={0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func={0x6}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x44}, 0x20) socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x8, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000280)={0x0, 0x1}, &(0x7f00000002c0)=0x8) 656.935023ms ago: executing program 0 (id=2447): socket$inet6_udp(0xa, 0x2, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c00048008000340000000000800054008000000150008"], 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}]}, 0x34}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000268053582c137153e37000c0180fc0b10000500", 0x33fe0}], 0x1}, 0x0) 600.08113ms ago: executing program 3 (id=2448): socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 547.691497ms ago: executing program 0 (id=2449): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@NDA_CACHEINFO={0x14, 0x3, {0x7}}, @NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x44}}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0x0) (rerun: 32) syz_emit_ethernet(0x7a, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000080eff95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x38, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}]}]}]}, 0x38}}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r2}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x2, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000240), 0xc30, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r5}, 0x38) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) 385.632524ms ago: executing program 3 (id=2450): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d000f0000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) 129.863447ms ago: executing program 2 (id=2452): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0xec, 0x2b, 0x0, 0x0, 0x0, "", [@nested={0xd9, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f07976773"]}]}, 0xec}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="001286dd0500560008125400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c"], 0xfdef) 129.61385ms ago: executing program 3 (id=2453): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000038000000000000000000000095"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002400090000e4ffffffffffff05000040"], 0x14}}, 0x0) 61.214205ms ago: executing program 4 (id=2454): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002940), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f00000005c0)={0x0, 0x30, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="54000003", @ANYRES16=r2, @ANYBLOB="010000000000000000001e00000038002f800c00020000000000000000002800038008000100000000001c00038006000300000000000600010000000000080002000200000008000300", @ANYRES32=r4], 0x54}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r5, 0x101, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="c0", 0xfffffeb9}], 0x1}, 0x851) sendmsg$unix(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000d00)="e8", 0x1}], 0x1}, 0x41) 0s ago: executing program 3 (id=2455): syz_emit_ethernet(0xfdef, &(0x7f00000004c0)=ANY=[@ANYBLOB="0380c2000000aaaaaaaaaabb86dd6000000000213a00fe800000000000000000000000000000ff0200000000000000f3070000000001026009421800012f00fe8800000000000000000000006ae701fe8000000000000000000000000000008200"/110], 0x0) socket$inet6(0xa, 0x3, 0x8) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x6, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b031407e0ff64000200475400f6a13bb1000000080088a848", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x10, 0x0, 0x0) write(r5, &(0x7f00000001c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000200)={0x0, 0x1, 0x6, @link_local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): aa:aa:3f) already exists on: batadv_slave_1 [ 224.404364][ T9482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.422433][ T9839] sctp: [Deprecated]: syz.2.1520 (pid 9839) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.422433][ T9839] Use struct sctp_sack_info instead [ 224.451366][ T9482] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.468996][ T9482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.491158][ T9482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.519737][ T9840] bridge0: port 5(gretap0) entered blocking state [ 224.532647][ T9840] bridge0: port 5(gretap0) entered disabled state [ 224.542879][ T9840] gretap0: entered allmulticast mode [ 224.563039][ T9840] gretap0: entered promiscuous mode [ 224.574987][ T9840] bridge0: port 5(gretap0) entered blocking state [ 224.581650][ T9840] bridge0: port 5(gretap0) entered forwarding state [ 224.623682][ T9482] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.650315][ T9482] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.665426][ T9482] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.680486][ T9482] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.732219][ T9850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1524'. [ 224.743610][ T9843] tipc: Failed to remove unknown binding: 66,0,0/0:375718683/375718684 [ 224.936777][ T9418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.956799][ T9418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.984509][ T9865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1530'. [ 225.015812][ T9861] x_tables: duplicate underflow at hook 2 [ 225.034336][ T9418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.056795][ T9418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.057246][ T9865] smc: net device wg0 applied user defined pnetid SYZ0 [ 225.316782][ T9876] bridge0: port 3(gretap0) entered blocking state [ 225.323450][ T9876] bridge0: port 3(gretap0) entered disabled state [ 225.335498][ T9876] gretap0: entered allmulticast mode [ 225.342326][ T9876] gretap0: entered promiscuous mode [ 225.348393][ T9876] bridge0: port 3(gretap0) entered blocking state [ 225.354931][ T9876] bridge0: port 3(gretap0) entered forwarding state [ 225.456290][ T9884] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1538'. [ 225.485616][ T9884] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.492815][ T9884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.513318][ T9887] bridge0: port 2(bridge_slave_1) entered listening state [ 225.691236][ T9896] netlink: 'syz.0.1544': attribute type 11 has an invalid length. [ 225.769136][ T9901] netlink: 'syz.0.1544': attribute type 11 has an invalid length. [ 225.827901][ T9901] debugfs: Directory 'netdev:' with parent 'phy9' already present! [ 226.541346][ T9931] __nla_validate_parse: 3 callbacks suppressed [ 226.541367][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1557'. [ 226.648232][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 226.677386][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 226.750283][ T9942] : entered promiscuous mode [ 226.953115][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1563'. [ 227.271726][ T9967] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1565'. [ 227.299002][ T9967] net_ratelimit: 329 callbacks suppressed [ 227.299024][ T9967] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 227.316760][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.368664][ T9967] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 227.396456][ T9967] netlink: 'syz.3.1565': attribute type 10 has an invalid length. [ 227.420555][ T9967] bridge0: port 4(team0) entered blocking state [ 227.463795][ T9967] bridge0: port 4(team0) entered disabled state [ 227.503131][ T9967] team0: entered allmulticast mode [ 227.528663][ T9967] team_slave_0: entered allmulticast mode [ 227.541679][ T9967] team_slave_1: entered allmulticast mode [ 227.549904][ T9967] team0: entered promiscuous mode [ 227.564099][ T9967] team_slave_0: entered promiscuous mode [ 227.574201][ T9967] team_slave_1: entered promiscuous mode [ 227.589389][ T9967] bridge0: port 4(team0) entered blocking state [ 227.595880][ T9967] bridge0: port 4(team0) entered forwarding state [ 227.749647][ T9420] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.115686][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.411034][ T9420] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.437391][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.465745][ T9420] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.534539][ T9420] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.831441][ T9420] bridge_slave_1: left allmulticast mode [ 228.848026][ T9420] bridge_slave_1: left promiscuous mode [ 228.874389][ T9420] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.895862][ T9989] IPVS: persistence engine module ip_vs_pe_si¸ not found [ 228.909205][ T9420] bridge_slave_0: left allmulticast mode [ 228.933987][ T9420] bridge_slave_0: left promiscuous mode [ 228.956482][ T9420] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.969318][ T9996] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 229.026635][ T9998] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 229.163943][ T5139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.240667][ T9423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.252654][ T5135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.266110][ T5139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.322262][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 229.332684][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 229.341630][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 229.359580][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 229.370482][ T5090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 229.385928][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.852629][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 230.074447][ T9420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.113334][ T9420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.134473][ T9420] bond0 (unregistering): Released all slaves [ 230.209521][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.376299][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1584'. [ 230.477419][T10045] netlink: 'syz.0.1584': attribute type 4 has an invalid length. [ 230.549240][T10047] netlink: 'syz.3.1585': attribute type 6 has an invalid length. [ 230.664133][T10054] lo speed is unknown, defaulting to 1000 [ 230.682190][T10054] lo speed is unknown, defaulting to 1000 [ 230.720376][ T9420] hsr_slave_0: left promiscuous mode [ 230.727359][ T9420] hsr_slave_1: left promiscuous mode [ 230.733613][ T9420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.743884][ T9420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.752314][ T9420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.763897][ T9420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.787971][ T9420] veth1_macvtap: left promiscuous mode [ 230.793502][ T9420] veth0_macvtap: left promiscuous mode [ 230.802838][ T9420] veth1_vlan: left promiscuous mode [ 230.808339][ T9420] veth0_vlan: left promiscuous mode [ 231.240298][ T9420] team0 (unregistering): Port device team_slave_1 removed [ 231.279175][ T9420] team0 (unregistering): Port device team_slave_0 removed [ 231.481818][ T5093] Bluetooth: hci0: command tx timeout [ 231.542740][T10069] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.886501][T10054] lo speed is unknown, defaulting to 1000 [ 231.937499][T10063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1589'. [ 231.961094][T10078] pim6reg1: entered promiscuous mode [ 231.980645][T10078] pim6reg1: entered allmulticast mode [ 232.314306][T10054] infiniband syz0: set down [ 232.322202][ T5135] lo speed is unknown, defaulting to 1000 [ 232.332014][T10019] chnl_net:caif_netlink_parms(): no params data found [ 232.353368][T10054] infiniband syz0: added lo [ 232.361714][ T5135] net_ratelimit: 9 callbacks suppressed [ 232.361731][ T5135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.410319][T10054] syz0: rxe_create_cq: returned err = -12 [ 232.435798][T10054] infiniband syz0: Couldn't create ib_mad CQ [ 232.442115][T10054] infiniband syz0: Couldn't open port 1 [ 232.507696][T10054] RDS/IB: syz0: added [ 232.515946][T10054] smc: adding ib device syz0 with port count 1 [ 232.551923][T10054] smc: ib device syz0 port 1 has pnetid [ 232.580051][ T5135] lo speed is unknown, defaulting to 1000 [ 232.604905][T10109] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1603'. [ 232.659574][T10054] lo speed is unknown, defaulting to 1000 [ 232.782199][T10088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.785506][T10019] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.791224][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.829889][T10019] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.866900][T10019] bridge_slave_0: entered allmulticast mode [ 232.889114][T10019] bridge_slave_0: entered promiscuous mode [ 232.917266][T10019] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.952209][T10019] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.969135][T10019] bridge_slave_1: entered allmulticast mode [ 232.989193][T10019] bridge_slave_1: entered promiscuous mode [ 233.103737][T10019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.134685][T10019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.159142][T10054] lo speed is unknown, defaulting to 1000 [ 233.223992][T10019] team0: Port device team_slave_0 added [ 233.240518][T10019] team0: Port device team_slave_1 added [ 233.315481][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.338758][T10019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.352859][T10019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.418448][T10019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.455390][T10019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.498650][T10019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.558093][ T5093] Bluetooth: hci0: command tx timeout [ 233.623940][T10019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.660058][T10122] netlink: 'syz.3.1607': attribute type 21 has an invalid length. [ 233.670521][T10122] netlink: 'syz.3.1607': attribute type 4 has an invalid length. [ 233.705592][T10122] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1607'. [ 