last executing test programs: 1m28.76290691s ago: executing program 2 (id=5198): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x9, 0xb3, 0x7f}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000030000000000010000851012000600000018180000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1m15.341932736s ago: executing program 2 (id=5198): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x9, 0xb3, 0x7f}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000030000000000010000851012000600000018180000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 58.128792229s ago: executing program 2 (id=5198): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x9, 0xb3, 0x7f}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000030000000000010000851012000600000018180000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 44.887884669s ago: executing program 2 (id=5198): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x9, 0xb3, 0x7f}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000030000000000010000851012000600000018180000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 26.571363554s ago: executing program 2 (id=5198): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x9, 0xb3, 0x7f}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000030000000000010000851012000600000018180000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 12.239248524s ago: executing program 2 (id=5198): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x9, 0xb3, 0x7f}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000030000000000010000851012000600000018180000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1.87004199s ago: executing program 3 (id=6363): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ad4000000090a010400000000000000000000000008000a400000000008000640ffffff000900010073797a3000000000080005400000141c090002"], 0xfc}}, 0x0) 1.607362809s ago: executing program 3 (id=6367): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r1 = socket(0x1d, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000200000000140012800b00010065727370616e000004000280060001"], 0x40}}, 0x0) 1.220925154s ago: executing program 0 (id=6370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000780)=@framed={{}, [@printk={@lx}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.087994982s ago: executing program 0 (id=6371): r0 = socket$inet6_udplite(0xa, 0x2, 0x11) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005280)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r2, @ANYRES16], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500), 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) 1.087760657s ago: executing program 3 (id=6372): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0x14, r1, 0x301, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) 824.111343ms ago: executing program 3 (id=6375): syz_emit_ethernet(0x118, &(0x7f0000000e00)={@random="ffffffffb758", @remote, @val, {@ipv4}}, 0x0) 821.022439ms ago: executing program 0 (id=6376): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000180)="b1000501600000000000010007000000331c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec29dff8f8353712051eadb71d89e000040781e4b2ffe040ff0008254842899ff2ef932e811f29902bd41c00", 0xb1, 0x406, 0x0, 0x3c) 700.609036ms ago: executing program 3 (id=6378): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060004000364bc24eab556a705251e618294ffd4938037e786a690001000000e4509c5bbcd72c6c953", 0x55}, {&(0x7f0000001e40)="dceddd02a62da3", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 635.70189ms ago: executing program 4 (id=6379): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000080)="1c0000001a006b00103fe3dc6e08000081000000200000007e860864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 635.459503ms ago: executing program 0 (id=6380): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffd8c900000000000000030000000700000003"], 0x0, 0x46}, 0x20) 608.532694ms ago: executing program 1 (id=6381): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200e0961b860001000000000000000000aa080008008003"], 0x34}}, 0x0) 549.376502ms ago: executing program 3 (id=6382): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000780)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', '', [], 0xa, "221117e361c71b4bccb2897f"}, 0x10) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4111, 0x100f}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0, 0x0) 484.108419ms ago: executing program 4 (id=6383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r1, 0x7d5c3e2eab76584b, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'bond0\x00'}}}}}, 0x34}}, 0x0) 483.824295ms ago: executing program 0 (id=6384): bind$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_LINK={0xfe5a}, @TCA_U32_INDEV={0x14, 0x8, 'batadv_slave_1\x00'}]}}]}, 0x64}}, 0x0) 435.726012ms ago: executing program 1 (id=6385): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x8], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}]}}]}, 0x98}}, 0x0) 352.057705ms ago: executing program 4 (id=6386): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 275.618058ms ago: executing program 0 (id=6387): socket$kcm(0x10, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000001080), &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x39a) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x5, &(0x7f0000000640)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x800}]}, &(0x7f0000000d40)='syzkaller\x00', 0x1}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x20, r3, 0x5, 0x0, 0x0, {{0x26}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x0, 0x138, 0x210, 0x0, 0x138, 0x478, 0x478, 0x98, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) recvfrom$phonet(r0, &(0x7f0000001480), 0x0, 0x40010000, 0x0, 0x0) read(r0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000023c0)={r6, 0x9, 0x100000000007, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002800)={0x1c, 0x0, {0xb9, @usage=0x800, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x1, @usage, 0x3, 0x1f, [0x5d63, 0x1ca0d09d, 0xfffffffffce839ad, 0x9d0, 0x100000001, 0xf5bc]}, {0x0, @struct={0x10001, 0x800}, 0x0, 0x76e, 0x81, 0x8000, 0x4001, 0x3, 0x0, @struct={0x42482a0e, 0x7}, 0x80, 0xc, [0x4, 0x64, 0x5, 0x1000, 0x8000000000000001, 0x4]}, {0x0, @struct={0x6, 0x7}, r6, 0x7f, 0x0, 0x5, 0x2, 0x7, 0x43a, @struct={0x1, 0x7}, 0xffffff7f, 0x5, [0x4, 0x8001, 0x6, 0x0, 0x0, 0xffffffffffff536c]}, {0x1, 0x7f, 0x1}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000000c0)={r6, 0x1000, 0x0, [0x9, 0x5, 0x5, 0x4, 0xf], [0x7, 0x6, 0x1, 0x8, 0xffffffffffffffff, 0x3, 0x4, 0xdabc, 0x5, 0x9, 0x7, 0x7, 0x1, 0xa76, 0xff, 0x19f8, 0xfff, 0x616, 0x9, 0x6, 0x8000, 0xa93, 0xff, 0x97, 0xeed, 0x7cbf, 0x8, 0x3, 0x9, 0x5, 0x4, 0x7, 0xfffffffffffffffb, 0xb6, 0xfffffffffffffffe, 0x2, 0x1, 0x3, 0x9, 0x100000000, 0x2, 0x1, 0xa, 0x4, 0x7, 0x5, 0x9, 0x652, 0x2, 0x4, 0x1, 0x6, 0x297, 0xb, 0x80000000, 0x180000000000, 0x3, 0x101, 0x0, 0xbc5, 0x3c2, 0x7f, 0x3, 0x4, 0xf39, 0x4, 0x515af889, 0x39200000000, 0x2, 0x3, 0x3, 0x4, 0x9, 0x2, 0x689, 0x0, 0x100000001, 0x8001, 0x2, 0xda6, 0x2, 0x1, 0x1, 0xfff, 0x3, 0x5, 0x5, 0x4, 0x1, 0x1, 0x6, 0x8, 0x8000000000000001, 0x4, 0x1, 0x1, 0x0, 0x3a, 0x8000000, 0xa, 0x9ac, 0x16, 0x0, 0xbb07, 0x1c0000, 0xdd, 0x4, 0x8000000000009ef1, 0x5, 0x8, 0x800, 0x6, 0x100000100, 0x6, 0x7ff, 0x3ff, 0xffff, 0xfffffffffffffc00, 0x9, 0x2, 0x81]}) 275.297868ms ago: executing program 1 (id=6388): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000020000000000000000000010000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x41}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000380), 0x20000000}, 0x20) 249.919616ms ago: executing program 4 (id=6389): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xb, 0x8}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pI4 \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 178.796351ms ago: executing program 4 (id=6390): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000280)={'\x00', 0x41}) 107.864914ms ago: executing program 1 (id=6391): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 98.604129ms ago: executing program 1 (id=6392): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c0000008400000001000000000000000c"], 0x2c}], 0x1, 0x0) 60.428723ms ago: executing program 4 (id=6393): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="03011400052989290e358000ad0001140000002f0600ac141418e0000003808a8972bd0b72e410820c520f061fe4fdfe4b889430ebb52997e36e039b1c598825f80100e3c06376c33076a167d514fa570a440261a67a34a07605c93a194946bc6283f4"], 0xdd12}], 0x1}, 0x0) 0s ago: executing program 1 (id=6394): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0xf, 0x4, 0x4, 0x80012, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb}, 0x48) kernel console output (not intermixed with test programs): process `syz.0.5340'. [ 442.737824][T20508] netlink: 'syz.0.5340': attribute type 1 has an invalid length. [ 442.749640][T20511] SET target dimension over the limit! [ 442.760007][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5340'. [ 442.772617][T20195] veth0_vlan: entered promiscuous mode [ 442.782686][T20508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5340'. [ 442.866824][T20195] veth1_vlan: entered promiscuous mode [ 442.915917][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.953452][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.026896][T16516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.141069][T20195] veth0_macvtap: entered promiscuous mode [ 443.169429][T16517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.182037][T20195] veth1_macvtap: entered promiscuous mode [ 443.201573][T16517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.258297][T20195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.297069][T20195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.303858][T20537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5348'. [ 443.314074][T20195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.341838][T20195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.352348][T20195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.363163][T20195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.373222][T20195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.389459][T20195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.404015][T20195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 443.416046][T20195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.432498][T20195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.445519][T20537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5348'. [ 443.448294][T20195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.500566][T20195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.525064][T20195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.535894][T20195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.546332][T20195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.558013][T20195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.575007][T20195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.590280][T20195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.600701][T20195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 443.611512][T20195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 443.642508][T20195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.820362][T20195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.847374][T20195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.860150][T20558] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5355'. [ 443.864153][T20195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.890557][T20195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.053225][T20564] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5357'. [ 444.198191][ T2430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.232506][ T2430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.327210][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5363'. [ 444.369727][ T2430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.391641][ T2430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.408471][T20580] netlink: 'syz.0.5365': attribute type 20 has an invalid length. [ 444.531460][T20581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5364'. [ 444.683433][T16516] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.943236][T20590] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5367'. [ 445.254762][T16516] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.448136][ T5093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 445.461060][ T5093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 445.470883][ T5093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 445.504509][ T5093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 445.514135][ T5093] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 445.530693][ T5093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 445.575460][T16516] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.701557][T16516] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.379172][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.385748][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.455331][T16516] bridge_slave_1: left allmulticast mode [ 446.461063][T16516] bridge_slave_1: left promiscuous mode [ 446.496657][T20658] netlink: 'syz.0.5390': attribute type 1 has an invalid length. [ 446.499502][T16516] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.520200][T20658] netlink: 'syz.0.5390': attribute type 1 has an invalid length. [ 446.542786][T16516] bridge_slave_0: left allmulticast mode [ 446.554305][T16516] bridge_slave_0: left promiscuous mode [ 446.560405][T16516] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.264670][T16516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.292111][T16516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.317748][T16516] bond0 (unregistering): Released all slaves [ 447.344510][T20660] netlink: 'syz.4.5389': attribute type 10 has an invalid length. [ 447.401545][T20619] chnl_net:caif_netlink_parms(): no params data found [ 447.584803][ T5093] Bluetooth: hci4: command tx timeout [ 447.615019][T20678] netlink: 'syz.0.5397': attribute type 5 has an invalid length. [ 447.813280][T20678] : entered promiscuous mode [ 447.875188][T20695] __nla_validate_parse: 12 callbacks suppressed [ 447.875212][T20695] netlink: 316 bytes leftover after parsing attributes in process `syz.1.5401'. [ 448.032859][T20702] netlink: 211388 bytes leftover after parsing attributes in process `syz.4.5406'. [ 448.076648][T20619] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.098468][T20619] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.114999][T20619] bridge_slave_0: entered allmulticast mode [ 448.132764][T20619] bridge_slave_0: entered promiscuous mode [ 448.183297][T16516] hsr_slave_0: left promiscuous mode [ 448.211751][T16516] hsr_slave_1: left promiscuous mode [ 448.230640][T16516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.241968][T16516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.253234][T16516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.262539][T16516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.303272][T16516] veth1_macvtap: left promiscuous mode [ 448.311406][T16516] veth0_macvtap: left promiscuous mode [ 448.322454][T16516] veth1_vlan: left promiscuous mode [ 448.333614][T16516] veth0_vlan: left promiscuous mode [ 448.339141][T16519] tipc: Subscription rejected, illegal request [ 448.371502][T20715] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5412'. [ 449.066521][T16516] team0 (unregistering): Port device team_slave_1 removed [ 449.122905][T16516] team0 (unregistering): Port device team_slave_0 removed [ 449.654365][ T5093] Bluetooth: hci4: command tx timeout [ 