last executing test programs: 1m1.492894119s ago: executing program 1 (id=294): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000d000000000000000000000000711213000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x90) 50.567609888s ago: executing program 1 (id=294): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000d000000000000000000000000711213000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x90) 38.567402662s ago: executing program 1 (id=294): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000d000000000000000000000000711213000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x90) 26.864286605s ago: executing program 1 (id=294): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000d000000000000000000000000711213000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x90) 16.567945971s ago: executing program 1 (id=294): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000d000000000000000000000000711213000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x90) 5.681709345s ago: executing program 3 (id=2445): r0 = socket$inet(0x2, 0x6, 0x0) listen(r0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'dvmrp0\x00', {0x6e86}, 0x7}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) shutdown(r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r2, 0x2000000, 0x1f, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8861000dffd00139fb7a884bdfc14f48786", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xe1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x5, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'ip6gre0\x00', @multicast}) 5.540281572s ago: executing program 1 (id=294): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000d000000000000000000000000711213000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20}, 0x90) 5.529443246s ago: executing program 3 (id=2451): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000c027000000000000000000000000b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf7189097b1cdfaf87"], 0x20000600}}, 0x0) 3.783597841s ago: executing program 3 (id=2456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @empty}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) close(r2) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) socket(0x11, 0xa, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000000)={0x0, 0xea60}, 0x10) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000b00000000000a000900aaaaaaaaaaaa000008000300", @ANYRES32=r8, @ANYBLOB], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="4c00007a72deffffff0000000000000000000002", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010069703667726500001c000280080005000000000008000400090000000600"], 0x4c}}, 0x0) socket(0x840000000002, 0x3, 0x100) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) pipe(&(0x7f0000000140)) sendmmsg$inet(r9, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 3.291649886s ago: executing program 3 (id=2464): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'ipvlan1\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="4c240500000000001c0012800b0001006d616373656300000c000280060002400000000008000500", @ANYRES32=r7], 0x44}}, 0x4) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000b00000000000a000900aaaaaaaaaaaa000008000300", @ANYRES32=r5], 0x30}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='\xfaD\xa6\xbfu\x00'}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup, 0xffffffffffffffff, 0x9, 0x0, 0xffffffffffffffff, @link_id}, 0x20) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0xc011}, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x6, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000010000304000000000000000000000400", @ANYRES32=r10, @ANYBLOB="0000000000000000050021000000000008000d"], 0x30}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='ext4_es_insert_delayed_block\x00', r14}, 0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480)={0x0, 0x6}, &(0x7f00000004c0)=0x8) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r15, &(0x7f0000000100), 0x1001) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r4, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x240048d8) connect$llc(r15, &(0x7f0000000180)={0x1a, 0x30b, 0x40, 0xff, 0x40, 0xa2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x10) 3.043458239s ago: executing program 3 (id=2468): socket$nl_rdma(0x10, 0x3, 0x14) socket$alg(0x26, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000d00)) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x1e, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000100001040000000000000b001a000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x44}, 0x1, 0xf0ffffff}, 0x0) 2.204022191s ago: executing program 3 (id=2475): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x692274f8f235279a}, 0xe7af71971b3a1efb) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="701e3435895e87b6f2fed6304625285a3249081e0b6b415babd593625197aa332f40114bcdb22c8db53b36ee127b5ff78ad101284544a95db0a85e38a34e80120f85", @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf2564000000080001004d00000008000300", @ANYRES32=r3, @ANYBLOB="0c009900010000004b000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) r6 = socket(0x40000000015, 0x805, 0x0) getsockopt(r6, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r8, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000300000000000009000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="d5f20c6f01a889"], 0x5c}, 0x1, 0xf000}, 0x0) 2.071190727s ago: executing program 0 (id=2476): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0004001000f5ffffb605000008000000850000001395f55119f71f05000000001c90749463d6d7eec14e7f880eb82ddafa955c5c078233a89c2c460b44df189a00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000100), 0x8) sendmmsg(r0, &(0x7f00000066c0)=[{{&(0x7f0000000ac0)=@isdn, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b40)="5406dfe12d77833b25bea5082e", 0xd}], 0x1}}], 0x1, 0x0) 2.008555451s ago: executing program 2 (id=2478): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r1 = socket(0x200000100000011, 0x803, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000002c0)='ns/pid_for_children\x00') ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f0000000440)={{r1}, 0x0, 0x3, 0xfffffffffffffff9}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000000600050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.914395386s ago: executing program 0 (id=2479): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4000000010000300"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014001280090001006970697000000000040002800c001a"], 0x40}, 0x1, 0x2, 0x4888}, 0x0) 1.821592674s ago: executing program 0 (id=2480): r0 = socket$inet6(0xa, 0x3, 0x2c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x378, 0x238, 0x238, 0x378, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0x0, 0x0, 0x0, 0x80ffffff], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x0, [], 0x0, 0x80ff}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) 1.647427926s ago: executing program 0 (id=2482): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff6, &(0x7f0000001e00)=""/4086}, 0x90) 1.647175552s ago: executing program 2 (id=2483): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021006000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a000003940000000000000001"], 0x428}}, 0x0) 1.586680282s ago: executing program 2 (id=2485): r0 = socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="480000001400190d7ebdeb75fd0d8c562c84d8c00000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0100"/72, 0x48}], 0x1) setsockopt(r0, 0x10d, 0x800000000d, &(0x7f00000001c0)="b1", 0x1) socket$packet(0x11, 0xa, 0x300) 1.455107603s ago: executing program 2 (id=2486): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in, 0x0, 0x0, 0x0, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000280)='mm_shrink_slab_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)={0x4c, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x4c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r7) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r9, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000826bd7019cdc0d25a302900fbdbdf251d", @ANYRES32=r6, @ANYBLOB="14002f80040003800c000200000000000000000008000300", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="28002f800c0002000000000000000000080001000200000008000100000001000800010001000000"], 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c840) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r3) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r12, 0x0) ioctl$FS_IOC_GETFSMAP(r12, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) 1.454512123s ago: executing program 4 (id=2487): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001a000100000000ff000000000a0000000000000000000000140002"], 0x44}}, 0x0) 1.453950157s ago: executing program 0 (id=2488): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="3c75c2ea383f5038a0c4d44ad657d3a0d0a014015e8724b5a4c586f2ae924b277f04", 0x22) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000040)={0x21, @multicast2, 0x4e1f, 0x1, 'ovf\x00', 0x0, 0x5, 0x34}, 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c5", 0x1, 0x20000000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], &(0x7f0000000280), 0xb3, 0x0, 0x0, 0x80000000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x7, 0x7, 0xd194, 0x0, 0x382, 0xffffffffffffffff, 0x2, '\x00', 0x0, r6, 0x5, 0x3}, 0x48) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) write(r7, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000180)='{', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000940)}, {&(0x7f0000000a00)="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", 0x3d0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)="76896548e84ce2b140d8522fbdfe832e8d71513e3aa66675e037213753148d489bf0596f3bda75a58fb72bdad6fde4d2c403e3ea514388a562e9d593976eee139a450bb8ad", 0x45}, {&(0x7f0000000300)="f0fa7f9fdb6b5b2bcf3b9726fde35d7fddb7f048579a78bfea7c69f25c7761a8b2f46c598c3335d55333355234b6ca56afb9d929d6a2a9c8212eeaa5a4218c268263663a71b06d6fb8dadfe3e6c0b69c374e3e7bd2df0eb19678eab74b0d1235894d2ad54a6bf7771d39142867c39bd1fad299d2b62cd296c293a32536d6b8", 0x7f}], 0x2}}], 0x2, 0x0) 1.416278422s ago: executing program 4 (id=2489): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x17, 0x0, 0x0, @broadcast}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.357067778s ago: executing program 4 (id=2490): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)=@nl=@proc={0x10, 0x0, 0x0, 0x300080}, 0x80) connect$can_bcm(r1, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x6b, 0x11, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x70) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001200)={r2, 0xffffffffffffffff}, 0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0xfd], 0x0, [0x0, 0x2], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f0000001240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x112, 0x112, 0x5, [@const={0xf, 0x0, 0x0, 0xa, 0x2}, @datasec={0x9, 0x3, 0x0, 0xf, 0x2, [{0x2, 0x7}, {0x4, 0x0, 0x8000}, {0x1, 0x8, 0x4}], "110b"}, @enum={0x2, 0x7, 0x0, 0x6, 0x4, [{0x7, 0x3}, {0xa, 0x6}, {0x8, 0x66}, {0x7, 0x3}, {0x3, 0x1}, {0xa, 0x5}, {0xf, 0xb}]}, @enum={0x1, 0x4, 0x0, 0x6, 0x4, [{0xe, 0x6ed75dd0}, {0x6, 0x5b1}, {0x9, 0x3ff}, {0xe, 0x4}]}, @volatile={0x6, 0x0, 0x0, 0x9, 0x3}, @var={0xf, 0x0, 0x0, 0xe, 0x5}, @union={0xc, 0x4, 0x0, 0x5, 0x0, 0x2, [{0x8, 0x2, 0x959c}, {0xb, 0x4, 0xa5cb}, {0x8, 0x4, 0x81}, {0x9, 0x4, 0x2}]}, @volatile={0x4}]}, {0x0, [0x0, 0x61, 0x2e]}}, &(0x7f0000001380)=""/71, 0x131, 0x47, 0x0, 0x5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xdf7b, 0x1, 0x6, 0x8, r3, 0x3, '\x00', 0x0, r7, 0x2, 0x1, 0x5, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r9, 0x0, 0x31, &(0x7f00000014c0), &(0x7f0000001500)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 323.415526ms ago: executing program 4 (id=2491): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d0206001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r1, @ANYBLOB="9e122af14eb2dfd66e9ba0aa841d82a984a82e5b62aa6d783c949b8b3ad749d22ab753fadf21d183430fd095380199d1a2941fa40079eb3c12d89e0661805630afb9ffe187953a05730a"], 0x44}}, 0x0) 319.466445ms ago: executing program 0 (id=2492): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb}}]}]}}}]}, 0x78}}, 0x0) sendmmsg$inet(r3, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)='y', 0x1}], 0x1}}], 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r7, @ANYBLOB="8b0404000000000018001280080001002d6974000c00028008000100", @ANYRES32], 0x40}}, 0x0) sendmsg$inet(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000500)=[{&(0x7f00000004c0)="9e01", 0x2}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @local}}}], 0x20}, 0x0) 310.067002ms ago: executing program 2 (id=2493): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) shutdown(r0, 0x1) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x6, 0x2, 0x4}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r4) sendmsg$IEEE802154_SCAN_REQ(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r5, 0xd5c15c672e322a81, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNELS={0x8}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x2c}}, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x2) 180.89022ms ago: executing program 4 (id=2494): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000b4e11900b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x4}, 0x90) 59.221536ms ago: executing program 4 (id=2495): socket(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000001140)={0x1f, 0x0, 0x1}, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, &(0x7f00000000c0)={0x0, 0x1, "a686cf", 0x40, 0x7}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x8, 0x54, &(0x7f0000000480)=""/84}, 0x90) r4 = socket(0x840000000002, 0x3, 0x100) getsockopt$inet_mreqn(r4, 0x0, 0x12, 0x0, &(0x7f0000000740)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000680)={'wg1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109500000000006300e600000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r7, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=2496): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x9, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x8001}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r4 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f00000011c0)={@local, @link_local, @void, {@ipv4={0x800, @igmp={{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xd3, 0x2, 0x0, @local, @private=0xa010101, {[@cipso={0x86, 0xb, 0x3, [{0x1, 0x5, "a5cc74"}]}, @noop]}}, {0x0, 0x0, 0x0, @rand_addr=0x64010100}}}}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) shutdown(r5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e80000001000030429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000b800128009150100766c616e00000000a80002800600010000000000280004800c00010000800000030000000c00010000000000010000000c0093000000000000000000340003800c00010000000000af0000000c00010062000000000000000c00010000000000070000000c0001000700000045000000280003800c000100000000001f0000000c00010000000000000000000c00010000000000000000000c00020000000000010000000c0002000c0000000800000008000500", @ANYRES32=r6], 0xe8}}, 0x0) kernel console output (not intermixed with test programs): ooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.366348][ T8554] chnl_net:caif_netlink_parms(): no params data found [ 163.436904][ T8554] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.444358][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.451772][ T8554] bridge_slave_0: entered allmulticast mode [ 163.459330][ T8554] bridge_slave_0: entered promiscuous mode [ 163.466950][ T8554] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.474724][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.482222][ T8554] bridge_slave_1: entered allmulticast mode [ 163.491458][ T8554] bridge_slave_1: entered promiscuous mode [ 163.520567][ T8554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.532554][ T8554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.564225][ T8554] team0: Port device team_slave_0 added [ 163.574903][ T8554] team0: Port device team_slave_1 added [ 163.602891][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.609965][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.636108][ T8554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.648082][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.655174][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.681311][ T8554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.726981][ T8554] hsr_slave_0: entered promiscuous mode [ 163.734336][ T8554] hsr_slave_1: entered promiscuous mode [ 163.768909][ T8554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.788618][ T8554] Cannot create hsr debugfs directory [ 163.811711][ T8570] veth0_vlan: left allmulticast mode [ 163.881449][ T8574] sctp: [Deprecated]: syz.0.975 (pid 8574) Use of int in maxseg socket option. [ 163.881449][ T8574] Use struct sctp_assoc_value instead [ 163.935069][ T8570] team0: Port device vlan1 removed [ 163.951972][ T8579] netlink: 'syz.4.980': attribute type 15 has an invalid length. [ 163.960724][ T8578] netlink: 'syz.3.979': attribute type 5 has an invalid length. [ 163.972715][ T8578] __nla_validate_parse: 11 callbacks suppressed [ 163.972726][ T8578] netlink: 16 bytes leftover after parsing attributes in process `syz.3.979'. [ 164.234896][ T8590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.985'. [ 164.266053][ T8591] netlink: 'syz.4.984': attribute type 4 has an invalid length. [ 164.697732][ T8612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.993'. [ 164.737150][ T7453] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.987451][ T7453] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.122004][ T7453] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.194306][ T8637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1002'. [ 165.207400][ T8639] netlink: 'syz.2.1003': attribute type 4 has an invalid length. [ 165.262689][ T53] Bluetooth: hci2: command tx timeout [ 165.599081][ T7453] bridge_slave_1: left allmulticast mode [ 165.614232][ T7453] bridge_slave_1: left promiscuous mode [ 165.635897][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.658300][ T7453] bridge_slave_0: left allmulticast mode [ 165.669542][ T7453] bridge_slave_0: left promiscuous mode [ 165.675330][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.185232][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 166.269106][ T7453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.282775][ T8669] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1014'. [ 166.302068][ T7453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.316389][ T7453] bond0 (unregistering): Released all slaves [ 166.388018][ T8660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1009'. [ 166.414968][ T8663] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1011'. [ 166.455937][ T8673] dccp_invalid_packet: P.Data Offset(4) too small [ 166.490757][ T8671] bridge0: entered promiscuous mode [ 166.514562][ T8671] vlan3: entered promiscuous mode [ 166.549273][ T8671] bridge0: left promiscuous mode [ 166.631391][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 166.686728][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'. [ 166.960892][ T8685] netlink: 'syz.2.1018': attribute type 14 has an invalid length. [ 167.033192][ T8693] netlink: 'syz.0.1021': attribute type 1 has an invalid length. [ 167.052908][ T8693] netlink: 'syz.0.1021': attribute type 4 has an invalid length. [ 167.059788][ T8707] nbd: couldn't find a device at index 0 [ 167.205000][ T7453] hsr_slave_0: left promiscuous mode [ 167.229405][ T7453] hsr_slave_1: left promiscuous mode [ 167.242840][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.251950][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.262160][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.270590][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.299537][ T7453] veth1_macvtap: left promiscuous mode [ 167.305472][ T7453] veth0_macvtap: left promiscuous mode [ 167.313486][ T7453] veth1_vlan: left promiscuous mode [ 167.328627][ T7453] veth0_vlan: left promiscuous mode [ 167.339316][ T53] Bluetooth: hci2: command tx timeout [ 167.965212][ T7453] team0 (unregistering): Port device team_slave_1 removed [ 168.004776][ T7453] team0 (unregistering): Port device team_slave_0 removed [ 168.346661][ T8730] dummy0: entered promiscuous mode [ 168.373933][ T8730] macsec2: entered allmulticast mode [ 168.408605][ T8730] dummy0: entered allmulticast mode [ 168.423624][ T8730] dummy0: left allmulticast mode [ 168.438632][ T8730] dummy0: left promiscuous mode [ 168.485082][ T8732] netlink: 'syz.4.1031': attribute type 2 has an invalid length. [ 168.689439][ T8554] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 168.778252][ T8554] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 168.814105][ T8554] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 168.907855][ T8554] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 168.986231][ T8759] __nla_validate_parse: 8 callbacks suppressed [ 168.986249][ T8759] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1043'. [ 169.049111][ T8763] hsr0: entered promiscuous mode [ 169.054666][ T8763] macsec1: entered promiscuous mode [ 169.072076][ T8763] macsec1: entered allmulticast mode [ 169.083212][ T8763] hsr0: entered allmulticast mode [ 169.088280][ T8763] hsr_slave_0: entered allmulticast mode [ 169.103311][ T8763] hsr_slave_1: entered allmulticast mode [ 169.136660][ T8763] hsr0: left allmulticast mode [ 169.144409][ T8769] Cannot find add_set index 0 as target [ 169.153183][ T8763] hsr_slave_0: left allmulticast mode [ 169.168530][ T8763] hsr_slave_1: left allmulticast mode [ 169.189276][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 169.255375][ T8759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1043'. [ 169.297330][ T8759] ipvlan2: entered allmulticast mode [ 169.316751][ T8759] veth0_vlan: entered allmulticast mode [ 169.420119][ T53] Bluetooth: hci2: command tx timeout [ 169.491638][ T8787] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1049'. [ 169.701300][ T8554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.807107][ T8802] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1055'. [ 169.807789][ T8554] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.861934][ T8802] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 169.880944][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.888149][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.973957][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.981200][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.456421][ T8554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.559470][ T8554] veth0_vlan: entered promiscuous mode [ 170.590688][ T8554] veth1_vlan: entered promiscuous mode [ 170.662915][ T8554] veth0_macvtap: entered promiscuous mode [ 170.691243][ T8554] veth1_macvtap: entered promiscuous mode [ 170.731512][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.752550][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.766090][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.776939][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.791814][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.802934][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.815188][ T8554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.885128][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.898176][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.912973][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.932872][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.944531][ T8554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.955968][ T8554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.972853][ T8554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.987354][ T8858] netlink: 'syz.2.1076': attribute type 18 has an invalid length. [ 171.003666][ T8554] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.023338][ T8860] FAULT_INJECTION: forcing a failure. [ 171.023338][ T8860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.037502][ T8860] CPU: 0 PID: 8860 Comm: syz.0.1077 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 171.040526][ T8554] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.047573][ T8860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 171.066307][ T8860] Call Trace: [ 171.069605][ T8860] [ 171.072551][ T8860] dump_stack_lvl+0x241/0x360 [ 171.077252][ T8860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.079030][ T8554] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.082449][ T8860] ? __pfx__printk+0x10/0x10 [ 171.082484][ T8860] ? snprintf+0xda/0x120 [ 171.082506][ T8860] should_fail_ex+0x3b0/0x4e0 [ 171.082534][ T8860] _copy_to_user+0x2f/0xb0 [ 171.082553][ T8860] simple_read_from_buffer+0xca/0x150 [ 171.082576][ T8860] proc_fail_nth_read+0x1e9/0x250 [ 171.082596][ T8860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.082616][ T8860] ? rw_verify_area+0x520/0x6b0 [ 171.082636][ T8860] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.082657][ T8860] vfs_read+0x204/0xbc0 [ 171.082677][ T8860] ? __pfx_lock_release+0x10/0x10 [ 171.082703][ T8860] ? __pfx_vfs_read+0x10/0x10 [ 171.082725][ T8860] ? __fget_files+0x29/0x470 [ 171.082747][ T8860] ? __fget_files+0x3f6/0x470 [ 171.082779][ T8860] ksys_read+0x1a0/0x2c0 [ 171.082806][ T8860] ? __pfx_ksys_read+0x10/0x10 [ 171.082828][ T8860] ? do_syscall_64+0x100/0x230 [ 171.082855][ T8860] ? do_syscall_64+0xb6/0x230 [ 171.082880][ T8860] do_syscall_64+0xf3/0x230 [ 171.082902][ T8860] ? clear_bhb_loop+0x35/0x90 [ 171.114290][ T8554] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.115236][ T8860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.201184][ T8860] RIP: 0033:0x7f33093746bc [ 171.205619][ T8860] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 171.225246][ T8860] RSP: 002b:00007f330a152040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.233687][ T8860] RAX: ffffffffffffffda RBX: 00007f3309503f60 RCX: 00007f33093746bc [ 171.241686][ T8860] RDX: 000000000000000f RSI: 00007f330a1520b0 RDI: 0000000000000005 [ 171.249675][ T8860] RBP: 00007f330a1520a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.257675][ T8860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.265672][ T8860] R13: 000000000000000b R14: 00007f3309503f60 R15: 00007ffdd20e0a88 [ 171.273693][ T8860] [ 171.408983][ T8872] netlink: 204476 bytes leftover after parsing attributes in process `syz.2.1082'. [ 171.479651][ T2867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.498956][ T5096] Bluetooth: hci2: command tx timeout [ 171.532598][ T2867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.583160][ T8881] Cannot find add_set index 0 as target [ 171.663709][ T7456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.664398][ T8885] netlink: 'syz.2.1086': attribute type 4 has an invalid length. [ 171.695045][ T7456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.770082][ T8890] netlink: 'syz.0.1087': attribute type 4 has an invalid length. [ 172.265336][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1098'. [ 172.289464][ T8922] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1098'. [ 172.309856][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1099'. [ 172.635991][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 172.647010][ T8943] netlink: 'syz.3.1104': attribute type 4 has an invalid length. [ 172.679950][ T8945] netlink: 'syz.4.1105': attribute type 5 has an invalid length. [ 172.747145][ T8945] syz_tun: entered promiscuous mode [ 172.792841][ T8945] vlan2: entered promiscuous mode [ 173.065625][ T8963] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.277176][ T8977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.297331][ T8981] netlink: 'syz.2.1121': attribute type 1 has an invalid length. [ 173.349673][ T8980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.438304][ T8989] netlink: 'syz.2.1123': attribute type 4 has an invalid length. [ 173.578787][ T5096] Bluetooth: hci2: command 0x0405 tx timeout [ 173.621274][ T8999] netlink: 'syz.2.1126': attribute type 4 has an invalid length. [ 173.657411][ T9002] netlink: 'syz.0.1122': attribute type 3 has an invalid length. [ 174.128802][ T9030] __nla_validate_parse: 4 callbacks suppressed [ 174.128822][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1136'. [ 174.135955][ T9028] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 174.271541][ T9038] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1139'. [ 174.285182][ T9028] netlink: 'syz.0.1135': attribute type 21 has an invalid length. [ 174.293396][ T9028] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1135'. [ 174.305741][ T9038] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 174.465590][ T9046] bond_slave_0: entered promiscuous mode [ 174.471683][ T9046] bond_slave_1: entered promiscuous mode [ 174.517705][ T9046] macsec1: entered allmulticast mode [ 174.534021][ T9046] bond0: entered allmulticast mode [ 174.549049][ T9052] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1145'. [ 174.558581][ T9046] bond_slave_0: entered allmulticast mode [ 174.567737][ T9046] bond_slave_1: entered allmulticast mode [ 174.597847][ T9046] bond0: left allmulticast mode [ 174.621809][ T9046] bond_slave_0: left allmulticast mode [ 174.631952][ T9046] bond_slave_1: left allmulticast mode [ 174.666467][ T9046] bond_slave_0: left promiscuous mode [ 174.673009][ T9046] bond_slave_1: left promiscuous mode [ 174.959657][ T9075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1154'. [ 174.980609][ T9073] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 175.082858][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1155'. [ 175.118197][ T9079] nbd: couldn't find a device at index 0 [ 175.159954][ T9083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1158'. [ 175.203273][ T9087] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1159'. [ 175.220207][ T9083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1158'. [ 175.249062][ C0] Unknown status report in ack skb [ 175.587516][ T9108] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1168'. [ 175.779430][ T7453] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.902457][ T7453] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.987343][ T7453] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.059927][ T7453] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.211850][ T7453] bridge_slave_1: left allmulticast mode [ 176.217524][ T7453] bridge_slave_1: left promiscuous mode [ 176.223762][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.233901][ T7453] bridge_slave_0: left allmulticast mode [ 176.239896][ T7453] bridge_slave_0: left promiscuous mode [ 176.245601][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.550907][ T7453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.562991][ T7453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.573740][ T7453] bond0 (unregistering): Released all slaves [ 176.801938][ T9135] validate_nla: 1 callbacks suppressed [ 176.801959][ T9135] netlink: 'syz.2.1176': attribute type 3 has an invalid length. [ 176.957042][ T9135] netlink: 'syz.2.1176': attribute type 3 has an invalid length. [ 176.966190][ T9152] Unknown options in mask a620 [ 177.097411][ T9158] nbd: couldn't find a device at index 0 [ 177.376350][ T7453] hsr_slave_0: left promiscuous mode [ 177.398147][ T7453] hsr_slave_1: left promiscuous mode [ 177.429541][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.448026][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.479554][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.497246][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.543324][ T5096] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.553828][ T5096] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.567180][ T5096] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.575791][ T5096] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.590416][ T5096] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 177.598828][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.607185][ T7453] veth1_macvtap: left promiscuous mode [ 177.612959][ T7453] veth0_macvtap: left promiscuous mode [ 177.619575][ T7453] veth1_vlan: left promiscuous mode [ 177.625012][ T7453] veth0_vlan: left promiscuous mode [ 178.127892][ T7453] team0 (unregistering): Port device team_slave_1 removed [ 178.167717][ T7453] team0 (unregistering): Port device team_slave_0 removed [ 178.693624][ T9194] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 179.105012][ T9215] netlink: 'syz.2.1189': attribute type 20 has an invalid length. [ 179.133625][ T9180] chnl_net:caif_netlink_parms(): no params data found [ 179.346672][ T9232] netlink: 'syz.3.1198': attribute type 18 has an invalid length. [ 179.624278][ T9180] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.653196][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.660460][ T5096] Bluetooth: hci2: command tx timeout [ 179.682875][ T9180] bridge_slave_0: entered allmulticast mode [ 179.712412][ T9180] bridge_slave_0: entered promiscuous mode [ 179.767058][ T9180] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.794247][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.803661][ T9180] bridge_slave_1: entered allmulticast mode [ 179.832986][ T9180] bridge_slave_1: entered promiscuous mode [ 179.839748][ T9259] __nla_validate_parse: 7 callbacks suppressed [ 179.839765][ T9259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1205'. [ 179.927315][ T9180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.936780][ T9263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1206'. [ 179.967171][ T9180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.020239][ T9267] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1208'. [ 180.096584][ T9180] team0: Port device team_slave_0 added [ 180.115653][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1208'. [ 180.136948][ T9180] team0: Port device team_slave_1 added [ 180.296093][ T9180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.312683][ T9180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.348259][ T9180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.396968][ T9180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.422343][ T9180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.476447][ T9180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.715723][ T9308] netlink: 'syz.3.1222': attribute type 4 has an invalid length. [ 180.746465][ T9180] hsr_slave_0: entered promiscuous mode [ 180.759983][ T9180] hsr_slave_1: entered promiscuous mode [ 180.783067][ T9180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.808174][ T9180] Cannot create hsr debugfs directory [ 180.826693][ T9300] netlink: 'syz.2.1219': attribute type 1 has an invalid length. [ 180.868331][ T9303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 180.912539][ T9304] netlink: 'syz.0.1220': attribute type 5 has an invalid length. [ 180.930013][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1220'. [ 180.985399][ T9304] vlan1: entered promiscuous mode [ 181.019131][ T9304] syz_tun: entered promiscuous mode [ 181.025240][ T9322] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 181.287355][ T9336] netlink: 'syz.3.1233': attribute type 1 has an invalid length. [ 181.311712][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 181.439803][ T9340] netlink: 'syz.4.1235': attribute type 4 has an invalid length. [ 181.447693][ T9342] bond0: Unable to set up delay as MII monitoring is disabled [ 181.618035][ T9354] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1239'. [ 181.644987][ T9350] tipc: Started in network mode [ 181.650623][ T9355] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1239'. [ 181.660416][ T9350] tipc: Node identity 2d14142a, cluster identity 4711 [ 181.686291][ T9350] tipc: Enabling of bearer rejected, failed to enable media [ 181.725463][ T9356] netlink: 'syz.0.1240': attribute type 4 has an invalid length. [ 181.738836][ T5096] Bluetooth: hci2: command tx timeout [ 181.821566][ T9366] netlink: 'syz.0.1244': attribute type 3 has an invalid length. [ 181.841075][ T9366] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1244'. [ 181.936338][ T9355] netlink: 'syz.4.1239': attribute type 10 has an invalid length. [ 181.968861][ T9355] bridge0: port 2(team0) entered blocking state [ 181.984263][ T9355] bridge0: port 2(team0) entered disabled state [ 182.003221][ T9355] team0: entered allmulticast mode [ 182.008393][ T9355] team_slave_0: entered allmulticast mode [ 182.019078][ T9355] team_slave_1: entered allmulticast mode [ 182.031721][ T9355] team0: entered promiscuous mode [ 182.036911][ T9355] team_slave_0: entered promiscuous mode [ 182.043490][ T9355] team_slave_1: entered promiscuous mode [ 182.054886][ T9355] bridge0: port 2(team0) entered blocking state [ 182.061332][ T9355] bridge0: port 2(team0) entered forwarding state [ 182.282080][ T9378] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 182.503053][ T9390] syz_tun (unregistering): left promiscuous mode [ 182.700081][ T9180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 182.746335][ T9180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 182.814405][ T9180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 182.860391][ T9180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.861865][ T9189] block nbd64: NBD_DISCONNECT [ 183.275338][ T9180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.387289][ T9180] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.451642][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.458856][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.535574][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.542818][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.818706][ T5096] Bluetooth: hci2: command tx timeout [ 184.264591][ T9180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.352326][ T9505] dummy0: entered promiscuous mode [ 184.357573][ T9505] macsec1: entered allmulticast mode [ 184.391486][ T9505] dummy0: entered allmulticast mode [ 184.420701][ T9505] dummy0: left allmulticast mode [ 184.425733][ T9505] dummy0: left promiscuous mode [ 184.575419][ T9180] veth0_vlan: entered promiscuous mode [ 184.612763][ T9180] veth1_vlan: entered promiscuous mode [ 184.715848][ T9180] veth0_macvtap: entered promiscuous mode [ 184.749108][ T9180] veth1_macvtap: entered promiscuous mode [ 184.830538][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.853053][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.882403][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.900573][ T9525] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 184.911177][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.928724][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.951953][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.975891][ T9180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.997098][ T9521] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 185.043177][ T2867] tipc: Subscription rejected, illegal request [ 185.053406][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.095492][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.118544][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.145948][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.173222][ T9180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.202494][ T9180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.242845][ T9180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.307003][ T9539] __nla_validate_parse: 11 callbacks suppressed [ 185.307023][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 185.568315][ T9180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.625998][ T9180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.658801][ T9180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.678630][ T9180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.721163][ T9559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1299'. [ 185.898700][ T5096] Bluetooth: hci2: command tx timeout [ 185.959694][ T7453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.967555][ T7453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.013631][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1303'. [ 186.066423][ T7456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.093811][ T7456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.166302][ T9584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1306'. [ 186.460942][ T5094] Bluetooth: hci4: command 0x0406 tx timeout [ 186.467036][ T5096] Bluetooth: hci0: command 0x0406 tx timeout [ 186.698004][ T9616] netlink: 'syz.0.1312': attribute type 6 has an invalid length. [ 187.031146][ T9644] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1320'. [ 187.067987][ T9644] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 187.267765][ T9655] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 187.353642][ T9660] netlink: 'syz.3.1324': attribute type 9 has an invalid length. [ 187.661412][ T9680] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 187.731406][ T9685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1332'. [ 187.759902][ T9685] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1332'. [ 187.871709][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1334'. [ 188.081693][ T9705] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1338'. [ 188.113723][ T9705] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 188.315521][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1339'. [ 188.437263][ T2867] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.698296][ T2867] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.756555][ T2867] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.813366][ T2867] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.910604][ T2867] bridge_slave_1: left allmulticast mode [ 188.916341][ T2867] bridge_slave_1: left promiscuous mode [ 188.925107][ T2867] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.963884][ T2867] bridge_slave_0: left allmulticast mode [ 188.975494][ T2867] bridge_slave_0: left promiscuous mode [ 188.983074][ T2867] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.479189][ T2867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.551995][ T2867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.558224][ T9766] xt_SECMARK: invalid mode: 0 [ 189.574449][ T2867] bond0 (unregistering): Released all slaves [ 189.758734][ T9778] syzkaller0: entered allmulticast mode [ 189.857150][ T9785] Cannot find add_set index 0 as target [ 189.955050][ T9790] netlink: 'syz.4.1356': attribute type 4 has an invalid length. [ 190.003578][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 190.015065][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 190.024947][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 190.038690][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 190.050476][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 190.061776][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 190.162966][ T9799] IPv6: Can't replace route, no match found [ 190.410171][ T9810] xt_l2tp: invalid flags combination: 0 [ 190.535415][ T9821] __nla_validate_parse: 1 callbacks suppressed [ 190.535437][ T9821] netlink: 816 bytes leftover after parsing attributes in process `syz.4.1366'. [ 190.564784][ T2867] hsr_slave_0: left promiscuous mode [ 190.581557][ T2867] hsr_slave_1: left promiscuous mode [ 190.594172][ T2867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.612564][ T2867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.617606][ T9826] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1368'. [ 190.638914][ T2867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.652825][ T2867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.695434][ T2867] veth1_macvtap: left promiscuous mode [ 190.704400][ T2867] veth0_macvtap: left promiscuous mode [ 190.711520][ T2867] veth1_vlan: left promiscuous mode [ 190.718653][ T2867] veth0_vlan: left promiscuous mode [ 191.178755][ T2867] team0 (unregistering): Port device team_slave_1 removed [ 191.215710][ T2867] team0 (unregistering): Port device team_slave_0 removed [ 191.543218][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1367'. [ 191.562724][ T9823] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 191.573595][ T9832] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1369'. [ 191.638718][ T9834] netlink: 'syz.0.1368': attribute type 10 has an invalid length. [ 191.656393][ T9834] bridge0: port 3(team0) entered blocking state [ 191.678673][ T9834] bridge0: port 3(team0) entered disabled state [ 191.692100][ T9834] team0: entered allmulticast mode [ 191.697262][ T9834] team_slave_0: entered allmulticast mode [ 191.703250][ T9834] team_slave_1: entered allmulticast mode [ 191.717567][ T9834] team0: entered promiscuous mode [ 191.722730][ T9834] team_slave_0: entered promiscuous mode [ 191.728799][ T9834] team_slave_1: entered promiscuous mode [ 191.728890][ T9849] Cannot find add_set index 0 as target [ 191.735160][ T9834] bridge0: port 3(team0) entered blocking state [ 191.746381][ T9834] bridge0: port 3(team0) entered forwarding state [ 191.803664][ T9850] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1371'. [ 191.922586][ T9857] netlink: 'syz.3.1375': attribute type 1 has an invalid length. [ 191.942380][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1375'. [ 192.045177][ T9865] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1377'. [ 192.126253][ T9791] chnl_net:caif_netlink_parms(): no params data found [ 192.134676][ T9869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1378'. [ 192.147627][ T53] Bluetooth: hci2: command tx timeout [ 192.289672][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 192.366089][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1382'. [ 192.597649][ T9791] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.619060][ T9791] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.646708][ T9791] bridge_slave_0: entered allmulticast mode [ 192.665624][ T9791] bridge_slave_0: entered promiscuous mode [ 192.672239][ T9906] Cannot find add_set index 0 as target [ 192.686979][ T9904] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 192.717210][ T9791] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.734728][ T9791] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.750848][ T9791] bridge_slave_1: entered allmulticast mode [ 192.772376][ T9791] bridge_slave_1: entered promiscuous mode [ 192.891429][ T9791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.933351][ T9791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.060924][ T9791] team0: Port device team_slave_0 added [ 193.105116][ T9791] team0: Port device team_slave_1 added [ 193.177716][ T9791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.188135][ T9791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.248749][ T9791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.275503][ T9791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.284701][ T9791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.311786][ T9791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.410133][ T9938] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 193.529948][ T9791] hsr_slave_0: entered promiscuous mode [ 193.554620][ T9791] hsr_slave_1: entered promiscuous mode [ 193.563338][ T9791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.574428][ T9791] Cannot create hsr debugfs