last executing test programs: 1m3.499754014s ago: executing program 1 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000010405000000000000000000000400000500010001"], 0x24}}, 0x11000000) 53.130210164s ago: executing program 1 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000010405000000000000000000000400000500010001"], 0x24}}, 0x11000000) 42.041291336s ago: executing program 1 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000010405000000000000000000000400000500010001"], 0x24}}, 0x11000000) 31.123256367s ago: executing program 1 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000010405000000000000000000000400000500010001"], 0x24}}, 0x11000000) 18.888109756s ago: executing program 1 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000010405000000000000000000000400000500010001"], 0x24}}, 0x11000000) 8.054325297s ago: executing program 1 (id=1081): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="24000000010405000000000000000000000400000500010001"], 0x24}}, 0x11000000) 4.081170899s ago: executing program 0 (id=2162): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x3, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64=r0], &(0x7f0000000240)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x60, '\x00', r0}, 0x90) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000000)="2714b500140007070333000000cd9f9d5ff493fe0012ff000000075bbb774e", 0x7e) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000b40)={0x0, 0x3, 0x4, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000f40)={0x8, 0x4, {0x2, @struct={0x5, 0x7}, 0x0, 0x6, 0x800, 0x9, 0x2, 0x5, 0x18, @usage=0x9, 0x0, 0x6, [0xc557, 0x4e, 0x1, 0x6, 0x1, 0x3]}, {0x809, @struct={0x1, 0x6}, r3, 0xc, 0x10001, 0xff, 0x401, 0x6, 0x8, @struct={0xffffffff, 0x4}, 0xfffffff8, 0x8, [0x10, 0x6, 0x8, 0xce, 0x4, 0x800]}, {0x72, @usage, r4, 0x1400000, 0x5, 0x91, 0x0, 0x37a537e3, 0x3, @usage=0x9515, 0x401, 0xffff, [0xffffffff, 0x80000000, 0x4, 0x10000, 0x5, 0x1]}, {0x5, 0x7ff}}) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, 0x0, 0x0) bind$inet(r2, 0x0, 0x0) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x14, 0x14, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) shutdown(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r6) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x9, &(0x7f00000003c0)={@map, 0xffffffffffffffff, 0x1e, 0x0, 0xffffffffffffffff, @prog_id, r7}, 0x20) socket$kcm(0x10, 0x2, 0x4) unshare(0x6020400) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000004800010000000000000000000a003f00", @ANYRES32, @ANYBLOB="0000000014000100208000000000000000000000000000aa080002"], 0x38}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x2000) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703110000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3.724694358s ago: executing program 0 (id=2169): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x80000006}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000290000003e00000009"], 0xb0}}], 0x1, 0xffff0000) 3.63233065s ago: executing program 0 (id=2172): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x4000400) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000240), 0xd00}, 0x0) 3.558295833s ago: executing program 0 (id=2173): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b11d25a806c8c6f94f90424fc601000407a0a000600053582c137153e37000c1128fc2ff4072f00", 0x33fe0}], 0x1, 0x0, 0x0, 0x35}, 0x0) 3.265492432s ago: executing program 0 (id=2178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000060) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000003a00)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=[@flowinfo={{0x14, 0x29, 0xb, 0xd7f}}], 0x28}}], 0x1, 0x5efe) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000900000000000000000a20000000000a03000000000000000000010000000900010073797a30000000005c000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f746f5f628374616476000900010073797a30"], 0xa4}}, 0x0) r4 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000b40a000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff20000000"]}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2c, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x488, 0x220, 0x220, 0x220, 0x330, 0x220, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={{0x40}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@remote}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'netpci0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) close(r5) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000020000000000010510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000680)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x3f000000}}}, 0xb8}, 0x1, 0xfffff000}, 0x0) 2.070980241s ago: executing program 0 (id=2184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x2}}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="c3aa00fe41000000711000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x200000}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000084) 1.832765845s ago: executing program 4 (id=2189): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005140)=@newchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000701080000000000000007000000", @ANYRES32=r5, @ANYBLOB="e04f00000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) (async) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000), &(0x7f00000000c0)=0x30) 1.496962013s ago: executing program 4 (id=2193): r0 = socket$xdp(0x2c, 0x3, 0x0) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x4, 0x4, 0x3}, 0x48) (rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x1}, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x8, 0xd3, 0x0, 0x4, @remote, @mcast1, 0x8000, 0x8, 0xff, 0xdc6d}}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x40040) (async, rerun: 32) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000001280)=""/187, 0x2a, 0xbb, 0x1}, 0x20) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @exit, @exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0xd6, &(0x7f0000000100)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x1}, 0x10}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x12, 0x4, 0x8, 0x3}, 0x48) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x15, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x90, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x66e99, 0x74c4d}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x48, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x8}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x5}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xfd}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x8}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @broadcast}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x1}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_vlan\x00'}, @IFLA_MASTER={0x8}]}, 0x90}}, 0x20000800) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) (async, rerun: 64) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000004c0)=""/74, 0x328000, 0x1000, 0x0, 0xd73bc84ed53b6687}, 0x20) (rerun: 64) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) (rerun: 32) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) 1.289176382s ago: executing program 4 (id=2197): r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=[{0x0, '\x00', 0xfffffffd, 0xfffffffffffffffe}, {}, {}]}, 0x108) 1.170891428s ago: executing program 3 (id=2198): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_WINDOW={0x8}]}}}]}, 0x3c}}, 0x0) 1.159029267s ago: executing program 4 (id=2199): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a300000000009000300737972320000000064000000060a010400000000000000000100000008000b40000000003c000480140001800c000100636f756e7465720004000280240001800b000100657874686472000014000280080007400000000008000640000000040900010073797a30"], 0xd8}}, 0x0) (fail_nth: 14) 1.06112173s ago: executing program 2 (id=2200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x3, 0xffffffffffffffe0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4f}, 0x90) socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r1, 0xbabc) socket(0x28, 0x5, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r3, 0x0) (async) listen(r3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000380), 0x208e24b) (async) write$binfmt_script(r5, &(0x7f0000000380), 0x208e24b) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r5, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0xd1383000) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000240)) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000280)) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x4, 0x10003}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0xff, 0x9}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@local}, &(0x7f00000004c0)=0x37) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/233, 0xe9}], 0x1}, 0x0) sendmsg$alg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) sendmsg$alg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@delqdisc={0xe0, 0x25, 0x0, 0x0, 0x0, {}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xffffffffffffff76, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x15}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x24}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1267}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6}]}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x14}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.052247003s ago: executing program 3 (id=2201): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="08210000000000002800128008000100677470001c00028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="0800030001000001"], 0x48}}, 0x0) 640.715602ms ago: executing program 2 (id=2202): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0), 0x10}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90124fc60100c0200000082c0053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 545.427032ms ago: executing program 4 (id=2203): syz_emit_ethernet(0x376, &(0x7f00000003c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x340, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x19, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0x11, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05"}]}}}}}}, 0x0) 532.828793ms ago: executing program 4 (id=2204): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r0, 0x0, 0x2, 0x0, &(0x7f0000000b40)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20}, {0x6}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000006040000000000000001000004f70000000000000003000000000000000000000000000009"], 0x0, 0x4a, 0x0, 0x1}, 0x20) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) r4 = socket$inet6(0xa, 0x6, 0xf25) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r4, 0x80080400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) r7 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000340)=ANY=[@ANYBLOB="330800000000000005020006013207000000daccf342a10c4caa01e059710cd6544ea12074f05952a5d5b88fdbabadf4ef0700e2e9a3c4d595227f2078b2fcf5a006acad72ad0cad3dda3626150400d441157a710280"], 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYRES8], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a0300000000000000000000000000140000001100010000000000000000000000000af24b56e9a5da39f6715a21bedc042a7fa1b73263911b4dc7dfddedfaac011dd6fb7e33851ed963b4a32dd5a081159b933b22dcb57b3c7f2a4e5b92db3437969307b053cbb50b6bf47370e1e0a22ca891257eb66b095cfb75142060eb5f9abae85b32c91e37f98b6b7ebd02572b6d4070d511b97a4674e3484e07cc62ab38d0cc321938055630f601d3cad86e87c511c23aed7d9179577c"], 0x3c}}, 0x0) 482.759321ms ago: executing program 3 (id=2205): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000390000009b0000000000000000001057ee3bc343cf28aa0000000000"], 0x28}, 0x0) 433.389885ms ago: executing program 2 (id=2206): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e59e75e84c"}, @NL80211_KEY_CIPHER={0x15, 0x3, 0xfac05}]}]}, 0x3c}}, 0x0) 382.584394ms ago: executing program 3 (id=2207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'veth1_to_batadv\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x335) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000001f00)=""/4077, 0xfed}], 0x1}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) socket(0x2b, 0x80801, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$caif_stream(0x25, 0x1, 0x0) pipe(&(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINKMODE={0x5, 0x11, 0x4}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$cgroup_subtree(r1, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) 312.917013ms ago: executing program 2 (id=2208): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000090000000000030000000c00050000000000000000000c0002000000000000000000040007800c00080000000000000000000800010000000000", @ANYRES32], 0x90}}, 0x0) 181.383301ms ago: executing program 2 (id=2209): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}, 0x1, 0x0, 0xfcffffffffffffff}, 0x0) 181.196694ms ago: executing program 2 (id=2210): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)={0x0, 0x3, '\x00', [@ra, @pad1, @jumbo={0xc2, 0x4, 0x80000000}, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x4}]}, 0x28) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81044e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000014000000000000000000f9ff04000600000000000a"], 0xa0}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) socket$packet(0x11, 0x3, 0x300) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000140)="c3db32903453b3f3f48e6c6fdceb119f8040466741d8d499447516420e0e19033a1c90ed20e6af3014772bc598433ddd80e128b5dc9878d34b66d9889b055c26f3e5100714d8549c283e3d7bf2d69515786acc71a0a6f2d741b588eb6828f3c355f2d134284c20f07f68d4e9e47618151c7429f7a70d763540b0ba6bf6846da1623f77e40e820d2f85cc44ea255a9976f253", 0x92}], 0x1}}], 0x1, 0x0) 97.665671ms ago: executing program 3 (id=2211): syz_emit_ethernet(0x80, &(0x7f0000000000)={@multicast, @multicast, @void, {@x25={0x805, {0x1, 0x80, 0x27, "987313992d3b3649269d98b8f23e15e373ffd9b3de6cf3e604fe990a60eafaa8d6fad4d343447c77ae45dcccdc2145a8107a344d871a8539656ab6577f7a4c9873a89743bac43a15b92031451ddb64595f9c448ee287737a3867e8f2e2b69a450ad4aeac7c39ee67235c53129f98f3"}}}}, &(0x7f0000000080)={0x0, 0x3, [0xfe7, 0x1a4, 0x387, 0x54a]}) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)={0x87, 0x18, '\x00', [@enc_lim, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @private0}, @generic={0x6, 0xa4, "a1a0fe7e2a084cb3a4e169f392da9dbbc39e0ffce18701311f08abace124f639eca9ffa3f4ee44045995bae7bb2a50c85762bbd6393e8c7a2922dcea278b41978d51b976d705f4aa962ea9ba0e62ebeb5e9b3f3dc76a70629d72760980689a3408ffffabe951455a1a1c6b94f3254f2cba2d352d0ab03b32b1f1bc356ea75035c066431391fcdd912ea7fc02866a359d904e30a04b0a15106ea8a3d03560edd2934a0e42"}]}, 0xd0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x0, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x440}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x3e}, @jmp={0x5, 0x0, 0x7, 0x7, 0x9, 0x6, 0x40b995d246090ca1}, @ldst={0x1, 0x2, 0x4, 0x7, 0x1, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffa}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x3}]}, &(0x7f0000000380)='GPL\x00', 0x3, 0xaf, &(0x7f00000003c0)=""/175, 0x41000, 0x90, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x0, 0x8, 0xfffffbff, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r3], &(0x7f0000000640)=[{0x1, 0x4, 0x6, 0x2}, {0x4, 