449.704605][T20619] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.743588][T20619] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.771207][T20619] bridge_slave_1: entered allmulticast mode [ 449.801035][T20619] bridge_slave_1: entered promiscuous mode [ 449.911273][T20728] netlink: 592 bytes leftover after parsing attributes in process `syz.4.5415'. [ 449.937938][T20619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.983019][T20735] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5418'. [ 449.996448][T20619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.199297][T20619] team0: Port device team_slave_0 added [ 450.239038][T20619] team0: Port device team_slave_1 added [ 450.254300][T20746] netlink: 'syz.0.5421': attribute type 1 has an invalid length. [ 450.274287][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5421'. [ 450.379057][T20619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.397277][T20619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.455317][T20619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.480381][T20748] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5422'. [ 450.511364][T20619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.526459][T20619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.617277][T20619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.845408][T20619] hsr_slave_0: entered promiscuous mode [ 450.912810][T20619] hsr_slave_1: entered promiscuous mode [ 450.930988][T20619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.960382][T20619] Cannot create hsr debugfs directory [ 451.299630][T20780] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5434'. [ 451.364602][T20780] : entered promiscuous mode [ 451.564174][T20793] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5438'. [ 451.611881][T20795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5439'. [ 451.638343][T20795] (unnamed net_device) (uninitialized): (slave veth0_to_bridge): Device is not bonding slave [ 451.699986][T20795] (unnamed net_device) (uninitialized): option active_slave: invalid value (veth0_to_bridge) [ 451.733877][ T5093] Bluetooth: hci4: command tx timeout [ 451.860521][T20813] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (48) [ 452.123648][T20826] macvlan2: entered promiscuous mode [ 452.132309][T20826] vlan1: entered promiscuous mode [ 452.151878][T20826] macvlan2: entered allmulticast mode [ 452.160507][T20826] vlan1: entered allmulticast mode [ 452.192620][T20826] vlan1: left allmulticast mode [ 452.200882][T20826] vlan1: left promiscuous mode [ 452.343253][T20834] ebt_among: dst integrity fail: 200 [ 452.525472][T20619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 452.558576][T20619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 452.596327][T20619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 452.650982][T20619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.970683][T20872] __nla_validate_parse: 3 callbacks suppressed [ 452.970707][T20872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5469'. [ 453.000386][T20872] macvlan2: entered promiscuous mode [ 453.008491][T20872] vlan1: entered promiscuous mode [ 453.014523][T20872] macvlan2: entered allmulticast mode [ 453.020104][T20872] vlan1: entered allmulticast mode [ 453.026225][T20872] veth0_vlan: entered allmulticast mode [ 453.049641][T20875] netlink: 'syz.0.5468': attribute type 10 has an invalid length. [ 453.110795][T20619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.195844][T20879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5471'. [ 453.236681][T20879] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5471'. [ 453.257918][T20619] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.276046][T20886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5474'. [ 453.296264][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.303490][ T5105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.323038][T20887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5475'. [ 453.380305][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.387602][ T5105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.428130][T20893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5475'. [ 453.519839][T20895] netlink: 136 bytes leftover after parsing attributes in process `syz.1.5478'. [ 453.620392][T20900] netlink: 316 bytes leftover after parsing attributes in process `syz.1.5480'. [ 453.814445][ T5093] Bluetooth: hci4: command tx timeout [ 453.830881][T20619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.918796][T20619] veth0_vlan: entered promiscuous mode [ 453.949274][T20619] veth1_vlan: entered promiscuous mode [ 454.011347][T20619] veth0_macvtap: entered promiscuous mode [ 454.032417][T20619] veth1_macvtap: entered promiscuous mode [ 454.088662][T20619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.121266][T20619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.145101][T20619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.162239][T20619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.172399][T20619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.191210][T20619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.201316][T20619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.212111][T20619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.223571][T20619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.235797][T20619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.248778][T20619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.270539][T20619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.289604][T20619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.312092][T20619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.323429][T20619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.334828][T20619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.346299][T20619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.356609][T20619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.368297][T20619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.383803][T20619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.395207][T20619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.422006][T20619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.457598][T20619] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.481360][T20619] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.502178][T20619] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.516193][T20619] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.727008][ T6859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.728077][T20933] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5493'. [ 454.758806][ T6859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.780306][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807d5bcc00: rx timeout, send abort [ 454.789447][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d5bcc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 454.861914][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.872049][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.895824][T20942] xt_HMARK: spi-set and port-set can't be combined [ 455.177192][T20947] netlink: 'syz.4.5497': attribute type 27 has an invalid length. [ 455.724712][T20947] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.732797][T20947] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.247612][T20947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.321773][T20947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.375769][T20947] xfrm0: left allmulticast mode [ 456.384783][T20947] xfrm0: left promiscuous mode [ 456.629716][T20947] veth0_vlan: left allmulticast mode [ 456.910875][T20947] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.933977][T20947] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.953329][T20947] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.967397][T20947] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.154847][T20947] macvtap1: left promiscuous mode [ 457.176319][T20947] vlan1: left allmulticast mode [ 457.191512][T20947] vlan1: left promiscuous mode [ 457.202011][T20947] macvlan2: left promiscuous mode [ 457.209230][T20947] macvlan2: left allmulticast mode [ 457.373864][T20965] netlink: 'syz.3.5503': attribute type 1 has an invalid length. [ 457.469576][T20968] netlink: 232 bytes leftover after parsing attributes in process `syz.1.5505'. [ 457.705850][T20985] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 457.748016][T20983] macsec2: entered promiscuous mode [ 457.772214][T20983] macvlan0: entered promiscuous mode [ 457.784279][T20983] macvlan0: left promiscuous mode [ 457.990765][ T6859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.209591][T20997] netlink: 'syz.1.5515': attribute type 1 has an invalid length. [ 458.252669][T20997] netlink: 'syz.1.5515': attribute type 2 has an invalid length. [ 458.569851][T21015] __nla_validate_parse: 1 callbacks suppressed [ 458.569876][T21015] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5517'. [ 458.691582][ T5097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 458.703236][ T5097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 458.724176][ T5097] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 458.744348][ T5097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 458.763411][ T5097] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 458.771567][ T5097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 458.892485][ T6859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.908716][T21032] netlink: 'syz.1.5523': attribute type 4 has an invalid length. [ 459.038994][ T6859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.068852][T21039] ax25_connect(): syz.0.5524 uses autobind, please contact jreuter@yaina.de [ 459.123185][T21038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5526'. [ 459.196958][T21046] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.5528'. [ 459.266111][ T6859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.333047][T21056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5530'. [ 459.409085][T21056] can: request_module (can-proto-0) failed. [ 459.485228][T21060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5531'. [ 459.532616][T21060] macvlan3: entered promiscuous mode [ 459.539207][T21060] macvlan3: entered allmulticast mode [ 459.608812][T21064] netlink: 'syz.4.5532': attribute type 10 has an invalid length. [ 459.791919][ T6859] bridge_slave_1: left allmulticast mode [ 459.803997][ T6859] bridge_slave_1: left promiscuous mode [ 459.809895][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.857689][ T6859] bridge_slave_0: left allmulticast mode [ 459.871605][ T6859] bridge_slave_0: left promiscuous mode [ 459.882032][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.370036][ T6859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.384772][ T6859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.400976][ T6859] bond0 (unregistering): Released all slaves [ 460.812787][T21020] chnl_net:caif_netlink_parms(): no params data found [ 460.859801][ T5093] Bluetooth: hci4: command tx timeout [ 460.869260][T21102] bridge14: the hash_elasticity option has been deprecated and is always 16 [ 460.925587][T21113] netlink: 'syz.1.5544': attribute type 3 has an invalid length. [ 460.949020][T21113] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5544'. [ 461.105282][T21117] sch_tbf: burst 0 is lower than device lo mtu (35) ! [ 461.113614][T21125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5549'. [ 461.151943][T21125] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 461.163151][T21125] macvtap1: entered promiscuous mode [ 461.242084][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5550'. [ 461.255673][T21130] netlink: 'syz.4.5550': attribute type 1 has an invalid length. [ 461.265000][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5550'. [ 461.274201][T21130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5550'. [ 461.377254][ T6859] hsr_slave_0: left promiscuous mode [ 461.405984][ T6859] hsr_slave_1: left promiscuous mode [ 461.453999][ T6859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.464939][ T6859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.491423][ T6859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.499532][ T6859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.553963][ T6859] veth1_macvtap: left promiscuous mode [ 461.559763][ T6859] veth0_macvtap: left promiscuous mode [ 461.567584][ T6859] veth1_vlan: left promiscuous mode [ 461.592705][ T6859] veth0_vlan: left promiscuous mode [ 462.424042][ T6859] team0 (unregistering): Port device team_slave_1 removed [ 462.481042][ T6859] team0 (unregistering): Port device team_slave_0 removed [ 462.939847][ T5093] Bluetooth: hci4: command tx timeout [ 463.160192][T21020] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.181902][T21020] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.187916][T21176] Cannot find del_set index 3 as target [ 463.214269][T21020] bridge_slave_0: entered allmulticast mode [ 463.241485][T21020] bridge_slave_0: entered promiscuous mode [ 463.287585][T21020] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.299181][T21020] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.332074][T21020] bridge_slave_1: entered allmulticast mode [ 463.376500][T21020] bridge_slave_1: entered promiscuous mode [ 463.558651][T21020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.616998][T21020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.829959][ T5097] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 463.847726][ T5097] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 463.859522][ T5097] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 463.885657][ T5097] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 463.906212][ T5097] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 463.917673][ T5097] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 463.998431][T21020] team0: Port device team_slave_0 added [ 464.092140][T21020] team0: Port device team_slave_1 added [ 464.161790][T21020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.170607][T21020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.198672][T21020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.210578][T21200] netlink: 'syz.1.5572': attribute type 4 has an invalid length. [ 464.231593][T21204] __nla_validate_parse: 1 callbacks suppressed [ 464.231616][T21204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5574'. [ 464.248217][T21020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.257118][T21020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.285367][T21020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.399459][T21211] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5577'. [ 464.486389][T21020] hsr_slave_0: entered promiscuous mode [ 464.512904][T21020] hsr_slave_1: entered promiscuous mode [ 464.536356][T21020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.555005][T21020] Cannot create hsr debugfs directory [ 464.608621][T21218] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 464.877652][T21227] netlink: 'syz.3.5584': attribute type 4 has an invalid length. [ 465.017591][ T5097] Bluetooth: hci4: command tx timeout [ 465.154840][T21232] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.321654][T21194] chnl_net:caif_netlink_parms(): no params data found [ 465.414483][T21240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5590'. [ 465.734213][ T5097] Bluetooth: hci0: command 0x0401 tx timeout [ 465.756542][T21252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5594'. [ 465.921648][ T6859] team0: left allmulticast mode [ 465.940671][ T6859] team_slave_0: left allmulticast mode [ 465.947144][ T6859] team_slave_1: left allmulticast mode [ 