last executing test programs: 58.334366431s ago: executing program 4 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1000000000000010, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'team_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) 47.381546667s ago: executing program 4 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1000000000000010, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'team_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) 37.917570063s ago: executing program 4 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1000000000000010, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'team_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) 27.595523712s ago: executing program 4 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1000000000000010, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'team_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) 17.421792182s ago: executing program 4 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1000000000000010, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'team_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) 7.378183112s ago: executing program 4 (id=246): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1000000000000010, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'team_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) 3.863836492s ago: executing program 0 (id=1607): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5c, r1, 0x300, 0x0, 0x80000, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e300000000d07ec3ee777de374fcaf6ecca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 3.834366069s ago: executing program 0 (id=1608): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3d8, 0x2a8, 0x2a8, 0x3d8, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, 'ip6erspan0\x00', 'pim6reg1\x00'}, 0x0, 0xc8, 0x110, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'gre0\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2a0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="09000000010001", 0x7) setsockopt$inet_buf(r1, 0x0, 0x2a, &(0x7f0000003080)="28410f027a06a5ec90280f53f23a7f83e89ae02572e77804255d41ae923840199f820b50b7a8200fe36c04a7f9846e98d94c6d400af60a16e7858f350311a523d8f8627a3bf6f76b65a3d9aef34055bccc9ed63f4a635bca3586318901a0a3dcced16905b57d8506273df696dfbee4936517a58c1a1555a17179675619f980e8e434a813b4bb5e41b26f71", 0x8b) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r4, 0x208}, {r4, 0x8014}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000080), 0x4) syz_init_net_socket$ax25(0x3, 0x3, 0x7) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89f2, &(0x7f00000000c0)={'bond0\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x1e, 0x0, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r7, 0x101, 0x1, 0x0, 0x0) socket(0x200000100000011, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) setsockopt$inet_int(r8, 0x0, 0x14, 0x0, 0x0) 2.694903347s ago: executing program 0 (id=1609): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x6, 0xef}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x7, 0x2, '.-\x00'}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.516893133s ago: executing program 0 (id=1613): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040)=0x8, 0x4) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'batadv0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x5}}) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.21016968s ago: executing program 0 (id=1617): sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x3fa, 0x8, 0x70bd2a, 0x25dfdbfb, {0x1, 0x1, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x408c1}, 0x4000000) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="1e09f38ed64a8241bf4714381da87a87d73733bc56c644e63bbc6bfc0a16cc7b4bc70b32a5018c4f48e80f4509a8394616dce8b89e9e56309d894cdb519844d9d523b09a2ca6e5279c57f8c2edc50f08b53c587ef1bd00932fdaf3deacf1e69d9d8645389725cde923537b2dd670ba0e86c8c2cd2d4515e8d040f2cbcc", 0x7d}], 0x1}, 0x60004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a68000000060a0b040000380000000000020000003c0004803800018007000100637400002c000280150002400000000508000240000000110800014000000014080001400000000d05000300030000000900010073797a30000000000900020073797a32"], 0x90}}, 0x0) (rerun: 64) 1.650304909s ago: executing program 0 (id=1626): bpf$PROG_LOAD(0x5, 0x0, 0x1004e) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) listen(r1, 0x0) close(r1) (async) close(r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000001200)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}]}}]}, 0x44}}, 0x24000000) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0x2}, 0x26) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f00000003c0)=""/139, 0x8b, 0x0, &(0x7f0000000480)=""/123, 0x7b}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f00000003c0)=""/139, 0x8b, 0x0, &(0x7f0000000480)=""/123, 0x7b}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r8, 0x4) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r10, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r10, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r6) (async) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r6) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x30, r12, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x7, @bearer=@l2={'eth', 0x3a, 'wlan0\x00'}}}}, ["", "", ""]}, 0x30}}, 0x4000010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x8000) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 927.82336ms ago: executing program 2 (id=1639): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockname$packet(r0, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001d00000000000000", 0x1c) 906.665339ms ago: executing program 1 (id=1641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x40}, @CTA_EXPECT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48100) 901.329216ms ago: executing program 2 (id=1642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x7e) 769.713707ms ago: executing program 3 (id=1643): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000080)=0x2) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 659.834381ms ago: executing program 3 (id=1644): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40000}]}}}]}, 0x48}}, 0x88890) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4000359, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) 658.193335ms ago: executing program 2 (id=1645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000040)=0x8) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socket$kcm(0x10, 0x3, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r4, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r5}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f00000003c0)={0x14ae4701}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c0001400000000000000009"], 0x108}}, 0x0) 657.286325ms ago: executing program 1 (id=1646): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}]}, 0x24}], 0x1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, r2}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x6, 0x0, 0xf}, 0x0, 0x40}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x2b}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2, 0x0, 0x0, 0x9}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 538.779253ms ago: executing program 1 (id=1647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_ringparam={0x11, 0x4, 0x8000006, 0x11, 0x1, 0x80000}}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x65}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711020000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa130800450000b0000000000001900700000001ac1414bb0c00907800200001450000030000fa0b04062000e0002229f91b13567869ba78ec799f00027f00000189071fe0000001000cee0dd9de36ed4bcc5b4e0707e5ac1e2001890b000a010100ffffffff444c0001ac1e0801000000007f000001000000000000000000000000ac1414aa00000200ac1e000100000000e0000001010000000a01010100000000ffffffff00000000ffffffffffc5aaab3ef952e20a00"/203], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x4, 0x4, 0x12, 0x18d6, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRESDEC], 0x44) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000005c0)={r4, 0x0, 0xaa, 0x0, &(0x7f0000000480)="19a8690acbb73567b67314b1ad17e833916da666d93e92b8e08ca092cc69071dfe1b2af2a8f3d5bfedd1a815d729c18209c451496df30185ea05e3aeb821ca744450555e9679c13d94dd4da0dbf6c826907791639c78c1fad134d0fcdde7108fcbcae1a50babd0052da5e4a0508f5ba97b2c18fd3ed4d7aae9009fb41b074e75f0ae3d49fce5104ee38280a5ca5d10b7afe2867df4fbd92ba252b4dbf3e61b1e234c356af71eff66d9ea", 0x0, 0x401, 0x0, 0x67, 0x0, &(0x7f0000000540)="8ee163893efb3157d1e34e68d563320279e428feb32a8c361d71b330265a841eb500f665557e454534f695cb4430648793c73b16d51b08edc0cf262fe7bf4db3102f7b5159f440d46346473ec1dc32392aa8dc5fc83f590bdbf78778c7e5ce20a28e52645f3793", 0x0, 0x2, 0x0, 0x5f}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500080001400200000901ac040000d67f6f457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8144fe1cace81ed0b7fece0b42a9ecbee5de6ccd40dd2e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162389a868a1e1fc60a", 0xd8}], 0x1}, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x2c, &(0x7f0000000280)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, @in6={0xa, 0x4e1c, 0x4, @empty, 0xf}]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000440)={r7, 0xd, 0x5, 0x2f11085, 0xbced, 0x9}, 0x14) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r6, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=[{0x10}, {0x10, 0x114, 0x1}], 0x20}, 0x0) r8 = socket$tipc(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/12], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 516.712187ms ago: executing program 3 (id=1648): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r1, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 419.816154ms ago: executing program 2 (id=1649): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x9d, 0x4) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x41, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000004", @ANYRES16=r2, @ANYBLOB="2d6626bd700000000000210000000a0001007770616e3100000009001f0070687930000000000a0001007770616e310000000c0005000201aaaaaaaaaaaa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x617ec479, 0x7f, 0x2}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0xb1, 0x0, 0x0, 0xfffffffd}, {0x6}]}, 0x10) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c010000160001000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000edb78132000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14142c000000000000000000000000000000006c000000ac1414aa0000000000000000000000000000010000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000400000000000000000000000000000000000000000000000600000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000022000000000000000000000032100000240009001733db4d0000000003000000000000000500000000000000faffffffffffffff"], 0x11c}}, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001800010000000000000000000a000000ff00fd000000000008000400", @ANYRES32=r8, @ANYBLOB="06001500070000000c0016800800010004"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x80, 0x0, 0x40, 0x200, 0x1, 0x2, '\x00', r8, r3, 0x5, 0x2, 0x1, 0xc, @void, @value, @void, @value}, 0x50) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r11, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r12, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="b702000003460200bfa30000000000001702000000feffff7a0af0ff14ffffff79a4f0ff00000000b7060000ff0800007e640200000000005502faff037202000404000001007d60a6040000001000006a0a58fe39000f00850000003f0000009c600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b04000000f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81ec8439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcb9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b506bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccd50523d3360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f6b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670594acec7a9da17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc6cb0d4a14281e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b6198366283c531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f674eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc8557f9a2e15483dbafb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cf352fb5a376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d895a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a2047b7ba57a5d1fe58a00c6855ada17dcbb20a2f03164292a1e4e53e4140224ba82b599de2604398b860906dccd87c1bf0e8d0cce2e34589ef2bd3672907b7604034d4697fa3f957622eaa59df5c02b307bceaf138b419ce49f4850328069ed4d5559babf388329d6605f74dc1c21c9f0f1aa9826ba2936f14affb0b06d0aeb1054b2d044cafe64979590000000000000000000000784de836bec51a9db6533248165f79bf47b13d6d2c83a7442632f60f9eb0cc4fa54e08e5e349cc3afdff6f3175a80c4015d380ee0880a8a822d0a630a864c823392420ec93fab6d4d98a53c8b75221a9576e8204169fa1046355a0342539527e882e7fcaf062f0733fc0fb97"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @lsm=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x1, 0x20000000}, 0x10, r12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 392.188514ms ago: executing program 3 (id=1650): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}]}}]}, 0x468}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112080000000000950b3a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x9403, 0x3002, 0x180, 0x2c0, 0x248, 0x3d8, 0x3d8, 0x248, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, [0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@hbh={{0x48}, {0x9, 0x2, 0x0, [0x0, 0xc4c0, 0x8, 0x3, 0xf1af, 0x1000, 0x0, 0x3ff, 0x5e, 0x1, 0x0, 0x3, 0x0, 0xa2, 0x3ff], 0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0xfeff, 0xfffffff7, 0x7ff, 'syz0\x00', 'syz0\x00', {0x100}}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_int(r4, 0x1, 0x2e, 0x0, &(0x7f0000000500)=0x5c) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r6 = socket(0x200000000000011, 0x2, 0x0) (async) unshare(0x20000400) (async) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) (async, rerun: 32) r9 = socket(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000080)="7800000018002507b9409b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d040012000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x52) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r11, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x580, 0x2232}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) 366.241048ms ago: executing program 1 (id=1651): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x120) syz_emit_ethernet(0x6c, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffff010000000180c200000008004503005e00000000002f907800000000e0000101248088a80000000000ff0000100008000000000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x8, 0x1, 0x3, 0xffffde2e, 0x4000, 0x1, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x608, 0x3, 0x200, 0x8a8, 0x7, 0x18000000, 0x8a8, 0x1c0, 0x978, 0x290, 0x290, 0x978, 0x290, 0x3, 0x0, {[{{@ip={@private, @multicast2, 0x0, 0x0, 'batadv_slave_0\x00', 'bridge_slave_1\x00'}, 0x0, 0x70, 0x98, 0x0, {0x36020000}}, @common=@inet=@SET1={0x28}}, {{@ip={@loopback, @remote, 0x0, 0x0, 'erspan0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x8, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @ldst={0x3, 0x2, 0x3, 0x8, 0x4, 0x4, 0x8}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @generic={0x82, 0xc, 0x8, 0x8, 0x5}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}], &(0x7f0000000540)='GPL\x00', 0x1, 0x8a, &(0x7f0000000580)=""/138, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0x10, 0xfffffffc, 0x7a1}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000006c0)=[{0x1, 0x5, 0x0, 0x7}], 0x10, 0x5, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xa, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}]}, 0x28}}, 0x0) sendmsg$unix(r10, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r9, @ANYRES32=r10], 0x18, 0x4000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x9, 0x1d, &(0x7f00000002c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @map_fd={0x18, 0xb, 0x1, 0x0, r2}, @generic={0x10, 0x4, 0xe, 0x7}, @map_val={0x18, 0x7, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f0000000240)='GPL\x00', 0x0, 0xfc, &(0x7f00000003c0)=""/252, 0x41000, 0x40, '\x00', 0x0, @fallback=0xc, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0x4, 0x1, 0x80000000}, 0x10, 0x0, r7, 0x7, &(0x7f00000008c0)=[r8, r9, r12], &(0x7f0000000900)=[{0x3, 0x5, 0x4, 0xa}, {0x3, 0x4, 0x4, 0xc}, {0x4, 0x5, 0xa, 0x5}, {0x5, 0x5, 0x2, 0x6}, {0x4, 0x4, 0x6}, {0x3, 0x2, 0x4}, {0x0, 0x5, 0x9, 0x6}], 0x10, 0x7ff, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @private2, 0x7b}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="83", 0x1}], 0x1}, 0x4000840) 291.251799ms ago: executing program 2 (id=1652): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x00', 0x6132}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xfd9b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x35, 