directory [ 193.823863][ T9962] bond_slave_0: entered promiscuous mode [ 193.829630][ T9962] bond_slave_1: entered promiscuous mode [ 193.869524][ T9962] macsec1: entered allmulticast mode [ 193.883046][ T9962] bond0: entered allmulticast mode [ 193.888355][ T9962] bond_slave_0: entered allmulticast mode [ 193.915163][ T9962] bond_slave_1: entered allmulticast mode [ 193.939105][ T9962] bond0: left allmulticast mode [ 193.944495][ T9962] bond_slave_0: left allmulticast mode [ 193.955775][ T9962] bond_slave_1: left allmulticast mode [ 193.961534][ T9962] bond_slave_0: left promiscuous mode [ 193.967028][ T9962] bond_slave_1: left promiscuous mode [ 194.048801][ T9973] pim6reg1: entered promiscuous mode [ 194.054144][ T9973] pim6reg1: entered allmulticast mode [ 194.218819][ T53] Bluetooth: hci2: command tx timeout [ 194.624641][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.858974][T10022] netlink: 'syz.4.1419': attribute type 9 has an invalid length. [ 194.949463][T10027] dummy0: entered promiscuous mode [ 194.963288][T10027] macsec1: entered allmulticast mode [ 194.981850][T10027] dummy0: entered allmulticast mode [ 194.990765][T10027] dummy0: left allmulticast mode [ 195.000381][T10027] dummy0: left promiscuous mode [ 195.120670][T10041] netlink: 'syz.4.1426': attribute type 4 has an invalid length. [ 195.257437][ T9791] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.291818][ T9791] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.373112][ T9791] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.374275][T10054] netlink: 'syz.2.1431': attribute type 4 has an invalid length. [ 195.401438][ T9791] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.561263][T10067] __nla_validate_parse: 12 callbacks suppressed [ 195.561291][T10067] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1436'. [ 195.576904][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 195.603189][T10067] netlink: 'syz.4.1436': attribute type 1 has an invalid length. [ 195.644648][T10067] netlink: 'syz.4.1436': attribute type 11 has an invalid length. [ 195.668620][T10067] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1436'. [ 195.732091][T10067] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20014 - 0 [ 195.755137][T10080] netlink: 'syz.2.1441': attribute type 3 has an invalid length. [ 195.778641][T10067] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20014 - 0 [ 195.799434][T10067] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20014 - 0 [ 195.809048][T10067] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20014 - 0 [ 195.818069][T10067] geneve2: entered promiscuous mode [ 195.833490][T10067] geneve2: entered allmulticast mode [ 195.863494][T10080] netlink: 'syz.2.1441': attribute type 3 has an invalid length. [ 195.875528][T10084] syzkaller0: entered promiscuous mode [ 195.888558][T10084] syzkaller0: entered allmulticast mode [ 196.063413][ T9791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.133315][ T9791] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.171134][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.178348][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.191751][T10099] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 196.219475][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.226616][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.237952][T10101] netlink: 'syz.0.1448': attribute type 2 has an invalid length. [ 196.295085][T10101] netlink: 'syz.0.1448': attribute type 1 has an invalid length. [ 196.312152][ T53] Bluetooth: hci2: command tx timeout [ 196.333445][T10101] netlink: 'syz.0.1448': attribute type 2 has an invalid length. [ 196.375431][ T9791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.722945][ T9791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.826752][ T9791] veth0_vlan: entered promiscuous mode [ 196.867523][ T9791] veth1_vlan: entered promiscuous mode [ 196.964524][ T9791] veth0_macvtap: entered promiscuous mode [ 196.981299][ T9791] veth1_macvtap: entered promiscuous mode [ 197.080071][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.106649][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.137225][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.157227][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.173226][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.185142][T10161] nbd: couldn't find a device at index 0 [ 197.191545][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.205723][ T9791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.233076][T10159] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 197.333001][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.362128][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.384590][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.395863][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.409934][ T9791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.425685][ T9791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.437738][ T9791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.457275][ T9791] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.500143][ T9791] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.523350][ T9791] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.543030][ T9791] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.603577][T10179] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1475'. [ 197.631273][T10179] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 197.754254][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.778613][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.923953][T10191] batadv_slave_1: entered promiscuous mode [ 197.933280][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1483'. [ 197.947442][T10189] batadv_slave_1: left promiscuous mode [ 197.960396][ T7453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.971579][ T7453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.128099][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1484'. [ 198.346637][T10220] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 198.625071][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1494'. [ 198.956714][T10262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1505'. [ 199.071579][T10269] xt_SECMARK: invalid mode: 0 [ 199.209382][T10279] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1513'. [ 199.245141][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1513'. [ 199.392420][T10290] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 199.726163][T10316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.119071][T10334] validate_nla: 5 callbacks suppressed [ 200.119093][T10334] netlink: 'syz.3.1538': attribute type 4 has an invalid length. [ 200.161307][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.235132][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.284887][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.406820][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.698935][T10355] __nla_validate_parse: 4 callbacks suppressed [ 201.698954][T10355] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1544'. [ 201.744011][ T51] bridge_slave_1: left allmulticast mode [ 201.750234][ T51] bridge_slave_1: left promiscuous mode [ 201.755941][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1547'. [ 201.767331][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.802170][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 201.811635][ T51] bridge_slave_0: left allmulticast mode [ 201.817625][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 201.822027][ T51] bridge_slave_0: left promiscuous mode [ 201.835139][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 201.844477][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 201.851318][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.874857][ T5091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 201.884324][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 202.005024][T10369] netlink: 'syz.0.1553': attribute type 1 has an invalid length. [ 202.013030][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1553'. [ 202.359434][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.377927][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.394733][ T51] bond0 (unregistering): Released all slaves [ 202.408090][T10363] netlink: 'syz.4.1550': attribute type 5 has an invalid length. [ 202.420571][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 202.736304][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1557'. [ 202.756632][T10391] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 202.832536][T10409] Cannot find add_set index 0 as target [ 203.012348][ T51] hsr_slave_0: left promiscuous mode [ 203.033810][ T51] hsr_slave_1: left promiscuous mode [ 203.064250][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.084773][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.107123][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.115668][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.137672][ T51] veth1_macvtap: left promiscuous mode [ 203.143670][ T51] veth0_macvtap: left promiscuous mode [ 203.151964][ T51] veth1_vlan: left promiscuous mode [ 203.157321][ T51] veth0_vlan: left promiscuous mode [ 203.560656][ T51] team0 (unregistering): Port device team_slave_1 removed [ 203.598976][ T51] team0 (unregistering): Port device team_slave_0 removed [ 203.977967][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1568'. [ 203.987673][ T5091] Bluetooth: hci2: command tx timeout [ 204.062898][T10430] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1568'. [ 204.213556][T10442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1575'. [ 204.256984][T10445] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1574'. [ 204.272373][T10447] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1576'. [ 204.405413][T10455] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 204.500822][T10361] chnl_net:caif_netlink_parms(): no params data found [ 204.870748][T10361] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.894003][T10361] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.905318][T10361] bridge_slave_0: entered allmulticast mode [ 204.920851][T10361] bridge_slave_0: entered promiscuous mode [ 204.972509][T10361] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.997842][T10361] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.031429][T10361] bridge_slave_1: entered allmulticast mode [ 205.057644][T10361] bridge_slave_1: entered promiscuous mode [ 205.149579][T10361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.180359][T10361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.296800][T10361] team0: Port device team_slave_0 added [ 205.321205][T10361] team0: Port device team_slave_1 added [ 205.357336][ T29] audit: type=1107 audit(1720408440.293:4): pid=10512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 205.372131][T10514] netlink: 'syz.4.1596': attribute type 10 has an invalid length. [ 205.382666][T10361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.400401][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.429148][T10361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.446751][T10361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.463016][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.463101][T10518] netlink: 'syz.4.1596': attribute type 8 has an invalid length. [ 205.496775][T10361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.614281][T10361] hsr_slave_0: entered promiscuous mode [ 205.623999][T10361] hsr_slave_1: entered promiscuous mode [ 205.632054][T10361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.639917][T10361] Cannot create hsr debugfs directory [ 206.058782][ T53] Bluetooth: hci2: command tx timeout [ 206.125739][T10546] Cannot find add_set index 0 as target [ 206.282566][T10550] dummy0: entered promiscuous mode [ 206.296269][T10550] macsec2: entered allmulticast mode [ 206.317240][T10550] dummy0: entered allmulticast mode [ 206.332224][T10550] dummy0: left allmulticast mode [ 206.337421][T10550] dummy0: left promiscuous mode [ 206.374470][T10361] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.395663][T10361] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.409861][T10361] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.451906][T10361] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 206.702168][T10361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.711775][T10562] netlink: 'syz.0.1618': attribute type 4 has an invalid length. [ 206.756595][T10361] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.795716][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.802933][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.847481][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.854714][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.938792][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 207.043679][T10574] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 207.285376][T10591] __nla_validate_parse: 12 callbacks suppressed [ 207.285398][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1627'. [ 207.384093][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1628'. [ 207.423881][T10599] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.1630'. [ 207.450561][T10598] netlink: 'syz.0.1629': attribute type 3 has an invalid length. [ 207.469236][T10598] netlink: 'syz.0.1629': attribute type 3 has an invalid length. [ 207.484261][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1630'. [ 207.521238][T10361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.683823][T10361] veth0_vlan: entered promiscuous mode [ 207.733271][T10613] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1636'. [ 207.771682][T10361] veth1_vlan: entered promiscuous mode [ 207.819756][T10361] veth0_macvtap: entered promiscuous mode [ 207.843514][T10361] veth1_macvtap: entered promiscuous mode [ 207.872139][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.887983][T10617] nbd: socks must be embedded in a SOCK_ITEM attr [ 207.904062][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.930988][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.955209][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.977021][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.000308][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.013114][T10361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.032372][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.044745][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.064561][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.084598][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.095176][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.106273][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.123876][T10361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.149473][ T5091] Bluetooth: hci2: command tx timeout [ 208.208295][T10361] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.238292][T10632] nbd: couldn't find a device at index 0 [ 208.250396][T10361] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.279544][T10361] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.290408][T10361] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.363189][T10641] netlink: 'syz.0.1645': attribute type 10 has an invalid length. [ 208.393865][T10641] team0: Device ipvlan1 failed to register rx_handler [ 208.614434][ T7448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.640796][ T7448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.685430][ T2867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.699341][ T2867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.824638][T10665] bridge0: port 3(team0) entered disabled state [ 208.866309][T10665] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 209.352310][T10707] Cannot find add_set index 0 as target [ 