233.860960][T10054] lo speed is unknown, defaulting to 1000 [ 233.868078][T10129] sch_tbf: burst 0 is lower than device ipvlan0 mtu (1514) ! [ 233.912032][T10019] hsr_slave_0: entered promiscuous mode [ 233.937252][T10019] hsr_slave_1: entered promiscuous mode [ 233.955014][T10019] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.974529][T10019] Cannot create hsr debugfs directory [ 234.365355][ T5139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.415649][T10054] lo speed is unknown, defaulting to 1000 [ 234.639509][T10148] syzkaller0: entered promiscuous mode [ 234.645030][T10148] syzkaller0: entered allmulticast mode [ 234.907525][T10054] lo speed is unknown, defaulting to 1000 [ 234.997039][ T9424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.007775][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.034279][ T5139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.056427][T10019] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 235.095004][T10019] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 235.123266][T10019] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 235.187408][T10019] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 235.357343][T10054] lo speed is unknown, defaulting to 1000 [ 235.395904][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.524218][T10019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.582588][T10019] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.627952][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.628206][T10172] FAULT_INJECTION: forcing a failure. [ 235.628206][T10172] name failslab, interval 1, probability 0, space 0, times 0 [ 235.635187][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.638412][ T5093] Bluetooth: hci0: command tx timeout [ 235.675396][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.682639][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.735210][T10172] CPU: 0 PID: 10172 Comm: syz.0.1625 Not tainted 6.10.0-rc6-syzkaller-00170-g0913ec336a6c #0 [ 235.745411][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 235.755485][T10172] Call Trace: [ 235.758779][T10172] [ 235.761722][T10172] dump_stack_lvl+0x241/0x360 [ 235.766430][T10172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.771649][T10172] ? __pfx__printk+0x10/0x10 [ 235.776252][T10172] should_fail_ex+0x3b0/0x4e0 [ 235.780930][T10172] ? sctp_add_bind_addr+0x89/0x3a0 [ 235.786119][T10172] should_failslab+0x9/0x20 [ 235.790617][T10172] kmalloc_trace_noprof+0x6c/0x2c0 [ 235.795732][T10172] sctp_add_bind_addr+0x89/0x3a0 [ 235.800667][T10172] sctp_copy_local_addr_list+0x311/0x500 [ 235.806295][T10172] ? sctp_copy_local_addr_list+0xab/0x500 [ 235.812008][T10172] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 235.818168][T10172] ? sctp_v6_is_any+0x60/0x70 [ 235.822854][T10172] sctp_bind_addr_copy+0xad/0x3b0 [ 235.827877][T10172] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 235.834199][T10172] sctp_connect_new_asoc+0x2f3/0x6c0 [ 235.839512][T10172] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 235.845306][T10172] ? sctp_sendmsg+0xbb9/0x3520 [ 235.850059][T10172] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 235.855680][T10172] ? security_sctp_bind_connect+0x90/0xb0 [ 235.861393][T10172] sctp_sendmsg+0x219a/0x3520 [ 235.866072][T10172] ? __pfx_sctp_sendmsg+0x10/0x10 [ 235.871085][T10172] ? __pfx_aa_sk_perm+0x10/0x10 [ 235.875956][T10172] ? inet_sendmsg+0x330/0x390 [ 235.880668][T10172] __sock_sendmsg+0x1a6/0x270 [ 235.885361][T10172] __sys_sendto+0x3a4/0x4f0 [ 235.889868][T10172] ? __pfx___sys_sendto+0x10/0x10 [ 235.894909][T10172] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.900889][T10172] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.907320][T10172] __x64_sys_sendto+0xde/0x100 [ 235.912098][T10172] do_syscall_64+0xf3/0x230 [ 235.916609][T10172] ? clear_bhb_loop+0x35/0x90 [ 235.921294][T10172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.927186][T10172] RIP: 0033:0x7fd0a3175bd9 [ 235.931590][T10172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.951183][T10172] RSP: 002b:00007fd0a3fda048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 235.959601][T10172] RAX: ffffffffffffffda RBX: 00007fd0a3303f60 RCX: 00007fd0a3175bd9 [ 235.967593][T10172] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000008 [ 235.975554][T10172] RBP: 00007fd0a3fda0a0 R08: 0000000020000100 R09: 000000000000001c [ 235.983516][T10172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.991475][T10172] R13: 000000000000000b R14: 00007fd0a3303f60 R15: 00007ffe0a7cd008 [ 235.999540][T10172] [ 236.009092][T10019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.277274][ T5135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.341379][T10192] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 236.362320][T10192] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.1630'. [ 236.377860][T10192] netlink: 8280 bytes leftover after parsing attributes in process `syz.4.1630'. [ 236.389475][T10195] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1632'. [ 236.422896][T10019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.556955][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1630'. [ 236.566233][T10202] x_tables: ip_tables: udp match: only valid for protocol 17 [ 236.659866][T10019] veth0_vlan: entered promiscuous mode [ 236.682512][T10019] veth1_vlan: entered promiscuous mode [ 236.773430][T10019] veth0_macvtap: entered promiscuous mode [ 236.794813][T10019] veth1_macvtap: entered promiscuous mode [ 236.816863][T10210] netlink: 'syz.0.1636': attribute type 1 has an invalid length. [ 236.852291][T10019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.863003][T10019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.872986][T10019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.891948][T10019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.905795][T10019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.921865][T10019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.932568][T10019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.944846][T10019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.958207][T10019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.984306][T10210] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 237.008447][T10019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.021378][T10019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.031768][T10019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.050595][T10019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.061851][T10019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.073083][T10019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.084183][T10019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.094810][T10019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.107586][T10019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.133323][T10019] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.151595][T10019] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.161537][T10019] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.171657][T10019] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.404736][ T9424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.432688][ T9424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.476113][ T50] net_ratelimit: 2 callbacks suppressed [ 237.476131][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.514023][T10236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1644'. [ 237.541853][ T9420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.563584][ T9420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.611346][T10240] netlink: 'syz.2.1646': attribute type 4 has an invalid length. [ 237.944338][T10266] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 237.965623][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1654'. [ 238.138492][ T5135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.515785][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.563869][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 238.582694][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 238.595746][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 238.625633][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 238.638968][T10303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.648936][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.661484][ T5090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 238.670153][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 238.672035][T10303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.769945][T10301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.783508][T10301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.833619][T10299] lo speed is unknown, defaulting to 1000 [ 238.981525][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.035385][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.149116][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.175382][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.271977][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.283253][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.377163][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.387797][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.557361][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.616268][T10299] chnl_net:caif_netlink_parms(): no params data found [ 240.207953][ T51] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 240.414130][ T51] team0: Port device bridge2 removed [ 240.619166][ T51] bond0 (unregistering): Released all slaves [ 240.641934][ T51] bond1 (unregistering): Released all slaves [ 240.663928][ T51] bond2 (unregistering): Released all slaves [ 240.758944][ T5093] Bluetooth: hci0: command tx timeout [ 240.778374][T10299] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.795596][T10299] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.802883][T10299] bridge_slave_0: entered allmulticast mode [ 240.817636][T10299] bridge_slave_0: entered promiscuous mode [ 240.834198][ T51] : left promiscuous mode [ 240.853771][T10299] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.863615][T10299] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.875693][T10299] bridge_slave_1: entered allmulticast mode [ 240.883036][T10299] bridge_slave_1: entered promiscuous mode [ 241.009008][T10299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.032258][T10299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.198654][T10299] team0: Port device team_slave_0 added [ 241.249757][T10299] team0: Port device team_slave_1 added [ 241.284061][T10299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.291515][T10299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.318990][T10299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.367383][T10299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.390196][T10299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.428244][T10299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.465650][T10366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1685'. [ 241.690634][T10299] hsr_slave_0: entered promiscuous mode [ 241.728283][T10299] hsr_slave_1: entered promiscuous mode [ 241.748258][T10299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.775578][T10299] Cannot create hsr debugfs directory [ 241.824761][ T5090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 241.835922][ T5090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 241.867194][ T5090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 241.880170][ T5090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 241.889042][ T5090] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 241.896598][ T5090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 242.008048][ T51] hsr_slave_0: left promiscuous mode [ 242.014043][ T51] hsr_slave_1: left promiscuous mode [ 242.032018][ T51] veth1_macvtap: left promiscuous mode [ 242.040482][ T51] veth0_macvtap: left promiscuous mode [ 242.046149][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.068230][ T51] veth1_vlan: left promiscuous mode [ 242.073539][ T51] veth0_vlan: left promiscuous mode [ 242.835492][ T5093] Bluetooth: hci0: command tx timeout [ 243.246150][T10377] lo speed is unknown, defaulting to 1000 [ 243.373048][T10412] Bluetooth: MGMT ver 1.22 [ 243.431472][T10414] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 243.721203][T10418] gretap0: left allmulticast mode [ 243.747626][T10418] gretap0: left promiscuous mode [ 243.752829][T10418] bridge0: port 3(gretap0) entered disabled state [ 243.826934][T10422] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1707'. [ 243.837602][T10422] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1707'. [ 243.957303][ T5093] Bluetooth: hci1: command tx timeout [ 243.996815][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.276376][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.384784][T10299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 244.393691][T10440] FAULT_INJECTION: forcing a failure. [ 244.393691][T10440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.425887][T10299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 244.436039][T10440] CPU: 0 PID: 10440 Comm: syz.3.1712 Not tainted 6.10.0-rc6-syzkaller-00170-g0913ec336a6c #0 [ 244.446229][T10440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 244.456317][T10440] Call Trace: [ 244.459624][T10440] [ 244.462566][T10440] dump_stack_lvl+0x241/0x360 [ 244.467274][T10440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.472495][T10440] ? __pfx__printk+0x10/0x10 [ 244.477107][T10440] ? vfs_write+0x7c4/0xc90 [ 244.481551][T10440] should_fail_ex+0x3b0/0x4e0 [ 244.486257][T10440] _copy_from_user+0x2f/0xe0 [ 244.490873][T10440] move_addr_to_kernel+0x82/0x150 [ 244.495920][T10440] __sys_connect+0xc1/0x310 [ 244.500440][T10440] ? __pfx___sys_connect+0x10/0x10 [ 244.505572][T10440] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 244.511915][T10440] ? do_syscall_64+0x100/0x230 [ 