0x3, 0x0, 0x2}, {0x0, 0x5, 0x3, 0x6}], 0x10, 0x100}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000780), r1) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, r6, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_virt_wifi\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) write$cgroup_type(0xffffffffffffffff, &(0x7f00000008c0), 0x9) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), r1) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x88, r7, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xe}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x2b}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x88}, 0x1, 0x0, 0x0, 0x44084}, 0x20040000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x5c, r9, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xa}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x6}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x9}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x76}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) ioctl$sock_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000c80)) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000d00), r5) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r11, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}}, 0x22048010) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000e00)=r4, 0x4) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000e40)='syz1\x00', 0x200002, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r13, 0x660c) recvfrom(r1, &(0x7f0000000e80)=""/204, 0xcc, 0x400100c2, &(0x7f0000000f80)=@sco={0x1f, @none}, 0x80) socket$inet6_sctp(0xa, 0x5, 0x84) r14 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_FRAME(r14, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x28, r9, 0x2, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x719}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x44, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x80) 0s ago: executing program 3 (id=2212): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r0}, 0x10) r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000300)=0x1c) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f00000003c0)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x4c, r4}) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r5}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r6}, 0x10) (async) close(r2) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x1e}}}}]}, 0x38}}, 0x0) kernel console output (not intermixed with test programs): 118.830028][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.837259][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.866922][ T6999] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.893428][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.900662][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.943619][ T6999] netlink: 'syz.3.625': attribute type 2 has an invalid length. [ 118.957881][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.625'. [ 119.223354][ T6730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.321020][ T6730] veth0_vlan: entered promiscuous mode [ 119.358304][ T6730] veth1_vlan: entered promiscuous mode [ 119.448075][ T6730] veth0_macvtap: entered promiscuous mode [ 119.463857][ T7021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.488448][ T6730] veth1_macvtap: entered promiscuous mode [ 119.524657][ T5102] Bluetooth: hci3: command tx timeout [ 119.543628][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.546076][ T7023] x_tables: duplicate underflow at hook 1 [ 119.555073][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.570083][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.580872][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.595066][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.610359][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.621108][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.631917][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.682279][ T6730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.714931][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.736587][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.769778][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.785123][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.785201][ T7036] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.637'. [ 119.795209][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.817257][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.853462][ T6730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.876837][ T6730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.891119][ T6730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.905365][ T7033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.636'. [ 119.922228][ T6730] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.952456][ T6730] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.962609][ T6730] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.971918][ T6730] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.986965][ T7047] netlink: 40 bytes leftover after parsing attributes in process `syz.4.638'. [ 120.055650][ T7047] netlink: 'syz.4.638': attribute type 1 has an invalid length. [ 120.079178][ T7051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.132288][ T7055] netlink: 'syz.0.643': attribute type 1 has an invalid length. [ 120.163169][ T7055] bond1: entered promiscuous mode [ 120.199889][ T7051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.215706][ T2893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.235661][ T2893] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.261632][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.271320][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.522364][ T7075] __nla_validate_parse: 2 callbacks suppressed [ 120.522383][ T7075] netlink: 40 bytes leftover after parsing attributes in process `syz.1.649'. [ 120.565712][ T7072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.650'. [ 120.850287][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.659'. [ 120.944691][ T7103] netlink: 20 bytes leftover after parsing attributes in process `syz.4.662'. [ 121.080143][ T7115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.664'. [ 121.324351][ T7131] netlink: 60 bytes leftover after parsing attributes in process `syz.3.669'. [ 121.436759][ T7134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.534130][ T7134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.942137][ T7164] netlink: 3084 bytes leftover after parsing attributes in process `syz.4.680'. [ 121.953758][ T7164] netlink: 'syz.4.680': attribute type 1 has an invalid length. [ 121.969207][ T7164] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.680'. [ 122.168461][ T7169] netlink: 1260 bytes leftover after parsing attributes in process `syz.0.682'. [ 122.216740][ T7171] netlink: 'syz.4.683': attribute type 2 has an invalid length. [ 122.384209][ T7154] netlink: 'syz.1.677': attribute type 4 has an invalid length. [ 122.545778][ T7184] netlink: zone id is out of range [ 122.550936][ T7184] netlink: set zone limit has 4 unknown bytes [ 122.565076][ T5102] Bluetooth: hci0: command tx timeout [ 122.697168][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.691'. [ 122.768957][ T7193] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 122.947821][ T7201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.089084][ T7201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.130354][ T7221] dccp_invalid_packet: P.Data Offset(0) too small [ 123.419591][ T7239] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 123.566298][ T7245] bond0: option resend_igmp: invalid value (7540) [ 123.592200][ T7245] bond0: option resend_igmp: allowed values 0 - 255 [ 123.666862][ T7255] netlink: 'syz.3.712': attribute type 1 has an invalid length. [ 123.682524][ T7255] netlink: 'syz.3.712': attribute type 1 has an invalid length. [ 124.107744][ T7284] netlink: 'syz.0.723': attribute type 1 has an invalid length. [ 124.139996][ T7273] netlink: 'syz.4.720': attribute type 13 has an invalid length. [ 124.271830][ T7285] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 124.271830][ T7285] cct.usage_percpu_sys' [ 124.842412][ T7301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.059894][ T7301] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.171536][ T7312] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 125.666459][ T7322] __nla_validate_parse: 8 callbacks suppressed [ 125.666479][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.732'. [ 125.702044][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 125.753834][ T7325] netlink: 48 bytes leftover after parsing attributes in process `syz.2.733'. [ 126.073076][ T7342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.738'. [ 126.182032][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.740'. [ 126.209700][ T7349] netlink: 'syz.2.740': attribute type 13 has an invalid length. [ 126.246675][ T7349] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.255974][ T7349] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.265149][ T7349] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.273857][ T7349] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.314066][ T7349] vxlan0: entered promiscuous mode [ 126.330182][ T7364] netlink: 32 bytes leftover after parsing attributes in process `syz.3.744'. [ 126.556588][ T7377] netlink: 32 bytes leftover after parsing attributes in process `syz.1.751'. [ 126.698287][ T7383] netlink: 20 bytes leftover after parsing attributes in process `syz.1.752'. [ 127.021491][ T7398] netlink: 105108 bytes leftover after parsing attributes in process `syz.1.758'. [ 127.038507][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.760'. [ 127.064128][ T7398] netlink: 'syz.1.758': attribute type 1 has an invalid length. [ 127.203619][ T7411] xt_nfacct: accounting object `syz1' does not exists [ 127.397572][ T7421] Bluetooth: MGMT ver 1.22 [ 127.537806][ T7431] ip6gretap0: entered promiscuous mode [ 127.546205][ T7431] batadv_slave_0: entered promiscuous mode [ 127.559959][ T7431] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 127.579160][ T7431] Cannot create hsr debugfs directory [ 128.011638][ T7472] netlink: 'syz.2.786': attribute type 1 has an invalid length. [ 128.128738][ T7480] netlink: 'syz.1.789': attribute type 29 has an invalid length. [ 128.199887][ T7484] netlink: 'syz.2.791': attribute type 1 has an invalid length. [ 128.237901][ T7487] netlink: 'syz.1.793': attribute type 4 has an invalid length. [ 128.694448][ T7477] netlink: 'syz.4.788': attribute type 4 has an invalid length. [ 129.653278][ T7570] x_tables: duplicate underflow at hook 2 [ 129.691103][ T7570] netlink: 'syz.0.821': attribute type 9 has an invalid length. [ 129.786695][ T7578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.884676][ T7590] netlink: 'syz.4.828': attribute type 4 has an invalid length. [ 130.049499][ T7600] netlink: 'syz.4.833': attribute type 21 has an invalid length. [ 130.181743][ T7608] Cannot find del_set index 0 as target [ 130.249989][ T7615] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 130.716100][ T7641] bridge0: entered promiscuous mode [ 130.734613][ T7641] bridge0: left promiscuous mode [ 130.816345][ T7646] __nla_validate_parse: 23 callbacks suppressed [ 130.816366][ T7646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.850'. [ 131.037199][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.850'. [ 131.149845][ T7662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.854'. [ 131.637956][ T7678] validate_nla: 3 callbacks suppressed [ 131.637975][ T7678] netlink: 'syz.1.858': attribute type 20 has an invalid length. [ 131.950833][ T7686] netlink: 56 bytes leftover after parsing attributes in process `syz.4.864'. [ 131.988266][ T7686] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.074831][ T7690] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551614) [ 132.119289][ T7690] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 132.142592][ T7692] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20000 [ 132.316988][ T7702] Cannot find set identified by id 0 to match [ 132.629454][ T7718] netlink: 56 bytes leftover after parsing attributes in process `syz.2.879'. [ 132.650766][ T7718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.788456][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.887'. [ 133.025564][ T7747] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.892'. [ 133.075994][ T7748] team0: Port device wlan1 added [ 133.218338][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.228160][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.246672][ T7759] bond0: Unable to set down delay as MII monitoring is disabled [ 133.287237][ T7762] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 133.317115][ T7762] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 133.353948][ T7762] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.896'. [ 133.371103][ T7762] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 133.426071][ T7764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.897734][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'. [ 134.019389][ T7805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.909'. [ 134.349411][ T7827] netlink: 'syz.3.918': attribute type 1 has an invalid length. [ 134.357994][ T7827] netlink: 'syz.3.918': attribute type 2 has an invalid length. [ 134.383105][ T7827] xt_TCPMSS: Only works on TCP SYN packets [ 134.462838][ T7833] netlink: 'syz.2.921': attribute type 1 has an invalid length. [ 134.709456][ T7850] batadv0: entered promiscuous mode [ 134.765727][ T7850] team0: Device batadv0 is up. Set it down before adding it as a team port [ 134.921073][ T7866] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 135.122169][ T7878] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 135.314682][ T7891] netlink: 'syz.2.939': attribute type 10 has an invalid length. [ 135.452981][ T7900] netlink: 'syz.3.942': attribute type 10 has an invalid length. [ 135.471440][ T7902] batadv0: entered promiscuous mode [ 135.594433][ T7902] team0: Device batadv0 is already an upper device of the team interface [ 135.758341][ T7924] dccp_invalid_packet: P.Data Offset(0) too small [ 135.876447][ T7929] __nla_validate_parse: 14 callbacks suppressed [ 135.876466][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.948'. [ 136.150968][ T7940] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 136.166900][ T7940] netlink: 9348 bytes leftover after parsing attributes in process `syz.3.956'. [ 136.168218][ T7942] netlink: 84 bytes leftover after parsing attributes in process `syz.0.957'. [ 136.180403][ T7940] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 136.206545][ T7940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.956'. [ 136.241197][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 136.585807][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.966'. [ 136.635473][ T7961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.667612][ T7967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'. [ 136.677168][ T7967] netlink: 'syz.2.968': attribute type 1 has an invalid length. [ 136.677651][ T7961] batadv_slave_0: entered promiscuous mode [ 136.685129][ T7967] netlink: 32 bytes leftover after parsing attributes in process `syz.2.968'. [ 136.742663][ T7961] batadv_slave_0: entered allmulticast mode [ 136.786471][ T7971] netlink: 'syz.0.965': attribute type 1 has an invalid length. [ 136.834916][ T7971] netlink: 'syz.0.965': attribute type 2 has an invalid length. [ 136.998411][ T7944] team1: Failed to send options change via netlink (err -105) [ 137.014163][ T7944] team1: Mode changed to "activebackup" [ 137.034332][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.975'. [ 137.068505][ T7982] block nbd0: not configured, cannot reconfigure [ 137.096207][ T7988] netlink: 20 bytes leftover after parsing attributes in process `syz.1.976'. [ 137.221846][ T7991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.495260][ T8011] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 137.837296][ T8038] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode broadcast(3) [ 137.873081][ T8038] netlink: 'syz.4.996': attribute type 10 has an invalid length. [ 137.938341][ T8038] team0: Device veth1_macvtap failed to register rx_handler [ 138.133761][ T8058] netlink: 'syz.2.1002': attribute type 6 has an invalid length. [ 138.297472][ T8073] Bluetooth: MGMT ver 1.22 [ 138.302929][ T8073] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 138.327451][ T8070] netlink: 'syz.1.1008': attribute type 10 has an invalid length. [ 138.397298][ T8070] team0: Device veth1_macvtap failed to register rx_handler [ 138.854797][ T8089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.074570][ T8039] team1: Failed to send options change via netlink (err -105) [ 139.086284][ T8039] team1: Mode changed to "activebackup" [ 139.097454][ T8098] netlink: 'syz.1.1019': attribute type 1 has an invalid length. [ 139.225584][ T8106] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.376500][ T8120] tls_set_device_offload_rx: netdev not found [ 139.481788][ T8108] bond2: (slave gretap1): making interface the new active one [ 139.523242][ T8108] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 139.816898][ T8151] 0ͺXΉ¦D: renamed from gretap0 (while UP) [ 139.850361][ T8151] 0ͺXΉ¦D: entered allmulticast mode [ 139.869065][ T8151] A link change request failed with some changes committed already. Interface 30ͺXΉ¦D may have been left with an inconsistent configuration, please check. [ 140.011971][ T8159] 8021q: VLANs not supported on lo [ 140.043735][ T8159] : renamed from gretap0 [ 140.155684][ T8164] netlink: 'syz.1.1038': attribute type 4 has an invalid length. [ 140.193435][ T8167] ip6gretap0: entered promiscuous mode [ 140.274749][ T8167] batadv_slave_0: entered promiscuous mode [ 140.296187][ T8167] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 140.331828][ T8167] Cannot create hsr debugfs directory [ 140.882274][ T8205] netlink: 'syz.4.1048': attribute type 1 has an invalid length. [ 141.084733][ T8212] vlan2: entered promiscuous mode [ 141.090148][ T8212] batadv0: entered promiscuous mode [ 141.123485][ T8212] team0: Port device vlan2 added [ 141.199560][ T8220] __nla_validate_parse: 19 callbacks suppressed [ 141.199578][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1054'. [ 141.260908][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'. [ 142.160045][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.210767][ T8293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'. [ 142.242149][ T8293] vlan2: entered promiscuous mode [ 142.322462][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.422216][ T8298] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1083'. [ 142.453111][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.568200][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.574092][ T8312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1086'. [ 142.772701][ T12] bridge_slave_1: left allmulticast mode [ 142.791654][ T12] bridge_slave_1: left promiscuous mode [ 142.818842][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.831228][ T12] bridge_slave_0: left allmulticast mode [ 142.837400][ T12] bridge_slave_0: left promiscuous mode [ 142.843244][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.890215][ T5111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.927613][ T5111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.938147][ T5111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.956289][ T5111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.965053][ T5111] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 142.972524][ T5111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.060770][ T12] ip6gretap0 (unregistering): left promiscuous mode [ 143.138332][ T12] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 143.283807][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.300135][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.311455][ T12] bond0 (unregistering): Released all slaves [ 143.323964][ T12] bond1 (unregistering): Released all slaves [ 143.410329][ T12] bond2 (unregistering): Released all slaves [ 143.431327][ T8345] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 143.451194][ T8349] netlink: 'syz.3.1095': attribute type 4 has an invalid length. [ 143.556681][ T8352] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1096'. [ 143.584481][ T8351] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1096'. [ 143.609913][ T8356] Cannot find del_set index 0 as target [ 143.738759][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'. [ 143.899269][ T8378] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1105'. [ 143.914594][ T8378] block nbd0: not configured, cannot reconfigure [ 144.002796][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 144.506115][ T12] batadv_slave_0: left promiscuous mode [ 144.547642][ T12] hsr_slave_0: left promiscuous mode [ 144.581507][ T12] hsr_slave_1: left promiscuous mode [ 144.590835][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.612268][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.633303][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.644309][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.678243][ T12] batadv0: left promiscuous mode [ 144.683603][ T12] veth0_macvtap: left promiscuous mode [ 144.689408][ T12] veth1_vlan: left promiscuous mode [ 144.695432][ T12] veth0_vlan: left promiscuous mode [ 144.862929][ T12] team0 (unregistering): Port device vlan2 removed [ 145.044979][ T5111] Bluetooth: hci3: command tx timeout [ 145.182537][ T12] team0 (unregistering): Port device team_slave_1 removed [ 145.230586][ T12] team0 (unregistering): Port device team_slave_0 removed [ 145.796882][ T8438] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 145.842267][ T8329] chnl_net:caif_netlink_parms(): no params data found [ 145.989185][ T8444] bond0: entered promiscuous mode [ 146.009495][ T8444] bond0: left promiscuous mode [ 146.056660][ T8447] Κό: entered promiscuous mode [ 146.215125][ T8329] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.222299][ T8329] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.242307][ T8461] __nla_validate_parse: 5 callbacks suppressed [ 146.242327][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'. [ 146.247843][ T8329] bridge_slave_0: entered allmulticast mode [ 146.267132][ T8329] bridge_slave_0: entered promiscuous mode [ 146.279359][ T8329] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.291281][ T8329] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.302351][ T8329] bridge_slave_1: entered allmulticast mode [ 146.315025][ T8329] bridge_slave_1: entered promiscuous mode [ 146.452330][ T8329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.469576][ T8470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1138'. [ 146.498648][ T8329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.519755][ T8473] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1139'. [ 146.600031][ T8329] team0: Port device team_slave_0 added [ 146.628562][ T8329] team0: Port device team_slave_1 added [ 146.752256][ T8481] bond0: Unable to set down delay as MII monitoring is disabled [ 146.839734][ T8329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.857912][ T8329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.932614][ T8329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.975582][ T8329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.990690][ T8329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.038736][ T8510] netlink: 'syz.4.1151': attribute type 9 has an invalid length. [ 147.052854][ T8329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.058866][ T8510] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.1151'. [ 147.124978][ T5111] Bluetooth: hci3: command tx timeout [ 147.279311][ T8527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1155'. [ 147.362108][ T8329] hsr_slave_0: entered promiscuous mode [ 147.376575][ T8329] hsr_slave_1: entered promiscuous mode [ 147.500114][ T8535] netlink: 'syz.0.1159': attribute type 33 has an invalid length. [ 147.508710][ T8535] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1159'. [ 147.538396][ T8535] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 147.711102][ T8544] vlan2: entered promiscuous mode [ 147.722800][ T8544] xfrm0: entered promiscuous mode [ 147.733072][ T8544] team0: Port device vlan2 added [ 147.738695][ T8546] Bluetooth: MGMT ver 1.22 [ 147.754014][ T8546] Bluetooth: hci3: invalid length 0, exp 2 for type 9 [ 147.862777][ T8552] netlink: 'syz.2.1164': attribute type 10 has an invalid length. [ 147.871131][ T8552] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 147.924906][ T8552] batman_adv: batadv1: Removing interface: netdevsim0 [ 147.955156][ T8552] team0: Port device netdevsim0 added [ 148.155487][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 148.175520][ T8563] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1170'. [ 148.221976][ T8566] netlink: 'syz.3.1171': attribute type 13 has an invalid length. [ 148.319139][ T8571] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: netdevsim0 [ 148.330406][ T8571] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.351852][ T8571] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 148.371596][ T8571] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 148.629136][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1180'. [ 148.656112][ T8590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1182'. [ 148.693609][ T8329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 148.759156][ T8329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 148.789746][ T8329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 148.840667][ T8329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.015972][ T8610] netlink: 'syz.2.1188': attribute type 7 has an invalid length. [ 149.204296][ T5111] Bluetooth: hci3: command tx timeout [ 149.212276][ T8329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.271041][ T8329] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.293635][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.300938][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.348562][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.355956][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.636190][ T8329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.268381][ T8329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.292456][ T8691] netlink: 'syz.3.1203': attribute type 1 has an invalid length. [ 150.331812][ T8329] veth0_vlan: entered promiscuous mode [ 150.342448][ T8691] netlink: 'syz.3.1203': attribute type 1 has an invalid length. [ 150.360433][ T8329] veth1_vlan: entered promiscuous mode [ 150.467303][ T8329] veth0_macvtap: entered promiscuous mode [ 150.491876][ T8329] veth1_macvtap: entered promiscuous mode [ 150.540973][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.554656][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.584204][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.607484][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.627330][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.640044][ T8706] netlink: 'syz.4.1211': attribute type 1 has an invalid length. [ 150.648161][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.671779][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.760064][ T8677] netlink: 'syz.0.1200': attribute type 4 has an invalid length. [ 150.798094][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.844155][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.870950][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.893990][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.914302][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.931029][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.949945][ T8329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.961907][ T8329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.988518][ T8329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.016769][ T8329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.025668][ T8329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.054473][ T8329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.063217][ T8329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.197958][ T8727] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 151.285631][ T5111] Bluetooth: hci3: command tx timeout [ 151.340116][ T8738] ΙΆΖ£0GCTw: entered promiscuous mode [ 151.416033][ T8738] ΙΆΖ£0GC¦: entered promiscuous mode [ 151.479432][ T8744] netlink: 'syz.0.1223': attribute type 33 has an invalid length. [ 151.648880][ T8659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.677850][ T8659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.745184][ T2450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.753053][ T2450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.832841][ T8763] netlink: 'syz.0.1230': attribute type 6 has an invalid length. [ 152.020567][ T8775] netlink: 'syz.0.1235': attribute type 10 has an invalid length. [ 152.033287][ T8775] team0: Device veth1_macvtap failed to register rx_handler [ 152.064939][ T8777] __nla_validate_parse: 15 callbacks suppressed [ 152.064958][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1237'. [ 152.235401][ T8790] netlink: 296 bytes leftover after parsing attributes in process `syz.4.1241'. [ 152.278922][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 152.300903][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1243'. [ 152.314540][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1245'. [ 152.334116][ T8797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1245'. [ 152.351433][ T8797] netlink: 'syz.3.1245': attribute type 1 has an invalid length. [ 152.365078][ T8798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1244'. [ 152.535093][ T8815] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1252'. [ 152.583565][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1253'. [ 152.623659][ T8820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1253'. [ 152.780933][ T8831] netlink: 'syz.0.1258': attribute type 1 has an invalid length. [ 153.343348][ T8873] netlink: 'syz.2.1273': attribute type 11 has an invalid length. [ 153.546461][ T8884] sctp: [Deprecated]: syz.2.1277 (pid 8884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.546461][ T8884] Use struct sctp_sack_info instead [ 153.679918][ T2450] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.050682][ T5102] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 154.061908][ T5102] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 