209.407881][T10709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1667'. [ 209.512498][T10715] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 209.663916][T10722] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1671'. [ 209.802655][T10731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1676'. [ 209.858373][T10736] bond_slave_0: entered promiscuous mode [ 209.864483][T10736] bond_slave_1: entered promiscuous mode [ 209.875869][T10736] vlan1: entered promiscuous mode [ 209.882333][T10736] bond0: entered promiscuous mode [ 209.889358][T10736] batadv0: entered promiscuous mode [ 209.897995][T10736] bond0: left promiscuous mode [ 209.904609][T10736] batadv0: left promiscuous mode [ 209.910719][T10736] bond_slave_0: left promiscuous mode [ 209.916203][T10736] bond_slave_1: left promiscuous mode [ 210.073600][T10745] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1681'. [ 210.108930][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1681'. [ 210.333601][T10764] netlink: 'syz.3.1687': attribute type 4 has an invalid length. [ 210.673860][T10788] netlink: 'syz.0.1698': attribute type 64 has an invalid length. [ 210.687781][T10789] netlink: 'syz.3.1697': attribute type 5 has an invalid length. [ 210.967916][T10807] netlink: 'syz.0.1707': attribute type 4 has an invalid length. [ 211.059773][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.381533][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.411935][T10816] __nla_validate_parse: 7 callbacks suppressed [ 212.411952][T10816] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1711'. [ 212.465315][T10823] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1711'. [ 212.588270][T10833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1716'. [ 212.611241][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.651310][T10831] netlink: 'syz.0.1715': attribute type 1 has an invalid length. [ 212.685978][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.696386][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.711218][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.720848][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.736045][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 212.748891][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.776324][T10843] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1718'. [ 212.783182][T10837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1715'. [ 212.853402][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.885698][T10849] tipc: Enabling of bearer rejected, failed to enable media [ 212.894327][T10845] netlink: 'syz.3.1719': attribute type 5 has an invalid length. [ 213.138089][T10862] netlink: 'syz.0.1722': attribute type 4 has an invalid length. [ 213.380439][ T51] bridge_slave_1: left allmulticast mode [ 213.406713][ T51] bridge_slave_1: left promiscuous mode [ 213.424118][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.454942][ T51] bridge_slave_0: left allmulticast mode [ 213.477752][ T51] bridge_slave_0: left promiscuous mode [ 213.496601][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.555168][T10879] netlink: 'syz.0.1729': attribute type 1 has an invalid length. [ 213.620242][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'. [ 214.054234][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.069728][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.081584][ T51] bond0 (unregistering): Released all slaves [ 214.101322][T10838] chnl_net:caif_netlink_parms(): no params data found [ 214.181092][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1731'. [ 214.261384][T10894] netlink: 'syz.2.1733': attribute type 4 has an invalid length. [ 214.387863][T10901] netlink: 'syz.3.1736': attribute type 11 has an invalid length. [ 214.574196][T10917] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1741'. [ 214.666811][T10915] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1740'. [ 214.670289][T10919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.779099][ T53] Bluetooth: hci2: command tx timeout [ 214.858747][T10838] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.865905][T10838] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.885971][T10838] bridge_slave_0: entered allmulticast mode [ 214.895117][T10838] bridge_slave_0: entered promiscuous mode [ 214.921411][T10838] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.933913][T10838] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.947303][T10838] bridge_slave_1: entered allmulticast mode [ 214.956443][T10838] bridge_slave_1: entered promiscuous mode [ 215.056525][ T51] hsr_slave_0: left promiscuous mode [ 215.064620][ T51] hsr_slave_1: left promiscuous mode [ 215.075986][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.079853][T10941] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1750'. [ 215.094901][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.123793][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.142794][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.195325][ T51] veth1_macvtap: left promiscuous mode [ 215.201049][T10934] nbd: device at index 64 is going down [ 215.201715][ T51] veth0_macvtap: left promiscuous mode [ 215.212506][ T51] veth1_vlan: left promiscuous mode [ 215.217845][ T51] veth0_vlan: left promiscuous mode [ 215.703471][ T51] team0 (unregistering): Port device team_slave_1 removed [ 215.743650][ T51] team0 (unregistering): Port device team_slave_0 removed [ 216.094791][T10838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.119274][T10946] bridge_slave_1: left allmulticast mode [ 216.126245][T10946] bridge_slave_1: left promiscuous mode [ 216.132391][T10946] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.147170][T10946] bridge4: port 1(bridge_slave_1) entered blocking state [ 216.157018][T10946] bridge4: port 1(bridge_slave_1) entered disabled state [ 216.165472][T10946] bridge_slave_1: entered allmulticast mode [ 216.173104][T10946] bridge_slave_1: entered promiscuous mode [ 216.182061][T10946] bridge4: port 1(bridge_slave_1) entered blocking state [ 216.189260][T10946] bridge4: port 1(bridge_slave_1) entered forwarding state [ 216.216568][T10949] bridge0: entered promiscuous mode [ 216.231103][T10949] vlan3: entered promiscuous mode [ 216.247700][T10949] bridge0: left promiscuous mode [ 216.328270][T10838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.507937][T10838] team0: Port device team_slave_0 added [ 216.547691][T10838] team0: Port device team_slave_1 added [ 216.574700][T10973] netlink: 'syz.0.1761': attribute type 3 has an invalid length. [ 216.587416][ T29] audit: type=1107 audit(1720408451.523:5): pid=10976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 216.648180][T10979] netlink: 'syz.2.1763': attribute type 10 has an invalid length. [ 216.724363][T10979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.740748][T10985] netlink: 'syz.2.1763': attribute type 8 has an invalid length. [ 216.771479][T10838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.799166][T10838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.858651][T10838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.859176][ T53] Bluetooth: hci2: command tx timeout [ 216.877441][T10838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.912905][T10838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.965591][T10838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.155182][T10838] hsr_slave_0: entered promiscuous mode [ 217.165935][T10838] hsr_slave_1: entered promiscuous mode [ 217.173400][T11006] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 217.184441][T10838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.195399][T10838] Cannot create hsr debugfs directory [ 217.466715][T11019] dummy0: entered promiscuous mode [ 217.472580][T11019] macsec1: entered allmulticast mode [ 217.477902][T11019] dummy0: entered allmulticast mode [ 217.496454][T11019] dummy0: left allmulticast mode [ 217.508963][T11019] dummy0: left promiscuous mode [ 217.524334][T11024] netlink: 'syz.3.1780': attribute type 4 has an invalid length. [ 217.686473][T11034] sctp: [Deprecated]: syz.2.1778 (pid 11034) Use of int in maxseg socket option. [ 217.686473][T11034] Use struct sctp_assoc_value instead [ 218.033739][T10838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 218.054279][T10838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 218.086421][T10838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 218.114780][T10838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 218.122064][T11048] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 218.271437][T11051] netlink: 'syz.2.1788': attribute type 4 has an invalid length. [ 218.293724][T10838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.349496][T10838] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.385466][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.392673][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.411595][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.419041][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.511537][T10838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.539037][T10838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.693694][T11072] nbd: socks must be embedded in a SOCK_ITEM attr [ 218.928314][T10838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.952447][ T53] Bluetooth: hci2: command tx timeout [ 219.056240][T10838] veth0_vlan: entered promiscuous mode [ 219.094959][T11105] nbd: couldn't find a device at index 0 [ 219.119477][T10838] veth1_vlan: entered promiscuous mode [ 219.196758][T11109] __nla_validate_parse: 7 callbacks suppressed [ 219.196778][T11109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1805'. [ 219.223924][T11111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1806'. [ 219.243589][T10838] veth0_macvtap: entered promiscuous mode [ 219.267512][T10838] veth1_macvtap: entered promiscuous mode [ 219.302495][T11109] bridge4: port 1(bridge_slave_1) entered disabled state [ 219.324886][T11109] bridge_slave_1: left allmulticast mode [ 219.336904][T11109] bridge4: port 1(bridge_slave_1) entered disabled state [ 219.385485][T10838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.419782][T10838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.438737][T10838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.457182][T10838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.467856][T10838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.499380][T10838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.516811][T10838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.532581][T11123] vlan3: entered promiscuous mode [ 219.537644][T11123] vlan3: entered allmulticast mode [ 219.560024][T10838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.573798][T10838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.584858][T10838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.597415][T10838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.613343][T10838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.627518][T10838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.643879][T10838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.666288][T10838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.693659][T10838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.708224][T10838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.724099][T10838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.796022][T11135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1813'. [ 219.817159][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1813'. [ 219.897812][T11139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1815'. [ 219.930140][T11143] xt_ecn: cannot match TCP bits for non-tcp packets [ 219.984551][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'. [ 220.027659][T11146] tc_dump_action: action bad kind [ 220.067373][T11148] bridge0: port 2(team0) entered disabled state [ 220.083862][T11148] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 220.119067][ T955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.143854][ T955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.233006][T11158] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 220.245730][ T955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.265734][ T955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.296378][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1826'. [ 220.554602][T11174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1829'. [ 220.635303][T11181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1831'. [ 220.727594][T11189] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1835'. [ 221.325258][T11231] netlink: 'syz.3.1852': attribute type 4 has an invalid length. [ 221.387619][T11234] Cannot find add_set index 0 as target [ 221.534476][T11245] xt_SECMARK: invalid mode: 0 [ 221.778867][T11264] netlink: 'syz.4.1865': attribute type 18 has an invalid length. [ 221.849717][T11268] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 221.869856][T11268] netlink: 'syz.4.1867': attribute type 3 has an invalid length. [ 221.870020][T11270] netlink: 'syz.3.1868': attribute type 5 has an invalid length. [ 221.890412][T11268] netlink: 'syz.4.1867': attribute type 3 has an invalid length. [ 221.941794][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c2ee400: rx timeout, send abort [ 221.994937][T11278] netlink: 'syz.4.1871': attribute type 1 has an invalid length. [ 222.047747][T11282] FAULT_INJECTION: forcing a failure. [ 222.047747][T11282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.066909][T11287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.075951][T11282] CPU: 1 PID: 11282 Comm: syz.4.1874 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 222.086791][T11282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 222.096846][T11282] Call Trace: [ 222.100139][T11282] [ 222.103082][T11282] dump_stack_lvl+0x241/0x360 [ 222.107780][T11282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.112972][T11282] ? __pfx__printk+0x10/0x10 [ 222.117582][T11282] ? snprintf+0xda/0x120 [ 222.121817][T11282] should_fail_ex+0x3b0/0x4e0 [ 222.126523][T11282] _copy_to_user+0x2f/0xb0 [ 222.130942][T11282] simple_read_from_buffer+0xca/0x150 [ 222.136322][T11282] proc_fail_nth_read+0x1e9/0x250 [ 222.141338][T11282] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.146874][T11282] ? rw_verify_area+0x520/0x6b0 [ 222.151719][T11282] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.157257][T11282] vfs_read+0x204/0xbc0 [ 222.161405][T11282] ? __pfx_lock_release+0x10/0x10 [ 222.166430][T11282] ? __pfx_vfs_read+0x10/0x10 [ 222.171103][T11282] ? __fget_files+0x29/0x470 [ 222.175688][T11282] ? __fget_files+0x3f6/0x470 [ 222.180366][T11282] ksys_read+0x1a0/0x2c0 [ 222.184605][T11282] ? __pfx_ksys_read+0x10/0x10 [ 222.189362][T11282] ? do_syscall_64+0x100/0x230 [ 222.194121][T11282] ? do_syscall_64+0xb6/0x230 [ 222.198794][T11282] do_syscall_64+0xf3/0x230 [ 222.203290][T11282] ? clear_bhb_loop+0x35/0x90 [ 222.207968][T11282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.213866][T11282] RIP: 0033:0x7fd9b09746bc [ 222.218271][T11282] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 222.237870][T11282] RSP: 002b:00007fd9b17fc040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.246278][T11282] RAX: ffffffffffffffda RBX: 00007fd9b0b03f60 RCX: 00007fd9b09746bc [ 222.254239][T11282] RDX: 000000000000000f RSI: 00007fd9b17fc0b0 RDI: 0000000000000004 [ 222.262216][T11282] RBP: 00007fd9b17fc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 222.270194][T11282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.278158][T11282] R13: 000000000000000b R14: 00007fd9b0b03f60 R15: 00007ffdd5ebf578 [ 222.286149][T11282] [ 222.450069][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c2ee400: abort rx timeout. Force session deactivation [ 222.626913][T11308] netlink: 