0xffffffffffffffff}, 0x10) close(r0) 167.942127ms ago: executing program 1 (id=1653): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x11, 0xa, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000505d25a806c8c6f94f90524fc600a080a0002000000051d82c137153e374c0c0980fc6310000300", 0x33fe0}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r0, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) 167.365985ms ago: executing program 3 (id=1654): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$sock_proto_private(r0, 0x89ea, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x840000000002, 0x3, 0xfa) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x7b3ce8b6e0e600e0, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x10012, r1, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) 111.00048ms ago: executing program 1 (id=1655): syz_emit_ethernet(0x6e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x38, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@dstopts={0x88}]}}}}}}}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000300", 0x33fe0}], 0x1}, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000100)=0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c20476"], 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, &(0x7f0000000140)) 62.019709ms ago: executing program 2 (id=1656): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000380)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, 'macvtap0\x00'}}, 0x1e) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) (async) r2 = socket$inet6(0xa, 0x80000, 0xe) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x20000) 0s ago: executing program 3 (id=1657): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x84, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): ast mode [ 107.164755][ T7542] bridge_slave_0: entered promiscuous mode [ 107.185091][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 107.199361][ T7542] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.227056][ T7542] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.237345][ T7542] bridge_slave_1: entered allmulticast mode [ 107.253045][ T7542] bridge_slave_1: entered promiscuous mode [ 107.460073][ T5152] Bluetooth: hci3: command tx timeout [ 107.470040][ T7542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.556894][ T7542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.715088][ T1163] hsr_slave_0: left promiscuous mode [ 107.731992][ T1163] hsr_slave_1: left promiscuous mode [ 107.743100][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.751188][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.759949][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.767780][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.790949][ T1163] veth1_macvtap: left promiscuous mode [ 107.797277][ T1163] veth0_macvtap: left promiscuous mode [ 107.803902][ T1163] veth1_vlan: left promiscuous mode [ 107.809584][ T1163] veth0_vlan: left promiscuous mode [ 108.373317][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 108.421951][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 108.862631][ T7655] lo: entered promiscuous mode [ 108.867888][ T7655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.963514][ T7542] team0: Port device team_slave_0 added [ 108.981561][ T7542] team0: Port device team_slave_1 added [ 109.015043][ T7672] FAULT_INJECTION: forcing a failure. [ 109.015043][ T7672] name failslab, interval 1, probability 0, space 0, times 1 [ 109.069352][ T7672] CPU: 1 UID: 0 PID: 7672 Comm: syz.2.556 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 109.080010][ T7672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 109.090114][ T7672] Call Trace: [ 109.093561][ T7672] [ 109.096522][ T7672] dump_stack_lvl+0x241/0x360 [ 109.101263][ T7672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.106507][ T7672] ? __pfx__printk+0x10/0x10 [ 109.111147][ T7672] ? ref_tracker_alloc+0x332/0x490 [ 109.116302][ T7672] should_fail_ex+0x3b0/0x4e0 [ 109.121015][ T7672] ? skb_clone+0x20c/0x390 [ 109.125461][ T7672] should_failslab+0xac/0x100 [ 109.130161][ T7672] ? skb_clone+0x20c/0x390 [ 109.134583][ T7672] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 109.139974][ T7672] skb_clone+0x20c/0x390 [ 109.144231][ T7672] __netlink_deliver_tap+0x3cc/0x7c0 [ 109.149528][ T7672] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.154726][ T7672] netlink_deliver_tap+0x19d/0x1b0 [ 109.159836][ T7672] netlink_unicast+0x7c4/0x990 [ 109.164603][ T7672] ? __pfx_netlink_unicast+0x10/0x10 [ 109.169882][ T7672] ? __virt_addr_valid+0x183/0x530 [ 109.175015][ T7672] ? __check_object_size+0x48e/0x900 [ 109.180320][ T7672] netlink_sendmsg+0x8e4/0xcb0 [ 109.185110][ T7672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.190410][ T7672] ? aa_sock_msg_perm+0x91/0x160 [ 109.195374][ T7672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.200661][ T7672] __sock_sendmsg+0x221/0x270 [ 109.205345][ T7672] ____sys_sendmsg+0x52a/0x7e0 [ 109.210117][ T7672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.215422][ T7672] __sys_sendmsg+0x292/0x380 [ 109.220014][ T7672] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.225137][ T7672] ? __pfx_vfs_write+0x10/0x10 [ 109.229923][ T7672] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 109.236259][ T7672] ? do_syscall_64+0x100/0x230 [ 109.241032][ T7672] ? do_syscall_64+0xb6/0x230 [ 109.245710][ T7672] do_syscall_64+0xf3/0x230 [ 109.250212][ T7672] ? clear_bhb_loop+0x35/0x90 [ 109.254904][ T7672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.260796][ T7672] RIP: 0033:0x7f7d0257e759 [ 109.265224][ T7672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.284826][ T7672] RSP: 002b:00007f7d03412038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.293245][ T7672] RAX: ffffffffffffffda RBX: 00007f7d02735f80 RCX: 00007f7d0257e759 [ 109.301214][ T7672] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 109.309179][ T7672] RBP: 00007f7d03412090 R08: 0000000000000000 R09: 0000000000000000 [ 109.317143][ T7672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.325109][ T7672] R13: 0000000000000000 R14: 00007f7d02735f80 R15: 00007ffd7d680888 [ 109.333088][ T7672] [ 109.384436][ T7685] netlink: 666 bytes leftover after parsing attributes in process `syz.0.559'. [ 109.413925][ T7542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.436639][ T7542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.466560][ T7676] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.558'. [ 109.477018][ T7542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.498494][ T7542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.507375][ T7542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.512621][ T7690] x_tables: duplicate underflow at hook 2 [ 109.542671][ T5152] Bluetooth: hci3: command tx timeout [ 109.548220][ T7542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.842332][ T7542] hsr_slave_0: entered promiscuous mode [ 109.849846][ T7542] hsr_slave_1: entered promiscuous mode [ 109.859624][ T7542] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.867414][ T7542] Cannot create hsr debugfs directory [ 109.912902][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.570'. [ 110.119669][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.573'. [ 110.265268][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.576'. [ 110.287248][ T7723] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.576'. [ 110.508527][ T7542] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 110.523896][ T7542] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 110.536415][ T7697] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 110.548190][ T7736] netlink: 76 bytes leftover after parsing attributes in process `syz.2.581'. [ 110.561274][ T7542] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 110.596015][ T7736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 110.607628][ T7542] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.805237][ T7542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.814385][ T7749] x_tables: duplicate underflow at hook 1 [ 110.841584][ T7748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'. [ 110.861478][ T7542] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.880835][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.888049][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.931593][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.938900][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.385682][ T7542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.499210][ T7774] netlink: 'syz.3.590': attribute type 21 has an invalid length. [ 111.517698][ T7774] IPv6: NLM_F_CREATE should be specified when creating new route [ 111.638304][ T5152] Bluetooth: hci3: command tx timeout [ 111.723071][ T7784] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.593'. [ 111.807424][ T7782] unknown channel width for channel at 909000KHz? [ 111.809120][ T7542] veth0_vlan: entered promiscuous mode [ 111.843709][ T7542] veth1_vlan: entered promiscuous mode [ 111.956345][ T7542] veth0_macvtap: entered promiscuous mode [ 111.980762][ T7542] veth1_macvtap: entered promiscuous mode [ 112.005742][ T7542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.016985][ T7542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.039753][ T7800] netlink: 'syz.0.595': attribute type 9 has an invalid length. [ 112.047557][ T7542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.058298][ T7542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.068265][ T7542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.078786][ T7542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.089317][ T7542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.100250][ T7542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.112432][ T7542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.128509][ T7800] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 112.150494][ T7542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.163455][ T7542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.177575][ T7542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.191020][ T7542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.201384][ T7542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.212283][ T7542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.222283][ T7542] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 112.232856][ T7542] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.244093][ T7542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.254661][ T7542] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.263634][ T7542] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.272817][ T7542] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.282081][ T7542] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.415865][ T7813] FAULT_INJECTION: forcing a failure. [ 112.415865][ T7813] name failslab, interval 1, probability 0, space 0, times 0 [ 112.435327][ T7813] CPU: 0 UID: 0 PID: 7813 Comm: syz.2.600 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 112.445983][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 112.456077][ T7813] Call Trace: [ 112.459385][ T7813] [ 112.462321][ T7813] dump_stack_lvl+0x241/0x360 [ 112.467123][ T7813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.472356][ T7813] ? __pfx__printk+0x10/0x10 [ 112.476985][ T7813] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 112.483008][ T7813] ? __pfx___might_resched+0x10/0x10 [ 112.488346][ T7813] should_fail_ex+0x3b0/0x4e0 [ 112.493074][ T7813] should_failslab+0xac/0x100 [ 112.497778][ T7813] ? __alloc_skb+0x1c3/0x440 [ 112.502376][ T7813] kmem_cache_alloc_node_noprof+0x71/0x320 [ 112.508197][ T7813] __alloc_skb+0x1c3/0x440 [ 112.512625][ T7813] ? __pfx___alloc_skb+0x10/0x10 [ 112.517569][ T7813] ? netlink_ack_tlv_len+0x6e/0x200 [ 112.522785][ T7813] netlink_ack+0x13f/0xa30 [ 112.527205][ T7813] ? __pfx_lock_acquire+0x10/0x10 [ 112.532233][ T7813] ? __pfx_nl80211_start_ap+0x10/0x10 [ 112.537610][ T7813] ? __pfx_nl80211_post_doit+0x10/0x10 [ 112.543084][ T7813] netlink_rcv_skb+0x262/0x430 [ 112.547852][ T7813] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.552884][ T7813] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.558177][ T7813] ? __netlink_deliver_tap+0x77e/0x7c0 [ 112.563645][ T7813] genl_rcv+0x28/0x40 [ 112.567637][ T7813] netlink_unicast+0x7f6/0x990 [ 112.572412][ T7813] ? __pfx_netlink_unicast+0x10/0x10 [ 112.577731][ T7813] ? __virt_addr_valid+0x183/0x530 [ 112.582848][ T7813] ? __check_object_size+0x48e/0x900 [ 112.588139][ T7813] netlink_sendmsg+0x8e4/0xcb0 [ 112.592917][ T7813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.598226][ T7813] ? aa_sock_msg_perm+0x91/0x160 [ 112.603171][ T7813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.608455][ T7813] __sock_sendmsg+0x221/0x270 [ 112.613137][ T7813] ____sys_sendmsg+0x52a/0x7e0 [ 112.617913][ T7813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.623217][ T7813] __sys_sendmsg+0x292/0x380 [ 112.627838][ T7813] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.632996][ T7813] ? __pfx_vfs_write+0x10/0x10 [ 112.637785][ T7813] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.644125][ T7813] ? do_syscall_64+0x100/0x230 [ 112.648897][ T7813] ? do_syscall_64+0xb6/0x230 [ 112.653580][ T7813] do_syscall_64+0xf3/0x230 [ 112.658085][ T7813] ? clear_bhb_loop+0x35/0x90 [ 112.662803][ T7813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.668719][ T7813] RIP: 0033:0x7f7d0257e759 [ 112.673142][ T7813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.692764][ T7813] RSP: 002b:00007f7d03412038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.701186][ T7813] RAX: ffffffffffffffda RBX: 00007f7d02735f80 RCX: 00007f7d0257e759 [ 112.709158][ T7813] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 112.717126][ T7813] RBP: 00007f7d03412090 R08: 0000000000000000 R09: 0000000000000000 [ 112.725102][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.733184][ T7813] R13: 0000000000000000 R14: 00007f7d02735f80 R15: 00007ffd7d680888 [ 112.741173][ T7813] [ 112.745714][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.750560][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.755181][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.763438][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.097018][ T7821] xfrm0 speed is unknown, defaulting to 1000 [ 113.104309][ T7821] xfrm0 speed is unknown, defaulting to 1000 [ 113.117398][ T7821] xfrm0 speed is unknown, defaulting to 1000 [ 113.150377][ T7821] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 113.185882][ T7821] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 113.230319][ T7821] xfrm0 speed is unknown, defaulting to 1000 [ 113.248419][ T7821] xfrm0 speed is unknown, defaulting to 1000 [ 113.256879][ T7821] xfrm0 speed is unknown, defaulting to 1000 [ 113.276935][ T7821] xfrm0 speed is unknown, defaulting to 1000 [ 113.284537][ T7832] netlink: 'syz.1.609': attribute type 4 has an invalid length. [ 113.316609][ T7832] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 113.339108][ T7821] xfrm0 speed is unknown, defaulting to 1000 [ 113.349982][ T7836] netlink: 'syz.3.610': attribute type 1 has an invalid length. [ 113.438566][ T7843] netlink: 'syz.0.611': attribute type 9 has an invalid length. [ 113.532317][ T7853] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 113.620391][ T7852] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 113.645342][ T7852] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 113.653555][ T7852] gretap2: entered promiscuous mode [ 113.659767][ T7852] gretap2: entered allmulticast mode [ 113.752815][ T7866] netlink: 'syz.2.621': attribute type 4 has an invalid length. [ 113.767558][ T7864] netlink: 'syz.3.619': attribute type 2 has an invalid length. [ 113.862981][ T7874] netlink: 'syz.2.623': attribute type 7 has an invalid length. [ 113.905677][ T7874] Κό: entered promiscuous mode [ 113.997963][ T7880] xt_hashlimit: overflow, rate too high: 0 [ 114.251829][ T7897] FAULT_INJECTION: forcing a failure. [ 114.251829][ T7897] name failslab, interval 1, probability 0, space 0, times 0 [ 114.279052][ T7897] CPU: 0 UID: 0 PID: 7897 Comm: syz.0.633 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 114.289708][ T7897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 114.299795][ T7897] Call Trace: [ 114.303112][ T7897] [ 114.306072][ T7897] dump_stack_lvl+0x241/0x360 [ 114.310792][ T7897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.316121][ T7897] ? __pfx__printk+0x10/0x10 [ 114.320769][ T7897] ? ref_tracker_alloc+0x332/0x490 [ 114.325928][ T7897] should_fail_ex+0x3b0/0x4e0 [ 114.330651][ T7897] ? skb_clone+0x20c/0x390 [ 114.335112][ T7897] should_failslab+0xac/0x100 [ 114.339827][ T7897] ? skb_clone+0x20c/0x390 [ 114.344284][ T7897] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 114.349709][ T7897] skb_clone+0x20c/0x390 [ 114.353997][ T7897] __netlink_deliver_tap+0x3cc/0x7c0 [ 114.359329][ T7897] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.363465][ T7903] netlink: 'syz.1.637': attribute type 3 has an invalid length. [ 114.364544][ T7897] netlink_deliver_tap+0x19d/0x1b0 [ 114.364589][ T7897] netlink_sendskb+0x68/0x140 [ 114.382039][ T7897] netlink_unicast+0x39d/0x990 [ 114.386835][ T7897] ? __asan_memcpy+0x40/0x70 [ 114.391469][ T7897] ? __pfx_netlink_unicast+0x10/0x10 [ 114.396821][ T7897] netlink_rcv_skb+0x262/0x430 [ 114.401636][ T7897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 114.406711][ T7897] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.412065][ T7897] ? __netlink_deliver_tap+0x77e/0x7c0 [ 114.417579][ T7897] genl_rcv+0x28/0x40 [ 114.421607][ T7897] netlink_unicast+0x7f6/0x990 [ 114.426436][ T7897] ? __pfx_netlink_unicast+0x10/0x10 [ 114.431756][ T7897] ? __virt_addr_valid+0x183/0x530 [ 114.436912][ T7897] ? __check_object_size+0x48e/0x900 [ 114.442250][ T7897] netlink_sendmsg+0x8e4/0xcb0 [ 114.447071][ T7897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.452412][ T7897] ? aa_sock_msg_perm+0x91/0x160 [ 114.457414][ T7897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.462741][ T7897] __sock_sendmsg+0x221/0x270 [ 114.467460][ T7897] ____sys_sendmsg+0x52a/0x7e0 [ 114.472279][ T7897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.477621][ T7897] __sys_sendmsg+0x292/0x380 [ 114.482261][ T7897] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.487426][ T7897] ? __pfx_vfs_write+0x10/0x10 [ 114.492254][ T7897] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.498629][ T7897] ? do_syscall_64+0x100/0x230 [ 114.503444][ T7897] ? do_syscall_64+0xb6/0x230 [ 114.508167][ T7897] do_syscall_64+0xf3/0x230 [ 114.512717][ T7897] ? clear_bhb_loop+0x35/0x90 [ 114.517447][ T7897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.523389][ T7897] RIP: 0033:0x7fed11b7e759 [ 114.527835][ T7897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.547474][ T7897] RSP: 002b:00007fed12a35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.555929][ T7897] RAX: ffffffffffffffda RBX: 00007fed11d35f80 RCX: 00007fed11b7e759 [ 114.563938][ T7897] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 114.571945][ T7897] RBP: 00007fed12a35090 R08: 0000000000000000 R09: 0000000000000000 [ 114.579953][ T7897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.586161][ T7912] __nla_validate_parse: 16 callbacks suppressed [ 114.586182][ T7912] netlink: 9 bytes leftover after parsing attributes in process `syz.2.638'. [ 114.587927][ T7897] R13: 0000000000000000 R14: 00007fed11d35f80 R15: 00007ffd0ec5a318 [ 114.587962][ T7897] [ 114.625388][ T7912] 0·: renamed from hsr_slave_1 (while UP) [ 114.642086][ T7912] 0·: entered allmulticast mode [ 114.647413][ T7912] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 114.726945][ T7917] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.641'. [ 114.744394][ T7917] openvswitch: netlink: Multiple metadata blocks provided [ 114.818183][ T7919] IPVS: Error connecting to the multicast addr [ 114.984854][ T1163] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.376641][ T1163] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.446824][ T1163] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.625201][ T7942] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 4, id = 0 [ 115.640049][ T7940] netlink: 36 bytes leftover after parsing attributes in process `syz.3.648'. [ 115.669548][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.679468][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.688805][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.694877][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 115.708134][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.729165][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 115.744364][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 115.807334][ T1163] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.891535][ T7953] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 115.918773][ T7945] lo speed is unknown, defaulting to 1000 [ 116.122668][ T1163] bridge_slave_1: left allmulticast mode [ 116.135209][ T1163] bridge_slave_1: left promiscuous mode [ 116.161423][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.216086][ T1163] bridge_slave_0: left allmulticast mode [ 116.234425][ T1163] bridge_slave_0: left promiscuous mode [ 116.251913][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.740227][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.754427][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.765642][ T1163] bond0 (unregistering): Released all slaves [ 116.779110][ T7945] xfrm0 speed is unknown, defaulting to 1000 [ 117.057644][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 117.387668][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.666'. [ 117.577083][ T1163] hsr_slave_0: left promiscuous mode [ 117.586593][ T1163] hsr_slave_1: left promiscuous mode [ 117.595780][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.604049][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.632542][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.657110][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.719300][ T1163] veth1_macvtap: left promiscuous mode [ 117.724901][ T1163] veth0_macvtap: left promiscuous mode [ 117.732457][ T1163] veth1_vlan: left promiscuous mode [ 117.739177][ T1163] veth0_vlan: left promiscuous mode [ 117.779925][ T54] Bluetooth: hci3: command tx timeout [ 118.248014][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 118.297910][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 118.785591][ T7945] chnl_net:caif_netlink_parms(): no params data found [ 118.949184][ T8058] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 119.030216][ T7945] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.037444][ T7945] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.076961][ T7945] bridge_slave_0: entered allmulticast mode [ 119.086107][ T7945] bridge_slave_0: entered promiscuous mode [ 119.105004][ T7945] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.109373][ T8068] netlink: 'syz.0.679': attribute type 7 has an invalid length. [ 119.116721][ T7945] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.136352][ T8068] netlink: 'syz.0.679': attribute type 8 has an invalid length. [ 119.147500][ T7945] bridge_slave_1: entered allmulticast mode [ 119.153888][ T8068] netlink: 4244 bytes leftover after parsing attributes in process `syz.0.679'. [ 119.179604][ T7945] bridge_slave_1: entered promiscuous mode [ 119.303442][ T7945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.316196][ T7945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.374814][ T7945] team0: Port device team_slave_0 added [ 119.402133][ T7945] team0: Port device team_slave_1 added [ 119.448140][ T8091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.687'. [ 119.491584][ T7945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.498590][ T7945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.558244][ T7945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.601919][ T7945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.609391][ T7945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.640862][ T7945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.678038][ T8101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.756873][ T7945] hsr_slave_0: entered promiscuous mode [ 119.773807][ T7945] hsr_slave_1: entered promiscuous mode [ 119.792084][ T7945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.809057][ T7945] Cannot create hsr debugfs directory [ 119.815483][ T8103] netlink: 304 bytes leftover after parsing attributes in process `syz.1.692'. [ 119.859060][ T54] Bluetooth: hci3: command tx timeout [ 120.036743][ T8110] x_tables: duplicate underflow at hook 1 [ 120.193270][ T8119] netlink: 'syz.2.697': attribute type 21 has an invalid length. [ 120.223420][ T8122] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 120.236641][ T8122] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 120.244627][ T8122] netlink: 9344 bytes leftover after parsing attributes in process `syz.1.698'. [ 120.259420][ T8122] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 120.574984][ T7945] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.586041][ T7945] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.617638][ T7945] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.653061][ T7945] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.788349][ T7945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.810836][ T8152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.706'. [ 120.833975][ T8152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.881002][ T7945] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.903183][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.910397][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.932134][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.939356][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.231972][ T7945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.344541][ T8184] netlink: 4072 bytes leftover after parsing attributes in process `syz.1.716'. [ 121.373520][ T8184] openvswitch: netlink: Actions may not be safe on all matching packets [ 121.513364][ T8190] netlink: 'syz.2.718': attribute type 2 has an invalid length. [ 121.626234][ T7945] veth0_vlan: entered promiscuous mode [ 121.646121][ T8205] tipc: Failed to remove unknown binding: 66,1,1/0:2773087103/2773087105 [ 121.652908][ T7945] veth1_vlan: entered promiscuous mode [ 121.667677][ T8205] tipc: Failed to remove unknown binding: 66,1,1/0:2773087103/2773087105 [ 121.697683][ T7945] veth0_macvtap: entered promiscuous mode [ 121.711571][ T7945] veth1_macvtap: entered promiscuous mode [ 121.743872][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.756041][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.767425][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.778532][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.790684][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.801898][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.824291][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.838736][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.852193][ T7945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.869688][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.889882][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.901313][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.916675][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.928130][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.941149][ T54] Bluetooth: hci3: command tx timeout [ 121.947538][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.958322][ T7945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.969561][ T7945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.981094][ T7945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.990200][ T8219] netlink: 40 bytes leftover after parsing attributes in process `syz.1.725'. [ 122.010106][ T7945] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.019771][ T7945] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.028623][ T7945] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.038765][ T7945] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.157732][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.166293][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.274179][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.297680][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.784764][ T8258] netlink: 1340 bytes leftover after parsing attributes in process `syz.0.738'. [ 123.031582][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.745'. [ 123.037388][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.747'. [ 123.046220][ T8274] netlink: 48 bytes leftover after parsing attributes in process `syz.1.745'. [ 123.060472][ T8274] netlink: 36 bytes leftover after parsing attributes in process `syz.1.745'. [ 123.081336][ T8274] vlan2: entered allmulticast mode [ 123.100262][ T8281] SET target dimension over the limit! [ 123.137801][ T8278] pimreg: entered allmulticast mode [ 123.485243][ T8307] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 123.683195][ T1102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.351915][ T8321] IPVS: Error connecting to the multicast addr [ 124.390816][ T8324] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 124.462819][ T8326] lo speed is unknown, defaulting to 1000 [ 124.664575][ T54] Bluetooth: hci4: command tx timeout [ 124.721768][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.731792][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.748182][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.760702][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.766959][ T8326] xfrm0 speed is unknown, defaulting to 1000 [ 124.781603][ T5152] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 124.791407][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.936240][ T1102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.981738][ T8344] lo speed is unknown, defaulting to 1000 [ 125.140212][ T1102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.241121][ T1102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.282947][ T8344] xfrm0 speed is unknown, defaulting to 1000 [ 125.601607][ T1102] bridge_slave_1: left allmulticast mode [ 125.607311][ T1102] bridge_slave_1: left promiscuous mode [ 125.641180][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.676804][ T1102] bridge_slave_0: left allmulticast mode [ 125.682876][ T1102] bridge_slave_0: left promiscuous mode [ 125.688826][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.116419][ T8412] netlink: 'syz.0.787': attribute type 3 has an invalid length. [ 126.125012][ T8412] __nla_validate_parse: 4 callbacks suppressed [ 126.125024][ T8412] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.787'. [ 126.282237][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.293696][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.306999][ T1102] bond0 (unregistering): Released all slaves [ 126.338735][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 126.379530][ T8411] bridge_slAve_0: renamed from lo (while UP) [ 126.420528][ T8411] infiniband syz0: set down [ 126.426157][ T2145] bridge_slAve_0 speed is unknown, defaulting to 1000 [ 126.435168][ T2145] bridge_slAve_0 speed is unknown, defaulting to 1000 [ 126.616522][ T8429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.793'. [ 126.626398][ T8429] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 126.791347][ T8344] chnl_net:caif_netlink_parms(): no params data found [ 126.820691][ T54] Bluetooth: hci3: command tx timeout [ 126.967479][ T8452] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 126.985476][ T8452] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 127.070949][ T1102] hsr_slave_0: left promiscuous mode [ 127.077017][ T1102] hsr_slave_1: left promiscuous mode [ 127.089093][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.096629][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.105017][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.112645][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.134874][ T1102] veth1_macvtap: left promiscuous mode [ 127.140957][ T1102] veth0_macvtap: left promiscuous mode [ 127.146715][ T1102] veth1_vlan: left promiscuous mode [ 127.152549][ T1102] veth0_vlan: left promiscuous mode [ 127.688748][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 127.736947][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 128.295191][ T8474] netlink: 'syz.3.803': attribute type 1 has an invalid length. [ 128.303262][ T8474] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.803'. [ 128.309558][ T8472] netlink: 'syz.1.802': attribute type 1 has an invalid length. [ 128.323064][ T8472] netlink: 'syz.1.802': attribute type 2 has an invalid length. [ 128.454543][ T8344] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.462197][ T8344] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.469732][ T8344] bridge_slave_0: entered allmulticast mode [ 128.477407][ T8344] bridge_slave_0: entered promiscuous mode [ 128.490437][ T8344] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.499892][ T8344] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.513315][ T8344] bridge_slave_1: entered allmulticast mode [ 128.521010][ T8344] bridge_slave_1: entered promiscuous mode [ 128.636635][ T8484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.807'. [ 128.696480][ T8344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.724841][ T8492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 128.743644][ T8344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.827049][ T8344] team0: Port device team_slave_0 added [ 128.847061][ T8344] team0: Port device team_slave_1 added [ 128.892314][ T8344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.904340][ T54] Bluetooth: hci3: command tx timeout [ 128.907129][ T8344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.939264][ T8344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.952630][ T8344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.960184][ T8344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.986978][ T8344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.070171][ T8344] hsr_slave_0: entered promiscuous mode [ 129.082151][ T8344] hsr_slave_1: entered promiscuous mode [ 129.092785][ T8344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.100855][ T8344] Cannot create hsr debugfs directory [ 129.180736][ T8510] netlink: 'syz.3.815': attribute type 5 has an invalid length. [ 129.305583][ T8514] netlink: 20 bytes leftover after parsing attributes in process `syz.2.817'. [ 129.521355][ T8524] netlink: 2 bytes leftover after parsing attributes in process `syz.2.821'. [ 129.640176][ T8344] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 129.667954][ T8344] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 129.683160][ T8534] netlink: 160 bytes leftover after parsing attributes in process `syz.0.824'. [ 129.692851][ T8344] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 129.711682][ T8344] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.827073][ T8538] netlink: 'syz.0.826': attribute type 1 has an invalid length. [ 129.838639][ T8538] netlink: 224 bytes leftover after parsing attributes in process `syz.0.826'. [ 129.870396][ T8344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.912508][ T8344] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.938071][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.945319][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.995529][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.002856][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.525514][ T8344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.620095][ T8583] netlink: 'syz.3.840': attribute type 7 has an invalid length. [ 130.649775][ T8583] netlink: 'syz.3.840': attribute type 8 has an invalid length. [ 130.697489][ T8591] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 130.979679][ T54] Bluetooth: hci3: command tx timeout [ 131.020806][ T8344] veth0_vlan: entered promiscuous mode [ 131.038234][ T8344] veth1_vlan: entered promiscuous mode [ 131.090353][ T8344] veth0_macvtap: entered promiscuous mode [ 131.171124][ T8344] veth1_macvtap: entered promiscuous mode [ 131.177384][ T8618] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 131.234651][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.267756][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.284480][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.295528][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.312093][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.323260][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.335510][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.346900][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.358763][ T8630] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 131.389811][ T8344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.416220][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.427374][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.455393][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.472168][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.485347][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.494575][ T8632] x_tables: unsorted underflow at hook 3 [ 131.512457][ T8637] __nla_validate_parse: 6 callbacks suppressed [ 131.512475][ T8637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.858'. [ 131.529511][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.550426][ T8344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.566613][ T8344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.587127][ T8344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.615000][ T8344] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.629308][ T8344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.638077][ T8344] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.647019][ T8344] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.765705][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.774187][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.843410][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.872243][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.115002][ T8661] vlan2: entered allmulticast mode [ 132.125652][ T8661] bond0: entered allmulticast mode [ 132.132864][ T8661] bond_slave_0: entered allmulticast mode [ 132.138818][ T8661] bond_slave_1: entered allmulticast mode [ 132.154132][ T8661] bond0: left allmulticast mode [ 132.163426][ T8661] bond_slave_0: left allmulticast mode [ 132.174667][ T8661] bond_slave_1: left allmulticast mode [ 132.243348][ T8673] netlink: 48 bytes leftover after parsing attributes in process `syz.3.865'. [ 132.360651][ T8678] xt_hashlimit: max too large, truncated to 1048576 [ 132.387058][ T8681] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 132.403921][ T8681] netlink: 9396 bytes leftover after parsing attributes in process `syz.3.870'. [ 132.435187][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.870'. [ 132.523822][ T8689] netlink: 20 bytes leftover after parsing attributes in process `syz.1.873'. [ 132.609827][ T8695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.876'. [ 132.686642][ T8696] netlink: 'syz.3.877': attribute type 29 has an invalid length. [ 132.787300][ T8708] netlink: 116 bytes leftover after parsing attributes in process `syz.3.881'. [ 132.799422][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.881'. [ 132.808528][ T8708] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 132.824231][ T8708] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (2579) [ 133.039119][ T8734] netlink: 244 bytes leftover after parsing attributes in process `syz.3.887'. [ 133.123004][ T8737] sctp: [Deprecated]: syz.0.888 (pid 8737) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.123004][ T8737] Use struct sctp_sack_info instead [ 133.148673][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'. [ 133.221140][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.227540][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.328589][ T1163] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.724538][ T1163] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.955450][ T1163] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.104093][ T1163] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.270834][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.289409][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.305088][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.314981][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.330776][ T5152] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 134.338202][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.386497][ T8796] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 134.487511][ T1163] bridge_slave_1: left allmulticast mode [ 134.524891][ T1163] bridge_slave_1: left promiscuous mode [ 134.545434][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.618116][ T1163] bridge_slave_0: left allmulticast mode [ 134.629004][ T1163] bridge_slave_0: left promiscuous mode [ 134.634813][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.154053][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.165352][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.178180][ T1163] bond0 (unregistering): Released all slaves [ 135.343423][ T8844] netlink: 'syz.2.909': attribute type 2 has an invalid length. [ 135.383235][ T8785] bridge_slAve_0 speed is unknown, defaulting to 1000 [ 135.615313][ T8785] xfrm0 speed is unknown, defaulting to 1000 [ 135.900321][ T8882] netlink: 'syz.2.919': attribute type 1 has an invalid length. [ 135.965421][ T1163] hsr_slave_0: left promiscuous mode [ 135.976626][ T1163] hsr_slave_1: left promiscuous mode [ 135.984131][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.993223][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.019988][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.027679][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.093350][ T1163] veth1_macvtap: left promiscuous mode [ 136.119217][ T1163] veth0_macvtap: left promiscuous mode [ 136.133250][ T1163] veth1_vlan: left promiscuous mode [ 136.139172][ T1163] veth0_vlan: left promiscuous mode [ 136.146802][ T8898] openvswitch: netlink: Missing key (keys=440, expected=200000) [ 136.255966][ T8908] x_tables: duplicate underflow at hook 1 [ 136.429723][ T54] Bluetooth: hci3: command tx timeout [ 136.767983][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 136.817690][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 137.460907][ T8924] __nla_validate_parse: 16 callbacks suppressed [ 137.460931][ T8924] netlink: 200 bytes leftover after parsing attributes in process `syz.1.930'. [ 137.506874][ T8785] chnl_net:caif_netlink_parms(): no params data found [ 137.677375][ T8938] netlink: 16 bytes leftover after parsing attributes in process `syz.3.934'. [ 137.688403][ T8942] dccp_v6_rcv: dropped packet with invalid checksum [ 137.750412][ T8942] netlink: 'syz.0.935': attribute type 33 has an invalid length. [ 137.920142][ T8952] netlink: 148 bytes leftover after parsing attributes in process `syz.1.940'. [ 137.937091][ T8949] netlink: 'syz.0.938': attribute type 2 has an invalid length. [ 137.937529][ T8953] IPv6: sit2: Disabled Multicast RS [ 137.951225][ T8952] netlink: 148 bytes leftover after parsing attributes in process `syz.1.940'. [ 137.960826][ T8952] netlink: 148 bytes leftover after parsing attributes in process `syz.1.940'. [ 137.971961][ T8952] netlink: 148 bytes leftover after parsing attributes in process `syz.1.940'. [ 137.979407][ T8785] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.981713][ T8952] netlink: 148 bytes leftover after parsing attributes in process `syz.1.940'. [ 137.998052][ T8952] netlink: 148 bytes leftover after parsing attributes in process `syz.1.940'. [ 137.999244][ T8785] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.007661][ T8952] netlink: 148 bytes leftover after parsing attributes in process `syz.1.940'. [ 138.031911][ T8785] bridge_slave_0: entered allmulticast mode [ 138.038269][ T8952] netlink: 148 bytes leftover after parsing attributes in process `syz.1.940'. [ 138.040700][ T8785] bridge_slave_0: entered promiscuous mode [ 138.080864][ T8785] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.088097][ T8785] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.095427][ T8785] bridge_slave_1: entered allmulticast mode [ 138.102604][ T8785] bridge_slave_1: entered promiscuous mode [ 138.195334][ T8955] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.284198][ T8785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.302003][ T8785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.482502][ T8955] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.499450][ T54] Bluetooth: hci3: command tx timeout [ 138.686327][ T8785] team0: Port device team_slave_0 added [ 138.752019][ T8955] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.878228][ T8985] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.918218][ T8785] team0: Port device team_slave_1 added [ 138.955100][ T8955] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.084811][ T8985] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.160556][ T8785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.178384][ T8785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.208454][ T8785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.294032][ T8985] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.315303][ T8785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.333806][ T8785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.361678][ T8785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.399285][ T9008] bridge_slAve_0 speed is unknown, defaulting to 1000 [ 139.444219][ T8985] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.490586][ T8955] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.539300][ T9011] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.595053][ T9012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.615262][ T9012] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 139.636427][ T9012] bond2: (slave vcan1): Error -95 calling set_mac_address [ 139.670813][ T8955] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.690183][ T8955] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.703764][ T9008] xfrm0 speed is unknown, defaulting to 1000 [ 139.710236][ T8955] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.835828][ T8785] hsr_slave_0: entered promiscuous mode [ 139.845656][ T8785] hsr_slave_1: entered promiscuous mode [ 139.853211][ T8785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.862137][ T8785] Cannot create hsr debugfs directory [ 139.922810][ T8985] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.983370][ T8985] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.007147][ T8985] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.078823][ T8985] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.126584][ T9035] IPVS: set_ctl: invalid protocol: 47 172.20.20.24:20000 [ 140.229921][ T9037] ip6t_srh: unknown srh invflags 5F00 [ 140.579498][ T54] Bluetooth: hci3: command tx timeout [ 140.808818][ T8785] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 140.827279][ T8785] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 140.838784][ T8785] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 140.851707][ T8785] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 141.001109][ T9082] tap0: tun_chr_ioctl cmd 1074025675 [ 141.007057][ T9082] tap0: persist disabled [ 141.092869][ T9085] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 141.202509][ T8785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.257887][ T8785] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.279777][ T9098] netlink: 'syz.1.980': attribute type 21 has an invalid length. [ 141.305348][ T9098] netlink: 'syz.1.980': attribute type 20 has an invalid length. [ 141.332833][ T9098] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.343736][ T9096] netlink: 'syz.0.982': attribute type 12 has an invalid length. [ 141.357531][ T9098] netlink: 'syz.1.980': attribute type 4 has an invalid length. [ 141.359063][ T9096] netlink: 'syz.0.982': attribute type 29 has an invalid length. [ 141.386540][ T9102] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 141.400325][ T9096] netlink: 'syz.0.982': attribute type 2 has an invalid length. [ 141.409737][ T9096] netlink: 'syz.0.982': attribute type 2 has an invalid length. [ 141.417514][ T9096] netlink: 'syz.0.982': attribute type 1 has an invalid length. [ 141.427386][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.450954][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.458164][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.505511][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.512734][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.568078][ T8785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.580998][ T8785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.845243][ T8785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.002790][ T9145] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 142.089602][ T9145] openvswitch: netlink: Missing key (keys=44, expected=10000000) [ 142.247479][ T8785] veth0_vlan: entered promiscuous mode [ 142.271936][ T9161] netlink: ct family unspecified [ 142.276999][ T9161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.293744][ T8785] veth1_vlan: entered promiscuous mode [ 142.345584][ T8785] veth0_macvtap: entered promiscuous mode [ 142.371544][ T8785] veth1_macvtap: entered promiscuous mode [ 142.411777][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.470325][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.493899][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.504855][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.515146][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.525725][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.535652][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.546392][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.557760][ T8785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.568728][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.580069][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.590131][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.600717][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.610886][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.621749][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.631764][ T8785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.642479][ T8785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.653675][ T8785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.660458][ T54] Bluetooth: hci3: command tx timeout [ 142.704485][ T8785] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.714707][ T8785] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.730173][ T8785] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.742148][ T8785] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.758263][ T9170] veth1: entered promiscuous mode [ 142.879801][ T9169] veth1: left promiscuous mode [ 142.981915][ T9192] __nla_validate_parse: 44 callbacks suppressed [ 142.981938][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 143.044017][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.066548][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.138784][ T9208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1019'. [ 143.161532][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'. [ 143.221434][ T9201] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1018'. [ 143.222894][ T9218] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1020'. [ 143.258229][ T9201] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1018'. [ 143.310226][ T9201] vlan2: entered allmulticast mode [ 143.374037][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.387890][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.518119][ T9227] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1024'. [ 143.541819][ T9227] validate_nla: 4 callbacks suppressed [ 143.541840][ T9227] netlink: 'syz.2.1024': attribute type 9 has an invalid length. [ 143.696926][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1025'. [ 143.720808][ T9237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1025'. [ 143.778822][ T9240] netlink: 'syz.1.1027': attribute type 1 has an invalid length. [ 143.804565][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 143.897714][ T9250] netlink: 'syz.1.1031': attribute type 1 has an invalid length. [ 143.917794][ T9250] netlink: 'syz.1.1031': attribute type 1 has an invalid length. [ 144.286548][ T1163] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.337581][ T9259] netlink: 'syz.3.1034': attribute type 1 has an invalid length. [ 144.565694][ T1163] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.846896][ T1163] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.934234][ T1163] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.029410][ T1163] bridge_slave_1: left allmulticast mode [ 145.035131][ T1163] bridge_slave_1: left promiscuous mode [ 145.049220][ T1163] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.083217][ T1163] bridge_slave_0: left allmulticast mode [ 145.089143][ T1163] bridge_slave_0: left promiscuous mode [ 145.094874][ T1163] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.471816][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.482687][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.504564][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.522251][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.536115][ T5152] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 145.548328][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.772539][ T1163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.785113][ T1163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.796895][ T1163] bond0 (unregistering): Released all slaves [ 145.811987][ T9269] netlink: 'syz.3.1039': attribute type 10 has an invalid length. [ 145.824171][ T9269] team0: Cannot enslave team device to itself [ 145.910513][ T9291] bridge_slAve_0 speed is unknown, defaulting to 1000 [ 145.996027][ T9299] netlink: 'syz.1.1040': attribute type 3 has an invalid length. [ 146.091267][ T9303] Bluetooth: MGMT ver 1.23 [ 146.160430][ T9308] ipt_ECN: cannot use operation on non-tcp rule [ 146.225926][ T9301] xt_CT: No such helper "pptp" [ 146.340555][ T9303] ip6gre0: entered promiscuous mode [ 146.352334][ T9303] vlan2: entered promiscuous mode [ 146.387608][ T9303] ip6gre0: left promiscuous mode [ 146.484186][ T9291] xfrm0 speed is unknown, defaulting to 1000 [ 146.500218][ T9313] Κό: entered promiscuous mode [ 146.783597][ T9344] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 147.172018][ T1163] hsr_slave_0: left promiscuous mode [ 147.189254][ T1163] hsr_slave_1: left promiscuous mode [ 147.201464][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.210710][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.229855][ T1163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.239856][ T1163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.266648][ T1163] veth1_macvtap: left promiscuous mode [ 147.285596][ T1163] veth0_macvtap: left promiscuous mode [ 147.296299][ T1163] veth1_vlan: left promiscuous mode [ 147.306714][ T1163] veth0_vlan: left promiscuous mode [ 147.626914][ T5152] Bluetooth: hci3: command tx timeout [ 147.856455][ T1163] team0 (unregistering): Port device team_slave_1 removed [ 147.908046][ T1163] team0 (unregistering): Port device team_slave_0 removed [ 148.411282][ T9369] __nla_validate_parse: 12 callbacks suppressed [ 148.411303][ T9369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1058'. [ 148.522846][ T9291] chnl_net:caif_netlink_parms(): no params data found [ 148.634565][ T9384] netlink: 'syz.1.1065': attribute type 11 has an invalid length. [ 148.649422][ T9384] netlink: 'syz.1.1065': attribute type 11 has an invalid length. [ 148.685963][ T9384] netlink: 'syz.1.1065': attribute type 11 has an invalid length. [ 148.707465][ T9384] netlink: 'syz.1.1065': attribute type 11 has an invalid length. [ 148.725199][ T9384] netlink: 'syz.1.1065': attribute type 11 has an invalid length. [ 148.759570][ T9384] netlink: 'syz.1.1065': attribute type 11 has an invalid length. [ 148.816535][ T9404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1071'. [ 148.854564][ T9384] netlink: 'syz.1.1065': attribute type 11 has an invalid length. [ 148.875451][ T9384] netlink: 'syz.1.1065': attribute type 11 has an invalid length. [ 148.905861][ T9291] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.925443][ T9291] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.933194][ T9291] bridge_slave_0: entered allmulticast mode [ 148.943978][ T9291] bridge_slave_0: entered promiscuous mode [ 148.955367][ T9384] netlink: 'syz.1.1065': attribute type 11 has an invalid length. [ 148.966415][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1072'. [ 148.985989][ T9291] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.006579][ T9291] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.014319][ T9291] bridge_slave_1: entered allmulticast mode [ 149.026743][ T9291] bridge_slave_1: entered promiscuous mode [ 149.053119][ T9384] netlink: 'syz.1.1065': attribute type 11 has an invalid length. [ 149.116205][ T9414] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 149.122262][ T9291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.156593][ T9291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.229419][ T9420] x_tables: unsorted underflow at hook 2 [ 149.344023][ T9291] team0: Port device team_slave_0 added [ 149.352520][ T9291] team0: Port device team_slave_1 added [ 149.383177][ T9426] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1081'. [ 149.409470][ T9291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.417048][ T9291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.443622][ T9291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.456950][ T9291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.464846][ T9291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.492513][ T9291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.522034][ T9433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1083'. [ 149.646413][ T9291] hsr_slave_0: entered promiscuous mode [ 149.668458][ T9291] hsr_slave_1: entered promiscuous mode [ 149.681999][ T9291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.692093][ T9291] Cannot create hsr debugfs directory [ 149.704990][ T5152] Bluetooth: hci3: command tx timeout [ 149.965833][ T9461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1094'. [ 149.980042][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1092'. [ 149.990776][ T9459] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1092'. [ 150.088718][ T9470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1097'. [ 150.154748][ T9471] tipc: Started in network mode [ 150.173547][ T9471] tipc: Node identity ffffffff, cluster identity 4711 [ 150.203729][ T9471] tipc: Node number set to 4294967295 [ 150.348296][ T9291] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 150.358179][ T9291] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 150.368616][ T9291] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 150.387034][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1100'. [ 150.411640][ T9291] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 150.496595][ T9291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.563732][ T9291] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.571129][ T9486] tc_dump_action: action bad kind [ 150.637074][ T9291] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 150.691499][ T9291] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.721540][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.728690][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.746541][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.753804][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.168716][ T9291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.523693][ T9291] veth0_vlan: entered promiscuous mode [ 151.549573][ T9291] veth1_vlan: entered promiscuous mode [ 151.616481][ T9291] veth0_macvtap: entered promiscuous mode [ 151.637748][ T9291] veth1_macvtap: entered promiscuous mode [ 151.658492][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.670355][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.682162][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.692926][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.702830][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.713633][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.724058][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.735391][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.760187][ T9291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.776261][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.790598][ T5152] Bluetooth: hci3: command tx timeout [ 151.814316][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.831429][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.846474][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.857901][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.872441][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.882740][ T9291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.897024][ T9291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.908410][ T9291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.968021][ T9291] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.001267][ T9291] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.017299][ T9291] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.026687][ T9291] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.166761][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.181510][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.204762][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.212911][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.898536][ T9577] @: renamed from veth0_vlan (while UP) [ 153.063362][ T9592] veth0_: entered promiscuous mode [ 153.073422][ T9592] veth0_: entered allmulticast mode [ 153.577200][ T9630] __nla_validate_parse: 10 callbacks suppressed [ 153.577224][ T9630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1150'. [ 153.664035][ T81] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.507383][ T81] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.667728][ T9646] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1156'. [ 154.667849][ T81] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.698232][ T9646] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 154.766393][ T9647] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.845556][ T9652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1155'. [ 154.958756][ T81] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.035092][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 155.072229][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 155.081924][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 155.091222][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 155.102453][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 155.130428][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 155.173846][ T81] bridge_slave_1: left allmulticast mode [ 155.191877][ T81] bridge_slave_1: left promiscuous mode [ 155.198879][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.229669][ T81] bridge_slave_0: left allmulticast mode [ 155.249001][ T81] bridge_slave_0: left promiscuous mode [ 155.264035][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.394797][ T9678] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1164'. [ 155.421578][ T9677] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1164'. [ 155.797252][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.808749][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.831286][ T81] bond0 (unregistering): Released all slaves [ 155.850187][ T9676] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 155.868068][ T9687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1166'. [ 155.972379][ T9656] bridge_slAve_0 speed is unknown, defaulting to 1000 [ 156.112831][ T9656] xfrm0 speed is unknown, defaulting to 1000 [ 156.193328][ T9699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1168'. [ 156.330152][ T9715] netlink: 4556 bytes leftover after parsing attributes in process `syz.2.1173'. [ 156.434960][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 156.444776][ T9726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 156.529176][ T9656] chnl_net:caif_netlink_parms(): no params data found [ 156.656882][ T9738] validate_nla: 59 callbacks suppressed [ 156.656901][ T9738] netlink: 'syz.2.1180': attribute type 9 has an invalid length. [ 156.743417][ T9751] netlink: 'syz.1.1185': attribute type 12 has an invalid length. [ 156.945041][ T9763] netlink: 'syz.3.1188': attribute type 1 has an invalid length. [ 157.036919][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.054146][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.064678][ T9656] bridge_slave_0: entered allmulticast mode [ 157.076442][ T9656] bridge_slave_0: entered promiscuous mode [ 157.091345][ T81] hsr_slave_0: left promiscuous mode [ 157.097624][ T81] hsr_slave_1: left promiscuous mode [ 157.106026][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.114238][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.123372][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.141865][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.192768][ T81] veth1_macvtap: left promiscuous mode [ 157.198530][ T81] veth0_macvtap: left promiscuous mode [ 157.208923][ T81] veth1_vlan: left promiscuous mode [ 157.214519][ T81] veth0_vlan: left promiscuous mode [ 157.220339][ T54] Bluetooth: hci3: command tx timeout [ 157.803906][ T81] team0 (unregistering): Port device team_slave_1 removed [ 157.857967][ T81] team0 (unregistering): Port device team_slave_0 removed [ 158.333391][ T9755] netlink: 'syz.1.1185': attribute type 1 has an invalid length. [ 158.343505][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.351976][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.359369][ T9656] bridge_slave_1: entered allmulticast mode [ 158.366366][ T9656] bridge_slave_1: entered promiscuous mode [ 158.474805][ T9656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.501837][ T9656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.807272][ T9793] team0 (unregistering): Port device team_slave_1 removed [ 158.839550][ T9656] team0: Port device team_slave_0 added [ 158.914754][ T9656] team0: Port device team_slave_1 added [ 159.037118][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.059447][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.091347][ T9656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.108021][ T9819] batadv_slave_1: default FDB implementation only supports local addresses [ 159.145761][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.157368][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.185861][ T9656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.210659][ T9819] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 159.299078][ T54] Bluetooth: hci3: command tx timeout [ 159.387117][ T9656] hsr_slave_0: entered promiscuous mode [ 159.421440][ T9656] hsr_slave_1: entered promiscuous mode [ 159.427749][ T9656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.449050][ T9656] Cannot create hsr debugfs directory [ 159.455365][ T9842] __nla_validate_parse: 6 callbacks suppressed [ 159.455383][ T9842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1211'. [ 159.460023][ T9838] openvswitch: netlink: Missing key (keys=20040, expected=100) [ 159.654967][ T9849] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 