154.070847][ T5102] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 154.080293][ T5102] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 154.088672][ T5102] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 154.097342][ T5102] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 154.273440][ T8903] vlan2: entered promiscuous mode [ 154.279084][ T8903] team0: Device vlan2 is already an upper device of the team interface [ 154.303238][ T8906] raw_sendmsg: syz.3.1283 forgot to set AF_INET. Fix it! [ 154.451904][ T8897] chnl_net:caif_netlink_parms(): no params data found [ 154.608155][ T8920] xfrm1: entered promiscuous mode [ 154.613224][ T8920] xfrm1: entered allmulticast mode [ 154.647500][ T2450] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.757789][ T2450] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.772488][ T8897] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.785245][ T8897] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.792582][ T8897] bridge_slave_0: entered allmulticast mode [ 154.807428][ T8897] bridge_slave_0: entered promiscuous mode [ 154.845826][ T2450] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.874377][ T8897] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.881697][ T8897] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.891885][ T8897] bridge_slave_1: entered allmulticast mode [ 154.908173][ T8897] bridge_slave_1: entered promiscuous mode [ 154.915867][ T8937] validate_nla: 3 callbacks suppressed [ 154.915885][ T8937] netlink: 'syz.0.1292': attribute type 6 has an invalid length. [ 154.929782][ T8937] netlink: 'syz.0.1292': attribute type 3 has an invalid length. [ 155.007157][ T8897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.042984][ T8897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.119260][ T8897] team0: Port device team_slave_0 added [ 155.162036][ T8897] team0: Port device team_slave_1 added [ 155.260608][ T8952] netlink: 'syz.3.1300': attribute type 30 has an invalid length. [ 155.326295][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.336091][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.384591][ T8897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.409778][ T2450] bridge_slave_1: left allmulticast mode [ 155.424592][ T2450] bridge_slave_1: left promiscuous mode [ 155.430383][ T2450] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.442290][ T8958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.455400][ T2450] bridge_slave_0: left allmulticast mode [ 155.463531][ T2450] bridge_slave_0: left promiscuous mode [ 155.478702][ T2450] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.591160][ T8965] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.645633][ T8968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.743106][ T8973] netlink: 'syz.4.1309': attribute type 9 has an invalid length. [ 155.756005][ T8973] netlink: 'syz.4.1309': attribute type 7 has an invalid length. [ 155.772170][ T8973] netlink: 'syz.4.1309': attribute type 8 has an invalid length. [ 155.989933][ T2450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.002365][ T2450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.013312][ T2450] bond0 (unregistering): Released all slaves [ 156.025750][ T8897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.032884][ T8897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.059581][ T8897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.071542][ T8978] netlink: 'syz.2.1310': attribute type 26 has an invalid length. [ 156.164713][ T5102] Bluetooth: hci3: command tx timeout [ 156.372765][ T8897] hsr_slave_0: entered promiscuous mode [ 156.390917][ T8897] hsr_slave_1: entered promiscuous mode [ 156.404606][ T8897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.412556][ T8897] Cannot create hsr debugfs directory [ 156.623203][ T2450] hsr_slave_0: left promiscuous mode [ 156.639370][ T2450] hsr_slave_1: left promiscuous mode [ 156.708034][ T2450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.723246][ T2450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.741207][ T2450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.752632][ T2450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.775881][ T9014] FAULT_INJECTION: forcing a failure. [ 156.775881][ T9014] name failslab, interval 1, probability 0, space 0, times 0 [ 156.799965][ T9014] CPU: 1 PID: 9014 Comm: syz.0.1325 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 156.810079][ T9014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 156.819458][ T2450] veth1_macvtap: left promiscuous mode [ 156.820128][ T9014] Call Trace: [ 156.820139][ T9014] [ 156.825978][ T2450] veth0_macvtap: left promiscuous mode [ 156.828827][ T9014] dump_stack_lvl+0x241/0x360 [ 156.828860][ T9014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.831958][ T2450] veth1_vlan: left promiscuous mode [ 156.837196][ T9014] ? __pfx__printk+0x10/0x10 [ 156.837222][ T9014] ? __pfx___might_resched+0x10/0x10 [ 156.837251][ T9014] should_fail_ex+0x3b0/0x4e0 [ 156.837282][ T9014] ? nla_strdup+0x9c/0x140 [ 156.842108][ T2450] veth0_vlan: left promiscuous mode [ 156.847103][ T9014] should_failslab+0x9/0x20 [ 156.847132][ T9014] __kmalloc_noprof+0xd8/0x400 [ 156.847151][ T9014] ? __kasan_kmalloc+0x98/0xb0 [ 156.890493][ T9014] nla_strdup+0x9c/0x140 [ 156.894742][ T9014] nf_tables_newtable+0x59d/0x1dc0 [ 156.899851][ T9014] ? nfnl_pernet+0x23/0x240 [ 156.904385][ T9014] ? __pfx_nf_tables_newtable+0x10/0x10 [ 156.909944][ T9014] ? __nla_parse+0x40/0x60 [ 156.914375][ T9014] nfnetlink_rcv+0x1427/0x2a90 [ 156.919168][ T9014] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 156.924498][ T9014] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.929695][ T9014] ? skb_clone+0x240/0x390 [ 156.934104][ T9014] ? __pfx_lock_release+0x10/0x10 [ 156.939132][ T9014] ? netlink_deliver_tap+0x2e/0x1b0 [ 156.944326][ T9014] netlink_unicast+0x7f0/0x990 [ 156.949089][ T9014] ? __pfx_netlink_unicast+0x10/0x10 [ 156.954363][ T9014] ? __virt_addr_valid+0x183/0x530 [ 156.959467][ T9014] ? __check_object_size+0x49c/0x900 [ 156.964741][ T9014] ? bpf_lsm_netlink_send+0x9/0x10 [ 156.969857][ T9014] netlink_sendmsg+0x8e4/0xcb0 [ 156.974623][ T9014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.979908][ T9014] ? __import_iovec+0x536/0x820 [ 156.984757][ T9014] ? aa_sock_msg_perm+0x91/0x160 [ 156.989693][ T9014] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 156.994965][ T9014] ? security_socket_sendmsg+0x87/0xb0 [ 157.000420][ T9014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.005697][ T9014] __sock_sendmsg+0x221/0x270 [ 157.010369][ T9014] ____sys_sendmsg+0x525/0x7d0 [ 157.015128][ T9014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.020412][ T9014] __sys_sendmsg+0x2b0/0x3a0 [ 157.024995][ T9014] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.030352][ T9014] ? vfs_write+0x7c4/0xc90 [ 157.034816][ T9014] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 157.041148][ T9014] ? do_syscall_64+0x100/0x230 [ 157.045927][ T9014] ? do_syscall_64+0xb6/0x230 [ 157.050607][ T9014] do_syscall_64+0xf3/0x230 [ 157.055105][ T9014] ? clear_bhb_loop+0x35/0x90 [ 157.059784][ T9014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.065680][ T9014] RIP: 0033:0x7f2f91775bd9 [ 157.070174][ T9014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.089772][ T9014] RSP: 002b:00007f2f924e5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.098180][ T9014] RAX: ffffffffffffffda RBX: 00007f2f91903f60 RCX: 00007f2f91775bd9 [ 157.106143][ T9014] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 157.114189][ T9014] RBP: 00007f2f924e50a0 R08: 0000000000000000 R09: 0000000000000000 [ 157.122151][ T9014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.130113][ T9014] R13: 000000000000000b R14: 00007f2f91903f60 R15: 00007ffc6fa37cd8 [ 157.138093][ T9014] [ 157.223842][ T9020] __nla_validate_parse: 13 callbacks suppressed [ 157.231892][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1326'. [ 157.382476][ T9027] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20000 [ 157.549468][ T9030] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 157.556602][ T9030] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 157.762188][ T2450] team0 (unregistering): Port device team_slave_1 removed [ 157.793387][ T2450] team0 (unregistering): Port device team_slave_0 removed [ 158.107910][ T9016] netlink: 'syz.4.1326': attribute type 30 has an invalid length. [ 158.118240][ T9016] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 158.245049][ T5102] Bluetooth: hci3: command tx timeout [ 158.283270][ T9036] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1331'. [ 158.303333][ T9036] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 158.346317][ T9034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.395974][ T5177] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 158.420644][ T5177] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 158.432929][ T9041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1334'. [ 158.466254][ T9041] unsupported nlmsg_type 40 [ 158.482721][ T2893] wlan1: authenticated [ 158.483639][ T9034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.511513][ T35] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 158.577682][ T9048] bond0: option resend_igmp: invalid value (7540) [ 158.584596][ T9048] bond0: option resend_igmp: allowed values 0 - 255 [ 158.593045][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1334'. [ 158.635125][ T2893] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 158.698944][ T9051] veth1_to_bridge: entered allmulticast mode [ 158.757660][ T2893] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 158.894096][ T8663] wlan1: association with 08:02:11:00:00:00 timed out [ 158.987995][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1342'. [ 159.022488][ T8897] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 159.045626][ T8897] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 159.067730][ T8897] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 159.108823][ T8897] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 159.127036][ T9070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1346'. [ 159.215290][ T9074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.264363][ T9074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.372706][ T8897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.422377][ T8897] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.447187][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.454398][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.477853][ T9083] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1350'. [ 159.516970][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.524190][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.599714][ T8897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.953365][ T9092] syz.3.1355 (9092) used greatest stack depth: 18584 bytes left [ 160.188134][ T9111] netlink: 'syz.3.1358': attribute type 11 has an invalid length. [ 160.198805][ T8897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.301299][ T8897] veth0_vlan: entered promiscuous mode [ 160.324458][ T5102] Bluetooth: hci3: command tx timeout [ 160.352408][ T8897] veth1_vlan: entered promiscuous mode [ 160.415207][ T8897] veth0_macvtap: entered promiscuous mode [ 160.435189][ T8897] veth1_macvtap: entered promiscuous mode [ 160.460466][ T8897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.473146][ T8897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.483481][ T8897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.495499][ T8897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.505870][ T8897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.516710][ T8897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.528554][ T8897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.560702][ T8897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.589855][ T8897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.604389][ T8897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.627555][ T8897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.655772][ T8897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.678597][ T8897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.697630][ T8897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.709264][ T8897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.721028][ T8897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.734328][ T9128] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (128) [ 160.749815][ T8897] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.758996][ T8897] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.769134][ T8897] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.791863][ T8897] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.840049][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1368'. [ 160.867102][ T9133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1369'. [ 160.869588][ T9131] block nbd0: not configured, cannot reconfigure [ 160.998948][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.037271][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.050469][ T9138] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 161.144386][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.164860][ T9140] bridge_slave_1: left allmulticast mode [ 161.173114][ T9140] bridge_slave_1: left promiscuous mode [ 161.193085][ T9140] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.228971][ T8663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.249224][ T9152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1377'. [ 161.258783][ T8663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.802814][ T9188] netlink: 'syz.2.1386': attribute type 12 has an invalid length. [ 162.824186][ T9188] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1386'. [ 163.029937][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'. [ 163.064508][ T9202] netlink: 'syz.4.1393': attribute type 1 has an invalid length. [ 163.093339][ T9205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1394'. [ 163.100959][ T9202] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1393'. [ 163.103088][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1396'. [ 163.137368][ T9207] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1395'. [ 163.185002][ T9211] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1397'. [ 163.394635][ T9225] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1405'. [ 163.426471][ T9228] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1404'. [ 163.705623][ T9240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1409'. [ 164.072382][ T8659] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.115593][ T9263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.189816][ T9263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.396164][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.425188][ T5107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.433812][ T5107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.453324][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.474401][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 164.484280][ T5107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.886448][ T9313] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 