465.952777][ T6859] vlan2: left allmulticast mode [ 465.957951][ T6859] team0: left promiscuous mode [ 465.962786][ T6859] team_slave_0: left promiscuous mode [ 465.970036][ T6859] team_slave_1: left promiscuous mode [ 465.976320][ T6859] vlan2: left promiscuous mode [ 465.981568][ T5097] Bluetooth: hci5: command tx timeout [ 465.981622][ T6859] bridge0: port 3(team0) entered disabled state [ 466.003487][ T6859] bridge_slave_1: left allmulticast mode [ 466.032223][ T6859] bridge_slave_1: left promiscuous mode [ 466.042659][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.085624][ T6859] bridge_slave_0: left allmulticast mode [ 466.102169][ T6859] bridge_slave_0: left promiscuous mode [ 466.112547][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.319594][ T6859] team0: Port device vlan2 removed [ 466.720632][ T6859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.731893][ T6859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.742323][ T6859] bond0 (unregistering): Released all slaves [ 466.900296][ T6859] : left promiscuous mode [ 466.911179][T21194] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.919128][T21194] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.926561][T21194] bridge_slave_0: entered allmulticast mode [ 466.938293][T21194] bridge_slave_0: entered promiscuous mode [ 467.001385][T21284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5602'. [ 467.013070][T21194] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.025647][T21194] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.042762][T21286] netlink: 'syz.3.5603': attribute type 6 has an invalid length. [ 467.043041][T21194] bridge_slave_1: entered allmulticast mode [ 467.056951][T21286] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5603'. [ 467.069174][T21194] bridge_slave_1: entered promiscuous mode [ 467.094396][ T5097] Bluetooth: hci4: command tx timeout [ 467.218849][T21194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.321797][T21194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.376618][T21298] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5608'. [ 467.464089][T21194] team0: Port device team_slave_0 added [ 467.508165][T21194] team0: Port device team_slave_1 added [ 467.637180][T21306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5612'. [ 467.658318][T21194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.667199][T21306] netlink: 'syz.1.5612': attribute type 1 has an invalid length. [ 467.675272][T21194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.701700][T21306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5612'. [ 467.713983][T21306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5612'. [ 467.728423][T21194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.755342][T21020] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 467.785108][T21020] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 467.834609][T21194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.841683][T21194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.921800][T21194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.963392][T21020] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 468.054317][ T5097] Bluetooth: hci5: command tx timeout [ 468.070687][T21020] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 468.187136][ T6859] hsr_slave_0: left promiscuous mode [ 468.193592][ T6859] hsr_slave_1: left promiscuous mode [ 468.205742][ T6859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.221099][ T6859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.736801][ T6859] team0 (unregistering): Port device team_slave_1 removed [ 468.792301][ T6859] team0 (unregistering): Port device team_slave_0 removed [ 469.318064][T21194] hsr_slave_0: entered promiscuous mode [ 469.326525][T21194] hsr_slave_1: entered promiscuous mode [ 469.333232][T21194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.341982][T21194] Cannot create hsr debugfs directory [ 469.355517][T21334] __nla_validate_parse: 1 callbacks suppressed [ 469.355541][T21334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5622'. [ 469.550100][T21336] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5624'. [ 469.734154][T21342] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5626'. [ 469.933279][T21352] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5627'. [ 470.092892][T21020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.100306][T21359] netlink: 'syz.3.5630': attribute type 21 has an invalid length. [ 470.125605][T21359] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5630'. [ 470.133837][ T5097] Bluetooth: hci5: command tx timeout [ 470.142874][T21361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 470.252454][T21020] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.303122][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.310424][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.330484][T21372] sctp: [Deprecated]: syz.0.5634 (pid 21372) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.330484][T21372] Use struct sctp_sack_info instead [ 470.364378][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.371629][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.393035][T21372] sctp: [Deprecated]: syz.0.5634 (pid 21372) Use of struct sctp_assoc_value in delayed_ack socket option. [ 470.393035][T21372] Use struct sctp_sack_info instead [ 470.447911][T21372] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5634'. [ 470.559962][T21376] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5636'. [ 470.589901][T21377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5636'. [ 470.794535][T21194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 470.838948][T21194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 470.884059][T21194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 470.911088][T21194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 471.037940][T21401] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5640'. [ 471.112234][T21020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.119781][T21401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5640'. [ 471.313036][T21411] netlink: 'syz.0.5644': attribute type 29 has an invalid length. [ 471.362904][T21020] veth0_vlan: entered promiscuous mode [ 471.461177][T21194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.488693][T21020] veth1_vlan: entered promiscuous mode [ 471.567611][T21194] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.592671][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.599957][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.628019][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.635277][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.659085][T21020] veth0_macvtap: entered promiscuous mode [ 471.689949][T21020] veth1_macvtap: entered promiscuous mode [ 471.789446][T21020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.809260][T21020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.820630][T21020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.832788][T21020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.844748][T21020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.855797][T21020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.871173][T21020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.893894][T21020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.917064][T21020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.971518][T21020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.003926][T21020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.031712][T21020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.054451][T21020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.092583][T21020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.135189][T21020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.171651][T21020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.190216][T21020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.214067][ T5097] Bluetooth: hci5: command tx timeout [ 472.237491][T21020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.308527][T21020] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.342305][T21020] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.373387][T21020] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.398362][T21020] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.588163][T21462] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 472.717369][T21194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.897836][ T6859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.951370][ T6859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.057236][T16515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.090283][T16515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.249745][T21194] veth0_vlan: entered promiscuous mode [ 473.291133][T21488] netlink: 'syz.0.5664': attribute type 1 has an invalid length. [ 473.303249][T21488] netlink: 'syz.0.5664': attribute type 1 has an invalid length. [ 473.439602][T21194] veth1_vlan: entered promiscuous mode [ 473.559289][T21194] veth0_macvtap: entered promiscuous mode [ 473.578893][T21194] veth1_macvtap: entered promiscuous mode [ 473.648237][T21194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.668785][T21194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.693825][T21194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.715901][T21194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.744060][T21194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.765251][T21194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.781315][T21194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.797350][T21194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.807405][T21194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.819567][T21194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.839183][T21194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.859685][T21194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.878835][T21194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.889134][T21194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.912111][T21194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.922359][T21194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.948760][T21194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.967741][T21194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.983196][T21194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.008685][T21194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.020808][T21194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.043132][T21194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.093180][T21194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.106565][T21523] netlink: 'syz.0.5677': attribute type 6 has an invalid length. [ 474.113190][T21194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.131247][T21194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.154817][T21194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.378348][T16522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.414922][T16522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.510192][T16516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.518853][T21538] __nla_validate_parse: 2 callbacks suppressed [ 474.518872][T21538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5684'. [ 474.541709][T16516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.558482][T21538] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5684'. [ 474.566705][T21540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5685'. [ 474.580728][T21542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5684'. [ 474.584872][T21540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5685'. [ 474.598720][T21542] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5684'. [ 474.932140][T21558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5688'. [ 475.018822][T21558] netlink: 'syz.0.5688': attribute type 5 has an invalid length. [ 475.355228][T16516] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.407395][T21571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5692'. [ 475.428974][T21571] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 475.436681][T21571] macvtap1: entered promiscuous mode [ 475.523475][T16516] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.596469][T16516] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.652628][T16516] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.782203][T16516] bridge_slave_1: left allmulticast mode [ 475.788003][T16516] bridge_slave_1: left promiscuous mode [ 475.794266][T16516] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.805009][T16516] bridge_slave_0: left allmulticast mode [ 475.810721][T16516] bridge_slave_0: left promiscuous mode [ 475.831013][T16516] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.431420][ T5093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 476.445220][ T5093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 476.467389][ T5093] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 476.474961][T21611] ip6t_srh: unknown srh invflags A757 [ 476.486121][ T5093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 476.496019][ T5093] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 476.516581][ T5093] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 476.560116][T21615] netlink: 'syz.3.5708': attribute type 20 has an invalid length. [ 476.813092][T16516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.828048][T16516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.840714][T16516] bond0 (unregistering): Released all slaves [ 476.863630][T21617] netlink: 'syz.1.5709': attribute type 10 has an invalid length. [ 477.319777][T21638] IPVS: set_ctl: invalid protocol: 104 10.1.1.0:20002 [ 477.486543][T21635] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5715'. [ 477.981541][T21660] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5726'. [ 478.185994][T16516] hsr_slave_0: left promiscuous mode [ 478.203274][T16516] hsr_slave_1: left promiscuous mode [ 478.222731][T16516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.237282][T21671] x_tables: duplicate underflow at hook 2 [ 478.249174][T16516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.263910][T16516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.275431][T16516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.314191][T16516] veth1_macvtap: left promiscuous mode [ 478.320166][T16516] veth0_macvtap: left promiscuous mode [ 478.327711][T16516] veth1_vlan: left promiscuous mode [ 478.333284][T16516] veth0_vlan: left promiscuous mode [ 478.457528][T21680] netlink: 'syz.3.5732': attribute type 2 has an invalid length. [ 478.614336][ T5093] Bluetooth: hci3: command tx timeout [ 479.026078][T16516] team0 (unregistering): Port device team_slave_1 removed [ 479.072815][T16516] team0 (unregistering): Port device team_slave_0 removed [ 479.590559][T21667] netlink: 'syz.1.5729': attribute type 39 has an invalid length. [ 479.646589][T21678] netlink: 'syz.4.5730': attribute type 11 has an invalid length. [ 479.828327][T21688] veth1_virt_wifi: entered allmulticast mode [ 479.912511][T21606] chnl_net:caif_netlink_parms(): no params data found [ 480.054943][T21699] __nla_validate_parse: 3 callbacks suppressed [ 480.054969][T21699] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5738'. [ 480.183989][T21705] netlink: 'syz.3.5739': attribute type 4 has an invalid length. [ 480.230821][T21710] netlink: 'syz.3.5739': attribute type 4 has an invalid length. [ 480.235953][T21711] xt_HMARK: spi-set and port-set can't be combined [ 480.260341][T21704] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5740'. [ 480.278396][T21707] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5741'. [ 