244.516712][T10440] __x64_sys_connect+0x7a/0x90 [ 244.521505][T10440] do_syscall_64+0xf3/0x230 [ 244.526041][T10440] ? clear_bhb_loop+0x35/0x90 [ 244.530755][T10440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.536695][T10440] RIP: 0033:0x7fc169b75bd9 [ 244.541133][T10440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.560768][T10440] RSP: 002b:00007fc16a94f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 244.569209][T10440] RAX: ffffffffffffffda RBX: 00007fc169d03f60 RCX: 00007fc169b75bd9 [ 244.577204][T10440] RDX: 0000000000000010 RSI: 0000000020e5c000 RDI: 0000000000000004 [ 244.585199][T10440] RBP: 00007fc16a94f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 244.593193][T10440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.601184][T10440] R13: 000000000000000b R14: 00007fc169d03f60 R15: 00007fffc4c68518 [ 244.609240][T10440] [ 244.690895][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.743797][T10299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 244.759246][T10377] chnl_net:caif_netlink_parms(): no params data found [ 244.772427][T10452] netlink: 'syz.3.1715': attribute type 13 has an invalid length. [ 244.795203][T10299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 244.897840][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.915681][ T5093] Bluetooth: hci0: command tx timeout [ 245.079208][T10465] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1719'. [ 245.109334][T10465] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1719'. [ 245.167977][T10377] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.187461][T10377] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.201357][T10377] bridge_slave_0: entered allmulticast mode [ 245.210208][T10377] bridge_slave_0: entered promiscuous mode [ 245.260457][T10377] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.276718][T10377] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.283991][T10377] bridge_slave_1: entered allmulticast mode [ 245.295927][T10377] bridge_slave_1: entered promiscuous mode [ 245.404039][ T51] bridge_slave_1: left allmulticast mode [ 245.411247][ T51] bridge_slave_1: left promiscuous mode [ 245.419843][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.430820][ T51] bridge_slave_0: left allmulticast mode [ 245.440097][ T51] bridge_slave_0: left promiscuous mode [ 245.447347][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.843685][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.883735][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.901151][ T51] bond0 (unregistering): Released all slaves [ 245.927887][T10377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.962362][T10490] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1728'. [ 246.009286][T10490] tc_dump_action: action bad kind [ 246.030175][T10377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.039983][ T5093] Bluetooth: hci1: command tx timeout [ 246.191992][ T7800] IPVS: starting estimator thread 0... [ 246.204535][T10502] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1732'. [ 246.222142][T10377] team0: Port device team_slave_0 added [ 246.234010][T10377] team0: Port device team_slave_1 added [ 246.263056][T10299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.286097][T10505] IPVS: using max 21 ests per chain, 50400 per kthread [ 246.353406][T10503] sit0: entered allmulticast mode [ 246.373974][T10509] netlink: 'syz.4.1735': attribute type 10 has an invalid length. [ 246.418612][T10509] bridge0: port 3(team0) entered disabled state [ 246.443580][T10509] team0: left allmulticast mode [ 246.450296][T10509] team_slave_0: left allmulticast mode [ 246.456892][T10509] team_slave_1: left allmulticast mode [ 246.463994][T10509] team0: left promiscuous mode [ 246.469872][T10511] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 246.472940][T10509] team_slave_0: left promiscuous mode [ 246.485589][T10509] team_slave_1: left promiscuous mode [ 246.491266][T10509] bridge0: port 3(team0) entered disabled state [ 246.501512][T10509] batman_adv: batadv0: Adding interface: team0 [ 246.508896][T10509] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.534546][T10509] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 246.549947][T10377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.565425][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.592167][T10377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.606465][T10501] sit0: entered promiscuous mode [ 246.681624][T10377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.689131][T10377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.718020][T10377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.745846][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1737'. [ 246.762334][T10517] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.771863][T10517] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.780899][T10517] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.789700][T10517] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.799655][T10517] vxlan1: entered promiscuous mode [ 246.821233][T10299] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.962407][ T7800] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.969651][ T7800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.091103][ T51] hsr_slave_0: left promiscuous mode [ 247.132115][ T51] hsr_slave_1: left promiscuous mode [ 247.154080][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.162730][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.173651][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.192614][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.241191][ T51] veth1_macvtap: left promiscuous mode [ 247.247044][ T51] veth0_macvtap: left promiscuous mode [ 247.252628][ T51] veth1_vlan: left promiscuous mode [ 247.258375][ T51] veth0_vlan: left promiscuous mode [ 247.769065][ T51] team0 (unregistering): Port device team_slave_1 removed [ 247.817269][ T51] team0 (unregistering): Port device team_slave_0 removed [ 248.117873][ T5093] Bluetooth: hci1: command tx timeout [ 248.210936][T10377] hsr_slave_0: entered promiscuous mode [ 248.224942][T10377] hsr_slave_1: entered promiscuous mode [ 248.243923][T10377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.251766][T10377] Cannot create hsr debugfs directory [ 248.258960][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.266131][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.448851][T10547] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1748'. [ 248.491731][T10547] openvswitch: netlink: Multiple metadata blocks provided [ 248.707546][T10556] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.735799][T10556] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.974267][T10573] netlink: 'syz.3.1755': attribute type 3 has an invalid length. [ 248.997031][T10573] netlink: 'syz.3.1755': attribute type 1 has an invalid length. [ 249.004801][T10573] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1755'. [ 249.067036][T10576] IPVS: set_ctl: invalid protocol: 253 172.30.1.4:20001 [ 249.074920][T10579] netlink: 'syz.2.1757': attribute type 11 has an invalid length. [ 249.093509][T10299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.217048][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1759'. [ 249.286241][T10588] netlink: 'syz.3.1761': attribute type 14 has an invalid length. [ 249.335902][T10586] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 249.364167][T10299] veth0_vlan: entered promiscuous mode [ 249.405484][T10586] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 249.450354][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1762'. [ 249.512915][T10591] bond3: entered promiscuous mode [ 249.527491][T10299] veth1_vlan: entered promiscuous mode [ 249.607175][T10595] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 249.626413][T10595] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 249.681054][T10377] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 249.699008][T10377] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 249.759243][T10377] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 249.789265][T10377] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 249.823094][T10299] veth0_macvtap: entered promiscuous mode [ 249.848727][T10299] veth1_macvtap: entered promiscuous mode [ 249.865422][T10614] netlink: 'syz.4.1769': attribute type 7 has an invalid length. [ 249.895808][T10614] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1769'. [ 249.904780][T10299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.918808][T10617] netlink: zone id is out of range [ 249.923971][T10617] netlink: zone id is out of range [ 249.931551][T10299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.942544][T10617] netlink: zone id is out of range [ 249.948947][T10299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.960525][T10617] netlink: zone id is out of range [ 249.965802][T10299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.976211][T10617] netlink: zone id is out of range [ 249.981351][T10617] netlink: zone id is out of range [ 249.991046][T10299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.011471][T10299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.024429][T10617] netlink: zone id is out of range [ 250.031101][T10617] netlink: zone id is out of range [ 250.044959][T10299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.057555][T10299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.069492][T10299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.084933][T10619] vlan3: entered promiscuous mode [ 250.091373][T10619] vlan3: entered allmulticast mode [ 250.112337][T10299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.113202][T10617] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.125715][T10299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.142625][T10299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.157611][T10299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.170052][T10299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.180628][T10299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.190695][T10299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.205903][ T5093] Bluetooth: hci1: command tx timeout [ 250.212872][T10299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.231339][T10299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.329906][T10299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.354468][T10299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.394743][T10299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.409427][T10299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.484329][T10637] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1778'. [ 250.494998][T10637] netlink: 'syz.4.1778': attribute type 1 has an invalid length. [ 250.535772][T10377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.641706][T10377] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.669883][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.677147][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.715287][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.722479][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.753255][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.796921][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.901757][ T9418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.929689][ T9418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.971431][T10663] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1786'. [ 251.122216][T10377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.149738][T10670] sctp: [Deprecated]: syz.4.1788 (pid 10670) Use of struct sctp_assoc_value in delayed_ack socket option. [ 251.149738][T10670] Use struct sctp_sack_info instead [ 251.281009][T10377] veth0_vlan: entered promiscuous mode [ 251.318652][T10678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1790'. [ 251.357130][T10377] veth1_vlan: entered promiscuous mode [ 251.448582][T10377] veth0_macvtap: entered promiscuous mode [ 251.487509][T10377] veth1_macvtap: entered promiscuous mode [ 251.511066][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.535273][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.546872][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.558668][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.568997][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.580106][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.591870][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.607122][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.617163][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.632681][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.658345][T10377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.673223][T10693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1796'. [ 251.701291][T10693] vlan3: entered promiscuous mode [ 251.711324][T10693] bridge0: entered promiscuous mode [ 251.729049][T10693] bridge0: left promiscuous mode [ 251.782183][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.797504][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.809378][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.824589][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.839902][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.850565][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.861457][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.874522][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.891691][T10377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.902254][T10377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.913519][T10377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.928676][T10377] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.946557][T10377] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.957077][T10377] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.971712][T10377] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.113446][ T9418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.135293][ T9418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.160620][ T9420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.172071][ T9420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.373837][T10717] ax25_connect(): syz.0.1806 uses autobind, please contact jreuter@yaina.de [ 252.766698][T10738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1816'. [ 252.782980][T10738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1816'. [ 252.823533][T10738] team0: Cannot enslave team device to itself [ 253.132152][T10756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.181329][T10761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 253.511279][T10776] netlink: 'syz.2.1833': attribute type 10 has an invalid length. [ 253.526368][T10776] net_ratelimit: 326 callbacks suppressed [ 253.526387][T10776] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 253.550675][T10781] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 253.743813][T10791] netlink: 'syz.3.1838': attribute type 3 has an invalid length. [ 253.875019][ T9407] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.015843][T10806] netlink: 'syz.3.1843': attribute type 13 has an invalid length. [ 255.044447][T10806] veth0_macvtap: left promiscuous mode [ 255.066925][T10806] macvtap0: entered allmulticast mode [ 255.115902][T10806] macvtap0: refused to change device tx_queue_len [ 255.159702][T10806] sctp: [Deprecated]: syz.3.1843 (pid 10806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.159702][T10806] Use struct sctp_sack_info instead [ 255.191089][T10812] __nla_validate_parse: 10 callbacks suppressed [ 255.191108][T10812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1845'. [ 255.386731][ T5090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.399916][ T5090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.415871][ T5090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.424868][T10821] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1847'. [ 255.442600][ T5090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.452749][ T5090] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 255.460760][ T5090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 255.591603][T10817] lo speed is unknown, defaulting to 1000 [ 255.835348][ T9407] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.999081][ T9407] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.119395][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.125905][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.147417][ T9407] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.380737][T10860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1861'. [ 256.398153][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1861'. [ 256.415304][ T9407] bridge_slave_1: left allmulticast mode [ 256.422054][T10860] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1861'. [ 256.425472][ T9407] bridge_slave_1: left promiscuous mode [ 256.463191][ T9407] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.477325][ T9407] bridge_slave_0: left allmulticast mode [ 256.480947][T10860] xt_bpf: check failed: parse error [ 256.482984][ T9407] bridge_slave_0: left promiscuous mode [ 256.483187][ T9407] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.591764][T10871] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1864'. [ 256.900368][ T9407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.914768][ T9407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.926779][ T9407] bond0 (unregistering): Released all slaves [ 256.972578][T10817] chnl_net:caif_netlink_parms(): no params data found [ 257.216475][T10888] netlink: 155908 bytes leftover after parsing attributes in process `syz.3.1867'. [ 257.253624][T10888] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 257.273134][T10817] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.281027][T10817] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.288868][T10817] bridge_slave_0: entered allmulticast mode [ 257.296570][T10817] bridge_slave_0: entered promiscuous mode [ 257.382186][T10817] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.389673][T10817] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.398260][T10817] bridge_slave_1: entered allmulticast mode [ 257.410340][T10817] bridge_slave_1: entered promiscuous mode [ 257.555674][ T5093] Bluetooth: hci1: command tx timeout [ 257.613691][T10905] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1872'. [ 257.634207][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 257.638443][T10817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.653213][T10905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1872'. [ 257.721006][T10817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.928743][ T9407] hsr_slave_0: left promiscuous mode [ 257.945852][ T9407] hsr_slave_1: left promiscuous mode [ 257.959114][ T9407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.972754][ T9407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.983826][ T9407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.999485][ T9407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.052251][ T9407] veth1_macvtap: left promiscuous mode [ 258.059108][ T9407] veth0_macvtap: left promiscuous mode [ 258.064807][ T9407] veth1_vlan: left promiscuous mode [ 258.070585][ T9407] veth0_vlan: left promiscuous mode [ 258.521725][ T9407] team0 (unregistering): Port device team_slave_1 removed [ 258.560175][ T9407] team0 (unregistering): Port device team_slave_0 removed [ 258.959155][T10817] team0: Port device team_slave_0 added [ 258.968228][T10817] team0: Port device team_slave_1 added [ 258.988005][T10926] lo: entered promiscuous mode [ 259.057931][T10926] lo: left promiscuous mode [ 259.070612][T10817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.085557][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.131839][T10817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.165959][T10817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.172998][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.243558][T10817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.420168][T10941] bridge0: port 1(gretap0) entered blocking state [ 259.439239][T10941] bridge0: port 1(gretap0) entered disabled state [ 259.450535][T10941] gretap0: entered allmulticast mode [ 259.461004][T10941] gretap0: entered promiscuous mode [ 259.492448][T10817] hsr_slave_0: entered promiscuous mode [ 259.505875][T10951] netlink: 'syz.0.1890': attribute type 7 has an invalid length. [ 259.516071][T10817] hsr_slave_1: entered promiscuous mode [ 259.524361][T10951] netlink: 'syz.0.1890': attribute type 8 has an invalid length. [ 259.532744][T10817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.550528][T10817] Cannot create hsr debugfs directory [ 259.571953][T10953] gretap0: left allmulticast mode [ 259.580175][T10953] gretap0: left promiscuous mode [ 259.590730][T10953] bridge0: port 1(gretap0) entered disabled state [ 259.635510][ T5093] Bluetooth: hci1: command tx timeout [ 260.010599][T10979] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 260.051387][T10979] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.092508][T10979] netlink: 'syz.0.1899': attribute type 10 has an invalid length. [ 260.124168][T10979] bridge0: port 3(team0) entered blocking state [ 260.128410][T10991] x_tables: duplicate underflow at hook 1 [ 260.132682][T10979] bridge0: port 3(team0) entered disabled state [ 260.143839][T10979] team0: entered allmulticast mode [ 260.149365][T10979] team_slave_0: entered allmulticast mode [ 260.156402][T10979] team_slave_1: entered allmulticast mode [ 260.164250][T10979] team0: entered promiscuous mode [ 260.170438][T10979] team_slave_0: entered promiscuous mode [ 260.176484][T10979] team_slave_1: entered promiscuous mode [ 260.184706][T10979] bridge0: port 3(team0) entered blocking state [ 260.191164][T10979] bridge0: port 3(team0) entered forwarding state [ 260.346795][T10995] bridge0: port 1(gretap0) entered blocking state [ 260.353741][T10995] bridge0: port 1(gretap0) entered disabled state [ 260.370818][T10995] gretap0: entered allmulticast mode [ 260.379701][T10995] gretap0: entered promiscuous mode [ 260.404073][T10995] gretap0: left allmulticast mode [ 260.409604][T10995] gretap0: left promiscuous mode [ 260.414819][T10995] bridge0: port 1(gretap0) entered disabled state [ 260.432460][T11000] __nla_validate_parse: 7 callbacks suppressed [ 260.432477][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1907'. [ 260.483906][T11003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.491574][T11003] IPv6: NLM_F_CREATE should be set when creating new route [ 260.503759][T11000] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.666102][T11014] netlink: 'syz.0.1913': attribute type 1 has an invalid length. [ 260.675547][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.730166][T11014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.814778][T11019] bond1: (slave ip6gretap1): making interface the new active one [ 260.839290][T11019] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 260.848542][T10817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 260.870421][T10817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.894240][T10817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.912249][T10817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 260.995574][ T5138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.070800][T11034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1921'. [ 261.118826][T10817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.132815][T11034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.140147][T11034] IPv6: NLM_F_CREATE should be set when creating new route [ 261.171621][T10817] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.181798][T11034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 261.220032][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.227251][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.263930][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.271113][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.286847][ T5138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.367307][T11047] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1924'. [ 261.717194][ T5093] Bluetooth: hci1: command tx timeout [ 261.770314][T11071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.781177][T11071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.800754][T11071] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.821373][T10817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.892155][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.934173][T11070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.964327][T10817] veth0_vlan: entered promiscuous mode [ 262.009589][T10817] veth1_vlan: entered promiscuous mode [ 262.136968][T10817] veth0_macvtap: entered promiscuous mode [ 262.171250][T10817] veth1_macvtap: entered promiscuous mode [ 262.209028][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1935'. [ 262.267171][T11085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.274572][T11085] IPv6: NLM_F_CREATE should be set when creating new route [ 262.350787][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.396706][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.415787][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.445304][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.465639][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.484298][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.495911][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.514090][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.529178][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.545955][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.559006][T10817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.573160][T11084] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 262.622261][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.638555][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.675793][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.705608][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.732849][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.744623][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.769056][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.779826][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.797638][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.815195][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.848252][T10817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.867819][T10817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.876770][T10817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.882023][T11095] netlink: 'syz.3.1940': attribute type 11 has an invalid length. [ 262.885946][T10817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.915917][T11095] netlink: 211132 bytes leftover after parsing attributes in process `syz.3.1940'. [ 262.925232][T10817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.036707][T11103] netlink: 'syz.0.1942': attribute type 10 has an invalid length. [ 263.079869][T11103] bond0: (slave netdevsim0): Enslaving as an active interface with a down link [ 263.390170][T11111] netlink: 'syz.0.1944': attribute type 33 has an invalid length. [ 263.427501][ T9424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.441320][ T9424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.494411][T11124] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1947'. [ 263.495782][ T9418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.511531][ T9418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.895491][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'. [ 263.926140][T11141] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.933404][T11141] IPv6: NLM_F_CREATE should be set when creating new route [ 263.943647][T11141] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 263.990949][T11143] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1957'. [ 