164.944542][ T9312] bridge0: port 2(hsr0) entered blocking state [ 164.973384][ T9312] bridge0: port 2(hsr0) entered disabled state [ 164.991083][ T9312] hsr0: entered allmulticast mode [ 165.001711][ T9312] hsr_slave_0: entered allmulticast mode [ 165.008500][ T9312] hsr_slave_1: entered allmulticast mode [ 165.022036][ T9312] hsr0: entered promiscuous mode [ 165.030953][ T9312] bridge0: port 2(hsr0) entered blocking state [ 165.037312][ T9312] bridge0: port 2(hsr0) entered forwarding state [ 165.064323][ T9275] chnl_net:caif_netlink_parms(): no params data found [ 165.266402][ T9340] netlink: 'syz.4.1439': attribute type 4 has an invalid length. [ 165.275406][ T9340] netlink: 'syz.4.1439': attribute type 1 has an invalid length. [ 165.302693][ T8659] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.331405][ T9275] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.341377][ T9275] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.358496][ T9275] bridge_slave_0: entered allmulticast mode [ 165.370943][ T9275] bridge_slave_0: entered promiscuous mode [ 165.431919][ T8659] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.458132][ T9275] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.466655][ T9275] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.476772][ T9275] bridge_slave_1: entered allmulticast mode [ 165.490215][ T9275] bridge_slave_1: entered promiscuous mode [ 165.546629][ T8659] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.622362][ T9275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.647209][ T9275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.788953][ T9367] netlink: 'syz.2.1446': attribute type 4 has an invalid length. [ 165.853635][ T9275] team0: Port device team_slave_0 added [ 165.886585][ T9275] team0: Port device team_slave_1 added [ 166.009473][ T9378] netlink: 'syz.0.1450': attribute type 46 has an invalid length. [ 166.052102][ T9275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.073346][ T9275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.160949][ T9275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.187432][ T9275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.206482][ T9275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.239482][ T9275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.385334][ T8659] bridge_slave_1: left allmulticast mode [ 166.391923][ T8659] bridge_slave_1: left promiscuous mode [ 166.405170][ T8659] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.446120][ T8659] bridge_slave_0: left allmulticast mode [ 166.452453][ T8659] bridge_slave_0: left promiscuous mode [ 166.467626][ T8659] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.565734][ T5102] Bluetooth: hci3: command tx timeout [ 167.011139][ T8659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.022783][ T8659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.035313][ T8659] bond0 (unregistering): Released all slaves [ 167.051680][ T9275] hsr_slave_0: entered promiscuous mode [ 167.060936][ T9275] hsr_slave_1: entered promiscuous mode [ 167.645994][ T9459] netlink: 'syz.2.1477': attribute type 21 has an invalid length. [ 167.655561][ T9459] netlink: 'syz.2.1477': attribute type 20 has an invalid length. [ 167.703354][ T9464] ipvlan0: entered promiscuous mode [ 167.885104][ T9457] ipvlan0: left promiscuous mode [ 167.925267][ T9469] __nla_validate_parse: 15 callbacks suppressed [ 167.925286][ T9469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1481'. [ 168.079178][ T8659] hsr_slave_0: left promiscuous mode [ 168.124267][ T8659] hsr_slave_1: left promiscuous mode [ 168.165654][ T8659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.181046][ T8659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.193441][ T8659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.203228][ T8659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.238795][ T8659] veth1_macvtap: left promiscuous mode [ 168.245034][ T8659] veth0_macvtap: left promiscuous mode [ 168.250658][ T8659] veth1_vlan: left promiscuous mode [ 168.256120][ T8659] veth0_vlan: left promiscuous mode [ 168.644566][ T5102] Bluetooth: hci3: command tx timeout [ 168.711015][ T8659] team0 (unregistering): Port device team_slave_1 removed [ 168.754688][ T8659] team0 (unregistering): Port device team_slave_0 removed [ 169.338570][ T9494] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1491'. [ 169.589044][ T9275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.632490][ T9275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.668582][ T9275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 169.710387][ T9275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 169.922427][ T9516] netlink: 'syz.2.1489': attribute type 4 has an invalid length. [ 169.960476][ T9516] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1489'. [ 170.169747][ T9275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.187685][ T9529] netlink: 'syz.4.1500': attribute type 10 has an invalid length. [ 170.216003][ T9529] team0: Device hsr_slave_1 failed to register rx_handler [ 170.260019][ T9529] syz.4.1500 (9529) used greatest stack depth: 17648 bytes left [ 170.319715][ T9275] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.354971][ T4511] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.362143][ T4511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.411946][ T4511] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.419125][ T4511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.505006][ T9275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.725569][ T5102] Bluetooth: hci3: command tx timeout [ 170.788308][ T9563] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1513'. [ 170.836883][ T9275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.947271][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1516'. [ 170.968217][ T9275] veth0_vlan: entered promiscuous mode [ 171.008271][ T9275] veth1_vlan: entered promiscuous mode [ 171.063137][ T9275] veth0_macvtap: entered promiscuous mode [ 171.090561][ T9275] veth1_macvtap: entered promiscuous mode [ 171.147884][ T9275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.174314][ T9275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.196475][ T9275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.222481][ T9275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.243525][ T9275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.276218][ T9275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.318441][ T9275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.376296][ T9275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.412974][ T9275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.436273][ T9275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.450023][ T9600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1523'. [ 171.452471][ T9275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.493933][ T9275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.514647][ T9275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.528426][ T9275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.539057][ T9275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.550999][ T9275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.587940][ T9275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.614053][ T9275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.624142][ T9275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.632860][ T9275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.817654][ T9615] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1529'. [ 171.861245][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.879609][ T9615] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1529'. [ 171.891190][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.904537][ T9618] netlink: 1260 bytes leftover after parsing attributes in process `syz.4.1532'. [ 172.007513][ T2893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.027879][ T2893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.031969][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1533'. [ 172.592701][ T9649] netlink: 'syz.2.1540': attribute type 10 has an invalid length. [ 172.855662][ T9663] bridge_slave_1: left allmulticast mode [ 172.871892][ T9663] bridge_slave_1: left promiscuous mode [ 172.884516][ T9663] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.043100][ T9674] __nla_validate_parse: 2 callbacks suppressed [ 173.043120][ T9674] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1552'. [ 173.236677][ T9684] netlink: 'syz.2.1556': attribute type 2 has an invalid length. [ 173.428930][ T9694] dccp_invalid_packet: P.Data Offset(0) too small [ 173.513819][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 173.644459][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1559'. [ 173.915444][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1564'. [ 174.009841][ T9715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1565'. [ 174.129840][ T9724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1569'. [ 174.148178][ T9724] netlink: 'syz.2.1569': attribute type 1 has an invalid length. [ 174.159633][ T9724] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1569'. [ 174.380618][ T9736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.449222][ T9744] dccp_invalid_packet: P.Data Offset(145) too large [ 174.485566][ T9736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.519858][ T9750] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 174.542628][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'. [ 174.562204][ T9751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'. [ 174.627854][ T9760] netlink: 'syz.3.1582': attribute type 13 has an invalid length. [ 174.638832][ T9760] netlink: 'syz.3.1582': attribute type 58 has an invalid length. [ 174.647418][ T9760] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1582'. [ 174.745757][ T9766] netlink: 'syz.3.1584': attribute type 33 has an invalid length. [ 174.971080][ T9780] block nbd0: not configured, cannot reconfigure [ 175.072465][ T8663] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.019962][ T9813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.045091][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.056263][ T5107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.069907][ T5107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.079271][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.089687][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 176.097374][ T5107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 176.185500][ T9813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.326239][ T8663] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.488602][ T8663] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.600591][ T8663] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.621251][ T9817] chnl_net:caif_netlink_parms(): no params data found [ 176.758957][ T9857] netlink: 'syz.2.1616': attribute type 29 has an invalid length. [ 176.813611][ T9817] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.822971][ T9817] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.830856][ T9817] bridge_slave_0: entered allmulticast mode [ 176.840327][ T9817] bridge_slave_0: entered promiscuous mode [ 176.849351][ T9817] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.858848][ T9817] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.866435][ T9817] bridge_slave_1: entered allmulticast mode [ 176.874313][ T9817] bridge_slave_1: entered promiscuous mode [ 176.986191][ T9868] sctp: [Deprecated]: syz.0.1618 (pid 9868) Use of int in maxseg socket option. [ 176.986191][ T9868] Use struct sctp_assoc_value instead [ 177.077088][ T9817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.139962][ T9817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.173338][ T8663] bridge_slave_1: left allmulticast mode [ 177.188781][ T8663] bridge_slave_1: left promiscuous mode [ 177.199189][ T8663] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.220322][ T8663] bridge_slave_0: left allmulticast mode [ 177.232093][ T8663] bridge_slave_0: left promiscuous mode [ 177.241538][ T8663] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.559858][ T9881] netlink: 'syz.2.1624': attribute type 29 has an invalid length. [ 177.750752][ T8663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.762839][ T8663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.777610][ T8663] bond0 (unregistering): Released all slaves [ 177.800687][ T9883] netlink: 'syz.2.1625': attribute type 4 has an invalid length. [ 177.848628][ T9885] ip6gretap0: entered promiscuous mode [ 177.882078][ T9887] netlink: 'syz.4.1627': attribute type 2 has an invalid length. [ 177.907785][ T9885] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 177.921545][ T9885] Cannot create hsr debugfs directory [ 177.997621][ T9817] team0: Port device team_slave_0 added [ 178.022723][ T9893] netlink: 'syz.4.1627': attribute type 8 has an invalid length. [ 178.060260][ T9898] __nla_validate_parse: 12 callbacks suppressed [ 178.060279][ T9898] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1630'. [ 178.087541][ T9901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.131151][ T9817] team0: Port device team_slave_1 added [ 178.165764][ T5107] Bluetooth: hci3: command tx timeout [ 178.231678][ T9817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.245510][ T9891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.259075][ T9817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.302568][ T9817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.377889][ T9817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.400935][ T9817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.413049][ T9916] ip6t_srh: unknown srh match flags 4001 [ 178.448184][ T9817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.480611][ T9908] lo: Caught tx_queue_len zero misconfig [ 178.499539][ T9916] netlink: 'syz.2.1635': attribute type 11 has an invalid length. [ 178.583584][ T8663] hsr_slave_0: left promiscuous mode [ 178.612327][ T8663] hsr_slave_1: left promiscuous mode [ 178.626604][ T9924] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1636'. [ 178.638262][ T8663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.650569][ T8663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.666187][ T8663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.679242][ T8663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.726227][ T8663] veth1_macvtap: left promiscuous mode [ 178.740106][ T8663] veth0_macvtap: left promiscuous mode [ 178.752985][ T8663] veth1_vlan: left promiscuous mode [ 178.765498][ T8663] veth0_vlan: left promiscuous mode [ 178.941803][ T9936] netlink: 'syz.3.1637': attribute type 4 has an invalid length. [ 178.960787][ T9936] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1637'. [ 179.789140][ T8663] team0 (unregistering): Port device team_slave_1 removed [ 179.863044][ T8663] team0 (unregistering): Port device team_slave_0 removed [ 179.980890][ T9972] netlink: 'syz.3.1644': attribute type 1 has an invalid length. [ 180.244190][ T4492] Bluetooth: hci3: command tx timeout [ 180.284266][ T9817] hsr_slave_0: entered promiscuous mode [ 180.302716][ T9817] hsr_slave_1: entered promiscuous mode [ 180.334665][ T9971] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1644'. [ 