159.694527][ T9854] openvswitch: netlink: Actions may not be safe on all matching packets [ 159.704350][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 159.714879][ T9854] openvswitch: netlink: Actions may not be safe on all matching packets [ 159.731013][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 159.754591][ T9854] openvswitch: netlink: Actions may not be safe on all matching packets [ 159.769266][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 159.809425][ T9854] openvswitch: netlink: Actions may not be safe on all matching packets [ 159.825199][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 159.835982][ T9854] openvswitch: netlink: Actions may not be safe on all matching packets [ 159.868379][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 159.890352][ T9854] openvswitch: netlink: Actions may not be safe on all matching packets [ 159.924767][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 159.928366][ T9854] openvswitch: netlink: Actions may not be safe on all matching packets [ 159.949206][ T9854] openvswitch: netlink: Actions may not be safe on all matching packets [ 159.976202][ T9854] openvswitch: netlink: Actions may not be safe on all matching packets [ 159.984186][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 160.013684][ T9854] openvswitch: netlink: Actions may not be safe on all matching packets [ 160.035352][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 160.046819][ T9854] openvswitch: netlink: Actions may not be safe on all matching packets [ 160.050552][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 160.496472][ T9656] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.522917][ T9656] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.550368][ T9656] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.566502][ T9656] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 160.764838][ T9656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.798714][ T9656] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.829240][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.836440][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.862736][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.870009][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.125768][ T9656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.379603][ T54] Bluetooth: hci3: command tx timeout [ 161.506517][ T9656] veth0_vlan: entered promiscuous mode [ 161.537171][ T9656] veth1_vlan: entered promiscuous mode [ 161.629579][ T9656] veth0_macvtap: entered promiscuous mode [ 161.651434][ T9656] veth1_macvtap: entered promiscuous mode [ 161.686351][ T9967] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.699957][ T9965] netlink: 'syz.1.1248': attribute type 5 has an invalid length. [ 161.770007][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.780942][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.791151][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.801676][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.811693][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.822507][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.832442][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.843055][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.855203][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.891122][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.904344][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.915763][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.929047][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.944272][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.956167][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.968968][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.983114][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.995799][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.007408][ T9656] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.016553][ T9656] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.051125][ T9656] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.075743][ T9656] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.283617][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.293269][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.315976][ T9991] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 162.325519][ T9990] netlink: 'syz.2.1258': attribute type 13 has an invalid length. [ 162.339341][ T9991] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 162.358604][ T9991] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 162.371082][ T9990] syz_tun: refused to change device tx_queue_len [ 162.377871][ T9990] netlink: 'syz.2.1258': attribute type 13 has an invalid length. [ 162.397142][ T9991] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 162.418596][ T9990] syz_tun: refused to change device tx_queue_len [ 162.418595][ T9991] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 162.418726][ T9991] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 162.453843][ T9991] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 162.466353][ T9990] syz_tun: refused to change device tx_queue_len [ 162.480059][ T9990] syz_tun: refused to change device tx_queue_len [ 162.480539][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.497833][ T9990] syz_tun: refused to change device tx_queue_len [ 162.514214][ T9990] syz_tun: refused to change device tx_queue_len [ 162.522731][ T9990] syz_tun: refused to change device tx_queue_len [ 162.532443][ T9990] syz_tun: refused to change device tx_queue_len [ 162.537966][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.566550][ T9990] syz_tun: refused to change device tx_queue_len [ 162.588735][ T9990] syz_tun: refused to change device tx_queue_len [ 162.622239][ T9990] syz_tun: refused to change device tx_queue_len [ 162.643826][ T9990] syz_tun: refused to change device tx_queue_len [ 162.668589][ T9990] syz_tun: refused to change device tx_queue_len [ 162.713272][ T9990] syz_tun: refused to change device tx_queue_len [ 162.721320][ T9990] syz_tun: refused to change device tx_queue_len [ 162.728794][ T9990] syz_tun: refused to change device tx_queue_len [ 162.737177][ T9990] syz_tun: refused to change device tx_queue_len [ 162.745086][ T9990] syz_tun: refused to change device tx_queue_len [ 162.763492][T10006] Κό: entered promiscuous mode [ 162.790357][ T9990] syz_tun: refused to change device tx_queue_len [ 162.807484][ T9990] syz_tun: refused to change device tx_queue_len [ 162.818752][ T9990] syz_tun: refused to change device tx_queue_len [ 162.837420][ T9990] syz_tun: refused to change device tx_queue_len [ 162.845884][ T9990] syz_tun: refused to change device tx_queue_len [ 162.861524][ T9990] syz_tun: refused to change device tx_queue_len [ 162.878551][ T9990] syz_tun: refused to change device tx_queue_len [ 162.914687][ T9990] syz_tun: refused to change device tx_queue_len [ 162.926529][ T9990] syz_tun: refused to change device tx_queue_len [ 162.940954][ T9990] syz_tun: refused to change device tx_queue_len [ 162.948342][ T9990] syz_tun: refused to change device tx_queue_len [ 162.970653][ T9990] syz_tun: refused to change device tx_queue_len [ 162.980268][ T9990] syz_tun: refused to change device tx_queue_len [ 162.988632][ T9990] syz_tun: refused to change device tx_queue_len [ 162.998440][ T9990] syz_tun: refused to change device tx_queue_len [ 163.080727][T10023] xt_socket: unknown flags 0x50 [ 163.728212][T10070] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.738189][T10070] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.748304][T10070] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.757938][T10070] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 163.767995][T10070] geneve2: entered promiscuous mode [ 163.774190][T10070] geneve2: entered allmulticast mode [ 163.826285][T10078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.900015][T10082] syz.1.1292[10082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.900115][T10082] syz.1.1292[10082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.913201][T10082] syz.1.1292[10082] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.962861][ T1102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.916797][ T1102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.048607][ T1102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.260265][ T1102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.455923][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.467065][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.476519][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.484683][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.504085][T10114] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 165.507890][ T5152] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 165.527628][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.604433][T10111] bridge_slAve_0 speed is unknown, defaulting to 1000 [ 165.650600][T10120] __nla_validate_parse: 99 callbacks suppressed [ 165.650622][T10120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1303'. [ 165.740959][ T1102] bridge_slave_1: left allmulticast mode [ 165.746669][ T1102] bridge_slave_1: left promiscuous mode [ 165.779387][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.796623][ T1102] bridge_slave_0: left allmulticast mode [ 165.815112][ T1102] bridge_slave_0: left promiscuous mode [ 165.829336][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.132394][T10141] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1311'. [ 166.293630][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.306945][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.318746][ T1102] bond0 (unregistering): Released all slaves [ 166.332639][T10111] xfrm0 speed is unknown, defaulting to 1000 [ 166.361653][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1311'. [ 166.618295][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1315'. [ 166.650722][T10159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1318'. [ 166.679903][T10158] xt_CT: You must specify a L4 protocol and not use inversions on it [ 166.971388][T10111] chnl_net:caif_netlink_parms(): no params data found [ 167.202910][ T1102] hsr_slave_0: left promiscuous mode [ 167.272423][ T1102] hsr_slave_1: left promiscuous mode [ 167.295094][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.307416][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.370343][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.376843][T10196] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1330'. [ 167.395689][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.436401][ T1102] veth1_macvtap: left promiscuous mode [ 167.448470][ T1102] veth0_macvtap: left promiscuous mode [ 167.454374][ T1102] veth1_vlan: left promiscuous mode [ 167.460416][ T1102] veth0_vlan: left promiscuous mode [ 167.629352][ T5152] Bluetooth: hci3: command tx timeout [ 168.029403][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 168.086290][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 168.602029][T10179] bridge_slAve_0 speed is unknown, defaulting to 1000 [ 168.745913][T10111] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.774360][T10111] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.788045][T10111] bridge_slave_0: entered allmulticast mode [ 168.800319][T10111] bridge_slave_0: entered promiscuous mode [ 168.815936][T10111] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.823640][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.834644][T10111] bridge_slave_1: entered allmulticast mode [ 168.844569][T10111] bridge_slave_1: entered promiscuous mode [ 168.852120][T10179] xfrm0 speed is unknown, defaulting to 1000 [ 168.858554][T10221] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1338'. [ 169.020172][T10111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.053764][T10111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.073430][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.080711][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.265709][T10232] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1343'. [ 169.328126][T10111] team0: Port device team_slave_0 added [ 169.347216][T10111] team0: Port device team_slave_1 added [ 169.421105][T10111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.428101][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.454474][T10111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.471044][T10111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.478051][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.504328][T10111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.610990][T10111] hsr_slave_0: entered promiscuous mode [ 169.617556][T10111] hsr_slave_1: entered promiscuous mode [ 169.649312][T10111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.656998][T10111] Cannot create hsr debugfs directory [ 169.699178][ T5152] Bluetooth: hci3: command tx timeout [ 169.889446][ T5885] IPVS: starting estimator thread 0... [ 169.935694][T10249] validate_nla: 59 callbacks suppressed [ 169.935720][T10249] netlink: 'syz.1.1349': attribute type 9 has an invalid length. [ 169.960761][T10249] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.1349'. [ 170.005819][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'. [ 170.019759][T10250] IPVS: using max 16 ests per chain, 38400 per kthread [ 170.141404][T10260] IPv6: sit1: Disabled Multicast RS [ 170.255079][T10266] gretap0: entered promiscuous mode [ 170.277275][T10266] batadv_slave_1: entered promiscuous mode [ 170.465918][T10111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.534860][T10111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.556541][T10111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 170.642540][T10111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.886467][T10312] net_ratelimit: 56 callbacks suppressed [ 170.886488][T10312] openvswitch: netlink: Actions may not be safe on all matching packets [ 170.908648][T10314] __nla_validate_parse: 2 callbacks suppressed [ 170.908667][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1375'. [ 170.960297][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 170.985792][T10318] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1372'. [ 171.016517][T10318] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 171.075618][T10322] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1376'. [ 171.200847][T10111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.219637][T10332] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1379'. [ 171.227075][T10335] No such timeout policy "syz0" [ 171.234263][T10336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1380'. [ 171.265714][T10111] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.295233][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.302456][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.316542][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.323734][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.780216][ T5152] Bluetooth: hci3: command tx timeout [ 171.805847][T10111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.839463][T10372] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1394'. [ 171.857331][T10372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1394'. [ 172.013057][T10382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1395'. [ 172.137039][T10394] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1399'. [ 172.152355][T10391] Bluetooth: MGMT ver 1.23 [ 172.246166][T10111] veth0_vlan: entered promiscuous mode [ 172.299566][T10111] veth1_vlan: entered promiscuous mode [ 172.404366][T10111] veth0_macvtap: entered promiscuous mode [ 172.430647][T10406] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 172.434637][T10111] veth1_macvtap: entered promiscuous mode [ 172.477051][T10111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.523219][T10111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.549101][T10111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.564881][T10111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.575027][T10111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.599839][T10111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.617656][T10111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.629221][T10111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.669636][T10111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.709502][T10111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.725668][T10111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.736393][T10111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.747110][T10111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.757652][T10111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.768332][T10111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.778730][T10111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.789823][T10111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.801045][T10111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.812735][T10111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.822051][T10111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.830901][T10111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.839674][T10111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.925983][T10432] x_tables: duplicate underflow at hook 3 [ 173.022912][ T6944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.031318][ T6944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.133392][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.153192][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.201928][T10452] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 173.396072][T10460] netlink: 'syz.3.1416': attribute type 8 has an invalid length. [ 173.523142][T10469] x_tables: duplicate underflow at hook 2 [ 173.599486][T10469] pim6reg1: entered promiscuous mode [ 173.604853][T10469] pim6reg1: entered allmulticast mode [ 173.618353][T10475] raw_sendmsg: syz.1.1426 forgot to set AF_INET. Fix it! [ 174.035097][T10111] syz-executor (10111) used greatest stack depth: 18320 bytes left [ 174.213464][ T6944] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.710885][ T6944] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.137212][ T6944] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.225027][ T6944] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.355426][T10523] netlink: 'syz.2.1439': attribute type 2 has an invalid length. [ 175.397858][T10523] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 175.456021][T10525] tipc: Started in network mode [ 175.484164][T10525] tipc: Node identity , cluster identity 4711 [ 175.564172][ T6944] bridge_slave_1: left allmulticast mode [ 175.574129][ T6944] bridge_slave_1: left promiscuous mode [ 175.586728][ T6944] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.703857][ T6944] bridge_slave_0: left allmulticast mode [ 175.709719][ T6944] bridge_slave_0: left promiscuous mode [ 175.715455][ T6944] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.790156][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 175.798730][T10547] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.811517][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 175.820384][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 175.829049][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 175.837700][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 175.845767][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 175.949334][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 176.006939][T10549] __nla_validate_parse: 26 callbacks suppressed [ 176.006955][T10549] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1448'. [ 176.321448][ T6944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.335638][ T6944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.346843][ T6944] bond0 (unregistering): Released all slaves [ 176.436385][T10544] bridge_slAve_0 speed is unknown, defaulting to 1000 [ 176.624860][T10565] xt_socket: unknown flags 0x2 [ 176.712622][T10569] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.725798][T10569] bridge_slave_1: left allmulticast mode [ 176.733628][T10569] bridge_slave_1: left promiscuous mode [ 176.740863][T10569] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.755053][T10569] bond0: (slave bond_slave_0): Releasing backup interface [ 176.770171][T10569] bond0: (slave bond_slave_1): Releasing backup interface [ 176.788258][T10569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.796516][T10569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.807386][T10569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.815845][T10569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.894392][T10544] xfrm0 speed is unknown, defaulting to 1000 [ 177.130671][T10588] x_tables: duplicate underflow at hook 4 [ 177.174582][T10588] x_tables: duplicate underflow at hook 4 [ 177.211820][ T6944] hsr_slave_0: left promiscuous mode [ 177.227809][ T6944] hsr_slave_1: left promiscuous mode [ 177.238036][ T6944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.269198][ T6944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.277356][ T6944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.285132][ T6944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.317022][ T6944] veth1_macvtap: left promiscuous mode [ 177.323043][ T6944] veth0_macvtap: left promiscuous mode [ 177.329075][ T6944] veth1_vlan: left promiscuous mode [ 177.334524][ T6944] veth0_vlan: left promiscuous mode [ 177.955314][ T5152] Bluetooth: hci3: command tx timeout [ 178.001517][ T6944] team0 (unregistering): Port device team_slave_1 removed [ 178.057333][ T6944] team0 (unregistering): Port device team_slave_0 removed [ 178.747630][T10544] chnl_net:caif_netlink_parms(): no params data found [ 178.791795][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1471'. [ 178.995665][T10643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1475'. [ 179.016050][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1475'. [ 179.028372][T10643] netlink: 'syz.2.1475': attribute type 13 has an invalid length. [ 179.045492][T10646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1475'. [ 179.055041][T10544] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.074131][T10544] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.084413][T10544] bridge_slave_0: entered allmulticast mode [ 179.095660][T10544] bridge_slave_0: entered promiscuous mode [ 179.123216][T10648] netlink: 'syz.1.1476': attribute type 3 has an invalid length. [ 179.134638][T10648] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1476'. [ 179.156399][T10544] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.164059][T10544] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.172826][T10544] bridge_slave_1: entered allmulticast mode [ 179.183805][T10544] bridge_slave_1: entered promiscuous mode [ 179.243939][T10544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.271865][T10544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.389363][T10657] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.426174][T10544] team0: Port device team_slave_0 added [ 179.471952][T10544] team0: Port device team_slave_1 added [ 179.561097][T10544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.579106][T10544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.607387][T10544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.632008][T10544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.640154][T10544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.668021][T10544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.715131][T10677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1486'. [ 179.744600][T10675] netlink: 'syz.0.1487': attribute type 10 has an invalid length. [ 179.793061][T10675] team0: Device hsr_slave_0 failed to register rx_handler [ 179.888114][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 180.005562][T10544] hsr_slave_0: entered promiscuous mode [ 180.019628][ T5152] Bluetooth: hci3: command tx timeout [ 180.028771][T10544] hsr_slave_1: entered promiscuous mode [ 180.053667][T10544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.065419][T10544] Cannot create hsr debugfs directory [ 180.263048][T10715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1500'. [ 180.417598][T10721] IPv6: NLM_F_CREATE should be specified when creating new route [ 180.630549][T10742] netlink: 'syz.1.1509': attribute type 3 has an invalid length. [ 180.646791][T10742] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1509'. [ 180.875567][T10544] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.892127][T10758] netlink: 'syz.2.1514': attribute type 1 has an invalid length. [ 180.902882][T10544] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 180.929896][T10544] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 180.955820][T10760] ipip0: entered promiscuous mode [ 180.991448][T10544] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 181.013816][T10762] __nla_validate_parse: 3 callbacks suppressed [ 181.013839][T10762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1516'. [ 181.108707][T10544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.128709][T10544] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.150067][T10767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1518'. [ 181.165221][T10544] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 181.176293][T10544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.196795][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.204017][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.239417][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.246570][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.330117][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1518'. [ 181.401062][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1518'. [ 181.446271][T10785] netlink: 300 bytes leftover after parsing attributes in process `syz.0.1523'. [ 181.493945][T10544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.703739][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'. [ 181.724701][T10804] ipvlan2: entered allmulticast mode [ 181.749200][T10804] veth0_vlan: entered allmulticast mode [ 181.755419][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1528'. [ 181.774216][T10805] ipvlan3: entered allmulticast mode [ 181.902136][T10544] veth0_vlan: entered promiscuous mode [ 181.913329][T10544] veth1_vlan: entered promiscuous mode [ 181.940206][T10544] veth0_macvtap: entered promiscuous mode [ 181.949367][T10544] veth1_macvtap: entered promiscuous mode [ 181.965010][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.976218][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.986459][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.997434][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.007722][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.018347][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.030327][T10544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.044949][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.055589][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.065611][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.076390][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.086616][T10544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.097407][T10544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.108151][ T5152] Bluetooth: hci3: command tx timeout [ 182.115077][T10544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.127124][T10544] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.136542][T10544] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.145623][T10544] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.154485][T10544] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.214048][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.223048][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.244440][ T6944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.253340][ T6944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.488497][T10826] netlink: 'syz.1.1537': attribute type 7 has an invalid length. [ 182.519566][T10826] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1537'. [ 182.521058][T10832] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 182.534557][T10826] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1537'. [ 182.557873][T10826] netlink: 872 bytes leftover after parsing attributes in process `syz.1.1537'. [ 182.592666][T10826] netlink: 'syz.1.1537': attribute type 7 has an invalid length. [ 182.604317][T10836] bridge0: port 3(syz_tun) entered blocking state [ 182.650022][T10836] bridge0: port 3(syz_tun) entered disabled state [ 182.658081][T10836] syz_tun: entered allmulticast mode [ 182.680295][T10836] syz_tun: entered promiscuous mode [ 182.920800][T10863] bridge_slave_1: left allmulticast mode [ 182.926603][T10863] bridge_slave_1: left promiscuous mode [ 182.976927][T10863] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.024771][T10863] bridge_slave_0: left allmulticast mode [ 183.034454][T10863] bridge_slave_0: left promiscuous mode [ 183.043089][T10863] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.064617][T10863] bond0: (slave bridge0): Releasing backup interface [ 183.198193][T10883] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.213387][T10883] bond0: (slave bond3): Enslaving as an active interface with an up link [ 183.532302][T10913] macvlan0: entered allmulticast mode [ 183.537848][T10913] veth1_vlan: entered allmulticast mode [ 183.598753][T10919] netlink: 'syz.1.1565': attribute type 1 has an invalid length. [ 183.704770][T10926] openvswitch: netlink: Message has 16 unknown bytes. [ 183.996010][T10940] ebtables: ebtables: counters copy to user failed while replacing table [ 184.013501][T10941] ebtables: ebtables: counters copy to user failed while replacing table [ 184.242623][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.506403][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.684133][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.713682][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.723971][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.735781][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.776868][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.784782][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 185.792670][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.855826][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.910921][T10978] bridge_slAve_0 speed is unknown, defaulting to 1000 [ 186.055303][ T35] bridge_slave_1: left allmulticast mode [ 186.065518][ T35] bridge_slave_1: left promiscuous mode [ 186.079095][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.095111][ T35] bridge_slave_0: left allmulticast mode [ 186.106736][ T35] bridge_slave_0: left promiscuous mode [ 186.112872][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.147074][T10997] __nla_validate_parse: 13 callbacks suppressed [ 186.147094][T10997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1587'. [ 186.369741][T11001] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 186.431103][T11003] netlink: 'syz.0.1590': attribute type 3 has an invalid length. [ 186.503210][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 186.518674][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 186.617019][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.628237][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.639549][ T35] bond0 (unregistering): Released all slaves [ 186.651794][T10978] xfrm0 speed is unknown, defaulting to 1000 [ 187.057658][T11024] bridge0: port 4(gretap0) entered blocking state [ 187.060855][T11028] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1596'. [ 187.070135][T11024] bridge0: port 4(gretap0) entered disabled state [ 187.078325][T11027] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1596'. [ 187.081112][T11024] gretap0: entered allmulticast mode [ 187.104797][T11024] gretap0: entered promiscuous mode [ 187.232967][T10978] chnl_net:caif_netlink_parms(): no params data found [ 187.274680][T11039] netlink: 'syz.2.1600': attribute type 6 has an invalid length. [ 187.311054][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1599'. [ 187.376192][T11042] netlink: 'syz.0.1601': attribute type 5 has an invalid length. [ 187.398027][T11046] netlink: 'syz.1.1602': attribute type 4 has an invalid length. [ 187.447606][ T35] hsr_slave_0: left promiscuous mode [ 187.455938][ T35] hsr_slave_1: left promiscuous mode [ 187.463307][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.472330][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.489971][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.505626][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.526882][T11054] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1606'. [ 187.531977][ T35] veth1_macvtap: left promiscuous mode [ 187.542300][ T35] veth0_macvtap: left promiscuous mode [ 187.547984][ T35] veth1_vlan: left promiscuous mode [ 187.553605][ T35] veth0_vlan: left promiscuous mode [ 187.866700][ T5848] Bluetooth: hci3: command tx timeout [ 188.130469][ T35] team0 (unregistering): Port device team_slave_1 removed [ 188.182505][ T35] team0 (unregistering): Port device team_slave_0 removed [ 188.422642][ T5848] Bluetooth: hci0: command tx timeout [ 188.888026][T11068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.906615][T10978] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.914163][T10978] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.921511][T10978] bridge_slave_0: entered allmulticast mode [ 188.928616][T10978] bridge_slave_0: entered promiscuous mode [ 188.937137][T10978] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.944569][T10978] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.951964][T10978] bridge_slave_1: entered allmulticast mode [ 188.959034][T10978] bridge_slave_1: entered promiscuous mode [ 189.032431][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1614'. [ 