480.292425][T21606] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.318717][T21606] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.352825][T21606] bridge_slave_0: entered allmulticast mode [ 480.365569][T21606] bridge_slave_0: entered promiscuous mode [ 480.385812][T21606] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.403165][T21606] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.411233][T21606] bridge_slave_1: entered allmulticast mode [ 480.425577][T21606] bridge_slave_1: entered promiscuous mode [ 480.490709][T21717] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5744'. [ 480.644630][T21606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.688559][T21606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.704011][ T5093] Bluetooth: hci3: command tx timeout [ 480.791810][T21606] team0: Port device team_slave_0 added [ 480.809947][T21606] team0: Port device team_slave_1 added [ 481.029471][T21606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.038173][T21606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.080409][T21606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.109123][T21606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.130204][T21606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.172085][T21606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.302978][T21606] hsr_slave_0: entered promiscuous mode [ 481.324571][T21606] hsr_slave_1: entered promiscuous mode [ 481.338240][T21606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.353094][T21606] Cannot create hsr debugfs directory [ 481.531029][T21764] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5756'. [ 481.559389][ T5149] IPVS: starting estimator thread 0... [ 481.644453][T21770] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5759'. [ 481.664792][T21767] IPVS: using max 19 ests per chain, 45600 per kthread [ 481.686986][T21764] tipc: Started in network mode [ 481.691957][T21764] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 481.724401][T21764] tipc: Enabling of bearer rejected, failed to enable media [ 481.754253][T21772] netlink: 'syz.1.5756': attribute type 1 has an invalid length. [ 481.763634][T21772] netlink: 240 bytes leftover after parsing attributes in process `syz.1.5756'. [ 481.790195][T21771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5756'. [ 482.333188][T21798] syz.1.5770 (21798) used obsolete PPPIOCDETACH ioctl [ 482.448361][T21804] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5771'. [ 482.475708][T21804] openvswitch: : Dropping previously announced user features [ 482.661510][T21606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 482.674509][T21810] netlink: 'syz.3.5773': attribute type 20 has an invalid length. [ 482.695052][T21606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 482.745733][T21606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 482.776168][ T5093] Bluetooth: hci3: command tx timeout [ 482.785774][T21606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 482.900177][T21819] netlink: 'syz.0.5777': attribute type 10 has an invalid length. [ 482.922690][T21819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.956928][T21819] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.020693][T21819] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 483.149960][T21606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.197063][T21606] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.235927][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.243235][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.294977][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.302196][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.936418][T21606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.086616][T21606] veth0_vlan: entered promiscuous mode [ 484.119972][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5794'. [ 484.131810][T21871] netlink: 'syz.4.5795': attribute type 4 has an invalid length. [ 484.161245][T21606] veth1_vlan: entered promiscuous mode [ 484.308436][T21606] veth0_macvtap: entered promiscuous mode [ 484.333544][T21606] veth1_macvtap: entered promiscuous mode [ 484.428761][T21606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.458357][T21606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.493797][T21606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.512675][T21606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.523085][T21606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.534400][T21606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.559543][T21606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.580635][T21606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.608562][T21606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.631726][T21885] vlan2: entered promiscuous mode [ 484.643400][T21885] xfrm0: entered promiscuous mode [ 484.679369][T21885] team0: Port device vlan2 added [ 484.758492][T21606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.790829][T21606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.813125][T21606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.826653][T21606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.836979][T21606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.853893][ T5097] Bluetooth: hci3: command tx timeout [ 484.871657][T21606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.888325][T21606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.911367][T21606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.932182][T21606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.944751][T21905] sctp: [Deprecated]: syz.1.5808 (pid 21905) Use of int in max_burst socket option deprecated. [ 484.944751][T21905] Use struct sctp_assoc_value instead [ 484.968850][T21606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.002397][T21606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.005424][T21905] Bluetooth: MGMT ver 1.22 [ 485.060142][T21606] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.077428][T21606] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.097590][T21606] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.107509][T21606] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.248339][T21914] netlink: 'syz.0.5812': attribute type 10 has an invalid length. [ 485.477244][ T2430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.510518][ T2430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.578184][T21927] __nla_validate_parse: 1 callbacks suppressed [ 485.578209][T21927] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5818'. [ 485.646084][T16515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.672981][T16515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.715615][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5819'. [ 485.775217][T21933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5820'. [ 485.968845][T21943] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 486.020523][T21945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5826'. [ 486.152075][T21950] netlink: 'syz.4.5828': attribute type 3 has an invalid length. [ 486.195315][T21955] netlink: 316 bytes leftover after parsing attributes in process `syz.3.5830'. [ 486.501768][T21975] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5837'. [ 486.671219][T21981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5841'. [ 486.699845][T21977] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5838'. [ 486.716252][T21981] netlink: 'syz.3.5841': attribute type 1 has an invalid length. [ 486.744007][T21981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5841'. [ 486.775060][T21981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5841'. [ 486.936033][ T5097] Bluetooth: hci3: command 0x0405 tx timeout [ 487.257084][ T5097] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 487.270646][ T5097] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 487.281715][ T5097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 487.291068][ T5097] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 487.299743][ T5097] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 487.312302][ T5097] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 487.571809][ T2430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.740660][ T2430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.895192][ T2430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.036424][ T2430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.073283][T22003] chnl_net:caif_netlink_parms(): no params data found [ 488.196980][T22041] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 488.204681][T22041] macvtap1: entered promiscuous mode [ 488.361866][T22003] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.403972][T22003] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.421621][T22003] bridge_slave_0: entered allmulticast mode [ 488.458902][T22003] bridge_slave_0: entered promiscuous mode [ 488.489411][T22003] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.511143][T22003] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.524114][T22003] bridge_slave_1: entered allmulticast mode [ 488.531995][T22003] bridge_slave_1: entered promiscuous mode [ 488.642158][T22003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.682502][T22003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.731316][ T2430] bridge_slave_1: left allmulticast mode [ 488.737714][ T2430] bridge_slave_1: left promiscuous mode [ 488.745115][ T2430] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.754876][ T2430] bridge_slave_0: left allmulticast mode [ 488.760632][ T2430] bridge_slave_0: left promiscuous mode [ 488.767260][ T2430] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.350684][ T5097] Bluetooth: hci3: command tx timeout [ 489.520496][ T2430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 489.577924][ T2430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.602791][ T2430] bond0 (unregistering): Released all slaves [ 489.614744][ T5093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 489.630271][ T5093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 489.648918][ T5093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 489.658550][ T5093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 489.674626][ T5093] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 489.682377][ T5093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 489.788088][T22003] team0: Port device team_slave_0 added [ 489.801842][T22003] team0: Port device team_slave_1 added [ 489.954110][T22080] Cannot find del_set index 3 as target [ 490.060824][T22003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.071677][T22003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.100093][T22003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.317622][T22003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.326211][T22003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.353228][T22098] netlink: 'syz.1.5879': attribute type 4 has an invalid length. [ 490.355829][T22003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 490.380906][T22088] openvswitch: : Dropping previously announced user features [ 490.582771][T22003] hsr_slave_0: entered promiscuous mode [ 490.634913][T22003] hsr_slave_1: entered promiscuous mode [ 490.663521][T22003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 490.713239][T22003] Cannot create hsr debugfs directory [ 490.751274][ T2430] hsr_slave_0: left promiscuous mode [ 490.766582][ T2430] hsr_slave_1: left promiscuous mode [ 490.796607][ T2430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.814172][ T2430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.834313][ T2430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.841993][ T2430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.899062][ T2430] veth1_macvtap: left promiscuous mode [ 490.906167][ T2430] veth0_macvtap: left promiscuous mode [ 490.912111][ T2430] veth1_vlan: left promiscuous mode [ 490.917567][ T2430] veth0_vlan: left promiscuous mode [ 491.414959][ T5093] Bluetooth: hci3: command tx timeout [ 491.690234][ T2430] veth1_virt_wifi (unregistering): left allmulticast mode [ 491.744654][ T5093] Bluetooth: hci4: command tx timeout [ 492.007840][ T2430] team0 (unregistering): Port device team_slave_1 removed [ 492.060520][ T2430] team0 (unregistering): Port device team_slave_0 removed [ 492.204964][T22162] __nla_validate_parse: 11 callbacks suppressed [ 492.204991][T22162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5896'. [ 492.813046][T22167] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5898'. [ 493.287099][T22191] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5908'. [ 493.328689][T22191] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5908'. [ 493.362052][T22191] netlink: 'syz.0.5908': attribute type 5 has an invalid length. [ 493.381863][T22191] netlink: 43 bytes leftover after parsing attributes in process `syz.0.5908'. [ 493.496271][ T5093] Bluetooth: hci3: command tx timeout [ 493.602569][T22204] FAULT_INJECTION: forcing a failure. [ 493.602569][T22204] name failslab, interval 1, probability 0, space 0, times 0 [ 493.630938][T22204] CPU: 1 PID: 22204 Comm: syz.1.5912 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 493.641269][T22204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 493.651494][T22204] Call Trace: [ 493.654833][T22204] [ 493.657809][T22204] dump_stack_lvl+0x241/0x360 [ 493.662562][T22204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.667826][T22204] ? __pfx__printk+0x10/0x10 [ 493.672499][T22204] should_fail_ex+0x3b0/0x4e0 [ 493.677342][T22204] ? tcf_action_init_1+0x1d6/0x890 [ 493.682521][T22204] should_failslab+0x9/0x20 [ 493.687098][T22204] kmalloc_trace_noprof+0x6c/0x2c0 [ 493.692329][T22204] tcf_action_init_1+0x1d6/0x890 [ 493.697332][T22204] ? nla_strscpy+0x100/0x180 [ 493.702075][T22204] ? __pfx_tcf_action_init_1+0x10/0x10 [ 493.707686][T22204] ? _raw_read_unlock+0x28/0x50 [ 493.712595][T22204] ? tc_action_load_ops+0x26d/0x590 [ 493.717978][T22204] ? __nla_parse+0x40/0x60 [ 493.722439][T22204] tcf_action_init+0x2e4/0x940 [ 493.727261][T22204] ? __pfx_tcf_action_init+0x10/0x10 [ 493.732628][T22204] ? apparmor_capable+0x138/0x1b0 [ 493.737691][T22204] tc_ctl_action+0x47d/0xcf0 [ 493.742330][T22204] ? __pfx_tc_ctl_action+0x10/0x10 [ 493.747515][T22204] ? __mutex_lock+0x9a5/0xd70 [ 493.752220][T22204] ? __pfx___mutex_lock+0x10/0x10 [ 493.757285][T22204] ? __pfx_tc_ctl_action+0x10/0x10 [ 493.762420][T22204] rtnetlink_rcv_msg+0x89b/0x1180 [ 493.767497][T22204] ? rtnetlink_rcv_msg+0x208/0x1180 [ 493.772714][T22204] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 493.778194][T22204] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 493.784197][T22204] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 493.790643][T22204] ? __local_bh_enable_ip+0x168/0x200 [ 493.796031][T22204] ? lockdep_hardirqs_on+0x99/0x150 [ 493.801265][T22204] ? __local_bh_enable_ip+0x168/0x200 [ 493.806654][T22204] ? dev_hard_start_xmit+0x773/0x7e0 [ 493.811958][T22204] ? __dev_queue_xmit+0x2d2/0x3d30 [ 493.817089][T22204] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 493.823174][T22204] ? __dev_queue_xmit+0x2d2/0x3d30 [ 493.828560][T22204] ? __dev_queue_xmit+0x16c9/0x3d30 [ 493.833800][T22204] ? __dev_queue_xmit+0x2d2/0x3d30 [ 493.838960][T22204] ? ref_tracker_free+0x643/0x7e0 [ 493.844032][T22204] netlink_rcv_skb+0x1e3/0x430 [ 493.848825][T22204] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 493.854316][T22204] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 493.859654][T22204] ? netlink_deliver_tap+0x2e/0x1b0 [ 493.864902][T22204] netlink_unicast+0x7ea/0x980 [ 493.869697][T22204] ? __pfx_netlink_unicast+0x10/0x10 [ 493.875098][T22204] ? __virt_addr_valid+0x183/0x530 [ 493.880320][T22204] ? __check_object_size+0x49c/0x900 [ 493.885636][T22204] ? bpf_lsm_netlink_send+0x9/0x10 [ 493.890774][T22204] netlink_sendmsg+0x8db/0xcb0 [ 493.895573][T22204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.900887][T22204] ? __import_iovec+0x536/0x820 [ 493.905751][T22204] ? aa_sock_msg_perm+0x91/0x160 [ 493.910718][T22204] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 493.916021][T22204] ? security_socket_sendmsg+0x87/0xb0 [ 493.921501][T22204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.926810][T22204] __sock_sendmsg+0x221/0x270 [ 493.931508][T22204] ____sys_sendmsg+0x525/0x7d0 [ 493.936305][T22204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.941636][T22204] ? rcu_read_lock_any_held+0xb7/0x160 [ 493.947116][T22204] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 493.953124][T22204] __sys_sendmsg+0x2b0/0x3a0 [ 493.957748][T22204] ? __pfx___sys_sendmsg+0x10/0x10 [ 493.962968][T22204] ? vfs_write+0x7c4/0xc90 [ 493.967417][T22204] ? do_sys_openat2+0x17a/0x1d0 [ 493.972310][T22204] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 493.978679][T22204] ? do_syscall_64+0x100/0x230 [ 493.983476][T22204] ? do_syscall_64+0xb6/0x230 [ 493.988191][T22204] do_syscall_64+0xf3/0x230 [ 493.992721][T22204] ? clear_bhb_loop+0x35/0x90 [ 493.997411][T22204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.003332][T22204] RIP: 0033:0x7fad05175bd9 [ 494.007763][T22204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.027560][T22204] RSP: 002b:00007fad05f60048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 494.035993][T22204] RAX: ffffffffffffffda RBX: 00007fad05303f60 RCX: 00007fad05175bd9 [ 494.043982][T22204] RDX: 0000000000000000 RSI: 0000000020002f80 RDI: 0000000000000007 [ 494.051964][T22204] RBP: 00007fad05f600a0 R08: 0000000000000000 R09: 0000000000000000 [ 494.059946][T22204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.067935][T22204] R13: 000000000000000b R14: 00007fad05303f60 R15: 00007ffd573c6a38 [ 494.076026][T22204] [ 494.109700][ T5093] Bluetooth: hci4: command tx timeout [ 494.179320][T22214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5915'. [ 494.229617][T22072] chnl_net:caif_netlink_parms(): no params data found [ 494.236490][T22217] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5915'. [ 494.291202][T22219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5916'. [ 494.529803][T22232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5918'. [ 494.639225][ T2430] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.719537][T22231] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 494.914176][ T2430] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.945321][T22255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5925'. [ 495.097664][ T2430] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.142438][T22072] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.151172][T22072] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.158664][T22072] bridge_slave_0: entered allmulticast mode [ 495.166832][T22072] bridge_slave_0: entered promiscuous mode [ 495.175966][T22072] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.183166][T22072] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.192339][T22072] bridge_slave_1: entered allmulticast mode [ 495.200471][T22072] bridge_slave_1: entered promiscuous mode [ 495.268116][ T2430] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.407531][T22072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.449251][T22072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.574342][ T5093] Bluetooth: hci3: command tx timeout [ 495.726385][T22072] team0: Port device team_slave_0 added [ 495.823100][T22072] team0: Port device team_slave_1 added [ 495.843916][T22295] Cannot find del_set index 3 as target [ 495.990020][T22003] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 496.022529][T22003] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 496.039164][T22003] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 496.078388][T22072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.127927][T22072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.155814][T22072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.164767][ T5093] Bluetooth: hci4: command tx timeout [ 496.169392][T22072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.182771][T22072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.212847][T22072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.230624][ T2430] bridge_slave_1: left allmulticast mode [ 496.243757][ T2430] bridge_slave_1: left promiscuous mode [ 496.254056][ T2430] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.265314][ T2430] bridge_slave_0: left allmulticast mode [ 496.271170][ T2430] bridge_slave_0: left promiscuous mode [ 496.277321][ T2430] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.313097][T22315] netlink: 'syz.0.5945': attribute type 4 has an invalid length. [ 496.862568][ T2430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.876965][ T2430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.891564][ T2430] bond0 (unregistering): Released all slaves [ 496.905093][T22003] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 497.269043][T22072] hsr_slave_0: entered promiscuous mode [ 497.294398][T22072] hsr_slave_1: entered promiscuous mode [ 497.301084][T22072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 497.326892][T22072] Cannot create hsr debugfs directory [ 497.346418][T22333] netlink: 'syz.0.5951': attribute type 30 has an invalid length. [ 497.601705][ T2430] hsr_slave_0: left promiscuous mode [ 497.616669][ T2430] hsr_slave_1: left promiscuous mode [ 497.629800][ T2430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 497.640482][ T2430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 497.650587][ T2430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 497.667059][ T2430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.719925][ T2430] veth1_macvtap: left promiscuous mode [ 497.726068][ T2430] veth0_macvtap: left promiscuous mode [ 497.732005][ T2430] veth1_vlan: left promiscuous mode [ 497.738819][ T2430] veth0_vlan: left promiscuous mode [ 498.214511][ T5093] Bluetooth: hci4: command tx timeout [ 498.370044][ T2430] team0 (unregistering): Port device team_slave_1 removed [ 498.428037][ T2430] team0 (unregistering): Port device team_slave_0 removed [ 499.449509][T22003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.588776][T22003] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.609454][T22382] __nla_validate_parse: 3 callbacks suppressed [ 499.609479][T22382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5969'. [ 499.657452][T22382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5969'. [ 499.746941][T22394] FAULT_INJECTION: forcing a failure. [ 499.746941][T22394] name failslab, interval 1, probability 0, space 0, times 0 [ 499.778677][T22394] CPU: 1 PID: 22394 Comm: syz.0.5968 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 499.788933][T22394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 499.799037][T22394] Call Trace: [ 499.802357][T22394] [ 499.805381][T22394] dump_stack_lvl+0x241/0x360 [ 499.810114][T22394] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.815369][T22394] ? __pfx__printk+0x10/0x10 [ 499.820282][T22394] ? lockdep_init_map_type+0xa1/0x910 [ 499.825678][T22394] ? __asan_memset+0x23/0x50 [ 499.830412][T22394] should_fail_ex+0x3b0/0x4e0 [ 499.835151][T22394] ? security_inode_alloc+0x28/0x120 [ 499.840477][T22394] should_failslab+0x9/0x20 [ 499.845008][T22394] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 499.850404][T22394] security_inode_alloc+0x28/0x120 [ 499.855533][T22394] inode_init_always+0x947/0xc70 [ 499.860493][T22394] ? __pfx_sock_alloc_inode+0x10/0x10 [ 499.865881][T22394] new_inode_pseudo+0x9e/0x1e0 [ 499.870673][T22394] __sock_create+0x123/0x920 [ 499.875286][T22394] ? __might_fault+0xaa/0x120 [ 499.879992][T22394] __sys_socketpair+0x2ca/0x720 [ 499.884888][T22394] ? __pfx___sys_socketpair+0x10/0x10 [ 499.890383][T22394] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 499.896381][T22394] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 499.902739][T22394] ? do_syscall_64+0x100/0x230 [ 499.907543][T22394] __x64_sys_socketpair+0x9b/0xb0 [ 499.912587][T22394] do_syscall_64+0xf3/0x230 [ 499.917112][T22394] ? clear_bhb_loop+0x35/0x90 [ 499.921863][T22394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.927783][T22394] RIP: 0033:0x7fa6dd175bd9 [ 499.932213][T22394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.951843][T22394] RSP: 002b:00007fa6ddea0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 499.960298][T22394] RAX: ffffffffffffffda RBX: 00007fa6dd304110 RCX: 00007fa6dd175bd9 [ 499.968290][T22394] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000011 [ 499.976295][T22394] RBP: 00007fa6ddea00a0 R08: 0000000000000000 R09: 0000000000000000 [ 499.984280][T22394] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.992266][T22394] R13: 000000000000006e R14: 00007fa6dd304110 R15: 00007ffeeab681a8 [ 500.000264][T22394] [ 500.030823][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.038076][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.066738][T22394] socket: no more sockets [ 500.073367][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.080636][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.410857][T22411] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.5977'. [ 500.566155][T22003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 500.749655][T22072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 500.787079][T22425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5982'. [ 500.804846][T22072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 500.841506][T22072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 500.898948][T22072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 500.945924][T22431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5984'. [ 500.959062][T22430] dccp_invalid_packet: P.Data Offset(0) too small [ 501.104122][T22438] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5987'. [ 501.163926][T22003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 501.374067][T22446] gretap0: entered promiscuous mode [ 501.462708][T22072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.548822][T22072] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.593397][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.600671][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.687049][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.694299][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.066493][T22003] veth0_vlan: entered promiscuous mode [ 502.072742][T22486] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 502.112341][T22484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5997'. [ 502.147219][T22484] macvtap0: entered promiscuous mode [ 502.174285][T22488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5999'. [ 502.224530][T22003] veth1_vlan: entered promiscuous mode [ 502.269174][T22495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6001'. [ 502.341085][T22003] veth0_macvtap: entered promiscuous mode [ 502.381551][T22003] veth1_macvtap: entered promiscuous mode [ 502.457989][T22003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.482465][T22003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.500831][T22501] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6003'. [ 502.512574][T22003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.530821][T22003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.542988][T22003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.571891][T22003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.585398][T22003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.601808][T22501] gG: entered promiscuous mode [ 502.634610][T22003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.653404][T22003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.676724][T22003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.703087][T22003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.723396][T22003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.735752][T22003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.758402][T22003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.779545][T22003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.815418][T22003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.858936][T22003] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.875692][T22003] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.892884][T22520] netlink: 'syz.1.6009': attribute type 20 has an invalid length. [ 502.895599][T22003] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.909681][T22003] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.969824][T22072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.191981][T22072] veth0_vlan: entered promiscuous mode [ 503.218552][T16519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.235064][T16519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.268839][T22072] veth1_vlan: entered promiscuous mode [ 503.324325][T16515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.332234][T16515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.391016][T22072] veth0_macvtap: entered promiscuous mode [ 503.410531][T22072] veth1_macvtap: entered promiscuous mode [ 503.476346][T22072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.497878][T22072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.523785][T22072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.539543][T22072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.549753][T22072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.576435][T22072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.597846][T22072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.612777][T22072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.632268][T22072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.771718][T22072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.792122][T22072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.802505][T22072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.813216][T22072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.832502][T22072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.843497][T22072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.864887][T22072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.895408][T22072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.926609][T22072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.958781][T22072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.990728][T22072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.028934][T22072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.052407][T22072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.078185][T22072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.094203][T22072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.209798][T22565] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 504.523253][T16517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.549348][T16517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.574906][T22567] netlink: 'syz.0.6026': attribute type 30 has an invalid length. [ 504.681352][T16517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.704523][T16517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.766317][T22579] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 504.955674][T22587] netlink: 'syz.1.6033': attribute type 6 has an invalid length. [ 504.969684][T22587] __nla_validate_parse: 4 callbacks suppressed [ 504.969702][T22587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6033'. [ 504.990383][T22589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6032'. [ 