180.373321][ T9974] ebtables: ebtables: counters copy to user failed while replacing table [ 180.626833][ T9979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.683126][ T9986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1650'. [ 180.733377][ T9986] batman_adv: batadv1: Adding interface: netdevsim0 [ 180.740336][ T9986] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.767134][ T9986] batman_adv: batadv1: Interface activated: netdevsim0 [ 180.783302][ T9979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.865764][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1651'. [ 181.213017][ T9817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.222726][ T9817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.233706][ T9817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.275059][ T9817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.368304][ T4492] Bluetooth: hci4: command 0x0405 tx timeout [ 181.374572][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 181.380606][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 181.386681][ T5100] Bluetooth: hci1: command 0x0406 tx timeout [ 181.533172][T10006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1658'. [ 181.558862][ T9817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.670589][T10015] sch_tbf: burst 549 is lower than device veth1_to_bridge mtu (1514) ! [ 181.766424][ T9817] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.812855][T10018] netlink: 'syz.3.1664': attribute type 13 has an invalid length. [ 181.825478][T10018] netlink: 'syz.3.1664': attribute type 58 has an invalid length. [ 181.840145][T10018] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1664'. [ 181.899518][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.901415][T10022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.906787][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.909977][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.931322][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.024349][T10022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.269945][T10047] netlink: 'syz.3.1675': attribute type 5 has an invalid length. [ 182.325474][ T5111] Bluetooth: hci3: command tx timeout [ 182.432129][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1679'. [ 182.447863][ T9817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.575404][ T9817] veth0_vlan: entered promiscuous mode [ 182.608537][ T9817] veth1_vlan: entered promiscuous mode [ 182.703414][ T9817] veth0_macvtap: entered promiscuous mode [ 182.731269][ T9817] veth1_macvtap: entered promiscuous mode [ 182.786514][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.810594][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.839252][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.854961][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.881442][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.897149][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.909300][ T9817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.921379][T10079] netlink: 'syz.2.1687': attribute type 10 has an invalid length. [ 182.971566][T10079] team0: Device hsr_slave_1 failed to register rx_handler [ 183.038506][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.079286][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.096700][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.127334][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.143617][T10093] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1691'. [ 183.153611][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.165071][T10093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1691'. [ 183.168716][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.183598][T10093] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1691'. [ 183.201371][ T9817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.212924][ T9817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.225950][ T9817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.248162][T10095] netlink: 316 bytes leftover after parsing attributes in process `syz.2.1693'. [ 183.271976][T10095] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 183.330325][ T9817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.374191][ T9817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.382929][ T9817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.400209][ T9817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.413459][T10102] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1696'. [ 183.418682][T10107] bond0: option resend_igmp: invalid value (7540) [ 183.433219][T10107] bond0: option resend_igmp: allowed values 0 - 255 [ 183.451091][T10099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.461085][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1696'. [ 183.552562][T10099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.606100][ T8663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.623498][ T8663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.664323][ T8659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.684892][ T8659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.729315][T10118] bond0: entered promiscuous mode [ 183.743753][T10118] bond0: left promiscuous mode [ 183.907810][T10125] netlink: 860 bytes leftover after parsing attributes in process `syz.0.1703'. [ 184.197952][T10144] netlink: 3084 bytes leftover after parsing attributes in process `syz.4.1713'. [ 184.208484][T10144] netlink: 'syz.4.1713': attribute type 1 has an invalid length. [ 184.216486][T10144] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1713'. [ 184.355558][T10150] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1715'. [ 184.411417][T10150] netlink: 'syz.2.1715': attribute type 1 has an invalid length. [ 184.478212][T10164] ipvlan2: entered promiscuous mode [ 184.483555][T10164] ipvlan2: entered allmulticast mode [ 184.491398][T10164] bond0: entered allmulticast mode [ 184.498778][T10164] bond_slave_0: entered allmulticast mode [ 184.504702][T10164] bond_slave_1: entered allmulticast mode [ 184.510627][T10164] macvlan2: entered allmulticast mode [ 184.517072][T10164] vlan1: entered allmulticast mode [ 184.525195][T10164] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 184.610221][T10162] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 184.664375][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: netdevsim0 [ 184.690954][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.704061][T10174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: netdevsim0 [ 184.720545][T10174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.744144][T10174] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 184.765029][T10174] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 184.958621][T10190] gtp0: entered promiscuous mode [ 184.990006][T10190] gtp0: entered allmulticast mode [ 186.169348][ T2450] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.109751][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 187.120671][ T5107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 187.130584][ T5107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 187.139577][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 187.152252][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 187.161097][ T5107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.288295][ T2450] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.363351][T10286] 0ͺXΉ¦D: left allmulticast mode [ 187.459407][ T2450] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.483380][T10295] netlink: 'syz.0.1757': attribute type 15 has an invalid length. [ 187.593747][ T2450] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.740330][T10311] netlink: 'syz.3.1763': attribute type 1 has an invalid length. [ 187.987162][ T2450] bridge_slave_1: left allmulticast mode [ 187.997160][ T2450] bridge_slave_1: left promiscuous mode [ 188.003237][ T2450] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.045823][ T2450] bridge_slave_0: left allmulticast mode [ 188.051748][ T2450] bridge_slave_0: left promiscuous mode [ 188.080372][ T2450] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.440401][ T2450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.452301][ T2450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.469596][ T2450] bond0 (unregistering): Released all slaves [ 188.508145][T10323] __nla_validate_parse: 13 callbacks suppressed [ 188.508163][T10323] netlink: 388 bytes leftover after parsing attributes in process `syz.4.1767'. [ 188.644384][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1774'. [ 188.648355][T10276] chnl_net:caif_netlink_parms(): no params data found [ 188.672930][T10335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1774'. [ 188.695076][T10337] dccp_invalid_packet: P.Data Offset(145) too large [ 188.724690][T10341] netlink: 'syz.4.1775': attribute type 13 has an invalid length. [ 188.732926][T10341] netlink: 'syz.4.1775': attribute type 58 has an invalid length. [ 188.747027][T10341] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1775'. [ 188.942084][T10352] netlink: 'syz.4.1777': attribute type 33 has an invalid length. [ 188.955574][T10355] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1779'. [ 189.015893][ T783] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 189.026427][ T783] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 189.033172][ T2893] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 189.041037][ T2893] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 189.047972][ T2893] wlan1: authentication with 08:02:11:00:00:00 timed out [ 189.186696][T10365] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 189.212801][ T5107] Bluetooth: hci3: command tx timeout [ 189.331309][ T2450] hsr_slave_0: left promiscuous mode [ 189.355589][T10379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1788'. [ 189.368636][ T2450] hsr_slave_1: left promiscuous mode [ 189.376869][ T2450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.384981][ T2450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.397596][ T2450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.407545][ T2450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.450441][ T2450] veth1_macvtap: left promiscuous mode [ 189.460849][ T2450] veth0_macvtap: left promiscuous mode [ 189.476184][ T2450] veth1_vlan: left promiscuous mode [ 189.485489][ T2450] veth0_vlan: left promiscuous mode [ 190.105724][ T2450] team0 (unregistering): Port device team_slave_1 removed [ 190.140727][ T2450] team0 (unregistering): Port device team_slave_0 removed [ 190.529856][T10374] netlink: 'syz.0.1786': attribute type 10 has an invalid length. [ 190.539578][T10374] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 190.552717][T10374] batman_adv: batadv1: Removing interface: netdevsim0 [ 190.579911][T10384] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1790'. [ 190.593452][T10384] veth0_vlan: left promiscuous mode [ 190.622062][T10385] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1790'. [ 190.641798][T10380] netlink: 'syz.3.1787': attribute type 4 has an invalid length. [ 190.653124][T10276] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.676977][T10276] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.689362][T10276] bridge_slave_0: entered allmulticast mode [ 190.692717][T10394] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1793'. [ 190.699901][T10276] bridge_slave_0: entered promiscuous mode [ 190.707914][T10397] netlink: 1260 bytes leftover after parsing attributes in process `syz.4.1791'. [ 190.729542][T10398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.760784][T10276] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.768588][T10276] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.777681][T10276] bridge_slave_1: entered allmulticast mode [ 190.785481][T10276] bridge_slave_1: entered promiscuous mode [ 190.850243][T10392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.898486][T10276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.956148][T10402] netlink: 'syz.2.1795': attribute type 10 has an invalid length. [ 190.988323][T10402] team0: Device veth1_macvtap failed to register rx_handler [ 191.025294][T10276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.285435][ T5107] Bluetooth: hci3: command tx timeout [ 191.328236][T10276] team0: Port device team_slave_0 added [ 191.358448][T10276] team0: Port device team_slave_1 added [ 191.361818][T10419] netlink: 'syz.4.1799': attribute type 29 has an invalid length. [ 191.483575][T10276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.495516][T10276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.541723][T10276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.572261][T10423] netlink: 'syz.4.1800': attribute type 4 has an invalid length. [ 191.586537][T10276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.605395][T10276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.655168][T10276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.821964][T10276] hsr_slave_0: entered promiscuous mode [ 191.841699][T10276] hsr_slave_1: entered promiscuous mode [ 192.216298][T10457] dvmrp0: entered allmulticast mode [ 192.618700][T10276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 192.643077][T10276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 192.665779][T10276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 192.706327][T10276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 192.733254][T10490] FAULT_INJECTION: forcing a failure. [ 192.733254][T10490] name failslab, interval 1, probability 0, space 0, times 0 [ 192.733712][T10486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.754611][T10490] CPU: 1 PID: 10490 Comm: syz.3.1824 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 192.766009][T10490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 192.776082][T10490] Call Trace: [ 192.779369][T10490] [ 192.782308][T10490] dump_stack_lvl+0x241/0x360 [ 192.787022][T10490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.792226][T10490] ? __pfx__printk+0x10/0x10 [ 192.796829][T10490] ? __pfx___might_resched+0x10/0x10 [ 192.802130][T10490] should_fail_ex+0x3b0/0x4e0 [ 192.806907][T10490] should_failslab+0x9/0x20 [ 192.811408][T10490] __kmalloc_node_noprof+0xdf/0x440 [ 192.816607][T10490] ? kvmalloc_node_noprof+0x72/0x190 [ 192.821902][T10490] kvmalloc_node_noprof+0x72/0x190 [ 192.827015][T10490] alloc_netdev_mqs+0x87c/0xff0 [ 192.831881][T10490] __ip_tunnel_create+0x209/0x380 [ 192.836914][T10490] ? __pfx___ip_tunnel_create+0x10/0x10 [ 192.842459][T10490] ? security_capable+0x90/0xb0 [ 192.847311][T10490] ip_tunnel_ctl+0x55f/0xc40 [ 192.851900][T10490] vti_tunnel_ctl+0x3ff/0x500 [ 192.856572][T10490] ? __pfx_vti_tunnel_ctl+0x10/0x10 [ 192.861767][T10490] ? __mutex_trylock_common+0x183/0x2e0 [ 192.867574][T10490] ? __pfx___might_resched+0x10/0x10 [ 192.872855][T10490] ip_tunnel_siocdevprivate+0xf1/0x180 [ 192.878305][T10490] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 192.884359][T10490] ? trace_contention_end+0x3c/0x120 [ 192.889642][T10490] ? full_name_hash+0x93/0xe0 [ 192.894315][T10490] dev_ifsioc+0xaec/0xe70 [ 192.898638][T10490] ? __pfx_dev_ifsioc+0x10/0x10 [ 192.903488][T10490] ? dev_load+0x21/0x1f0 [ 192.907722][T10490] dev_ioctl+0x881/0x1340 [ 192.912063][T10490] sock_ioctl+0x7f2/0x8e0 [ 192.916386][T10490] ? __pfx_sock_ioctl+0x10/0x10 [ 192.921231][T10490] ? __fget_files+0x3f6/0x470 [ 192.925899][T10490] ? __fget_files+0x29/0x470 [ 192.930484][T10490] ? bpf_lsm_file_ioctl+0x9/0x10 [ 192.935420][T10490] ? security_file_ioctl+0x87/0xb0 [ 192.940523][T10490] ? __pfx_sock_ioctl+0x10/0x10 [ 192.945364][T10490] __se_sys_ioctl+0xfc/0x170 [ 192.949946][T10490] do_syscall_64+0xf3/0x230 [ 192.954442][T10490] ? clear_bhb_loop+0x35/0x90 [ 192.959116][T10490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.965003][T10490] RIP: 0033:0x7f472a175bd9 [ 192.969425][T10490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.989022][T10490] RSP: 002b:00007f472af0e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.997431][T10490] RAX: ffffffffffffffda RBX: 00007f472a303f60 RCX: 00007f472a175bd9 [ 193.005405][T10490] RDX: 00000000200005c0 RSI: 00000000000089f1 RDI: 0000000000000005 [ 193.013382][T10490] RBP: 00007f472af0e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 193.021355][T10490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.029319][T10490] R13: 000000000000000b R14: 00007f472a303f60 R15: 00007ffc04967b98 [ 193.037297][T10490] [ 193.058825][ T5094] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 193.083136][ T5094] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 193.092421][ T51] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 193.101779][T10486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.104252][ T51] wlan1: authenticated [ 193.122492][T10494] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551614) [ 193.136853][T10494] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 193.148396][ T51] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 193.171533][ T51] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 193.180673][ T51] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 193.191786][ T51] wlan1: association with 08:02:11:00:00:00 timed out [ 193.337208][T10506] block nbd0: not configured, cannot reconfigure [ 193.364366][ T5107] Bluetooth: hci3: command tx timeout [ 193.389646][T10276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.491262][T10276] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.527349][ T5291] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.534559][ T5291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.631122][ T5291] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.638339][ T5291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.954943][T10536] __nla_validate_parse: 9 callbacks suppressed [ 193.954970][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'. [ 193.958202][T10535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1839'. [ 193.972411][T10536] netlink: 'syz.0.1838': attribute type 21 has an invalid length. [ 194.022546][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1838'. [ 194.156021][T10276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.219802][T10548] bond0: option resend_igmp: invalid value (7540) [ 194.243683][T10548] bond0: option resend_igmp: allowed values 0 - 255 [ 194.292840][T10553] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 194.340604][T10556] IPVS: set_ctl: invalid protocol: 103 172.20.20.12:20002 [ 194.342678][T10276] veth0_vlan: entered promiscuous mode [ 194.379452][T10276] veth1_vlan: entered promiscuous mode [ 194.468221][T10561] netlink: 860 bytes leftover after parsing attributes in process `syz.3.1851'. [ 194.468816][T10276] veth0_macvtap: entered promiscuous mode [ 194.508754][T10276] veth1_macvtap: entered promiscuous mode [ 194.590711][T10276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.613137][T10276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.627970][T10276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.638720][T10276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.677984][T10571] netlink: 3084 bytes leftover after parsing attributes in process `syz.2.1856'. [ 194.687812][T10276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.700480][T10571] netlink: 'syz.2.1856': attribute type 1 has an invalid length. [ 194.709826][T10276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.719961][T10571] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1856'. [ 194.731640][T10276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.790130][T10276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.823941][T10276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.833793][T10276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.878922][T10276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.902561][T10276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.925019][T10276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.947059][T10276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.968143][T10276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.993652][T10276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.034455][T10276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.043336][T10276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.091813][T10276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.110255][T10276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.135944][T10599] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 195.150593][T10599] batman_adv: batadv0: Adding interface: gretap3 [ 195.157451][T10599] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.185290][T10599] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 195.304338][T10604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1866'. [ 195.446602][ T5107] Bluetooth: hci3: command tx timeout [ 195.462508][ T8659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.488375][ T8659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.549805][T10614] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 195.595710][ T2893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.617098][ T2893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.851182][T10631] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1880'. [ 196.082406][T10630] netlink: 'syz.2.1877': attribute type 10 has an invalid length. [ 196.187170][T10648] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1884'. [ 196.495643][T10670] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1891'. [ 196.728747][T10686] dccp_invalid_packet: P.Data Offset(0) too small [ 196.977653][T10702] netlink: 'syz.3.1903': attribute type 13 has an invalid length. [ 198.228657][T10781] nbd: must specify at least one socket [ 198.376486][ T989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.020471][ T989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.061543][T10790] __nla_validate_parse: 11 callbacks suppressed [ 199.061561][T10790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1937'. [ 199.101951][T10794] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1940'. [ 199.189752][ T989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.362205][ T989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.397387][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1943'. [ 199.425783][T10802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1943'. [ 199.431248][T10811] netlink: 'syz.4.1947': attribute type 41 has an invalid length. [ 199.608020][ T5111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.618376][ T5111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.627302][ T5111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.640712][ T5111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.651387][ T5111] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 199.659205][ T5111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.706896][T10819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1951'. [ 199.733615][T10819] ip6gretap0: Device is already in use. [ 199.782030][ T989] bridge_slave_1: left allmulticast mode [ 199.791690][ T989] bridge_slave_1: left promiscuous mode [ 199.809129][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.874982][ T989] bridge_slave_0: left allmulticast mode [ 199.880711][ T989] bridge_slave_0: left promiscuous mode [ 199.901760][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.560293][ T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.571801][ T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.582674][ T989] bond0 (unregistering): Released all slaves [ 200.767925][T10849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1962'. [ 200.955949][T10857] netlink: 'syz.4.1964': attribute type 1 has an invalid length. [ 200.963816][T10857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1964'. [ 201.183430][ T989] hsr_slave_0: left promiscuous mode [ 201.199562][ T989] hsr_slave_1: left promiscuous mode [ 201.214776][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.228431][T10878] xt_l2tp: v2 doesn't support IP mode [ 201.234149][T10879] block nbd0: not configured, cannot reconfigure [ 201.240712][ T989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.257951][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.274920][ T989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.335021][ T989] veth1_macvtap: left promiscuous mode [ 201.349657][ T989] veth0_macvtap: left promiscuous mode [ 201.360209][ T989] veth1_vlan: left promiscuous mode [ 201.374025][ T989] veth0_vlan: left promiscuous mode [ 201.774849][ T5107] Bluetooth: hci3: command tx timeout [ 202.062423][ T989] team0 (unregistering): Port device team_slave_1 removed [ 202.100679][ T989] team0 (unregistering): Port device team_slave_0 removed [ 202.508338][T10889] pim6reg1: entered promiscuous mode [ 202.513686][T10889] pim6reg1: entered allmulticast mode [ 202.782273][T10920] bridge0: port 2(vlan3) entered blocking state [ 202.797073][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1987'. [ 202.800176][T10920] bridge0: port 2(vlan3) entered disabled state [ 202.820795][T10920] vlan3: entered allmulticast mode [ 202.828550][T10920] vlan3: left allmulticast mode [ 202.837455][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1987'. [ 202.940964][T10817] chnl_net:caif_netlink_parms(): no params data found [ 203.196963][T10817] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.209818][T10817] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.219985][T10945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1995'. [ 203.230598][T10817] bridge_slave_0: entered allmulticast mode [ 203.239129][T10817] bridge_slave_0: entered promiscuous mode [ 203.256960][T10817] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.274113][T10817] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.281466][T10817] bridge_slave_1: entered allmulticast mode [ 203.290156][T10817] bridge_slave_1: entered promiscuous mode [ 203.387843][T10817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.412721][T10950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.429853][T10817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.517003][T10817] team0: Port device team_slave_0 added [ 203.536705][T10817] team0: Port device team_slave_1 added [ 203.603287][T10817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.611344][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.657759][T10817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.718434][T10817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.732374][T10817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.775941][T10817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.844334][ T5107] Bluetooth: hci3: command tx timeout [ 203.906094][T10817] hsr_slave_0: entered promiscuous mode [ 203.918040][T10817] hsr_slave_1: entered promiscuous mode [ 204.398687][T11003] __nla_validate_parse: 3 callbacks suppressed [ 204.398709][T11003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2022'. [ 204.596734][T11010] xt_l2tp: v2 doesn't support IP mode [ 204.645629][T10817] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 204.650089][T11010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2024'. [ 204.669832][T10817] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 204.701892][T10817] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 204.726543][T10817] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 204.934905][T11016] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2027'. [ 204.976225][T11016] netlink: 'syz.0.2027': attribute type 10 has an invalid length. [ 205.016990][T11027] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2030'. [ 205.053317][T11016] team0: Port device dummy0 added [ 205.118320][T11030] netlink: 'syz.3.2032': attribute type 21 has an invalid length. [ 205.129376][T11030] netlink: 'syz.3.2032': attribute type 20 has an invalid length. [ 205.191178][T10817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.263401][T10817] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.312755][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.315679][T11042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2036'. [ 205.319948][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.377107][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.384315][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.751166][T11067] sch_tbf: burst 549 is lower than device veth1_to_bridge mtu (1514) ! [ 205.889197][T10817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.928647][ T5107] Bluetooth: hci3: command tx timeout [ 205.982395][T10817] veth0_vlan: entered promiscuous mode [ 206.006777][T10817] veth1_vlan: entered promiscuous mode [ 206.045132][T10817] veth0_macvtap: entered promiscuous mode [ 206.064580][T10817] veth1_macvtap: entered promiscuous mode [ 206.100384][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.123907][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.133827][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.172677][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.194313][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.209614][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.232156][T10817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.241942][T11088] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 206.293557][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.317678][T11092] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.326342][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.341113][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.353588][T11093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2056'. [ 206.358901][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.373503][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.385218][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.396221][T10817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.411509][T10817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.434557][T10817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.462859][T10817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.485319][T10817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.502595][T10817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.523637][T10817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.539198][T11100] netlink: 'syz.0.2058': attribute type 4 has an invalid length. [ 206.552390][T11102] netlink: 316 bytes leftover after parsing attributes in process `syz.3.2059'. [ 206.573532][T11102] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 206.670849][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2061'. [ 