'syz.2.1885': attribute type 4 has an invalid length. [ 223.032585][ T7448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.082726][ T7448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.164630][ T7448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.242933][ T7448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.369520][T11341] __nla_validate_parse: 13 callbacks suppressed [ 224.369539][T11341] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1898'. [ 224.421504][T11344] netlink: 'syz.4.1901': attribute type 1 has an invalid length. [ 224.514843][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1901'. [ 224.539647][ T7448] bridge_slave_1: left allmulticast mode [ 224.552149][ T7448] bridge_slave_1: left promiscuous mode [ 224.564689][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.602104][ T7448] bridge_slave_0: left allmulticast mode [ 224.623663][ T7448] bridge_slave_0: left promiscuous mode [ 224.635477][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.655482][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 224.666251][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 224.679721][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 224.695291][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 224.705338][ T5091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 224.722035][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.010878][ T7448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.025488][ T7448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.037404][ T7448] bond0 (unregistering): Released all slaves [ 225.048074][T11352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1903'. [ 225.057510][T11352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1903'. [ 225.068604][T11354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1903'. [ 225.077843][T11354] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1903'. [ 225.095887][T11358] tipc: Enabling of bearer rejected, failed to enable media [ 225.244986][T11367] netlink: 'syz.3.1910': attribute type 3 has an invalid length. [ 225.293702][ T783] IPVS: starting estimator thread 0... [ 225.394360][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1912'. [ 225.418726][T11373] IPVS: using max 21 ests per chain, 50400 per kthread [ 225.443041][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.478574][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.493200][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.507101][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.509502][T11380] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1909'. [ 225.517549][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.544725][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.556091][T11376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.584061][T11376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.747839][T11398] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1915'. [ 225.758665][T11398] openvswitch: netlink: Key type 9560 is out of range max 32 [ 225.908663][ T7448] hsr_slave_0: left promiscuous mode [ 225.928120][ T7448] hsr_slave_1: left promiscuous mode [ 225.939006][ T7448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.957701][ T7448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.963259][T11415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1924'. [ 225.975569][ T7448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.994918][ T7448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.035591][ T7448] veth1_macvtap: left promiscuous mode [ 226.067454][ T7448] veth0_macvtap: left promiscuous mode [ 226.079096][ T7448] veth1_vlan: left promiscuous mode [ 226.084495][ T7448] veth0_vlan: left promiscuous mode [ 226.164122][T11424] x_tables: duplicate underflow at hook 3 [ 226.546840][ T7448] team0 (unregistering): Port device team_slave_1 removed [ 226.584567][ T7448] team0 (unregistering): Port device team_slave_0 removed [ 226.780618][ T5091] Bluetooth: hci2: command tx timeout [ 227.097454][T11434] bridge_slave_1: left allmulticast mode [ 227.108808][T11434] bridge_slave_1: left promiscuous mode [ 227.114639][T11434] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.150302][T11434] bridge2: port 1(bridge_slave_1) entered blocking state [ 227.157483][T11434] bridge2: port 1(bridge_slave_1) entered disabled state [ 227.177501][T11434] bridge_slave_1: entered allmulticast mode [ 227.188846][T11434] bridge_slave_1: entered promiscuous mode [ 227.307296][T11356] chnl_net:caif_netlink_parms(): no params data found [ 227.370951][T11447] bridge0: entered promiscuous mode [ 227.399047][T11447] vlan3: entered promiscuous mode [ 227.407751][T11447] bridge0: left promiscuous mode [ 227.576497][T11356] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.611294][T11356] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.628647][T11356] bridge_slave_0: entered allmulticast mode [ 227.656379][T11356] bridge_slave_0: entered promiscuous mode [ 227.680852][T11356] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.689905][T11356] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.711617][T11356] bridge_slave_1: entered allmulticast mode [ 227.724233][T11356] bridge_slave_1: entered promiscuous mode [ 227.811029][T11356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.833391][T11356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.941478][T11356] team0: Port device team_slave_0 added [ 227.954118][T11477] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 227.955474][T11356] team0: Port device team_slave_1 added [ 228.034748][T11356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.051045][T11356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.078542][T11356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.097514][T11482] bond_slave_0: entered promiscuous mode [ 228.103324][T11482] bond_slave_1: entered promiscuous mode [ 228.116057][T11482] macsec2: entered allmulticast mode [ 228.121648][T11482] bond0: entered allmulticast mode [ 228.127545][T11482] bond_slave_0: entered allmulticast mode [ 228.138893][T11482] bond_slave_1: entered allmulticast mode [ 228.144721][T11482] batadv0: entered allmulticast mode [ 228.161259][T11482] bond0: left allmulticast mode [ 228.169624][T11482] bond_slave_0: left allmulticast mode [ 228.175123][T11482] bond_slave_1: left allmulticast mode [ 228.181215][T11482] batadv0: left allmulticast mode [ 228.189844][T11482] bond_slave_0: left promiscuous mode [ 228.195315][T11482] bond_slave_1: left promiscuous mode [ 228.244443][T11356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.252683][T11356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.283351][T11356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.403176][T11356] hsr_slave_0: entered promiscuous mode [ 228.418819][T11356] hsr_slave_1: entered promiscuous mode [ 228.427291][T11356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.450605][T11356] Cannot create hsr debugfs directory [ 228.749069][T11526] dummy0: entered promiscuous mode [ 228.754314][T11526] macsec2: entered allmulticast mode [ 228.761739][T11526] dummy0: entered allmulticast mode [ 228.771265][T11526] dummy0: left allmulticast mode [ 228.783538][T11526] dummy0: left promiscuous mode [ 228.844551][T11533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 228.861721][ T5091] Bluetooth: hci2: command tx timeout [ 228.909978][T11535] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 228.982875][T11537] netlink: 'syz.2.1968': attribute type 1 has an invalid length. [ 228.998167][T11537] netlink: 'syz.2.1968': attribute type 2 has an invalid length. [ 229.277254][T11356] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 229.302985][T11356] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 229.327745][T11356] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 229.352444][T11356] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 229.432890][T11567] __nla_validate_parse: 13 callbacks suppressed [ 229.432911][T11567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1980'. [ 229.509736][T11569] nbd: socks must be embedded in a SOCK_ITEM attr [ 229.520278][T11568] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1982'. [ 229.644019][T11356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.755174][T11356] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.813251][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.820489][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.852672][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.859875][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.099386][T11598] tap0: tun_chr_ioctl cmd 1074025673 [ 230.313129][T11624] xt_l2tp: missing protocol rule (udp|l2tpip) [ 230.393928][T11356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.401272][T11624] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2003'. [ 230.519879][T11356] veth0_vlan: entered promiscuous mode [ 230.558016][T11356] veth1_vlan: entered promiscuous mode [ 230.586094][T11638] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2010'. [ 230.604932][T11638] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.668163][T11644] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 230.702680][T11356] veth0_macvtap: entered promiscuous mode [ 230.730781][T11356] veth1_macvtap: entered promiscuous mode [ 230.776259][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.808975][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.828743][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.859904][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.879812][T11653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2016'. [ 230.889018][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.918999][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.939910][ T5091] Bluetooth: hci2: command tx timeout [ 230.948308][T11356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.152895][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.163343][T11670] nbd: must specify at least one socket [ 231.163499][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2019'. [ 231.201853][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.211929][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.222907][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.233327][T11356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.245882][T11356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.260138][T11356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.299588][T11356] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.317000][T11356] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.338012][T11356] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.347440][T11356] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.413745][T11684] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 231.502350][T11686] lo speed is unknown, defaulting to 1000 [ 231.551166][T11686] lo speed is unknown, defaulting to 1000 [ 231.663081][T11686] lo speed is unknown, defaulting to 1000 [ 231.697568][T11686] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 231.715549][ T2867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.737355][ T2867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.781958][T11686] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 231.861142][T11696] netlink: 'syz.2.2028': attribute type 4 has an invalid length. [ 231.869943][ T2867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.870053][T11686] lo speed is unknown, defaulting to 1000 [ 231.891274][ T2867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.913458][T11686] lo speed is unknown, defaulting to 1000 [ 231.939361][T11686] lo speed is unknown, defaulting to 1000 [ 231.946145][T11700] netlink: 'syz.0.2030': attribute type 20 has an invalid length. [ 231.966287][T11686] lo speed is unknown, defaulting to 1000 [ 231.995761][T11686] lo speed is unknown, defaulting to 1000 [ 232.067117][T11707] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2032'. [ 232.237228][T11719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2034'. [ 232.301762][T11722] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2037'. [ 232.338395][T11722] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 232.363797][T11713] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 232.377184][T11725] xt_SECMARK: invalid mode: 0 [ 232.474493][T11728] (unnamed net_device) (uninitialized): option use_carrier: invalid value (164) [ 232.502469][T11734] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2043'. [ 232.514871][T11734] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 232.605244][T11743] netlink: 'syz.3.2046': attribute type 5 has an invalid length. [ 233.373309][T11804] netlink: 'syz.4.2069': attribute type 5 has an invalid length. [ 233.390474][T11804] : entered promiscuous mode [ 233.410080][T11808] netlink: 'syz.0.2071': attribute type 1 has an invalid length. [ 233.760699][T11838] dccp_invalid_packet: P.Data Offset(0) too small [ 233.886287][T11848] Cannot find del_set index 2 as target [ 234.049465][T11849] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 234.406678][T11884] netlink: 'syz.4.2098': attribute type 4 has an invalid length. [ 234.486799][T11893] __nla_validate_parse: 17 callbacks suppressed [ 234.486815][T11893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2100'. [ 234.531094][T11895] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 234.606748][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2103'. [ 234.623869][T11899] IPVS: set_ctl: invalid protocol: 136 172.30.0.5:20004 [ 234.785658][ T2867] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.566009][ T2867] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.635202][ T2867] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.702842][ T2867] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.785075][ T2867] bridge_slave_1: left allmulticast mode [ 235.792707][ T2867] bridge_slave_1: left promiscuous mode [ 235.798508][ T2867] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.808190][ T2867] bridge_slave_0: left allmulticast mode [ 235.814300][ T2867] bridge_slave_0: left promiscuous mode [ 235.820726][ T2867] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.112751][ T2867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.125091][ T2867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.135610][ T2867] bond0 (unregistering): Released all slaves [ 236.385815][T11922] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2111'. [ 236.527322][T11928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2113'. [ 236.610448][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2114'. [ 236.671018][T11937] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2115'. [ 236.682721][T11937] openvswitch: netlink: Key type 9560 is out of range max 32 [ 236.765627][ T2867] hsr_slave_0: left promiscuous mode [ 236.787362][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 236.798099][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 236.804001][ T2867] hsr_slave_1: left promiscuous mode [ 236.806427][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 236.821424][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 236.832586][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 236.841063][ T2867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.848939][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 236.881536][ T2867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.904172][ T2867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.925947][ T2867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.952165][ T2867] veth1_macvtap: left promiscuous mode [ 236.957878][ T2867] veth0_macvtap: left promiscuous mode [ 236.963534][ T2867] veth1_vlan: left promiscuous mode [ 236.969457][ T2867] veth0_vlan: left promiscuous mode [ 237.383313][ T2867] team0 (unregistering): Port device