505.005154][T22589] macvlan2: entered promiscuous mode [ 505.010615][T22589] vlan1: entered promiscuous mode [ 505.017225][T22589] macvlan2: entered allmulticast mode [ 505.024079][T22589] vlan1: entered allmulticast mode [ 505.029278][T22589] veth0_vlan: entered allmulticast mode [ 505.091152][T22592] netlink: 'syz.4.6034': attribute type 41 has an invalid length. [ 505.774190][T22617] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6041'. [ 506.003100][T22633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6046'. [ 506.277171][T22648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6053'. [ 506.299114][T22648] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6053'. [ 506.313606][T22651] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6054'. [ 506.831062][T16515] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.393365][T16515] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.488540][T16515] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.597061][T22687] netlink: 'syz.4.6069': attribute type 1 has an invalid length. [ 507.611353][T22687] netlink: 'syz.4.6069': attribute type 1 has an invalid length. [ 507.666598][T16515] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.724154][T22690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6066'. [ 507.738226][T22694] netlink: 136 bytes leftover after parsing attributes in process `syz.1.6070'. [ 507.751585][T22690] team0: left allmulticast mode [ 507.783814][T22690] team_slave_1: left allmulticast mode [ 507.808359][T22690] team0: left promiscuous mode [ 507.813578][T22690] team_slave_1: left promiscuous mode [ 507.835652][T22690] bridge0: port 3(team0) entered disabled state [ 507.848382][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.863014][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.888967][T22690] bridge_slave_1: left allmulticast mode [ 507.903852][T22690] bridge_slave_1: left promiscuous mode [ 507.909844][T22690] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.925292][T22690] bridge_slave_0: left allmulticast mode [ 507.932310][T22690] bridge_slave_0: left promiscuous mode [ 507.954356][T22690] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.065073][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 508.081480][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 508.091354][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 508.109821][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 508.121740][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 508.129773][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 508.141349][T22698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6072'. [ 508.163882][T22698] netlink: 'syz.4.6072': attribute type 3 has an invalid length. [ 508.448271][T22719] FAULT_INJECTION: forcing a failure. [ 508.448271][T22719] name failslab, interval 1, probability 0, space 0, times 0 [ 508.467787][T22719] CPU: 1 PID: 22719 Comm: syz.3.6078 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 508.478023][T22719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 508.488218][T22719] Call Trace: [ 508.491536][T22719] [ 508.494531][T22719] dump_stack_lvl+0x241/0x360 [ 508.499284][T22719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.504547][T22719] ? __pfx__printk+0x10/0x10 [ 508.509202][T22719] should_fail_ex+0x3b0/0x4e0 [ 508.514010][T22719] ? tcf_skbedit_init+0xa2d/0x1290 [ 508.519179][T22719] should_failslab+0x9/0x20 [ 508.523751][T22719] kmalloc_trace_noprof+0x6c/0x2c0 [ 508.528957][T22719] tcf_skbedit_init+0xa2d/0x1290 [ 508.534045][T22719] ? __pfx_tcf_skbedit_init+0x10/0x10 [ 508.539453][T22719] ? kmemdup_noprof+0x45/0x60 [ 508.544160][T22719] ? __asan_memcpy+0x40/0x70 [ 508.548766][T22719] ? __pfx_tcf_skbedit_init+0x10/0x10 [ 508.554152][T22719] tcf_action_init_1+0x5d7/0x890 [ 508.559111][T22719] ? nla_strscpy+0x100/0x180 [ 508.563724][T22719] ? __pfx_tcf_action_init_1+0x10/0x10 [ 508.569230][T22719] ? _raw_read_unlock+0x28/0x50 [ 508.574109][T22719] ? tc_action_load_ops+0x26d/0x590 [ 508.579361][T22719] ? __nla_parse+0x40/0x60 [ 508.583834][T22719] tcf_action_init+0x2e4/0x940 [ 508.588649][T22719] ? __pfx_tcf_action_init+0x10/0x10 [ 508.594001][T22719] ? apparmor_capable+0x138/0x1b0 [ 508.599057][T22719] tc_ctl_action+0x47d/0xcf0 [ 508.603783][T22719] ? __pfx_tc_ctl_action+0x10/0x10 [ 508.608980][T22719] ? __mutex_lock+0x9a5/0xd70 [ 508.613717][T22719] ? __pfx___mutex_lock+0x10/0x10 [ 508.618784][T22719] ? __pfx_tc_ctl_action+0x10/0x10 [ 508.624011][T22719] rtnetlink_rcv_msg+0x89b/0x1180 [ 508.629074][T22719] ? rtnetlink_rcv_msg+0x208/0x1180 [ 508.634371][T22719] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 508.639845][T22719] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 508.645841][T22719] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 508.652274][T22719] ? __local_bh_enable_ip+0x168/0x200 [ 508.657657][T22719] ? lockdep_hardirqs_on+0x99/0x150 [ 508.662963][T22719] ? __local_bh_enable_ip+0x168/0x200 [ 508.668433][T22719] ? dev_hard_start_xmit+0x773/0x7e0 [ 508.673739][T22719] ? __dev_queue_xmit+0x2d2/0x3d30 [ 508.678881][T22719] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 508.684620][T22719] ? __dev_queue_xmit+0x2d2/0x3d30 [ 508.689953][T22719] ? __dev_queue_xmit+0x16c9/0x3d30 [ 508.695207][T22719] ? __dev_queue_xmit+0x2d2/0x3d30 [ 508.700461][T22719] ? ref_tracker_free+0x643/0x7e0 [ 508.705518][T22719] netlink_rcv_skb+0x1e3/0x430 [ 508.710311][T22719] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 508.715790][T22719] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 508.721147][T22719] ? netlink_deliver_tap+0x2e/0x1b0 [ 508.726379][T22719] netlink_unicast+0x7ea/0x980 [ 508.731173][T22719] ? __pfx_netlink_unicast+0x10/0x10 [ 508.736476][T22719] ? __virt_addr_valid+0x183/0x530 [ 508.741619][T22719] ? __check_object_size+0x49c/0x900 [ 508.746943][T22719] ? bpf_lsm_netlink_send+0x9/0x10 [ 508.752080][T22719] netlink_sendmsg+0x8db/0xcb0 [ 508.756880][T22719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.762191][T22719] ? __import_iovec+0x536/0x820 [ 508.767055][T22719] ? aa_sock_msg_perm+0x91/0x160 [ 508.772023][T22719] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 508.777323][T22719] ? security_socket_sendmsg+0x87/0xb0 [ 508.782803][T22719] ? __pfx_netlink_sendmsg+0x10/0x10 [ 508.788108][T22719] __sock_sendmsg+0x221/0x270 [ 508.792804][T22719] ____sys_sendmsg+0x525/0x7d0 [ 508.797613][T22719] ? __pfx_____sys_sendmsg+0x10/0x10 [ 508.802944][T22719] ? rcu_read_lock_any_held+0xb7/0x160 [ 508.808428][T22719] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 508.814354][T22719] __sys_sendmsg+0x2b0/0x3a0 [ 508.818976][T22719] ? __pfx___sys_sendmsg+0x10/0x10 [ 508.824120][T22719] ? vfs_write+0x7c4/0xc90 [ 508.828659][T22719] ? do_sys_openat2+0x17a/0x1d0 [ 508.833557][T22719] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 508.839902][T22719] ? do_syscall_64+0x100/0x230 [ 508.844691][T22719] ? do_syscall_64+0xb6/0x230 [ 508.849391][T22719] do_syscall_64+0xf3/0x230 [ 508.853916][T22719] ? clear_bhb_loop+0x35/0x90 [ 508.858606][T22719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.864523][T22719] RIP: 0033:0x7f13ac575bd9 [ 508.869001][T22719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.888648][T22719] RSP: 002b:00007f13ad3b7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 508.897171][T22719] RAX: ffffffffffffffda RBX: 00007f13ac703f60 RCX: 00007f13ac575bd9 [ 508.905166][T22719] RDX: 0000000000000000 RSI: 0000000020002f80 RDI: 0000000000000007 [ 508.913153][T22719] RBP: 00007f13ad3b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 508.921147][T22719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.929141][T22719] R13: 000000000000000b R14: 00007f13ac703f60 R15: 00007ffc287833a8 [ 508.937171][T22719] [ 509.047402][T16515] bridge_slave_1: left allmulticast mode [ 509.053232][T16515] bridge_slave_1: left promiscuous mode [ 509.071388][T16515] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.105076][T16515] bridge_slave_0: left allmulticast mode [ 509.110799][T16515] bridge_slave_0: left promiscuous mode [ 509.139215][T16515] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.897273][ T5097] Bluetooth: hci0: command 0x0401 tx timeout [ 510.190273][T16515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.211070][T16515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.219951][ T5093] Bluetooth: hci4: command tx timeout [ 510.230689][T16515] bond0 (unregistering): Released all slaves [ 510.409308][T22764] __nla_validate_parse: 4 callbacks suppressed [ 510.409331][T22764] netlink: 592 bytes leftover after parsing attributes in process `syz.3.6095'. [ 510.882936][T22705] chnl_net:caif_netlink_parms(): no params data found [ 511.061244][T22796] netlink: 'syz.3.6104': attribute type 4 has an invalid length. [ 511.119272][T16515] hsr_slave_0: left promiscuous mode [ 511.138194][T16515] hsr_slave_1: left promiscuous mode [ 511.146858][T16515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.169239][T16515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 511.187302][T16515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.203917][T16515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 511.254793][T16515] veth1_macvtap: left promiscuous mode [ 511.260615][T16515] veth0_macvtap: left promiscuous mode [ 511.267314][T16515] veth1_vlan: left promiscuous mode [ 511.272920][T16515] veth0_vlan: left promiscuous mode [ 511.931888][T16515] team0 (unregistering): Port device team_slave_1 removed [ 511.986236][T16515] team0 (unregistering): Port device team_slave_0 removed [ 512.296560][ T5093] Bluetooth: hci4: command tx timeout [ 512.520539][T22794] veth1: entered promiscuous mode [ 512.604277][T22794] veth1: left promiscuous mode [ 512.609033][T22814] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.609260][T22815] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.779355][T22818] netlink: 'syz.3.6111': attribute type 30 has an invalid length. [ 512.811471][T22821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6112'. [ 512.856780][T22705] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.872492][T22705] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.894426][T22705] bridge_slave_0: entered allmulticast mode [ 512.925512][T22705] bridge_slave_0: entered promiscuous mode [ 512.952330][T22705] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.954213][T22832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.977370][T22705] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.996613][T22705] bridge_slave_1: entered allmulticast mode [ 513.052492][T22705] bridge_slave_1: entered promiscuous mode [ 513.081223][T22832] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6116'. [ 513.093466][T22839] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6117'. [ 513.170435][T22833] bridge_slave_1: left allmulticast mode [ 513.176442][T22833] bridge_slave_1: left promiscuous mode [ 513.193583][T22833] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.244671][T22705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.276871][T22705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.393222][T22853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6123'. [ 513.402580][T22853] netlink: 'syz.0.6123': attribute type 1 has an invalid length. [ 513.411166][T22853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6123'. [ 513.423120][T22853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6123'. [ 513.438124][T22848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6122'. [ 513.472282][T22705] team0: Port device team_slave_0 added [ 513.481376][T22854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.556188][T22705] team0: Port device team_slave_1 added [ 513.612021][T22866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6127'. [ 513.691321][T22868] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6128'. [ 513.717926][T22705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.741039][T22705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.812747][T22705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.854738][T22868] gG: entered promiscuous mode [ 513.878580][T22878] dvmrp1: entered allmulticast mode [ 513.905320][T22705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.912415][T22705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.983901][T22705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.235446][T22705] hsr_slave_0: entered promiscuous mode [ 514.277689][T22705] hsr_slave_1: entered promiscuous mode [ 514.286116][T22705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.308837][T22705] Cannot create hsr debugfs directory [ 514.374040][ T5093] Bluetooth: hci4: command tx timeout [ 514.474716][T22917] FAULT_INJECTION: forcing a failure. [ 514.474716][T22917] name failslab, interval 1, probability 0, space 0, times 0 [ 514.500245][T22917] CPU: 1 PID: 22917 Comm: syz.3.6143 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 514.510927][T22917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 514.521037][T22917] Call Trace: [ 514.524356][T22917] [ 514.527329][T22917] dump_stack_lvl+0x241/0x360 [ 514.532074][T22917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.537331][T22917] ? __pfx__printk+0x10/0x10 [ 514.541974][T22917] ? __pfx___might_resched+0x10/0x10 [ 514.547370][T22917] should_fail_ex+0x3b0/0x4e0 [ 514.552092][T22917] ? offload_action_alloc+0x2f/0x2a0 [ 514.557407][T22917] should_failslab+0x9/0x20 [ 514.561940][T22917] __kmalloc_noprof+0xd8/0x400 [ 514.566730][T22917] ? __lock_acquire+0x1346/0x1fd0 [ 514.571951][T22917] offload_action_alloc+0x2f/0x2a0 [ 514.577088][T22917] tcf_action_offload_add_ex+0x37f/0x840 [ 514.582776][T22917] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 514.589068][T22917] ? tcf_action_fill_size+0x1e/0x2d0 [ 514.594374][T22917] ? tcf_skbedit_get_fill_size+0x9/0x20 [ 514.600107][T22917] ? tcf_action_fill_size+0x25d/0x2d0 [ 514.605514][T22917] tcf_action_init+0x33b/0x940 [ 514.610497][T22917] ? __pfx_tcf_action_init+0x10/0x10 [ 514.615881][T22917] ? apparmor_capable+0x138/0x1b0 [ 514.620945][T22917] tc_ctl_action+0x47d/0xcf0 [ 514.625591][T22917] ? __pfx_tc_ctl_action+0x10/0x10 [ 514.630752][T22917] ? __mutex_lock+0x9a5/0xd70 [ 514.635458][T22917] ? __pfx___mutex_lock+0x10/0x10 [ 514.640542][T22917] ? __pfx_tc_ctl_action+0x10/0x10 [ 514.645698][T22917] rtnetlink_rcv_msg+0x89b/0x1180 [ 514.650793][T22917] ? rtnetlink_rcv_msg+0x208/0x1180 [ 514.656028][T22917] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 514.661551][T22917] ? __lock_acquire+0x1346/0x1fd0 [ 514.666616][T22917] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 514.672619][T22917] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 514.678994][T22917] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 514.685339][T22917] ? lockdep_hardirqs_on+0x99/0x150 [ 514.690557][T22917] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 514.696466][T22917] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 514.702837][T22917] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 514.709579][T22917] netlink_rcv_skb+0x1e3/0x430 [ 514.714375][T22917] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 514.719853][T22917] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 514.725209][T22917] ? __rcu_read_unlock+0xa1/0x110 [ 514.730260][T22917] netlink_unicast+0x7ea/0x980 [ 514.735064][T22917] ? __pfx_netlink_unicast+0x10/0x10 [ 514.740406][T22917] ? __virt_addr_valid+0x183/0x530 [ 514.745650][T22917] ? __check_object_size+0x49c/0x900 [ 514.751057][T22917] ? bpf_lsm_netlink_send+0x9/0x10 [ 514.756217][T22917] netlink_sendmsg+0x8db/0xcb0 [ 514.761038][T22917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.766351][T22917] ? __import_iovec+0x536/0x820 [ 514.771235][T22917] ? aa_sock_msg_perm+0x91/0x160 [ 514.776201][T22917] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 