264.040533][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1958'. [ 264.422289][T11164] bond0: entered promiscuous mode [ 264.431311][T11164] bond_slave_0: entered promiscuous mode [ 264.441565][T11164] bond_slave_1: entered promiscuous mode [ 264.461247][T11164] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 264.486602][T11167] netlink: 'syz.0.1967': attribute type 25 has an invalid length. [ 264.494683][T11167] netlink: 'syz.0.1967': attribute type 7 has an invalid length. [ 264.654541][T11180] lo speed is unknown, defaulting to 1000 [ 264.753136][T11185] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1975'. [ 265.101369][T11203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.114419][T11203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.158947][ T5138] net_ratelimit: 10 callbacks suppressed [ 265.158968][ T5138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.180761][T11203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.374351][ T5090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 265.384153][ T5090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 265.399503][ T5090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 265.412312][ T5090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 265.421836][ T5090] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 265.430036][ T5090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 265.510055][T11209] lo speed is unknown, defaulting to 1000 [ 265.525684][T11213] __nla_validate_parse: 3 callbacks suppressed [ 265.525705][T11213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1985'. [ 265.553473][T11213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1985'. [ 265.832055][T11220] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.841452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.979078][T11228] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 266.064377][T11231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1989'. [ 266.107000][T11224] netlink: 'syz.0.1989': attribute type 3 has an invalid length. [ 266.122273][T11224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.146928][T11209] chnl_net:caif_netlink_parms(): no params data found [ 266.196820][ T5138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.211704][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.293577][ T9421] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.408989][T11209] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.416220][T11209] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.423399][T11209] bridge_slave_0: entered allmulticast mode [ 266.431527][T11209] bridge_slave_0: entered promiscuous mode [ 266.441585][T11209] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.449076][T11209] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.456345][T11209] bridge_slave_1: entered allmulticast mode [ 266.463180][T11209] bridge_slave_1: entered promiscuous mode [ 266.494775][T11209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.511108][T11209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.558939][T11209] team0: Port device team_slave_0 added [ 266.567592][T11209] team0: Port device team_slave_1 added [ 266.593654][T11209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.602159][T11209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.629137][T11209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.642284][T11209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.651282][T11209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.680360][T11209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.724438][T11209] hsr_slave_0: entered promiscuous mode [ 266.731402][T11209] hsr_slave_1: entered promiscuous mode [ 266.742370][T11209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.750309][T11209] Cannot create hsr debugfs directory [ 266.878886][T11209] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.889866][T11209] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.973336][T11209] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.983893][T11209] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.081596][T11209] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.091989][T11209] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.171790][T11209] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.182999][T11209] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.221748][ T9421] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.236008][ T5138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.288734][ T9421] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.354342][ T9421] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.370095][T11209] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.379674][T11209] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.392436][T11209] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.404920][T11209] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.476165][ T5090] Bluetooth: hci1: command tx timeout [ 267.607704][ T9421] bridge_slave_1: left allmulticast mode [ 267.625442][ T9421] bridge_slave_1: left promiscuous mode [ 267.631249][ T9421] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.662464][ T9421] bridge_slave_0: left allmulticast mode [ 267.673520][ T9421] bridge_slave_0: left promiscuous mode [ 267.673915][T11255] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 267.683828][ T9421] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.759523][ T5093] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 267.770475][ T5093] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 267.778940][ T5093] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 267.798333][ T5093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 267.807027][ T5093] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 267.814566][ T5093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 267.917977][T11262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.189160][ T9421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.201133][ T9421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.213388][ T9421] bond0 (unregistering): Released all slaves [ 268.281946][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.518520][T11257] lo speed is unknown, defaulting to 1000 [ 268.586922][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2009'. [ 268.618044][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2008'. [ 268.624348][T11209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.841212][T11209] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.016607][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.023776][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.067158][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.074333][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.254261][T11315] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2019'. [ 269.555747][ T5093] Bluetooth: hci1: command tx timeout [ 269.819708][ T9421] hsr_slave_0: left promiscuous mode [ 269.836277][ T9421] hsr_slave_1: left promiscuous mode [ 269.852471][ T9421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.869070][ T9421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.875445][ T5093] Bluetooth: hci2: command tx timeout [ 269.886505][ T9421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.905182][ T9421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.955741][ T9421] veth1_macvtap: left promiscuous mode [ 269.961333][ T9421] veth0_macvtap: left promiscuous mode [ 269.974524][ T9421] veth1_vlan: left promiscuous mode [ 269.974760][T11323] netlink: 'syz.0.2023': attribute type 29 has an invalid length. [ 269.979930][ T9421] veth0_vlan: left promiscuous mode [ 270.360725][ T7800] net_ratelimit: 3 callbacks suppressed [ 270.360745][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.449846][ T9421] team0 (unregistering): Port device team_slave_1 removed [ 270.489797][ T9421] team0 (unregistering): Port device team_slave_0 removed [ 270.888018][T11313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2020'. [ 270.898128][T11313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2020'. [ 270.964785][T11323] netlink: 'syz.0.2023': attribute type 29 has an invalid length. [ 271.027206][T11327] unsupported nlmsg_type 40 [ 271.252342][T11339] ip6tnl1: entered promiscuous mode [ 271.312571][T11339] ip6tnl1: entered allmulticast mode [ 271.380657][T11257] chnl_net:caif_netlink_parms(): no params data found [ 271.399949][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.635489][ T5093] Bluetooth: hci1: command tx timeout [ 271.654209][T11257] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.664862][T11257] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.680783][T11257] bridge_slave_0: entered allmulticast mode [ 271.683963][T11362] netlink: 5300 bytes leftover after parsing attributes in process `syz.3.2034'. [ 271.690772][T11257] bridge_slave_0: entered promiscuous mode [ 271.706491][T11257] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.713626][T11257] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.715258][T11362] openvswitch: netlink: IP tunnel dst address not specified [ 271.721531][T11257] bridge_slave_1: entered allmulticast mode [ 271.736009][T11257] bridge_slave_1: entered promiscuous mode [ 271.850849][T11257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.882509][T11209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.891792][T11360] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2033'. [ 271.916884][T11368] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2036'. [ 271.928929][T11257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.956480][ T5093] Bluetooth: hci2: command tx timeout [ 272.049884][T11257] team0: Port device team_slave_0 added [ 272.077474][T11257] team0: Port device team_slave_1 added [ 272.229450][T11257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.241055][T11257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.271639][T11257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.285534][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.294181][T11384] netlink: 'syz.2.2041': attribute type 1 has an invalid length. [ 272.367788][T11384] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2041'. [ 272.399345][T11389] bond0: (slave gre1): The slave device specified does not support setting the MAC address [ 272.423941][T11389] bond0: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 272.449526][ T5139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.463242][T11389] bond0: (slave gre1): making interface the new active one [ 272.481867][T11389] bond0: (slave gre1): Enslaving as an active interface with an up link [ 272.506313][T11257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.532675][T11257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.578792][T11257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.596729][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2045'. [ 272.711147][T11410] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2049'. [ 272.721343][T11410] tc_dump_action: action bad kind [ 272.759542][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.777265][T11257] hsr_slave_0: entered promiscuous mode [ 272.784892][T11257] hsr_slave_1: entered promiscuous mode [ 272.791848][T11257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.804091][T11257] Cannot create hsr debugfs directory [ 272.847452][T11209] veth0_vlan: entered promiscuous mode [ 272.851485][T11420] dccp_invalid_packet: P.Data Offset(224) too large [ 273.020444][T11209] veth1_vlan: entered promiscuous mode [ 273.397524][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.405685][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.475647][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 273.715316][ T5093] Bluetooth: hci1: command tx timeout [ 273.859762][T11453] bridge0: port 3(vlan2) entered blocking state [ 273.872430][T11453] bridge0: port 3(vlan2) entered disabled state [ 273.881095][T11453] vlan2: entered allmulticast mode [ 273.889613][T11453] vlan2: left allmulticast mode [ 274.008849][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2065'. [ 274.033887][T11209] veth0_macvtap: entered promiscuous mode [ 274.041110][ T5093] Bluetooth: hci2: command tx timeout [ 274.107614][T11209] veth1_macvtap: entered promiscuous mode [ 274.124752][T11470] syzkaller0: entered promiscuous mode [ 274.132170][T11470] syzkaller0: entered allmulticast mode [ 274.184366][T11461] netlink: 'syz.3.2067': attribute type 1 has an invalid length. [ 274.193061][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.193086][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.193097][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.193111][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.193123][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.193136][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.193148][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.193161][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.193173][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.193185][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.194686][T11209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.251322][T11461] netlink: 'syz.3.2067': attribute type 1 has an invalid length. [ 274.262082][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.324527][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.335916][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.347673][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.358006][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.371471][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.382070][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.395102][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.404932][T11209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.416187][T11209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.432797][T11209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.523682][T11209] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.549063][T11209] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.558226][T11209] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.567951][T11209] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.809075][T11257] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 