team_slave_1 removed [ 237.416989][ T2867] team0 (unregistering): Port device team_slave_0 removed [ 237.762486][T11946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2116'. [ 237.787613][T11954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2120'. [ 237.881455][T11959] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 237.901821][T11942] lo speed is unknown, defaulting to 1000 [ 238.104612][T11971] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2125'. [ 238.184724][T11962] IPVS: Scheduler module ip_vs_sip not found [ 238.220338][T11975] bond_slave_0: entered promiscuous mode [ 238.226118][T11975] bond_slave_1: entered promiscuous mode [ 238.227044][T11978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2129'. [ 238.232961][T11975] macsec1: entered allmulticast mode [ 238.246419][T11975] bond0: entered allmulticast mode [ 238.251960][T11975] bond_slave_0: entered allmulticast mode [ 238.258176][T11975] bond_slave_1: entered allmulticast mode [ 238.376567][T11942] chnl_net:caif_netlink_parms(): no params data found [ 238.400710][T11985] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 238.661217][T12007] x_tables: duplicate underflow at hook 1 [ 238.667700][T11942] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.681854][T11942] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.693546][T11942] bridge_slave_0: entered allmulticast mode [ 238.701948][T11942] bridge_slave_0: entered promiscuous mode [ 238.705967][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 238.710610][T11942] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.721743][T11942] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.729543][T11942] bridge_slave_1: entered allmulticast mode [ 238.736633][T11942] bridge_slave_1: entered promiscuous mode [ 238.819963][T11942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.850404][T11942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.939344][ T53] Bluetooth: hci2: command tx timeout [ 238.939482][T11942] team0: Port device team_slave_0 added [ 238.965685][T11942] team0: Port device team_slave_1 added [ 239.013145][T11942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.021356][T11942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.052069][T11942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.085925][T11942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.103026][T11942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.138005][T11942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.231207][T11942] hsr_slave_0: entered promiscuous mode [ 239.238130][T11942] hsr_slave_1: entered promiscuous mode [ 239.244659][T11942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.253052][T11942] Cannot create hsr debugfs directory [ 239.542194][T12055] __nla_validate_parse: 5 callbacks suppressed [ 239.542213][T12055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2157'. [ 239.642781][T12071] nbd: couldn't find a device at index 0 [ 239.766701][T12074] netlink: 'syz.2.2161': attribute type 3 has an invalid length. [ 239.784847][T12074] netlink: 'syz.2.2161': attribute type 3 has an invalid length. [ 240.010480][T12090] vlan2: entered promiscuous mode [ 240.015847][T12090] xfrm0: entered promiscuous mode [ 240.072366][T12090] vlan2: entered allmulticast mode [ 240.077537][T12090] xfrm0: entered allmulticast mode [ 240.099886][T12090] team0: Port device vlan2 added [ 240.117196][T11942] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 240.153093][T11942] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 240.191028][T11942] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 240.211751][T11942] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 240.384336][T12113] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 240.436013][T12109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2172'. [ 240.464501][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2172'. [ 240.480034][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2172'. [ 240.514434][T12119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2176'. [ 240.523002][T11942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.565988][T11942] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.610187][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.617394][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.643823][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.651037][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.836826][T12134] netlink: 'syz.2.2182': attribute type 1 has an invalid length. [ 240.919200][T12141] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2186'. [ 240.928387][T12141] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2186'. [ 240.971564][T12141] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2186'. [ 241.020320][ T53] Bluetooth: hci2: command tx timeout [ 241.140191][T12147] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 241.212299][T12158] sch_tbf: burst 9 is lower than device lo mtu (65550) ! [ 241.294825][T11942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.380387][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2195'. [ 241.415788][T11942] veth0_vlan: entered promiscuous mode [ 241.463760][T11942] veth1_vlan: entered promiscuous mode [ 241.537787][T12178] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2197'. [ 241.645799][T11942] veth0_macvtap: entered promiscuous mode [ 241.696347][T11942] veth1_macvtap: entered promiscuous mode [ 241.746100][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.765721][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.808570][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.825830][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.848751][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.868719][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.889509][T11942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.928081][T12196] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 241.942698][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.961626][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.974257][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.986445][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.001454][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.023154][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.037239][T11942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.057612][T12202] xt_SECMARK: invalid mode: 0 [ 242.106367][T11942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.137696][T11942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.154441][T11942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.173479][T11942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.378600][ T955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.386460][ T955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.454876][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.473596][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.803223][T12248] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 242.829399][T12248] netlink: 'syz.2.2222': attribute type 3 has an invalid length. [ 242.862528][T12248] netlink: 'syz.2.2222': attribute type 3 has an invalid length. [ 243.505353][T12284] Cannot find del_set index 2 as target [ 244.007155][T12302] netlink: 'syz.4.2242': attribute type 21 has an invalid length. [ 244.447413][T12335] netlink: 'syz.4.2254': attribute type 4 has an invalid length. [ 244.536353][T12337] tipc: Cannot configure node identity twice [ 244.647623][T12344] __nla_validate_parse: 13 callbacks suppressed [ 244.647642][T12344] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2257'. [ 244.746258][T12348] netlink: 'syz.4.2259': attribute type 1 has an invalid length. [ 244.758745][T12348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2259'. [ 244.902060][T12354] sctp: [Deprecated]: syz.4.2261 (pid 12354) Use of int in max_burst socket option. [ 244.902060][T12354] Use struct sctp_assoc_value instead [ 245.096084][ T2867] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.101136][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2266'. [ 245.139061][T12361] nbd: couldn't find a device at index 0 [ 245.155412][T12359] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2265'. [ 246.085559][ T2867] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.156630][ T2867] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.223704][ T2867] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.302247][ T2867] bridge_slave_1: left allmulticast mode [ 246.307903][ T2867] bridge_slave_1: left promiscuous mode [ 246.316651][ T2867] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.325873][ T2867] bridge_slave_0: left allmulticast mode [ 246.332777][ T2867] bridge_slave_0: left promiscuous mode [ 246.338810][ T2867] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.604885][ T2867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.617692][ T2867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.629960][ T2867] bond0 (unregistering): Released all slaves [ 246.723814][T12371] netlink: 'syz.2.2268': attribute type 11 has an invalid length. [ 246.773178][T12376] netlink: 'syz.0.2267': attribute type 10 has an invalid length. [ 246.807491][T12374] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2270'. [ 247.094133][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2272'. [ 247.140294][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 247.149964][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 247.159346][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 247.169037][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 247.182627][ T5091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 247.193915][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.256172][ T2867] hsr_slave_0: left promiscuous mode [ 247.263539][ T2867] hsr_slave_1: left promiscuous mode [ 247.275666][ T2867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.282404][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2277'. [ 247.286998][T12402] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2275'. [ 247.302814][ T2867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.315079][ T2867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.325354][ T2867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 247.366297][ T2867] veth1_macvtap: left promiscuous mode [ 247.377730][ T2867] veth0_macvtap: left promiscuous mode [ 247.383689][ T2867] veth1_vlan: left promiscuous mode [ 247.395164][ T2867] veth0_vlan: left promiscuous mode [ 247.759836][T12418] netlink: 'syz.4.2281': attribute type 4 has an invalid length. [ 247.965635][ T2867] team0 (unregistering): Port device team_slave_1 removed [ 248.022020][ T2867] team0 (unregistering): Port device team_slave_0 removed [ 248.025476][T12424] netlink: 'syz.4.2284': attribute type 178 has an invalid length. [ 248.463470][T12400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2276'. [ 248.478290][T12404] bridge5: port 1(bridge_slave_1) entered blocking state [ 248.488527][T12404] bridge5: port 1(bridge_slave_1) entered disabled state [ 248.495751][T12404] bridge_slave_1: entered allmulticast mode [ 248.530757][T12428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2286'. [ 248.614645][T12394] lo speed is unknown, defaulting to 1000 [ 249.064711][T12462] nbd: couldn't find a device at index 0 [ 249.114701][T12394] chnl_net:caif_netlink_parms(): no params data found [ 249.258720][ T53] Bluetooth: hci2: command tx timeout [ 249.362814][T12394] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.383158][T12394] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.393770][T12394] bridge_slave_0: entered allmulticast mode [ 249.405782][T12394] bridge_slave_0: entered promiscuous mode [ 249.436824][T12394] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.458348][T12483] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 249.458685][T12394] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.484951][T12394] bridge_slave_1: entered allmulticast mode [ 249.494968][T12394] bridge_slave_1: entered promiscuous mode [ 249.597464][T12394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.616129][T12394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.729393][T12394] team0: Port device team_slave_0 added [ 249.743214][T12394] team0: Port device team_slave_1 added [ 249.746215][T12504] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 249.834702][T12394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.855293][T12394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.883288][T12511] netlink: 'syz.2.2317': attribute type 20 has an invalid length. [ 249.890816][T12394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.928991][T12502] syzkaller0: left promiscuous mode [ 249.934750][T12514] __nla_validate_parse: 5 callbacks suppressed [ 249.934765][T12514] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2318'. [ 249.952840][T12502] syzkaller0: left allmulticast mode [ 249.977285][T12394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.985406][T12394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.012295][T12394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.092776][T12394] hsr_slave_0: entered promiscuous mode [ 250.114855][T12394] hsr_slave_1: entered promiscuous mode [ 250.122262][T12394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.134084][T12394] Cannot create hsr debugfs directory [ 250.201238][T12529] xt_SECMARK: invalid mode: 0 [ 250.282620][T12531] netlink: 'syz.0.2324': attribute type 23 has an invalid length. [ 250.299446][T12531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2324'. [ 250.315531][T12531] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.329848][T12538] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2327'. [ 250.340684][T12531] bridge0: entered promiscuous mode [ 250.600817][T12552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2331'. [ 250.671803][T12559] netlink: 'syz.3.2335': attribute type 4 has an invalid length. [ 250.763074][T12562] netlink: 'syz.4.2336': attribute type 4 has an invalid length. [ 250.778972][T12562] netlink: 'syz.4.2336': attribute type 4 has an invalid length. [ 250.800458][ T783] lo speed is unknown, defaulting to 1000 [ 250.938173][T12573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2340'. [ 251.107200][T12394] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 251.113490][T12577] Cannot find del_set index 2 as target [ 251.144524][T12394] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 251.165399][T12579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2342'. [ 251.221706][T12579] bond2: entered promiscuous mode [ 251.228772][T12394] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 251.242359][T12394] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 251.275732][T12579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2342'. [ 251.339025][ T53] Bluetooth: hci2: command tx timeout [ 251.417551][T12593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2345'. [ 251.522729][T12394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.566974][T12605] workqueue: name exceeds WQ_NAME_LEN. Truncating to: C|+i!