514.781611][T22917] ? security_socket_sendmsg+0x87/0xb0 [ 514.787094][T22917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 514.792408][T22917] __sock_sendmsg+0x221/0x270 [ 514.797104][T22917] ____sys_sendmsg+0x525/0x7d0 [ 514.801896][T22917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.807212][T22917] ? rcu_read_lock_any_held+0xb7/0x160 [ 514.812716][T22917] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 514.818639][T22917] __sys_sendmsg+0x2b0/0x3a0 [ 514.823254][T22917] ? __pfx___sys_sendmsg+0x10/0x10 [ 514.828383][T22917] ? vfs_write+0x7c4/0xc90 [ 514.832831][T22917] ? do_sys_openat2+0x17a/0x1d0 [ 514.837720][T22917] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 514.844069][T22917] ? do_syscall_64+0x100/0x230 [ 514.848879][T22917] ? do_syscall_64+0xb6/0x230 [ 514.853590][T22917] do_syscall_64+0xf3/0x230 [ 514.858138][T22917] ? clear_bhb_loop+0x35/0x90 [ 514.862937][T22917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.868859][T22917] RIP: 0033:0x7f13ac575bd9 [ 514.873290][T22917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.893002][T22917] RSP: 002b:00007f13ad3b7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.901461][T22917] RAX: ffffffffffffffda RBX: 00007f13ac703f60 RCX: 00007f13ac575bd9 [ 514.909450][T22917] RDX: 0000000000000000 RSI: 0000000020002f80 RDI: 0000000000000007 [ 514.917440][T22917] RBP: 00007f13ad3b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 514.925533][T22917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.933603][T22917] R13: 000000000000000b R14: 00007f13ac703f60 R15: 00007ffc287833a8 [ 514.941629][T22917] [ 515.607771][T22948] __nla_validate_parse: 1 callbacks suppressed [ 515.607795][T22948] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6154'. [ 515.748463][T22956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6157'. [ 515.758513][T22953] Cannot find add_set index 0 as target [ 515.763786][T22956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6157'. [ 515.775275][T22956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6157'. [ 515.784911][T22956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6157'. [ 515.788186][T22705] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 515.794929][T22956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6157'. [ 515.810795][T22956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6157'. [ 515.842636][T22705] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 515.884385][T22705] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 515.908660][T22705] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 515.934944][T22964] dccp_invalid_packet: P.Data Offset(224) too large [ 516.118926][T22973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6161'. [ 516.201933][T22975] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6162'. [ 516.225049][T22975] 0XD: renamed from gretap0 (while UP) [ 516.247709][T22975] 0XD: entered allmulticast mode [ 516.314836][T22705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.342135][T22979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6164'. [ 516.388127][T22705] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.454078][ T5093] Bluetooth: hci4: command tx timeout [ 516.493041][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.500352][ T5105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.589827][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.597192][ T5105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.759861][T22705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 517.320470][T22705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.470903][T23049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.500241][T22705] veth0_vlan: entered promiscuous mode [ 517.572537][T22705] veth1_vlan: entered promiscuous mode [ 517.712295][T23059] netlink: 'syz.3.6189': attribute type 1 has an invalid length. [ 517.732314][T22705] veth0_macvtap: entered promiscuous mode [ 517.744133][T23059] netlink: 'syz.3.6189': attribute type 1 has an invalid length. [ 517.766594][T23059] netlink: 'syz.3.6189': attribute type 2 has an invalid length. [ 517.780211][T22705] veth1_macvtap: entered promiscuous mode [ 517.793775][T23062] RDS: rds_bind could not find a transport for ::1200:0:c001:20:0:0, load rds_tcp or rds_rdma? [ 517.838023][T22705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.869502][T22705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.893791][T22705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.915374][T22705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.950573][T22705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.971431][T22705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.991849][T22705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.010700][T22705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.030998][T22705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.077288][T22705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.108657][T22705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.156723][T22705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.197414][T22705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.234104][T22705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.260504][T23073] netlink: 'syz.0.6192': attribute type 17 has an invalid length. [ 518.265546][T22705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.312961][T22705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.339162][T22705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.362378][T22705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.383702][T22705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.414674][T22705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.486796][T22705] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.524004][T22705] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.533293][T23077] netlink: 'syz.4.6195': attribute type 1 has an invalid length. [ 518.574042][T22705] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.600989][T22705] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.949960][ T2430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.983253][ T2430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.078386][T16517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.096961][T16517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.762579][T23125] netlink: 'syz.3.6211': attribute type 1 has an invalid length. [ 520.288013][T23150] netlink: 'syz.4.6223': attribute type 10 has an invalid length. [ 520.925991][T23190] xt_CT: You must specify a L4 protocol and not use inversions on it [ 521.007351][T23192] netlink: 'syz.3.6239': attribute type 7 has an invalid length. [ 521.053007][T23192] __nla_validate_parse: 19 callbacks suppressed [ 521.053029][T23192] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6239'. [ 521.244234][ T2430] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.840958][ T2430] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.924901][ T2430] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.983159][ T2430] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.078435][ T2430] bridge_slave_1: left allmulticast mode [ 522.084204][ T2430] bridge_slave_1: left promiscuous mode [ 522.090031][ T2430] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.100473][ T2430] bridge_slave_0: left allmulticast mode [ 522.114029][ T2430] bridge_slave_0: left promiscuous mode [ 522.119867][ T2430] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.671458][ T5093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 522.689721][ T5093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 522.701204][ T5093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 522.711525][ T5093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 522.722139][ T5093] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 522.737450][ T5093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 522.868004][ T5097] Bluetooth: hci0: command 0x0401 tx timeout [ 523.046785][ T2430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.071921][ T2430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.086825][ T2430] bond0 (unregistering): Released all slaves [ 523.306021][T23239] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 523.423480][T23248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6253'. [ 523.454830][T23241] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6249'. [ 523.465151][T23246] netlink: 83 bytes leftover after parsing attributes in process `syz.4.6249'. [ 523.479179][T23245] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 523.541286][T23252] vlan0: entered promiscuous mode [ 523.783792][T23262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6255'. [ 523.909496][ T2430] hsr_slave_0: left promiscuous mode [ 523.940792][ T2430] hsr_slave_1: left promiscuous mode [ 523.973957][ T2430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.002706][ T2430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.025687][ T2430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.033209][ T2430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.092090][T23277] sock: sock_set_timeout: `syz.4.6263' (pid 23277) tries to set negative timeout [ 524.097797][ T2430] veth1_macvtap: left promiscuous mode [ 524.112700][ T2430] veth0_macvtap: left promiscuous mode [ 524.118768][ T2430] veth1_vlan: left promiscuous mode [ 524.124483][ T2430] veth0_vlan: left promiscuous mode [ 524.773991][ T5097] Bluetooth: hci4: command tx timeout [ 524.810886][ T2430] team0 (unregistering): Port device team_slave_1 removed [ 524.891273][ T2430] team0 (unregistering): Port device team_slave_0 removed [ 525.494003][T23293] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6268'. [ 525.790780][T23307] tipc: Enabling of bearer rejected, failed to enable media [ 525.815188][T23233] chnl_net:caif_netlink_parms(): no params data found [ 525.851333][T23309] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6274'. [ 526.009334][T23317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6278'. [ 526.048020][T23317] mac80211_hwsim hwsim47 wlan0: entered promiscuous mode [ 526.056179][T23317] macvtap1: entered promiscuous mode [ 526.081547][T23320] netlink: 'syz.0.6279': attribute type 1 has an invalid length. [ 526.097457][T23320] nbd: couldn't find a device at index 2097172 [ 526.155295][T23233] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.166705][T23233] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.195452][T23233] bridge_slave_0: entered allmulticast mode [ 526.203190][T23233] bridge_slave_0: entered promiscuous mode [ 526.218293][T23233] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.226354][T23233] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.233928][T23233] bridge_slave_1: entered allmulticast mode [ 526.241719][T23233] bridge_slave_1: entered promiscuous mode [ 526.340378][T23233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 526.405341][T23233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.499733][T23233] team0: Port device team_slave_0 added [ 526.562871][T23233] team0: Port device team_slave_1 added [ 526.768842][T23233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.783286][T23347] Cannot find del_set index 3 as target [ 526.790613][T23233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.846242][T23348] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6290'. [ 526.856496][ T5097] Bluetooth: hci4: command tx timeout [ 526.870898][T23233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.900032][T23233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.932092][T23233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.975703][T23233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.986713][T23353] netlink: 'syz.0.6291': attribute type 1 has an invalid length. [ 527.001760][T23356] x_tables: ip_tables: ah match: only valid for protocol 51 [ 527.009472][T23353] nbd: couldn't find a device at index 2097172 [ 527.090573][T23356] netlink: 'syz.3.6292': attribute type 3 has an invalid length. [ 527.100146][T23356] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6292'. [ 527.150557][T23233] hsr_slave_0: entered promiscuous mode [ 527.188908][T23233] hsr_slave_1: entered promiscuous mode [ 527.197244][T23233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 527.215642][T23233] Cannot create hsr debugfs directory [ 527.236656][T23363] sock: sock_set_timeout: `syz.0.6294' (pid 23363) tries to set negative timeout [ 527.715048][T23387] netlink: 'syz.0.6301': attribute type 4 has an invalid length. [ 527.848399][T23391] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6302'. [ 528.117298][T23408] x_tables: ip_tables: ah match: only valid for protocol 51 [ 528.123553][T23407] syzkaller0: entered allmulticast mode [ 528.170630][T23402] syzkaller0: left allmulticast mode [ 528.209646][T23408] netlink: 'syz.0.6307': attribute type 3 has an invalid length. [ 528.234033][T23408] netlink: 666 bytes leftover after parsing attributes in process `syz.0.6307'. [ 528.460618][T23420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6312'. [ 528.567019][T23233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 528.588716][T23233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 528.656145][T23429] netlink: 592 bytes leftover after parsing attributes in process `syz.3.6316'. [ 528.692415][T23233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 528.728408][T23233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 528.765863][T23437] netlink: 'syz.1.6319': attribute type 30 has an invalid length. [ 528.937286][ T5097] Bluetooth: hci4: command tx timeout [ 528.956787][T23445] netlink: 'syz.4.6322': attribute type 1 has an invalid length. [ 528.989395][T23446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6321'. [ 529.001842][T23445] nbd: couldn't find a device at index 2097172 [ 529.023967][T23446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.107712][T23450] x_tables: ip_tables: ah match: only valid for protocol 51 [ 529.176295][T23457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6327'. [ 529.178078][T23233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.211277][T23456] netlink: 'syz.3.6324': attribute type 3 has an invalid length. [ 529.220838][T23456] netlink: 666 bytes leftover after parsing attributes in process `syz.3.6324'. [ 529.308130][T23233] 8021q: adding VLAN 0 to HW filter on device team0 [ 529.349159][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.356500][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 529.659401][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.666651][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 529.701352][T23472] Cannot find add_set index 0 as target [ 530.015706][T23487] macvtap0: entered promiscuous mode [ 530.021404][T23487] macvtap0: entered allmulticast mode [ 530.044646][T23487] veth0_macvtap: entered allmulticast mode [ 530.175643][T23494] netlink: 'syz.1.6342': attribute type 11 has an invalid length. [ 530.401833][T23504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6345'. [ 530.442716][T23505] dccp_invalid_packet: P.Data Offset(0) too small [ 530.462204][T23233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.971434][T23233] veth0_vlan: entered promiscuous mode [ 531.014597][ T5097] Bluetooth: hci4: command tx timeout [ 531.035138][T23233] veth1_vlan: entered promiscuous mode [ 531.190561][T23233] veth0_macvtap: entered promiscuous mode [ 531.238699][T23233] veth1_macvtap: entered promiscuous mode [ 531.285203][T23544] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 531.313054][T23546] netlink: 'syz.1.6362': attribute type 1 has an invalid length. [ 