274.828771][ T9405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.854471][ T9405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.871804][T11257] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 274.897648][T11257] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 274.921250][T11257] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 274.974584][ T9405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.003785][ T9405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.211102][T11503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2080'. [ 275.309822][T11507] netlink: 'syz.3.2080': attribute type 29 has an invalid length. [ 275.352931][T11504] x_tables: ip_tables: udp match: only valid for protocol 17 [ 275.408504][T11257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.438000][T11507] netlink: 'syz.3.2080': attribute type 29 has an invalid length. [ 275.510892][T11257] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.546740][ T7800] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.553913][ T7800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.562410][ T25] net_ratelimit: 2 callbacks suppressed [ 275.562423][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.602906][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.610103][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.796238][T11522] netlink: 'syz.2.2085': attribute type 14 has an invalid length. [ 276.028784][T11257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.110114][T11537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.123966][ T5093] Bluetooth: hci2: command tx timeout [ 276.191458][T11537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.236813][T11544] netlink: 'syz.3.2093': attribute type 1 has an invalid length. [ 276.254197][T11257] veth0_vlan: entered promiscuous mode [ 276.287142][T11257] veth1_vlan: entered promiscuous mode [ 276.308392][T11550] __nla_validate_parse: 2 callbacks suppressed [ 276.308592][T11550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2094'. [ 276.351562][T11537] bond0: (slave vlan3): Opening slave failed [ 276.369922][T11554] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2095'. [ 276.449234][T11559] netlink: 'syz.2.2094': attribute type 29 has an invalid length. [ 276.458435][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2094'. [ 276.492855][T11559] netlink: 'syz.2.2094': attribute type 29 has an invalid length. [ 276.512905][T11559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2094'. [ 276.593786][T11257] veth0_macvtap: entered promiscuous mode [ 276.599831][ T7800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.611087][ T5137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 276.658459][T11257] veth1_macvtap: entered promiscuous mode [ 276.712524][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.737950][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.754800][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.766307][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.777614][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.783560][T11573] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 276.795444][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.810315][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.822818][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.832972][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.843840][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.854112][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.865632][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.880186][T11257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.981191][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.007698][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.020204][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.040905][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.051105][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.075176][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.094684][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.114860][T11590] netlink: 'syz.0.2107': attribute type 29 has an invalid length. [ 277.122970][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.134708][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.145792][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.156531][T11257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.167182][T11257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.184607][T11257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.227546][T11257] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.251070][T11257] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.264188][T11257] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.283334][T11257] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.320304][T11592] validate_nla: 1 callbacks suppressed [ 277.320323][T11592] netlink: 'syz.0.2107': attribute type 29 has an invalid length. [ 277.339675][T11598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2110'. [ 277.446172][T11598] netlink: 'syz.3.2110': attribute type 29 has an invalid length. [ 277.454078][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 277.509890][T11598] netlink: 'syz.3.2110': attribute type 29 has an invalid length. [ 277.519543][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 277.535926][ T9421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.558266][ T9421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.636159][ T5138] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.654991][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2115'. [ 277.716475][ T9421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.724345][ T9421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.784954][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2116'. [ 278.059335][T11621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2117'. [ 278.357141][ T5140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.519217][ T5139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.529949][ T9405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.686462][ T5139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.745880][T11657] ax25_connect(): syz.3.2131 uses autobind, please contact jreuter@yaina.de [ 279.655994][T11718] netlink: 'syz.2.2151': attribute type 6 has an invalid length. [ 279.842932][T11730] openvswitch: netlink: Flow key attr not present in new flow. [ 280.031126][T11744] FAULT_INJECTION: forcing a failure. [ 280.031126][T11744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 280.061562][T11744] CPU: 1 PID: 11744 Comm: syz.3.2158 Not tainted 6.10.0-rc6-syzkaller-00170-g0913ec336a6c #0 [ 280.071771][T11744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 280.081849][T11744] Call Trace: [ 280.085150][T11744] [ 280.088100][T11744] dump_stack_lvl+0x241/0x360 [ 280.092807][T11744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.098028][T11744] ? __pfx__printk+0x10/0x10 [ 280.102645][T11744] ? __pfx_lock_release+0x10/0x10 [ 280.107700][T11744] should_fail_ex+0x3b0/0x4e0 [ 280.112416][T11744] _copy_from_iter+0x1f6/0x1960 [ 280.117294][T11744] ? __virt_addr_valid+0x183/0x520 [ 280.122425][T11744] ? __pfx_lock_release+0x10/0x10 [ 280.127472][T11744] ? __alloc_skb+0x28f/0x440 [ 280.132081][T11744] ? __pfx__copy_from_iter+0x10/0x10 [ 280.135401][T11743] netlink: 'syz.4.2159': attribute type 1 has an invalid length. [ 280.137379][T11744] ? __virt_addr_valid+0x183/0x520 [ 280.137408][T11744] ? __virt_addr_valid+0x183/0x520 [ 280.137429][T11744] ? __virt_addr_valid+0x44e/0x520 [ 280.137451][T11744] ? __check_object_size+0x49c/0x900 [ 280.137482][T11744] netlink_sendmsg+0x743/0xcb0 [ 280.137520][T11744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.137542][T11744] ? __import_iovec+0x536/0x820 [ 280.137558][T11744] ? aa_sock_msg_perm+0x91/0x160 [ 280.137581][T11744] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 280.137596][T11744] ? security_socket_sendmsg+0x87/0xb0 [ 280.137617][T11744] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.137637][T11744] __sock_sendmsg+0x221/0x270 [ 280.206359][T11744] ____sys_sendmsg+0x525/0x7d0 [ 280.211136][T11744] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.216430][T11744] __sys_sendmsg+0x2b0/0x3a0 [ 280.221015][T11744] ? __pfx___sys_sendmsg+0x10/0x10 [ 280.226120][T11744] ? vfs_write+0x7c4/0xc90 [ 280.230555][T11744] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 280.236875][T11744] ? do_syscall_64+0x100/0x230 [ 280.241632][T11744] ? do_syscall_64+0xb6/0x230 [ 280.246302][T11744] do_syscall_64+0xf3/0x230 [ 280.250811][T11744] ? clear_bhb_loop+0x35/0x90 [ 280.255491][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.261380][T11744] RIP: 0033:0x7fc169b75bd9 [ 280.265790][T11744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.285472][T11744] RSP: 002b:00007fc16a94f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.293873][T11744] RAX: ffffffffffffffda RBX: 00007fc169d03f60 RCX: 00007fc169b75bd9 [ 280.301832][T11744] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000009 [ 280.309790][T11744] RBP: 00007fc16a94f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 280.317753][T11744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.325719][T11744] R13: 000000000000004d R14: 00007fc169d03f60 R15: 00007fffc4c68518 [ 280.333689][T11744] [ 280.540941][ T9418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.133123][ T9418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.189225][ T9418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.249527][ T9418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.341110][ T9418] bridge_slave_1: left allmulticast mode [ 281.351387][ T9418] bridge_slave_1: left promiscuous mode [ 281.357953][ T9418] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.367634][ T9418] bridge_slave_0: left allmulticast mode [ 281.373316][ T9418] bridge_slave_0: left promiscuous mode [ 281.379275][ T9418] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.680315][ T9418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.693158][ T9418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.703936][ T9418] bond0 (unregistering): Released all slaves [ 281.894331][T11766] __nla_validate_parse: 8 callbacks suppressed [ 281.894352][T11766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2162'. [ 282.312882][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.323568][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.341698][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.358480][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.373626][ T5090] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 282.383164][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.492282][T11802] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2179'. [ 282.624911][T11789] lo speed is unknown, defaulting to 1000 [ 282.935199][ T9418] hsr_slave_0: left promiscuous mode [ 282.985630][ T9418] hsr_slave_1: left promiscuous mode [ 282.992338][ T9418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.027730][ T9418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.070423][ T9418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.089527][ T9418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.126239][ T9418] veth1_macvtap: left promiscuous mode [ 283.132012][ T9418] veth0_macvtap: left promiscuous mode [ 283.138012][ T9418] veth1_vlan: left promiscuous mode [ 283.143472][ T9418] veth0_vlan: left promiscuous mode [ 283.154565][T11837] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2191'. [ 283.602119][ T9418] team0 (unregistering): Port device team_slave_1 removed [ 283.645394][ T9418] team0 (unregistering): Port device team_slave_0 removed [ 284.125489][T11839] vlan0: entered promiscuous mode [ 284.130570][T11839] gretap0: entered promiscuous mode [ 284.150240][T11839] vlan0: entered allmulticast mode [ 284.159372][T11839] gretap0: entered allmulticast mode [ 284.178711][T11839] gretap0: left allmulticast mode [ 284.183799][T11839] gretap0: left promiscuous mode [ 284.419811][T11859] netlink: 'syz.3.2200': attribute type 30 has an invalid length. [ 284.435338][ T5093] Bluetooth: hci2: command tx timeout [ 284.720410][T11789] chnl_net:caif_netlink_parms(): no params data found [ 284.720791][T11878] netlink: 5312 bytes leftover after parsing attributes in process `syz.2.2209'. [ 284.738022][T11878] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 284.890281][T11789] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.900289][T11789] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.907818][T11789] bridge_slave_0: entered allmulticast mode [ 284.923487][T11789] bridge_slave_0: entered promiscuous mode [ 284.990866][T11789] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.008804][T11789] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.016479][T11789] bridge_slave_1: entered allmulticast mode [ 285.023373][T11789] bridge_slave_1: entered promiscuous mode [ 285.074083][T11789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.088674][T11789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.153919][T11789] team0: Port device team_slave_0 added [ 285.166466][T11789] team0: Port device team_slave_1 added [ 285.214528][T11789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.222782][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.250395][T11789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.280208][T11789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.287791][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.316630][T11789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.343735][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2218'. [ 285.393278][T11904] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2217'. [ 285.424905][T11789] hsr_slave_0: entered promiscuous mode [ 285.446511][T11789] hsr_slave_1: entered promiscuous mode [ 285.462670][T11789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.491042][T11789] Cannot create hsr debugfs directory [ 285.501849][T11904] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2217'. [ 285.511660][T11906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2219'. [ 285.698341][T11917] FAULT_INJECTION: forcing a failure. [ 285.698341][T11917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 285.733004][T11917] CPU: 0 PID: 11917 Comm: syz.0.2222 Not tainted 6.10.0-rc6-syzkaller-00170-g0913ec336a6c #0 [ 285.743220][T11917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 285.753297][T11917] Call Trace: [ 285.756591][T11917] [ 285.759536][T11917] dump_stack_lvl+0x241/0x360 [ 285.764244][T11917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.769470][T11917] ? __pfx__printk+0x10/0x10 [ 285.774083][T11917] ? __pfx_lock_release+0x10/0x10 [ 285.779133][T11917] should_fail_ex+0x3b0/0x4e0 [ 285.783839][T11917] _copy_from_user+0x2f/0xe0 [ 285.788454][T11917] copy_msghdr_from_user+0xae/0x680 [ 285.793681][T11917] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 285.799527][T11917] __sys_sendmsg+0x23d/0x3a0 [ 285.804139][T11917] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.809271][T11917] ? vfs_write+0x7c4/0xc90 [ 285.813749][T11917] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.820101][T11917] ? do_syscall_64+0x100/0x230 [ 285.824892][T11917] ? do_syscall_64+0xb6/0x230 [ 285.829598][T11917] do_syscall_64+0xf3/0x230 [ 285.834133][T11917] ? clear_bhb_loop+0x35/0x90 [ 285.838827][T11917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.844719][T11917] RIP: 0033:0x7f5a63f75bd9 [ 285.849123][T11917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.868715][T11917] RSP: 002b:00007f5a64cf4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.877120][T11917] RAX: ffffffffffffffda RBX: 00007f5a64103f60 RCX: 00007f5a63f75bd9 [ 285.885081][T11917] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 285.893051][T11917] RBP: 00007f5a64cf40a0 R08: 0000000000000000 R09: 0000000000000000 [ 285.901017][T11917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.908977][T11917] R13: 000000000000000b R14: 00007f5a64103f60 R15: 00007fff6fcd1708 [ 285.916959][T11917] [ 286.002751][T11927] FAULT_INJECTION: forcing a failure. [ 286.002751][T11927] name failslab, interval 1, probability 0, space 0, times 0 [ 286.030276][T11927] CPU: 1 PID: 11927 Comm: syz.3.2227 Not tainted 6.10.0-rc6-syzkaller-00170-g0913ec336a6c #0 [ 286.040557][T11927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 286.050608][T11927] Call Trace: [ 286.053879][T11927] [ 286.056802][T11927] dump_stack_lvl+0x241/0x360 [ 286.061481][T11927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.066673][T11927] ? __pfx__printk+0x10/0x10 [ 286.071262][T11927] ? netlink_insert+0x10b7/0x14b0 [ 286.076282][T11927] should_fail_ex+0x3b0/0x4e0 [ 286.080955][T11927] ? __alloc_skb+0x1c3/0x440 [ 286.085534][T11927] should_failslab+0x9/0x20 [ 286.090028][T11927] kmem_cache_alloc_node_noprof+0x71/0x320 [ 286.095840][T11927] __alloc_skb+0x1c3/0x440 [ 286.100264][T11927] ? __pfx___alloc_skb+0x10/0x10 [ 286.105192][T11927] ? netlink_autobind+0xd6/0x2f0 [ 286.110121][T11927] ? netlink_autobind+0x2b0/0x2f0 [ 286.115145][T11927] netlink_sendmsg+0x631/0xcb0 [ 286.119907][T11927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.125189][T11927] ? __import_iovec+0x536/0x820 [ 286.130054][T11927] ? aa_sock_msg_perm+0x91/0x160 [ 286.134986][T11927] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 286.140261][T11927] ? security_socket_sendmsg+0x87/0xb0 [ 286.145712][T11927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.150987][T11927] __sock_sendmsg+0x221/0x270 [ 286.155663][T11927] ____sys_sendmsg+0x525/0x7d0 [ 286.160421][T11927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.165707][T11927] __sys_sendmsg+0x2b0/0x3a0 [ 286.170287][T11927] ? __pfx___sys_sendmsg+0x10/0x10 [ 286.175386][T11927] ? vfs_write+0x7c4/0xc90 [ 286.179827][T11927] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.186145][T11927] ? do_syscall_64+0x100/0x230 [ 286.190901][T11927] ? do_syscall_64+0xb6/0x230 [ 286.195592][T11927] do_syscall_64+0xf3/0x230 [ 286.200193][T11927] ? clear_bhb_loop+0x35/0x90 [ 286.204870][T11927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.210756][T11927] RIP: 0033:0x7fc169b75bd9 [ 286.215167][T11927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.234771][T11927] RSP: 002b:00007fc16a94f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.243177][T11927] RAX: ffffffffffffffda RBX: 00007fc169d03f60 RCX: 00007fc169b75bd9 [ 286.251135][T11927] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 286.259092][T11927] RBP: 00007fc16a94f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 286.267053][T11927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.275009][T11927] R13: 000000000000004d R14: 00007fc169d03f60 R15: 00007fffc4c68518 [ 286.282982][T11927] [ 286.526966][ T5090] Bluetooth: hci2: command tx timeout [ 286.935037][T11967] x_tables: ip_tables: udp match: only valid for protocol 17 [ 286.956388][T11969] netlink: 'syz.2.2238': attribute type 1 has an invalid length. [ 286.982973][T11969] 8021q: adding VLAN 0 to HW filter on device bond2 [ 287.004837][T11969] bond2: (slave ip6gretap1): making interface the new active one [ 287.018925][T11969] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 287.209233][T11980] FAULT_INJECTION: forcing a failure. [ 287.209233][T11980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.224797][T11980] CPU: 1 PID: 11980 Comm: syz.0.2242 Not tainted 6.10.0-rc6-syzkaller-00170-g0913ec336a6c #0 [ 287.234998][T11980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 287.245067][T11980] Call Trace: [ 287.248354][T11980] [ 287.251296][T11980] dump_stack_lvl+0x241/0x360 [ 287.256006][T11980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.261236][T11980] ? __pfx__printk+0x10/0x10 [ 287.265865][T11980] ? snprintf+0xda/0x120 [ 287.270128][T11980] should_fail_ex+0x3b0/0x4e0 [ 287.274917][T11980] _copy_to_user+0x2f/0xb0 [ 287.279354][T11980] simple_read_from_buffer+0xca/0x150 [ 287.284747][T11980] proc_fail_nth_read+0x1e9/0x250 [ 287.289786][T11980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.295350][T11980] ? rw_verify_area+0x520/0x6b0 [ 287.300215][T11980] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.305776][T11980] vfs_read+0x204/0xbc0 [ 287.309956][T11980] ? __pfx_lock_release+0x10/0x10 [ 287.315006][T11980] ? __pfx_vfs_read+0x10/0x10 [ 287.319883][T11980] ? __fget_files+0x29/0x470 [ 287.324175][T11789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 287.324482][T11980] ? __fget_files+0x3f6/0x470 [ 287.335828][T11980] ksys_read+0x1a0/0x2c0 [ 287.340082][T11980] ? __pfx_ksys_read+0x10/0x10 [ 287.344844][T11980] ? do_syscall_64+0x100/0x230 [ 287.349613][T11980] ? do_syscall_64+0xb6/0x230 [ 287.354287][T11980] do_syscall_64+0xf3/0x230 [ 287.358791][T11980] ? clear_bhb_loop+0x35/0x90 [ 287.363555][T11980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.369443][T11980] RIP: 0033:0x7f5a63f746bc [ 287.373848][T11980] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 287.393453][T11980] RSP: 002b:00007f5a64cf4040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.401883][T11980] RAX: ffffffffffffffda RBX: 00007f5a64103f60 RCX: 00007f5a63f746bc [ 287.409863][T11980] RDX: 000000000000000f RSI: 00007f5a64cf40b0 RDI: 0000000000000005 [ 287.417832][T11980] RBP: 00007f5a64cf40a0 R08: 0000000000000000 R09: 0000000000000000 [ 287.425802][T11980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.433765][T11980] R13: 000000000000000b R14: 00007f5a64103f60 R15: 00007fff6fcd1708 [ 287.441740][T11980] [ 287.471984][T11789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 287.511687][T11789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 287.563681][T11789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 287.662030][T11992] netlink: 'syz.4.2246': attribute type 9 has an invalid length. [ 287.723913][T11998] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2248'. [ 287.755905][T11998] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 287.764306][T11998] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 287.871846][T11789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.982409][T11789] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.026962][T12009] netlink: 'syz.3.2251': attribute type 3 has an invalid length. [ 288.094250][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.101478][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.134967][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.142172][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.251975][T11789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.340806][T12032] netlink: 'syz.4.2261': attribute type 1 has an invalid length. [ 288.375751][ T5137] IPVS: starting estimator thread 0... [ 288.383946][T12037] veth1: mtu less than device minimum [ 288.395139][T12032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2261'. [ 288.424495][T12040] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 288.476469][T12035] IPVS: using max 20 ests per chain, 48000 per kthread [ 288.588287][T12047] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 288.595818][ T5090] Bluetooth: hci2: command 0x040f tx timeout [ 288.688289][T11789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.850241][T11789] veth0_vlan: entered promiscuous mode [ 288.893391][T11789] veth1_vlan: entered promiscuous mode [ 289.013334][T11789] veth0_macvtap: entered promiscuous mode [ 289.047790][T11789] veth1_macvtap: entered promiscuous mode [ 289.093286][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.104298][T12068] netlink: 'syz.4.2269': attribute type 3 has an invalid length. [ 289.129927][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.142701][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.168634][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.179942][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.190687][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.202901][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.213657][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.224262][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.235580][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.247584][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.258362][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.272918][T11789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.303585][T12081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2273'. [ 289.391701][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.432685][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.455537][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.482756][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.505327][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.524154][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.545183][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.563753][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.585675][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.603976][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.614437][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.634613][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.671528][T11789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.727711][T11789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.755134][T11789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.774132][T11789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.789763][T11789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.829358][T12103] lo speed is unknown, defaulting to 1000 [ 290.098088][T12116] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 290.105136][ T9420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.165114][ T9420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.277673][ T9421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.306633][ T9421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.685677][T12134] syzkaller1: entered promiscuous mode [ 290.691409][T12134] syzkaller1: entered allmulticast mode [ 291.167724][T12153] bond_slave_0: entered promiscuous mode [ 291.173533][T12153] bond_slave_1: entered promiscuous mode [ 291.196001][T12153] bond_slave_0: left promiscuous mode [ 291.201828][T12153] bond_slave_1: left promiscuous mode [ 291.380602][T12153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.399658][T12153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.414355][T12153] bond0 (unregistering): Released all slaves [ 292.376977][T12210] netlink: 'syz.3.2316': attribute type 10 has an invalid length. [ 292.583305][T12225] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.2322'. [ 292.596124][T12225] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.2322'. [ 292.920306][T12239] syzkaller0: entered promiscuous mode [ 292.928022][T12239] syzkaller0: entered allmulticast mode [ 293.096182][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.112876][T12245] netlink: 'syz.2.2330': attribute type 10 has an invalid length. [ 294.629645][T12258] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 294.832824][ T5090] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.846339][ T5090] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.856203][ T5090] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.865944][ T5090] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.874741][ T5090] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 294.882366][ T5090] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 295.777795][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.804214][T12275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2340'. [ 295.895733][T12268] lo speed is unknown, defaulting to 1000 [ 296.034656][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.090872][T12280] netlink: 'syz.0.2343': attribute type 10 has an invalid