‡3§rU&6 bÎOo¸ ' 1© [ 251.585339][T12394] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.635533][T12604] can: request_module (can-proto-0) failed. [ 251.644565][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.651689][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.672563][T12610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2349'. [ 251.691792][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.699025][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.711377][T12611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2348'. [ 251.726281][T12604] netlink: 'syz.0.2349': attribute type 10 has an invalid length. [ 251.784574][T12604] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 252.034202][T12624] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 252.116241][T12394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.241970][T12635] x_tables: duplicate underflow at hook 1 [ 252.270863][T12394] veth0_vlan: entered promiscuous mode [ 252.305705][T12394] veth1_vlan: entered promiscuous mode [ 252.381744][T12394] veth0_macvtap: entered promiscuous mode [ 252.422427][T12394] veth1_macvtap: entered promiscuous mode [ 252.439686][T12640] netlink: 'syz.2.2361': attribute type 1 has an invalid length. [ 252.473604][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.494311][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.514285][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.525089][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.535844][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.539422][T12652] x_tables: duplicate entry at hook 2 [ 252.551171][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.566748][T12394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.578103][T12640] bridge_slave_0: Device is already in use. [ 252.591205][T12649] netlink: 'syz.3.2362': attribute type 4 has an invalid length. [ 252.593214][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.614707][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.635027][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.661323][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.672637][T12394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.684327][T12394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.698205][T12394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.749790][T12394] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.766465][T12663] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.779000][T12394] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.808538][T12394] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.828838][T12394] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.868831][T12668] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 253.258703][ T7453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.296458][ T7453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.380806][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.409573][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.419040][ T53] Bluetooth: hci2: command tx timeout [ 253.479811][T12705] netlink: 'syz.0.2382': attribute type 3 has an invalid length. [ 253.755975][T12722] netlink: 'syz.4.2390': attribute type 1 has an invalid length. [ 253.766517][T12722] sctp: [Deprecated]: syz.4.2390 (pid 12722) Use of int in max_burst socket option deprecated. [ 253.766517][T12722] Use struct sctp_assoc_value instead [ 253.926522][T12735] Cannot find add_set index 0 as target [ 254.243693][T12761] netlink: 'syz.2.2406': attribute type 1 has an invalid length. [ 254.255358][T12761] sctp: [Deprecated]: syz.2.2406 (pid 12761) Use of int in max_burst socket option deprecated. [ 254.255358][T12761] Use struct sctp_assoc_value instead [ 254.382190][T12770] netlink: 'syz.4.2408': attribute type 4 has an invalid length. [ 254.439139][T12774] netlink: 'syz.4.2411': attribute type 4 has an invalid length. [ 254.578824][T12779] IPv6: Can't replace route, no match found [ 254.594825][T12779] netlink: 'syz.0.2412': attribute type 10 has an invalid length. [ 255.174994][T12824] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 255.243630][T12829] netlink: 'syz.4.2429': attribute type 4 has an invalid length. [ 255.251877][T12829] __nla_validate_parse: 28 callbacks suppressed [ 255.251893][T12829] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2429'. [ 255.452956][T12844] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2435'. [ 255.478694][T12845] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2433'. [ 255.530168][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2435'. [ 255.539908][T12844] netlink: 'syz.2.2435': attribute type 2 has an invalid length. [ 255.549596][T12844] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2435'. [ 255.618908][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2436'. [ 255.744857][T12858] sctp: [Deprecated]: syz.4.2440 (pid 12858) Use of int in max_burst socket option deprecated. [ 255.744857][T12858] Use struct sctp_assoc_value instead [ 255.934534][T12869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2445'. [ 256.063382][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.130536][ T7456] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.197497][T12881] dummy0: entered promiscuous mode [ 256.208126][T12881] macsec1: entered allmulticast mode [ 256.213969][T12881] dummy0: entered allmulticast mode [ 256.223145][T12881] dummy0: left allmulticast mode [ 256.228231][T12881] dummy0: left promiscuous mode [ 257.668253][ T7456] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.787280][ T7456] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.056090][ T7456] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.137964][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.146663][T12907] validate_nla: 2 callbacks suppressed [ 258.146681][T12907] netlink: 'syz.0.2461': attribute type 4 has an invalid length. [ 258.165314][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.174900][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.183443][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.201672][ T5091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 258.210012][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.286965][T12909] lo speed is unknown, defaulting to 1000 [ 258.303332][T12915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2463'. [ 258.409913][ T7456] bridge_slave_1: left allmulticast mode [ 258.418226][ T7456] bridge_slave_1: left promiscuous mode [ 258.432706][ T7456] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.445533][ T7456] bridge_slave_0: left allmulticast mode [ 258.458495][ T7456] bridge_slave_0: left promiscuous mode [ 258.466924][ T7456] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.015559][ T7456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.028176][ T7456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.044570][ T7456] bond0 (unregistering): Released all slaves [ 259.067693][T12933] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 259.303568][T12949] netlink: 'syz.2.2472': attribute type 10 has an invalid length. [ 259.315937][T12949] team_slave_0: entered promiscuous mode [ 259.322155][T12949] team_slave_1: entered promiscuous mode [ 259.334866][T12949] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.356881][T12949] bond0: (slave team0): Enslaving as an active interface with an up link [ 259.374534][T12954] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 259.387376][T12955] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2472'. [ 259.408769][T12955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'. [ 259.426835][T12954] netlink: 'syz.3.2475': attribute type 3 has an invalid length. [ 259.441358][T12954] netlink: 'syz.3.2475': attribute type 3 has an invalid length. [ 259.494628][T12959] netlink: 'syz.4.2473': attribute type 10 has an invalid length. [ 259.546481][T12959] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 259.556400][T12959] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 259.565773][T12959] team0: Port device virt_wifi0 added [ 259.582418][T12962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.917841][ T5091] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 259.938361][ T5091] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 259.947660][ T5091] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 259.964436][ T5091] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 259.973279][ T5091] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 259.990330][ T5091] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 260.015101][ T7456] hsr_slave_0: left promiscuous mode [ 260.074081][ T7456] hsr_slave_1: left promiscuous mode [ 260.088026][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.096197][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.105921][ T7456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.107652][T12985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.123233][ T7456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.132895][T12986] SET target dimension over the limit! [ 260.135955][T12985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.147217][T12985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.172637][T12985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.190554][ T7456] veth1_macvtap: left promiscuous mode [ 260.196598][ T7456] veth0_macvtap: left promiscuous mode [ 260.202575][ T7456] veth1_vlan: left promiscuous mode [ 260.206159][T12985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.210224][ T7456] veth0_vlan: left promiscuous mode [ 260.223908][T12985] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.299932][ T5091] Bluetooth: hci2: command tx timeout [ 260.673596][ T7456] team0 (unregistering): Port device team_slave_1 removed [ 260.716707][ T7456] team0 (unregistering): Port device team_slave_0 removed [ 261.107326][ T5088] syz_tun (unregistering): left promiscuous mode [ 261.184132][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.196759][ T5141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.210617][ T930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.239128][T12972] lo speed is unknown, defaulting to 1000 [ 261.245940][T13002] __nla_validate_parse: 3 callbacks suppressed [ 261.245958][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2491'. [ 261.315324][T12909] chnl_net:caif_netlink_parms(): no params data found [ 261.448352][T13011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2492'. [ 261.593731][ T12] ------------[ cut here ]------------ [ 261.600422][ T12] WARNING: CPU: 0 PID: 12 at net/wireless/sme.c:846 __cfg80211_connect_result+0x19ea/0x21d0 [ 261.610680][ T12] Modules linked in: [ 261.614597][ T12] CPU: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 261.624724][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 261.635354][ T12] Workqueue: cfg80211 cfg80211_event_work [ 261.641240][ T12] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 261.647879][ T12] Code: a3 00 89 c3 31 ff 89 c6 e8 e3 0b b4 f6 85 db 74 29 e8 4a 34 9a f6 84 c0 74 27 e8 91 07 b4 f6 e9 84 00 00 00 e8 87 07 b4 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 71 07 b4 f6 eb [ 261.668220][ T12] RSP: 0018:ffffc900001179e0 EFLAGS: 00010293 [ 261.674437][ T12] RAX: ffffffff8ae22029 RBX: 0000000000000000 RCX: ffff888016ec5a00 [ 261.682483][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 261.691516][ T12] RBP: ffffc90000117b00 R08: ffffffff8ae21bf9 R09: 1ffffffff25f4ebd [ 261.699919][ T12] R10: dffffc0000000000 R11: fffffbfff25f4ebe R12: ffff88802ec3e898 [ 261.707908][ T12] R13: dffffc0000000000 R14: ffff88802ec3e818 R15: ffff8880290f9000 [ 261.715954][ T12] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 261.725740][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.732405][ T12] CR2: 0000000020001140 CR3: 000000006a54e000 CR4: 00000000003506f0 [ 261.740458][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 261.749074][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 261.757073][ T12] Call Trace: [ 261.760416][ T12] [ 261.763423][ T12] ? __warn+0x163/0x4e0 [ 261.767619][ T12] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 261.773676][ T12] ? report_bug+0x2b3/0x500 [ 261.778370][ T12] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 261.785121][ T12] ? handle_bug+0x3e/0x70 [ 261.789980][ T12] ? exc_invalid_op+0x1a/0x50 [ 261.795172][ T12] ? asm_exc_invalid_op+0x1a/0x20 [ 261.800663][ T12] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 261.806675][ T12] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 261.813328][ T12] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 261.819779][ T12] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 261.826059][ T12] ? lockdep_hardirqs_on+0x99/0x150 [ 261.831485][ T12] cfg80211_process_wdev_events+0x356/0x510 [ 261.837433][ T12] cfg80211_process_rdev_events+0xac/0x110 [ 261.844005][ T12] ? process_scheduled_works+0x945/0x1830 [ 261.849779][ T12] cfg80211_event_work+0x2f/0x40 [ 261.854743][ T12] process_scheduled_works+0xa2c/0x1830 [ 261.860471][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 261.866504][ T12] ? assign_work+0x364/0x3d0 [ 261.871676][ T12] worker_thread+0x86d/0xd50 [ 261.876354][ T12] ? __kthread_parkme+0x169/0x1d0 [ 261.881543][ T12] ? __pfx_worker_thread+0x10/0x10 [ 261.886672][ T12] kthread+0x2f0/0x390 [ 261.890819][ T12] ? __pfx_worker_thread+0x10/0x10 [ 261.896445][ T12] ? __pfx_kthread+0x10/0x10 [ 261.902003][ T12] ret_from_fork+0x4b/0x80 [ 261.906443][ T12] ? __pfx_kthread+0x10/0x10 [ 261.911090][ T12] ret_from_fork_asm+0x1a/0x30 [ 261.916371][ T12] [ 261.919453][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 261.926735][ T12] CPU: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 261.936806][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 261.946879][ T12] Workqueue: cfg80211 cfg80211_event_work [ 261.952629][ T12] Call Trace: [ 261.955916][ T12] [ 261.958881][ T12] dump_stack_lvl+0x241/0x360 [ 261.963564][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.968756][ T12] ? __pfx__printk+0x10/0x10 [ 261.973345][ T12] ? vscnprintf+0x5d/0x90 [ 261.977665][ T12] panic+0x349/0x860 [ 261.981557][ T12] ? __warn+0x172/0x4e0 [ 261.985710][ T12] ? __pfx_panic+0x10/0x10 [ 261.990127][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 261.995062][ T12] __warn+0x346/0x4e0 [ 261.999049][ T12] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 262.005029][ T12] report_bug+0x2b3/0x500 [ 262.009353][ T12] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 262.015328][ T12] handle_bug+0x3e/0x70 [ 262.019479][ T12] exc_invalid_op+0x1a/0x50 [ 262.023977][ T12] asm_exc_invalid_op+0x1a/0x20 [ 262.028824][ T12] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 262.035404][ T12] Code: a3 00 89 c3 31 ff 89 c6 e8 e3 0b b4 f6 85 db 74 29 e8 4a 34 9a f6 84 c0 74 27 e8 91 07 b4 f6 e9 84 00 00 00 e8 87 07 b4 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 71 07 b4 f6 eb [ 262.055006][ T12] RSP: 0018:ffffc900001179e0 EFLAGS: 00010293 [ 262.061068][ T12] RAX: ffffffff8ae22029 RBX: 0000000000000000 RCX: ffff888016ec5a00 [ 262.069031][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.076990][ T12] RBP: ffffc90000117b00 R08: ffffffff8ae21bf9 R09: 1ffffffff25f4ebd [ 262.084951][ T12] R10: dffffc0000000000 R11: fffffbfff25f4ebe R12: ffff88802ec3e898 [ 262.092934][ T12] R13: dffffc0000000000 R14: ffff88802ec3e818 R15: ffff8880290f9000 [ 262.100903][ T12] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 262.106882][ T12] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 262.112873][ T12] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 262.119020][ T12] ? lockdep_hardirqs_on+0x99/0x150 [ 262.124224][ T12] cfg80211_process_wdev_events+0x356/0x510 [ 262.130115][ T12] cfg80211_process_rdev_events+0xac/0x110 [ 262.135908][ T12] ? process_scheduled_works+0x945/0x1830 [ 262.141612][ T12] cfg80211_event_work+0x2f/0x40 [ 262.146627][ T12] process_scheduled_works+0xa2c/0x1830 [ 262.152183][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 262.158155][ T12] ? assign_work+0x364/0x3d0 [ 262.162738][ T12] worker_thread+0x86d/0xd50 [ 262.167333][ T12] ? __kthread_parkme+0x169/0x1d0 [ 262.172378][ T12] ? __pfx_worker_thread+0x10/0x10 [ 262.177650][ T12] kthread+0x2f0/0x390 [ 262.181721][ T12] ? __pfx_worker_thread+0x10/0x10 [ 262.186819][ T12] ? __pfx_kthread+0x10/0x10 [ 262.191401][ T12] ret_from_fork+0x4b/0x80 [ 262.195807][ T12] ? __pfx_kthread+0x10/0x10 [ 262.200390][ T12] ret_from_fork_asm+0x1a/0x30 [ 262.205160][ T12] [ 262.208402][ T12] Kernel Offset: disabled [ 262.212797][ T12] Rebooting in 86400 seconds..