531.407507][T23233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.420971][T23233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.453035][T23233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.473380][T23233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.507274][T23233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.520608][T23233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.533175][T23233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.546616][T23233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.560894][T23233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.608282][T23233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.629489][T23233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.652384][T23233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.679892][T23233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.703069][T23233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.732740][T23233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.773776][T23233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.814688][T23233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.843693][T23233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.866758][T23233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.905306][T23233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.923969][T23561] can: request_module (can-proto-0) failed. [ 531.948644][T23555] syzkaller1: entered promiscuous mode [ 531.955774][T23555] syzkaller1: entered allmulticast mode [ 531.965198][T23565] __nla_validate_parse: 6 callbacks suppressed [ 531.965222][T23565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6367'. [ 531.996974][T23233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.016216][T23233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.031996][T23233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.061603][T23233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.342590][T16515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.371274][T16515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.437212][T16515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.453076][T16515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.465307][T23582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6374'. [ 532.803379][T23601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6384'. [ 532.820224][T23602] tipc: Failed to obtain node identity [ 532.826209][T23602] tipc: Enabling of bearer rejected, failed to enable media [ 532.927977][T23607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.211727][T23623] skb len=10637 headroom=168 headlen=10637 tailroom=5259 [ 533.211727][T23623] mac=(168,0) mac_len=0 net=(168,20) trans=188 [ 533.211727][T23623] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 533.211727][T23623] csum(0x350e2a31 start=10801 offset=13582 ip_summed=3 complete_sw=0 valid=0 level=0) [ 533.211727][T23623] hash(0x0 sw=0 l4=0) proto=0x0800 pkttype=0 iif=0 [ 533.211727][T23623] priority=0x0 mark=0x0 alloc_cpu=1 vlan_all=0x0 [ 533.211727][T23623] encapsulation=1 inner(proto=0x0008, mac=192, net=192, trans=244) [ 533.262256][T23623] dev name=veth0 feat=0x000061164fdd19e9 [ 533.268025][T23623] skb linear: 00000000: 45 02 29 8d 7d 57 00 00 0f 2f 64 b9 ac 14 14 18 [ 533.276652][T23623] skb linear: 00000010: e0 00 00 03 00 00 08 00 bd 0b 29 75 10 82 0c 52 [ 533.285247][T23623] skb linear: 00000020: 0f 06 ea a0 fd fe 4b 88 94 30 eb b5 29 97 e3 6e [ 533.293913][T23623] skb linear: 00000030: 03 9b 1c 59 88 25 f8 01 00 e3 c0 63 76 c3 30 76 [ 533.302462][T23623] skb linear: 00000040: a1 67 d5 14 fa 57 0a 44 02 61 a6 7a 34 a0 76 05 [ 533.311097][T23623] skb linear: 00000050: c9 3a 19 49 46 bc 62 83 f4 00 00 00 4c 84 00 00 [ 533.319706][T23623] skb linear: 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.328329][T23623] skb linear: 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.337097][T23623] skb linear: 00000080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.345738][T23623] skb linear: 00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.354367][T23623] skb linear: 000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.362887][T23623] skb linear: 000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.371462][T23623] skb linear: 000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.380064][T23623] skb linear: 000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.388678][T23623] skb linear: 000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.397286][T23623] skb linear: 000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.405861][T23623] skb linear: 00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.414457][T23623] skb linear: 00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.422994][T23623] skb linear: 00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 533.431661][T23623] ------------[ cut here ]------------ [ 533.437252][T23623] offset+2 (24217) > skb_headlen() (10637) [ 533.444107][T23623] WARNING: CPU: 1 PID: 23623 at net/core/dev.c:3334 skb_checksum_help+0x68f/0x730 [ 533.453472][T23623] Modules linked in: [ 533.457460][T23623] CPU: 1 PID: 23623 Comm: syz.4.6393 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 533.467820][T23623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 533.478035][T23623] RIP: 0010:skb_checksum_help+0x68f/0x730 [ 533.489011][T23623] Code: 48 8b 4c 24 10 0f b6 04 01 84 c0 0f 85 89 00 00 00 48 8b 44 24 08 2b 18 48 c7 c7 c0 ac c5 8c 4c 89 f6 89 da e8 f2 c7 00 f8 90 <0f> 0b 90 90 bb ea ff ff ff e9 cf fc ff ff 48 8b 0c 24 80 e1 07 80 [ 533.512059][T23623] RSP: 0018:ffffc90008dbeda8 EFLAGS: 00010246 [ 533.518293][T23623] RAX: 09143f07be7fcf00 RBX: 000000000000298d RCX: 0000000000040000 [ 533.526398][T23623] RDX: ffffc9000ed14000 RSI: 000000000003ffff RDI: 0000000000040000 [ 533.534498][T23623] RBP: dffffc0000000000 R08: ffffffff81585882 R09: fffffbfff1c39994 [ 533.542536][T23623] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 1ffff110045d1126 [ 533.550764][T23623] R13: 0000000000005e97 R14: 0000000000005e99 R15: ffff888022e888c0 [ 533.558913][T23623] FS: 00007f7d94a826c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 533.568183][T23623] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 533.575266][T23623] CR2: 000000002000e000 CR3: 000000007b164000 CR4: 00000000003506f0 [ 533.583300][T23623] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 533.591608][T23623] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 533.599839][T23623] Call Trace: [ 533.603167][T23623] [ 533.606241][T23623] ? __warn+0x163/0x4e0 [ 533.610457][T23623] ? skb_checksum_help+0x68f/0x730 [ 533.615750][T23623] ? report_bug+0x2b3/0x500 [ 533.620319][T23623] ? skb_checksum_help+0x68f/0x730 [ 533.625600][T23623] ? handle_bug+0x3e/0x70 [ 533.629994][T23623] ? exc_invalid_op+0x1a/0x50 [ 533.634841][T23623] ? asm_exc_invalid_op+0x1a/0x20 [ 533.639960][T23623] ? __warn_printk+0x292/0x360 [ 533.644886][T23623] ? skb_checksum_help+0x68f/0x730 [ 533.650158][T23623] ? skb_checksum_help+0x68e/0x730 [ 533.655490][T23623] ip_do_fragment+0x21b/0x1b60 [ 533.660341][T23623] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 533.666458][T23623] ? __pfx_ip_finish_output2+0x10/0x10 [ 533.672058][T23623] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 533.678587][T23623] ? __pfx_ip_do_fragment+0x10/0x10 [ 533.683914][T23623] ? kasan_quarantine_put+0xdc/0x230 [ 533.689255][T23623] ? lockdep_hardirqs_on+0x99/0x150 [ 533.694668][T23623] ? __ip_finish_output+0x247/0x400 [ 533.699901][T23623] ? kmem_cache_free+0x145/0x350 [ 533.704966][T23623] ? ip_fragment+0x9a/0x220 [ 533.709603][T23623] __ip_finish_output+0x290/0x400 [ 533.714832][T23623] iptunnel_xmit+0x540/0x9b0 [ 533.719495][T23623] ip_tunnel_xmit+0x2113/0x2940 [ 533.724530][T23623] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 533.729789][T23623] ? gre_build_header+0x341/0xb30 [ 533.735007][T23623] ? __pfx_gre_build_header+0x10/0x10 [ 533.740470][T23623] ? iptunnel_handle_offloads+0x25f/0x650 [ 533.746363][T23623] ipgre_xmit+0x956/0xd40 [ 533.750764][T23623] ? __pfx_ipgre_xmit+0x10/0x10 [ 533.755809][T23623] ? validate_xmit_skb+0xa04/0x1120 [ 533.761139][T23623] dev_hard_start_xmit+0x27a/0x7e0 [ 533.766387][T23623] __dev_queue_xmit+0x1b0e/0x3d30 [ 533.771473][T23623] ? rep_movs_alternative+0x4a/0x70 [ 533.776813][T23623] ? __dev_queue_xmit+0x2d2/0x3d30 [ 533.781969][T23623] ? skb_partial_csum_set+0x105/0x350 [ 533.787492][T23623] ? __pfx___dev_queue_xmit+0x10/0x10 [ 533.792910][T23623] ? virtio_net_hdr_to_skb+0xa6a/0x1330 [ 533.798642][T23623] ? packet_parse_headers+0x7bd/0xad0 [ 533.804198][T23623] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 533.810060][T23623] ? packet_xmit+0x68/0x330 [ 533.814709][T23623] packet_sendmsg+0x46c2/0x6150 [ 533.819643][T23623] ? __pfx___might_resched+0x10/0x10 [ 533.825190][T23623] ? aa_sk_perm+0x967/0xab0 [ 533.829807][T23623] ? __pfx_packet_sendmsg+0x10/0x10 [ 533.835242][T23623] ? __pfx_lock_release+0x10/0x10 [ 533.840310][T23623] ? __import_iovec+0x536/0x820 [ 533.845388][T23623] ? aa_sock_msg_perm+0x91/0x160 [ 533.850604][T23623] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 533.856003][T23623] ? security_socket_sendmsg+0x87/0xb0 [ 533.861597][T23623] ? __pfx_packet_sendmsg+0x10/0x10 [ 533.866953][T23623] __sock_sendmsg+0x221/0x270 [ 533.871835][T23623] ____sys_sendmsg+0x525/0x7d0 [ 533.876738][T23623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.882117][T23623] __sys_sendmsg+0x2b0/0x3a0 [ 533.886905][T23623] ? __pfx___sys_sendmsg+0x10/0x10 [ 533.892161][T23623] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 533.898692][T23623] ? do_syscall_64+0x100/0x230 [ 533.903522][T23623] ? do_syscall_64+0xb6/0x230 [ 533.908313][T23623] do_syscall_64+0xf3/0x230 [ 533.912865][T23623] ? clear_bhb_loop+0x35/0x90 [ 533.917724][T23623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.924257][T23623] RIP: 0033:0x7f7d93d75bd9 [ 533.928845][T23623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.948570][T23623] RSP: 002b:00007f7d94a82048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.957313][T23623] RAX: ffffffffffffffda RBX: 00007f7d93f03f60 RCX: 00007f7d93d75bd9 [ 533.965454][T23623] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 533.973587][T23623] RBP: 00007f7d93de4e60 R08: 0000000000000000 R09: 0000000000000000 [ 533.981816][T23623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.989950][T23623] R13: 000000000000000b R14: 00007f7d93f03f60 R15: 00007ffef58bcac8 [ 533.998120][T23623] [ 534.001182][T23623] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 534.008500][T23623] CPU: 1 PID: 23623 Comm: syz.4.6393 Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 534.018773][T23623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 534.028908][T23623] Call Trace: [ 534.032208][T23623] [ 534.035151][T23623] dump_stack_lvl+0x241/0x360 [ 534.039859][T23623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 534.045108][T23623] ? __pfx__printk+0x10/0x10 [ 534.049728][T23623] ? vscnprintf+0x5d/0x90 [ 534.054085][T23623] panic+0x349/0x860 [ 534.058047][T23623] ? __warn+0x172/0x4e0 [ 534.062231][T23623] ? __pfx_panic+0x10/0x10 [ 534.066687][T23623] __warn+0x346/0x4e0 [ 534.070713][T23623] ? skb_checksum_help+0x68f/0x730 [ 534.075870][T23623] report_bug+0x2b3/0x500 [ 534.080233][T23623] ? skb_checksum_help+0x68f/0x730 [ 534.085369][T23623] handle_bug+0x3e/0x70 [ 534.089541][T23623] exc_invalid_op+0x1a/0x50 [ 534.094088][T23623] asm_exc_invalid_op+0x1a/0x20 [ 534.098962][T23623] RIP: 0010:skb_checksum_help+0x68f/0x730 [ 534.104724][T23623] Code: 48 8b 4c 24 10 0f b6 04 01 84 c0 0f 85 89 00 00 00 48 8b 44 24 08 2b 18 48 c7 c7 c0 ac c5 8c 4c 89 f6 89 da e8 f2 c7 00 f8 90 <0f> 0b 90 90 bb ea ff ff ff e9 cf fc ff ff 48 8b 0c 24 80 e1 07 80 [ 534.124361][T23623] RSP: 0018:ffffc90008dbeda8 EFLAGS: 00010246 [ 534.130448][T23623] RAX: 09143f07be7fcf00 RBX: 000000000000298d RCX: 0000000000040000 [ 534.138613][T23623] RDX: ffffc9000ed14000 RSI: 000000000003ffff RDI: 0000000000040000 [ 534.146768][T23623] RBP: dffffc0000000000 R08: ffffffff81585882 R09: fffffbfff1c39994 [ 534.154951][T23623] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 1ffff110045d1126 [ 534.162960][T23623] R13: 0000000000005e97 R14: 0000000000005e99 R15: ffff888022e888c0 [ 534.170983][T23623] ? __warn_printk+0x292/0x360 [ 534.175788][T23623] ? skb_checksum_help+0x68e/0x730 [ 534.180925][T23623] ip_do_fragment+0x21b/0x1b60 [ 534.185969][T23623] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 534.191963][T23623] ? __pfx_ip_finish_output2+0x10/0x10 [ 534.197525][T23623] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 534.203876][T23623] ? __pfx_ip_do_fragment+0x10/0x10 [ 534.209112][T23623] ? kasan_quarantine_put+0xdc/0x230 [ 534.214421][T23623] ? lockdep_hardirqs_on+0x99/0x150 [ 534.219655][T23623] ? __ip_finish_output+0x247/0x400 [ 534.224868][T23623] ? kmem_cache_free+0x145/0x350 [ 534.229826][T23623] ? ip_fragment+0x9a/0x220 [ 534.234440][T23623] __ip_finish_output+0x290/0x400 [ 534.239491][T23623] iptunnel_xmit+0x540/0x9b0 [ 534.244110][T23623] ip_tunnel_xmit+0x2113/0x2940 [ 534.249176][T23623] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 534.254385][T23623] ? gre_build_header+0x341/0xb30 [ 534.259442][T23623] ? __pfx_gre_build_header+0x10/0x10 [ 534.264931][T23623] ? iptunnel_handle_offloads+0x25f/0x650 [ 534.270679][T23623] ipgre_xmit+0x956/0xd40 [ 534.275049][T23623] ? __pfx_ipgre_xmit+0x10/0x10 [ 534.279922][T23623] ? validate_xmit_skb+0xa04/0x1120 [ 534.285167][T23623] dev_hard_start_xmit+0x27a/0x7e0 [ 534.290315][T23623] __dev_queue_xmit+0x1b0e/0x3d30 [ 534.295363][T23623] ? rep_movs_alternative+0x4a/0x70 [ 534.300586][T23623] ? __dev_queue_xmit+0x2d2/0x3d30 [ 534.305722][T23623] ? skb_partial_csum_set+0x105/0x350 [ 534.311145][T23623] ? __pfx___dev_queue_xmit+0x10/0x10 [ 534.316552][T23623] ? virtio_net_hdr_to_skb+0xa6a/0x1330 [ 534.322128][T23623] ? packet_parse_headers+0x7bd/0xad0 [ 534.327529][T23623] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 534.333364][T23623] ? packet_xmit+0x68/0x330 [ 534.337885][T23623] packet_sendmsg+0x46c2/0x6150 [ 534.342805][T23623] ? __pfx___might_resched+0x10/0x10 [ 534.348122][T23623] ? aa_sk_perm+0x967/0xab0 [ 534.352652][T23623] ? __pfx_packet_sendmsg+0x10/0x10 [ 534.357889][T23623] ? __pfx_lock_release+0x10/0x10 [ 534.362951][T23623] ? __import_iovec+0x536/0x820 [ 534.367817][T23623] ? aa_sock_msg_perm+0x91/0x160 [ 534.372785][T23623] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 534.378081][T23623] ? security_socket_sendmsg+0x87/0xb0 [ 534.383557][T23623] ? __pfx_packet_sendmsg+0x10/0x10 [ 534.388884][T23623] __sock_sendmsg+0x221/0x270 [ 534.393593][T23623] ____sys_sendmsg+0x525/0x7d0 [ 534.398417][T23623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 534.403769][T23623] __sys_sendmsg+0x2b0/0x3a0 [ 534.408399][T23623] ? __pfx___sys_sendmsg+0x10/0x10 [ 534.413590][T23623] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 534.420060][T23623] ? do_syscall_64+0x100/0x230 [ 534.424873][T23623] ? do_syscall_64+0xb6/0x230 [ 534.429611][T23623] do_syscall_64+0xf3/0x230 [ 534.434142][T23623] ? clear_bhb_loop+0x35/0x90 [ 534.438837][T23623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.444765][T23623] RIP: 0033:0x7f7d93d75bd9 [ 534.449193][T23623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.468994][T23623] RSP: 002b:00007f7d94a82048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.477456][T23623] RAX: ffffffffffffffda RBX: 00007f7d93f03f60 RCX: 00007f7d93d75bd9 [ 534.485466][T23623] RDX: 0000000000000000 RSI: 0000000020002ac0 RDI: 0000000000000003 [ 534.493470][T23623] RBP: 00007f7d93de4e60 R08: 0000000000000000 R09: 0000000000000000 [ 534.501480][T23623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.509573][T23623] R13: 000000000000000b R14: 00007f7d93f03f60 R15: 00007ffef58bcac8 [ 534.517606][T23623] [ 534.520940][T23623] Kernel Offset: disabled [ 534.525532][T23623] Rebooting in 86400 seconds..