length. [ 296.146142][T12293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2346'. [ 296.233228][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.650819][T12268] chnl_net:caif_netlink_parms(): no params data found [ 296.759482][ T51] bridge_slave_1: left allmulticast mode [ 296.771651][ T51] bridge_slave_1: left promiscuous mode [ 296.796086][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.820663][ T51] bridge_slave_0: left allmulticast mode [ 296.841093][ T51] bridge_slave_0: left promiscuous mode [ 296.856066][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.915577][ T5090] Bluetooth: hci2: command tx timeout [ 296.984837][T12320] netlink: 'syz.0.2354': attribute type 1 has an invalid length. [ 297.025426][T12320] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2354'. [ 297.653670][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.674438][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.685749][ T51] bond0 (unregistering): Released all slaves [ 297.740195][T12318] syzkaller0: entered promiscuous mode [ 297.746260][T12318] syzkaller0: entered allmulticast mode [ 298.997405][ T5093] Bluetooth: hci2: command tx timeout [ 299.168899][ T5093] Bluetooth: hci5: command 0x0406 tx timeout [ 299.629540][T12268] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.653725][T12268] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.662214][T12268] bridge_slave_0: entered allmulticast mode [ 299.677570][T12268] bridge_slave_0: entered promiscuous mode [ 299.702295][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2367'. [ 299.809429][T12375] dccp_invalid_packet: P.Data Offset(0) too small [ 299.871256][T12268] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.892038][T12268] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.910947][T12268] bridge_slave_1: entered allmulticast mode [ 299.927414][T12268] bridge_slave_1: entered promiscuous mode [ 299.934312][T12369] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2368'. [ 299.950455][T12372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2368'. [ 300.064493][T12268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.101358][T12385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2375'. [ 300.242533][T12268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.278843][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'. [ 300.315226][ T51] hsr_slave_0: left promiscuous mode [ 300.326581][ T51] hsr_slave_1: left promiscuous mode [ 300.335500][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.355701][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.369856][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.384309][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.417576][ T51] veth1_macvtap: left promiscuous mode [ 300.432366][ T51] veth0_macvtap: left promiscuous mode [ 300.449925][ T51] veth1_vlan: left promiscuous mode [ 300.458862][ T51] veth0_vlan: left promiscuous mode [ 301.078422][ T5090] Bluetooth: hci2: command tx timeout [ 301.198665][ T51] team0 (unregistering): Port device team_slave_1 removed [ 301.241288][ T51] team0 (unregistering): Port device team_slave_0 removed [ 301.652447][T12385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2375'. [ 301.761872][T12407] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2383'. [ 301.848861][T12429] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 301.967586][T12268] team0: Port device team_slave_0 added [ 302.024983][T12268] team0: Port device team_slave_1 added [ 302.183799][T12268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.198658][T12268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.227852][T12268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.244798][T12268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.263333][T12268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.294220][T12268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.446876][T12268] hsr_slave_0: entered promiscuous mode [ 302.469764][T12268] hsr_slave_1: entered promiscuous mode [ 302.478761][T12268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.487314][T12268] Cannot create hsr debugfs directory [ 302.798950][T12479] netlink: 'syz.2.2410': attribute type 10 has an invalid length. [ 303.132944][T12268] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 303.154514][T12268] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 303.165312][ T5090] Bluetooth: hci2: command tx timeout [ 303.186600][T12268] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 303.239421][T12268] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 303.503377][T12268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.562430][T12268] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.618434][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.625637][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.633097][T12523] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 303.668911][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.676132][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.948502][T12540] bond0: left promiscuous mode [ 303.953329][T12540] bond_slave_0: left promiscuous mode [ 303.986707][T12540] bond_slave_1: left promiscuous mode [ 303.997532][T12540] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 304.034132][T12547] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2431'. [ 304.077302][T12540] bond0: entered allmulticast mode [ 304.082544][T12540] bond_slave_0: entered allmulticast mode [ 304.090578][T12540] bond_slave_1: entered allmulticast mode [ 304.096436][T12540] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 304.114792][T12540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.198546][T12268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.326692][T12268] veth0_vlan: entered promiscuous mode [ 304.362161][T12268] veth1_vlan: entered promiscuous mode [ 304.455934][T12268] veth0_macvtap: entered promiscuous mode [ 304.497586][T12268] veth1_macvtap: entered promiscuous mode [ 304.558491][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.581964][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.646077][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.675794][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.691151][T12587] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2447'. [ 304.702561][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.702636][T12587] openvswitch: netlink: Multiple metadata blocks provided [ 304.725217][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.775206][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.791024][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.801464][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.812181][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.822174][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.834685][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.839587][T12597] netlink: 'syz.0.2449': attribute type 3 has an invalid length. [ 304.846981][T12268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.873776][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.884559][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.909282][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.928842][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.940232][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.951399][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.961730][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.973306][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.991377][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.002802][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.012799][T12268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 305.023282][T12268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.036732][T12268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.050980][T12594] bond0: entered allmulticast mode [ 305.056680][T12594] gre1: entered allmulticast mode [ 305.084849][T12594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.122673][T12268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.145163][T12268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.153906][T12268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.173872][T12268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.256180][ T5139] skbuff: skb_under_panic: text:ffffffff8a0ac36b len:-1831981264 put:-1831981340 head:ffff88802edfb000 data:ffff887f9c1181dc tail:0x10c end:0x6c0 dev:bond0 [ 305.301771][ T5139] ------------[ cut here ]------------ [ 305.307593][ T5139] kernel BUG at net/core/skbuff.c:205! [ 305.353787][ T5139] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 305.360779][ T5139] CPU: 1 PID: 5139 Comm: kworker/1:5 Not tainted 6.10.0-rc6-syzkaller-00170-g0913ec336a6c #0 [ 305.371036][ T5139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 305.381103][ T5139] Workqueue: mld mld_ifc_work [ 305.385893][ T5139] RIP: 0010:skb_under_panic+0x14b/0x150 [ 305.391456][ T5139] Code: c5 8c 48 c7 c6 85 56 d3 8d 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 5a 15 32 02 48 83 c4 20 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 305.411079][ T5139] RSP: 0018:ffffc90004647530 EFLAGS: 00010286 [ 305.417166][ T5139] RAX: 0000000000000099 RBX: dffffc0000000000 RCX: af4a8dce9fdd2800 [ 305.425150][ T5139] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 305.433134][ T5139] RBP: ffff88806d1e1010 R08: ffffffff817693cc R09: fffffbfff1c39994 [ 305.441121][ T5139] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 00000000000006c0 [ 305.449104][ T5139] R13: ffff88802edfb000 R14: ffff887f9c1181dc R15: 000000000000010c [ 305.457088][ T5139] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 305.466030][ T5139] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.472624][ T5139] CR2: 00007fe5f3105a6c CR3: 00000000661ee000 CR4: 00000000003506f0 [ 305.480617][ T5139] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 305.488600][ T5139] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 305.496584][ T5139] Call Trace: [ 305.499870][ T5139] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 305.502805][ T5139] ? __die_body+0x88/0xe0 [ 305.507162][ T5139] ? die+0xcf/0x110 [ 305.510981][ T5139] ? do_trap+0x15a/0x3a0 [ 305.515232][ T5139] ? skb_under_panic+0x14b/0x150 [ 305.520203][ T5139] ? do_error_trap+0x1dc/0x2c0 [ 305.524986][ T5139] ? skb_under_panic+0x14b/0x150 [ 305.529947][ T5139] ? __pfx_do_error_trap+0x10/0x10 [ 305.535077][ T5139] ? handle_invalid_op+0x34/0x40 [ 305.540034][ T5139] ? skb_under_panic+0x14b/0x150 [ 305.545049][ T5139] ? exc_invalid_op+0x38/0x50 [ 305.549743][ T5139] ? asm_exc_invalid_op+0x1a/0x20 [ 305.554795][ T5139] ? __wake_up_klogd+0xcc/0x110 [ 305.559664][ T5139] ? skb_under_panic+0x14b/0x150 [ 305.564597][ T5139] ? ipgre_header+0x6b/0x440 [ 305.569186][ T5139] ? ipgre_header+0x6b/0x440 [ 305.573767][ T5139] skb_push+0xe5/0x100 [ 305.577840][ T5139] ? __pfx_ipgre_header+0x10/0x10 [ 305.582860][ T5139] ipgre_header+0x6b/0x440 [ 305.587270][ T5139] ? __pfx_ipgre_header+0x10/0x10 [ 305.592280][ T5139] neigh_connected_output+0x27f/0x450 [ 305.597647][ T5139] ip6_finish_output2+0xff8/0x1670 [ 305.602748][ T5139] ? ip6_finish_output2+0x712/0x1670 [ 305.608103][ T5139] ? nf_hook+0x9e/0x450 [ 305.612245][ T5139] ? __pfx_ip6_finish_output2+0x10/0x10 [ 305.617863][ T5139] ? ip6_mtu+0x81/0x3f0 [ 305.622016][ T5139] ip6_finish_output+0x41e/0x810 [ 305.626945][ T5139] NF_HOOK+0x9e/0x430 [ 305.630909][ T5139] ? NF_HOOK+0xfa/0x430 [ 305.635049][ T5139] ? __pfx_NF_HOOK+0x10/0x10 [ 305.639725][ T5139] ? __pfx_dst_output+0x10/0x10 [ 305.644577][ T5139] ? icmp6_dst_alloc+0x3aa/0x420 [ 305.649522][ T5139] mld_sendpack+0x838/0xda0 [ 305.654024][ T5139] ? __pfx_mld_newpack+0x10/0x10 [ 305.658960][ T5139] ? mld_sendpack+0x1de/0xda0 [ 305.663629][ T5139] ? __pfx_mld_sendpack+0x10/0x10 [ 305.668647][ T5139] mld_ifc_work+0x7d6/0xd90 [ 305.673145][ T5139] ? process_scheduled_works+0x945/0x1830 [ 305.678854][ T5139] process_scheduled_works+0xa2c/0x1830 [ 305.684397][ T5139] ? __pfx_process_scheduled_works+0x10/0x10 [ 305.690366][ T5139] ? assign_work+0x364/0x3d0 [ 305.694942][ T5139] worker_thread+0x86d/0xd50 [ 305.699523][ T5139] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 305.705400][ T5139] ? __kthread_parkme+0x169/0x1d0 [ 305.710430][ T5139] ? __pfx_worker_thread+0x10/0x10 [ 305.715560][ T5139] kthread+0x2f0/0x390 [ 305.719626][ T5139] ? __pfx_worker_thread+0x10/0x10 [ 305.724722][ T5139] ? __pfx_kthread+0x10/0x10 [ 305.729297][ T5139] ret_from_fork+0x4b/0x80 [ 305.733701][ T5139] ? __pfx_kthread+0x10/0x10 [ 305.738276][ T5139] ret_from_fork_asm+0x1a/0x30 [ 305.743039][ T5139] [ 305.746039][ T5139] Modules linked in: [ 305.829517][ T5139] ---[ end trace 0000000000000000 ]--- [ 305.835017][ T5139] RIP: 0010:skb_under_panic+0x14b/0x150 [ 305.840673][ T5139] Code: c5 8c 48 c7 c6 85 56 d3 8d 48 8b 54 24 08 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 41 54 41 57 41 56 e8 5a 15 32 02 48 83 c4 20 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 305.862396][ T5139] RSP: 0018:ffffc90004647530 EFLAGS: 00010286 [ 305.868534][ T5139] RAX: 0000000000000099 RBX: dffffc0000000000 RCX: af4a8dce9fdd2800 [ 305.876746][ T5139] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 305.884746][ T5139] RBP: ffff88806d1e1010 R08: ffffffff817693cc R09: fffffbfff1c39994 [ 305.892876][ T5139] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 00000000000006c0 [ 305.900884][ T5139] R13: ffff88802edfb000 R14: ffff887f9c1181dc R15: 000000000000010c [ 305.908883][ T5139] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 305.917934][ T5139] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.924511][ T5139] CR2: 00007fe5f3105a6c CR3: 000000007fa38000 CR4: 00000000003506f0 [ 305.934235][ T5139] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 305.942229][ T5139] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 305.950995][ T5139] Kernel panic - not syncing: Fatal exception [ 305.957309][ T5139] Kernel Offset: disabled [ 305.961642][ T5139] Rebooting in 86400 seconds..