189.046740][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1614'. [ 189.114445][T10978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.131600][T10978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.236126][T11088] veth0: entered promiscuous mode [ 189.354708][T11095] netlink: 'syz.0.1617': attribute type 2 has an invalid length. [ 189.356740][T10978] team0: Port device team_slave_0 added [ 189.376645][T11095] netlink: 'syz.0.1617': attribute type 2 has an invalid length. [ 189.401722][T10978] team0: Port device team_slave_1 added [ 189.413400][T11095] netlink: 'syz.0.1617': attribute type 2 has an invalid length. [ 189.427315][T11090] veth0: left promiscuous mode [ 189.435833][T11095] netlink: 'syz.0.1617': attribute type 2 has an invalid length. [ 189.454867][T11095] netlink: 'syz.0.1617': attribute type 2 has an invalid length. [ 189.471456][T11099] netlink: 'syz.1.1618': attribute type 11 has an invalid length. [ 189.490176][T11095] netlink: 'syz.0.1617': attribute type 2 has an invalid length. [ 189.512828][T10978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.526102][T10978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.568093][T11103] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1620'. [ 189.584343][T10978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.624387][T10978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.634667][T10978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.710876][T10978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.784563][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1623'. [ 189.799979][T10978] hsr_slave_0: entered promiscuous mode [ 189.808705][T10978] hsr_slave_1: entered promiscuous mode [ 189.823127][T10978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.834303][T10978] Cannot create hsr debugfs directory [ 189.926769][T11115] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (16) [ 189.939248][ T5152] Bluetooth: hci3: command tx timeout [ 189.967680][T11127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1626'. [ 190.086394][T11136] x_tables: duplicate underflow at hook 1 [ 190.103646][T11136] veth1_to_hsr: entered promiscuous mode [ 190.201051][T11136] veth1_to_hsr (unregistering): left promiscuous mode [ 190.253392][T11136] hsr_slave_1 (unregistering): left promiscuous mode [ 190.396130][T11152] netlink: 'syz.3.1635': attribute type 11 has an invalid length. [ 190.811212][T10978] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.840273][T10978] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 190.852276][T10978] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 190.876034][T10978] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.023626][T10978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.043329][T11181] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.085412][T10978] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.108345][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.115556][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.146667][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.153893][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.170493][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888050afcc00: rx timeout, send abort [ 191.212628][T11193] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.262280][T10978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.290491][T10978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.340268][T11200] __nla_validate_parse: 7 callbacks suppressed [ 191.340290][T11200] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1653'. [ 191.462859][T11209] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1655'. [ 191.473659][T11209] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 191.576750][T10978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.680204][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888050afcc00: abort rx timeout. Force session deactivation [ 191.690542][ C0] ------------[ cut here ]------------ [ 191.696032][ C0] refcount_t: underflow; use-after-free. [ 191.702181][ C0] WARNING: CPU: 0 PID: 11220 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 191.711767][ C0] Modules linked in: [ 191.715726][ C0] CPU: 0 UID: 0 PID: 11220 Comm: modprobe Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 191.726438][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 191.736584][ C0] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 191.742849][ C0] Code: e0 c7 60 8c e8 37 19 98 fc 90 0f 0b 90 90 eb 99 e8 bb 22 d7 fc c6 05 8d 0c 49 0b 01 90 48 c7 c7 40 c8 60 8c e8 17 19 98 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 98 22 d7 fc c6 05 67 0c 49 0b 01 90 [ 191.762578][ C0] RSP: 0018:ffffc90000007c08 EFLAGS: 00010246 [ 191.768690][ C0] RAX: bd60d1b4ed7c6e00 RBX: ffff888034843364 RCX: ffff888034543c00 [ 191.776776][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.784890][ C0] RBP: 0000000000000003 R08: ffffffff8155e312 R09: fffffbfff1cf9fd0 [ 191.792962][ C0] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff888050afcc68 [ 191.801072][ C0] R13: ffff888034843364 R14: 1ffff1100a15f998 R15: ffff888050afcc00 [ 191.809180][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 191.818148][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.824848][ C0] CR2: 00007f2634dac290 CR3: 00000000483cc000 CR4: 00000000003526f0 [ 191.832910][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 191.840993][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 191.849038][ C0] Call Trace: [ 191.852352][ C0] [ 191.855233][ C0] ? __warn+0x168/0x4e0 [ 191.859495][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 191.865106][ C0] ? report_bug+0x2b3/0x500 [ 191.869701][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 191.875301][ C0] ? handle_bug+0x60/0x90 [ 191.879734][ C0] ? exc_invalid_op+0x1a/0x50 [ 191.884464][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 191.889612][ C0] ? __warn_printk+0x292/0x360 [ 191.894436][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 191.900108][ C0] ? refcount_warn_saturate+0x159/0x1d0 [ 191.905713][ C0] j1939_session_put+0x1ed/0x440 [ 191.910772][ C0] j1939_tp_rxtimer+0x184/0x3d0 [ 191.915676][ C0] ? __pfx_j1939_tp_rxtimer+0x10/0x10 [ 191.921256][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 191.926507][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 191.932637][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 191.938406][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 191.944610][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 191.949824][ C0] handle_softirqs+0x2c5/0x980 [ 191.954658][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 191.959644][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 191.964984][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 191.970321][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 191.974981][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 191.980306][ C0] irq_exit_rcu+0x9/0x30 [ 191.984607][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 191.990376][ C0] [ 191.993331][ C0] [ 191.996301][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.002503][ C0] RIP: 0010:mas_next_node+0xabe/0xe00 [ 192.008015][ C0] Code: 89 e8 48 8d a8 60 6e 35 8d 48 89 e8 48 c1 e8 03 48 ba 00 00 00 00 00 fc ff df 0f b6 04 10 84 c0 0f 85 e1 02 00 00 0f b6 45 00 <48> 89 44 24 08 44 8d 78 ff 41 0f b6 c7 49 8d 2c c4 48 89 e8 48 c1 [ 192.027738][ C0] RSP: 0018:ffffc90004ce7098 EFLAGS: 00000293 [ 192.029207][ T5152] Bluetooth: hci3: command 0x040f tx timeout [ 192.033872][ C0] RAX: 000000000000000f RBX: ffff888024248000 RCX: 000000008d356e01 [ 192.048078][ C0] RDX: dffffc0000000000 RSI: ffffffff9003d910 RDI: 0000000000000001 [ 192.056142][ C0] RBP: ffffffff8d356e61 R08: 0000000000000005 R09: ffffffff8bbf6dde [ 192.064217][ C0] R10: 0000000000000003 R11: ffff888034543c00 R12: ffff888024248008 [ 192.072258][ C0] R13: ffff88802132da00 R14: ffffffffffffffff R15: dffffc0000000000 [ 192.080326][ C0] ? mas_next_node+0xa2e/0xe00 [ 192.085158][ C0] ? mas_next_node+0xa46/0xe00 [ 192.090044][ C0] mt_validate+0x457c/0x4ac0 [ 192.094705][ C0] ? __pfx_mt_validate+0x10/0x10 [ 192.099741][ C0] ? vma_complete+0x53d/0xb50 [ 192.104487][ C0] ? uprobe_mmap+0x18d/0x10f0 [ 192.109286][ C0] validate_mm+0xf5/0x550 [ 192.113671][ C0] ? uprobe_mmap+0x18d/0x10f0 [ 192.118401][ C0] ? __pfx_uprobe_mmap+0x10/0x10 [ 192.123444][ C0] ? __pfx_validate_mm+0x10/0x10 [ 192.128438][ C0] ? __pfx_uprobe_mmap+0x10/0x10 [ 192.133486][ C0] ? vma_complete+0xad8/0xb50 [ 192.138219][ C0] __split_vma+0xabd/0xc50 [ 192.142758][ C0] ? __pfx___split_vma+0x10/0x10 [ 192.147752][ C0] ? mas_find+0x950/0xbb0 [ 192.152186][ C0] vms_gather_munmap_vmas+0x4b2/0x15d0 [ 192.157720][ C0] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 192.163724][ C0] ? mas_find+0x8c0/0xbb0 [ 192.168109][ C0] mmap_region+0x938/0x23f0 [ 192.172740][ C0] ? __pfx_mmap_region+0x10/0x10 [ 192.177758][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 192.182904][ C0] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 192.188911][ C0] ? bpf_lsm_mmap_addr+0x9/0x10 [ 192.193825][ C0] ? security_mmap_addr+0x6f/0x250 [ 192.199046][ C0] do_mmap+0x8f0/0x1000 [ 192.203275][ C0] ? __pfx_do_mmap+0x10/0x10 [ 192.207939][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 192.213690][ C0] ? common_file_perm+0x1a6/0x210 [ 192.218863][ C0] vm_mmap_pgoff+0x1dd/0x3d0 [ 192.223520][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 192.228707][ C0] ? __fget_files+0x29/0x470 [ 192.233428][ C0] ? __fget_files+0x3f3/0x470 [ 192.238159][ C0] ? __fget_files+0x29/0x470 [ 192.242872][ C0] ksys_mmap_pgoff+0x4eb/0x720 [ 192.247700][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 192.252586][ C0] do_syscall_64+0xf3/0x230 [ 192.257140][ C0] ? clear_bhb_loop+0x35/0x90 [ 192.261942][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.267889][ C0] RIP: 0033:0x7f2634dceb74 [ 192.272418][ C0] Code: 63 08 44 89 e8 5b 41 5c 41 5d c3 41 89 ca 41 f7 c1 ff 0f 00 00 74 0c c7 05 f5 46 01 00 16 00 00 00 eb 17 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 dc 46 01 00 48 83 c8 ff c3 0f [ 192.292112][ C0] RSP: 002b:00007ffc81e066a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 192.300646][ C0] RAX: ffffffffffffffda RBX: 00007ffc81e06758 RCX: 00007f2634dceb74 [ 192.308660][ C0] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007f2634b23000 [ 192.316736][ C0] RBP: 00007ffc81e06a80 R08: 0000000000000000 R09: 0000000000022000 [ 192.324802][ C0] R10: 0000000000000812 R11: 0000000000000246 R12: 00007f2634dabfc0 [ 192.332865][ C0] R13: 00007ffc81e06b08 R14: 0000000000021bd8 R15: 0000000000000000 [ 192.340953][ C0] [ 192.344028][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 192.351313][ C0] CPU: 0 UID: 0 PID: 11220 Comm: modprobe Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 192.361895][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 192.371952][ C0] Call Trace: [ 192.375230][ C0] [ 192.378073][ C0] dump_stack_lvl+0x241/0x360 [ 192.382761][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.387960][ C0] ? __pfx__printk+0x10/0x10 [ 192.392561][ C0] ? vscnprintf+0x5d/0x90 [ 192.396895][ C0] panic+0x349/0x880 [ 192.400791][ C0] ? __warn+0x177/0x4e0 [ 192.404950][ C0] ? __pfx_panic+0x10/0x10 [ 192.409386][ C0] __warn+0x34b/0x4e0 [ 192.413387][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 192.418938][ C0] report_bug+0x2b3/0x500 [ 192.423274][ C0] ? refcount_warn_saturate+0x15a/0x1d0 [ 192.428831][ C0] handle_bug+0x60/0x90 [ 192.432995][ C0] exc_invalid_op+0x1a/0x50 [ 192.437501][ C0] asm_exc_invalid_op+0x1a/0x20 [ 192.442352][ C0] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 192.448512][ C0] Code: e0 c7 60 8c e8 37 19 98 fc 90 0f 0b 90 90 eb 99 e8 bb 22 d7 fc c6 05 8d 0c 49 0b 01 90 48 c7 c7 40 c8 60 8c e8 17 19 98 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 98 22 d7 fc c6 05 67 0c 49 0b 01 90 [ 192.468125][ C0] RSP: 0018:ffffc90000007c08 EFLAGS: 00010246 [ 192.474202][ C0] RAX: bd60d1b4ed7c6e00 RBX: ffff888034843364 RCX: ffff888034543c00 [ 192.482174][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.490142][ C0] RBP: 0000000000000003 R08: ffffffff8155e312 R09: fffffbfff1cf9fd0 [ 192.498113][ C0] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff888050afcc68 [ 192.506093][ C0] R13: ffff888034843364 R14: 1ffff1100a15f998 R15: ffff888050afcc00 [ 192.514082][ C0] ? __warn_printk+0x292/0x360 [ 192.518895][ C0] ? refcount_warn_saturate+0x159/0x1d0 [ 192.524452][ C0] j1939_session_put+0x1ed/0x440 [ 192.529493][ C0] j1939_tp_rxtimer+0x184/0x3d0 [ 192.534351][ C0] ? __pfx_j1939_tp_rxtimer+0x10/0x10 [ 192.539730][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 192.544930][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 192.550929][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 192.556652][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 192.562736][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 192.567847][ C0] handle_softirqs+0x2c5/0x980 [ 192.572620][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 192.577391][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 192.582682][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 192.587888][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 192.592480][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 192.597684][ C0] irq_exit_rcu+0x9/0x30 [ 192.601930][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 192.607593][ C0] [ 192.610546][ C0] [ 192.613471][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 192.619451][ C0] RIP: 0010:mas_next_node+0xabe/0xe00 [ 192.624828][ C0] Code: 89 e8 48 8d a8 60 6e 35 8d 48 89 e8 48 c1 e8 03 48 ba 00 00 00 00 00 fc ff df 0f b6 04 10 84 c0 0f 85 e1 02 00 00 0f b6 45 00 <48> 89 44 24 08 44 8d 78 ff 41 0f b6 c7 49 8d 2c c4 48 89 e8 48 c1 [ 192.644430][ C0] RSP: 0018:ffffc90004ce7098 EFLAGS: 00000293 [ 192.650504][ C0] RAX: 000000000000000f RBX: ffff888024248000 RCX: 000000008d356e01 [ 192.658478][ C0] RDX: dffffc0000000000 RSI: ffffffff9003d910 RDI: 0000000000000001 [ 192.666447][ C0] RBP: ffffffff8d356e61 R08: 0000000000000005 R09: ffffffff8bbf6dde [ 192.674413][ C0] R10: 0000000000000003 R11: ffff888034543c00 R12: ffff888024248008 [ 192.682382][ C0] R13: ffff88802132da00 R14: ffffffffffffffff R15: dffffc0000000000 [ 192.690356][ C0] ? mas_next_node+0xa2e/0xe00 [ 192.695132][ C0] ? mas_next_node+0xa46/0xe00 [ 192.699911][ C0] mt_validate+0x457c/0x4ac0 [ 192.704538][ C0] ? __pfx_mt_validate+0x10/0x10 [ 192.709483][ C0] ? vma_complete+0x53d/0xb50 [ 192.714168][ C0] ? uprobe_mmap+0x18d/0x10f0 [ 192.718845][ C0] validate_mm+0xf5/0x550 [ 192.723178][ C0] ? uprobe_mmap+0x18d/0x10f0 [ 192.727853][ C0] ? __pfx_uprobe_mmap+0x10/0x10 [ 192.732788][ C0] ? __pfx_validate_mm+0x10/0x10 [ 192.737728][ C0] ? __pfx_uprobe_mmap+0x10/0x10 [ 192.742667][ C0] ? vma_complete+0xad8/0xb50 [ 192.747346][ C0] __split_vma+0xabd/0xc50 [ 192.751775][ C0] ? __pfx___split_vma+0x10/0x10 [ 192.756721][ C0] ? mas_find+0x950/0xbb0 [ 192.761054][ C0] vms_gather_munmap_vmas+0x4b2/0x15d0 [ 192.766530][ C0] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 192.772425][ C0] ? mas_find+0x8c0/0xbb0 [ 192.776753][ C0] mmap_region+0x938/0x23f0 [ 192.781273][ C0] ? __pfx_mmap_region+0x10/0x10 [ 192.786226][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 192.791355][ C0] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 192.797258][ C0] ? bpf_lsm_mmap_addr+0x9/0x10 [ 192.802106][ C0] ? security_mmap_addr+0x6f/0x250 [ 192.807222][ C0] do_mmap+0x8f0/0x1000 [ 192.811387][ C0] ? __pfx_do_mmap+0x10/0x10 [ 192.816018][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 192.821653][ C0] ? common_file_perm+0x1a6/0x210 [ 192.826681][ C0] vm_mmap_pgoff+0x1dd/0x3d0 [ 192.831360][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 192.836466][ C0] ? __fget_files+0x29/0x470 [ 192.841055][ C0] ? __fget_files+0x3f3/0x470 [ 192.845726][ C0] ? __fget_files+0x29/0x470 [ 192.850318][ C0] ksys_mmap_pgoff+0x4eb/0x720 [ 192.855084][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 192.859846][ C0] do_syscall_64+0xf3/0x230 [ 192.864350][ C0] ? clear_bhb_loop+0x35/0x90 [ 192.869059][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.874963][ C0] RIP: 0033:0x7f2634dceb74 [ 192.879377][ C0] Code: 63 08 44 89 e8 5b 41 5c 41 5d c3 41 89 ca 41 f7 c1 ff 0f 00 00 74 0c c7 05 f5 46 01 00 16 00 00 00 eb 17 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 0c f7 d8 89 05 dc 46 01 00 48 83 c8 ff c3 0f [ 192.898984][ C0] RSP: 002b:00007ffc81e066a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 192.907413][ C0] RAX: ffffffffffffffda RBX: 00007ffc81e06758 RCX: 00007f2634dceb74 [ 192.915384][ C0] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007f2634b23000 [ 192.923351][ C0] RBP: 00007ffc81e06a80 R08: 0000000000000000 R09: 0000000000022000 [ 192.931320][ C0] R10: 0000000000000812 R11: 0000000000000246 R12: 00007f2634dabfc0 [ 192.939289][ C0] R13: 00007ffc81e06b08 R14: 0000000000021bd8 R15: 0000000000000000 [ 192.947303][ C0] [ 192.950483][ C0] Kernel Offset: disabled [ 192.954807][ C0] Rebooting in 86400 seconds..