206.799885][ T2450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.819110][ T2450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.920876][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.943813][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.308355][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2076'. [ 207.328420][T11140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 207.501943][T11157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: netdevsim0 [ 207.522062][T11157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.547536][T11157] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 207.587801][T11157] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 207.865710][T11182] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 208.258662][T11212] netlink: 'syz.0.2098': attribute type 1 has an invalid length. [ 209.055787][T11260] vlan2: entered promiscuous mode [ 209.061002][T11260] macvlan0: entered promiscuous mode [ 209.083210][T11260] macvlan0: left promiscuous mode [ 209.104182][T11263] netlink: 'syz.3.2117': attribute type 1 has an invalid length. [ 209.271747][ T989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.024097][T11277] __nla_validate_parse: 13 callbacks suppressed [ 210.024117][T11277] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2119'. [ 210.116735][T11280] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.126135][T11280] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.134893][T11280] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.143665][T11280] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.184110][T11280] vxlan0: entered promiscuous mode [ 210.197796][T11280] vxlan0: entered allmulticast mode [ 210.215464][T11280] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.224898][T11280] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.233790][T11280] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.243118][T11280] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.285451][ T5111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 210.297145][ T5111] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 210.306386][ T5111] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 210.307114][T11283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2122'. [ 210.331402][ T5111] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 210.344866][ T5111] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 210.352197][ T5111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 210.361116][T11279] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2120'. [ 210.372692][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2122'. [ 210.384634][T11291] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2122'. [ 210.409508][T11290] netlink: 'syz.2.2123': attribute type 4 has an invalid length. [ 210.535877][T11302] netlink: 'syz.4.2127': attribute type 1 has an invalid length. [ 210.543821][T11302] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.2127'. [ 210.657153][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2127'. [ 210.711706][T11306] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.721033][T11306] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.729849][T11306] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.738674][T11306] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 210.750797][T11306] vxlan0: entered promiscuous mode [ 210.758332][T11311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2129'. [ 210.776736][T11312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2130'. [ 210.786771][T11312] bridge_slave_1: left promiscuous mode [ 210.921843][ T989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.959803][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2136'. [ 211.079576][ T989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.096884][T11333] netlink: 'syz.3.2138': attribute type 1 has an invalid length. [ 211.137967][T11288] chnl_net:caif_netlink_parms(): no params data found [ 211.248614][ T989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.304638][ T35] wlan0: Trigger new scan to find an IBSS to join [ 211.520360][T11353] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 211.598414][T11353] ΙΆΖ£0GCTw: entered promiscuous mode [ 211.647533][T11353] ΙΆΖ£0GC¦: entered promiscuous mode [ 211.657535][T11360] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 211.674465][T11360] batman_adv: batadv1: Removing interface: netdevsim0 [ 211.690154][T11360] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 211.788024][T11288] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.825290][T11288] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.844782][T11288] bridge_slave_0: entered allmulticast mode [ 211.862021][T11288] bridge_slave_0: entered promiscuous mode [ 211.932588][T11370] syzkaller0: entered allmulticast mode [ 211.955013][T11288] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.972488][T11288] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.992705][T11288] bridge_slave_1: entered allmulticast mode [ 212.003145][T11288] bridge_slave_1: entered promiscuous mode [ 212.027124][T11369] netlink: 'syz.4.2148': attribute type 10 has an invalid length. [ 212.057552][T11369] team0: Port device dummy0 added [ 212.132416][T11367] syzkaller0: left allmulticast mode [ 212.230486][T11288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.267457][T11288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.277704][T11391] netlink: 'syz.2.2156': attribute type 10 has an invalid length. [ 212.295817][T11391] team0: Device veth1_macvtap failed to register rx_handler [ 212.319268][ T989] bridge_slave_1: left allmulticast mode [ 212.325265][ T989] bridge_slave_1: left promiscuous mode [ 212.351344][ T989] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.397900][ T989] bridge_slave_0: left allmulticast mode [ 212.408261][ T5111] Bluetooth: hci3: command tx timeout [ 212.410866][ T989] bridge_slave_0: left promiscuous mode [ 212.428354][ T989] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.838490][ T989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.852909][ T989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.866720][ T989] bond0 (unregistering): Released all slaves [ 212.913050][T11405] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 213.017573][T11288] team0: Port device team_slave_0 added [ 213.051977][T11288] team0: Port device team_slave_1 added [ 213.096594][ T783] IPVS: starting estimator thread 0... [ 213.161244][T11409] netlink: 'syz.0.2162': attribute type 10 has an invalid length. [ 213.192621][T11409] team0: Port device dummy0 removed [ 213.214065][T11414] IPVS: using max 20 ests per chain, 48000 per kthread [ 213.221363][T11409] bridge0: port 3(dummy0) entered blocking state [ 213.234658][T11409] bridge0: port 3(dummy0) entered disabled state [ 213.247189][T11409] dummy0: entered allmulticast mode [ 213.258776][T11409] dummy0: entered promiscuous mode [ 213.423391][T11288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.442997][T11288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.472733][T11288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.558183][T11431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.574277][T11431] team0: Port device batadv0 added [ 213.584533][T11288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.602184][T11288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.644278][T11288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.729858][T11448] netlink: 'syz.3.2176': attribute type 5 has an invalid length. [ 213.758219][T11448] netlink: 'syz.3.2176': attribute type 5 has an invalid length. [ 213.777693][T11448] netlink: 'syz.3.2176': attribute type 5 has an invalid length. [ 213.796186][T11448] netlink: 'syz.3.2176': attribute type 5 has an invalid length. [ 213.816553][ T989] hsr_slave_0: left promiscuous mode [ 213.848983][ T989] hsr_slave_1: left promiscuous mode [ 213.868682][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.886864][ T989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.918053][ T989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.933523][ T989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.993736][ T989] veth1_macvtap: left promiscuous mode [ 214.000487][ T989] veth0_macvtap: left promiscuous mode [ 214.010493][ T989] veth1_vlan: left promiscuous mode [ 214.023449][ T989] veth0_vlan: left promiscuous mode [ 214.477582][ T989] team0 (unregistering): Port device team_slave_1 removed [ 214.486802][ T5111] Bluetooth: hci3: command tx timeout [ 214.523759][ T989] team0 (unregistering): Port device team_slave_0 removed [ 214.913486][T11288] hsr_slave_0: entered promiscuous mode [ 214.935823][T11288] hsr_slave_1: entered promiscuous mode [ 214.964805][T11463] IPv6: Can't replace route, no match found [ 215.099132][T11472] sch_tbf: burst 549 is lower than device veth1_to_bridge mtu (1514) ! [ 215.811913][ T5107] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.821370][ T5107] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.830225][ T5107] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.841309][ T5107] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.869502][ T5107] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.877762][ T5107] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.042459][T11519] FAULT_INJECTION: forcing a failure. [ 216.042459][T11519] name failslab, interval 1, probability 0, space 0, times 0 [ 216.104187][T11519] CPU: 1 PID: 11519 Comm: syz.4.2199 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 216.114400][T11519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 216.124476][T11519] Call Trace: [ 216.127774][T11519] [ 216.130718][T11519] dump_stack_lvl+0x241/0x360 [ 216.135423][T11519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.140642][T11519] ? __pfx__printk+0x10/0x10 [ 216.145257][T11519] ? __pfx___might_resched+0x10/0x10 [ 216.150578][T11519] should_fail_ex+0x3b0/0x4e0 [ 216.155280][T11519] should_failslab+0x9/0x20 [ 216.159795][T11519] __kmalloc_node_noprof+0xdf/0x440 [ 216.165020][T11519] ? kvmalloc_node_noprof+0x72/0x190 [ 216.170333][T11519] kvmalloc_node_noprof+0x72/0x190 [ 216.175458][T11519] nf_tables_newchain+0x22ea/0x33a0 [ 216.180677][T11519] ? __pfx_nf_tables_newchain+0x10/0x10 [ 216.186233][T11519] ? __pfx_lock_acquire+0x10/0x10 [ 216.191246][T11519] ? nfnl_pernet+0x23/0x240 [ 216.195742][T11519] ? __pfx_lock_release+0x10/0x10 [ 216.200764][T11519] ? __nla_parse+0x40/0x60 [ 216.205176][T11519] nfnetlink_rcv+0x1427/0x2a90 [ 216.209969][T11519] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 216.215123][T11519] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.220485][T11519] ? skb_clone+0x240/0x390 [ 216.224895][T11519] ? __pfx_lock_release+0x10/0x10 [ 216.229940][T11519] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.235130][T11519] netlink_unicast+0x7f0/0x990 [ 216.239892][T11519] ? __pfx_netlink_unicast+0x10/0x10 [ 216.245166][T11519] ? __virt_addr_valid+0x183/0x530 [ 216.250273][T11519] ? __check_object_size+0x49c/0x900 [ 216.255544][T11519] ? bpf_lsm_netlink_send+0x9/0x10 [ 216.260655][T11519] netlink_sendmsg+0x8e4/0xcb0 [ 216.265422][T11519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.270700][T11519] ? __import_iovec+0x536/0x820 [ 216.275540][T11519] ? aa_sock_msg_perm+0x91/0x160 [ 216.280473][T11519] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 216.285745][T11519] ? security_socket_sendmsg+0x87/0xb0 [ 216.291199][T11519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.296475][T11519] __sock_sendmsg+0x221/0x270 [ 216.301147][T11519] ____sys_sendmsg+0x525/0x7d0 [ 216.305907][T11519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.311191][T11519] __sys_sendmsg+0x2b0/0x3a0 [ 216.315774][T11519] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.320874][T11519] ? vfs_write+0x7c4/0xc90 [ 216.325327][T11519] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.331643][T11519] ? do_syscall_64+0x100/0x230 [ 216.336402][T11519] ? do_syscall_64+0xb6/0x230 [ 216.341068][T11519] do_syscall_64+0xf3/0x230 [ 216.345565][T11519] ? clear_bhb_loop+0x35/0x90 [ 216.350234][T11519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.356120][T11519] RIP: 0033:0x7f2ec5575bd9 [ 216.360533][T11519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.380156][T11519] RSP: 002b:00007f2ec6423048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.388650][T11519] RAX: ffffffffffffffda RBX: 00007f2ec5703f60 RCX: 00007f2ec5575bd9 [ 216.396612][T11519] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 216.404658][T11519] RBP: 00007f2ec64230a0 R08: 0000000000000000 R09: 0000000000000000 [ 216.412617][T11519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.420579][T11519] R13: 000000000000004d R14: 00007f2ec5703f60 R15: 00007ffd9bd63188 [ 216.428569][T11519] [ 216.439822][ T2920] wlan0: Trigger new scan to find an IBSS to join [ 216.468780][T11530] __nla_validate_parse: 14 callbacks suppressed [ 216.468802][T11530] netlink: 3084 bytes leftover after parsing attributes in process `syz.2.2202'. [ 216.485735][T11530] validate_nla: 61 callbacks suppressed [ 216.485753][T11530] netlink: 'syz.2.2202': attribute type 1 has an invalid length. [ 216.499497][T11530] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2202'. [ 216.519433][ T989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.575080][ T5107] Bluetooth: hci3: command tx timeout [ 216.647553][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2204'. [ 216.680747][ T989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.701678][T11536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2206'. [ 216.808193][T11545] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2208'. [ 216.814912][ T989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.817387][T11545] block nbd0: not configured, cannot reconfigure [ 216.924359][T11550] skb len=226 headroom=184 headlen=80 tailroom=0 [ 216.924359][T11550] mac=(184,0) mac_len=0 net=(184,72) trans=256 [ 216.924359][T11550] shinfo(txflags=0 nr_frags=1 gso(size=145 type=131072 segs=2)) [ 216.924359][T11550] csum(0x60100 start=256 offset=6 ip_summed=0 complete_sw=0 valid=0 level=0) [ 216.924359][T11550] hash(0xe4c9ca57 sw=0 l4=1) proto=0x86dd pkttype=0 iif=0 [ 216.924359][T11550] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0 [ 216.924359][T11550] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [ 216.973918][T11550] dev name=ip6tnl0 feat=0x00000006401d7869 [ 216.979788][T11550] sk family=10 type=2 proto=17 [ 216.984611][T11550] skb linear: 00000000: 60 04 57 ca 00 ba 00 40 fe 80 00 00 00 00 00 00 [ 216.993154][T11550] skb linear: 00000010: 00 00 00 00 00 00 00 13 fe 80 00 00 00 00 00 00 [ 217.001708][T11550] skb linear: 00000020: 00 00 00 00 00 00 00 aa 11 03 00 00 00 00 00 00 [ 217.010260][T11550] skb linear: 00000030: 05 02 00 00 00 01 00 c2 04 80 00 00 00 05 02 00 [ 217.018842][T11550] skb linear: 00000040: 06 c2 04 00 00 00 01 c2 8b 7e 00 00 00 9a fe 69 [ 217.027386][T11550] skb frag: 00000000: c3 db 32 90 34 53 b3 f3 f4 8e 6c 6f dc eb 11 9f [ 217.035928][T11550] skb frag: 00000010: 80 40 46 67 41 d8 d4 99 44 75 16 42 0e 0e 19 03 [ 217.044484][T11550] skb frag: 00000020: 3a 1c 90 ed 20 e6 af 30 14 77 2b c5 98 43 3d dd [ 217.052999][T11550] skb frag: 00000030: 80 e1 28 b5 dc 98 78 d3 4b 66 d9 88 9b 05 5c 26 [ 217.061667][T11550] skb frag: 00000040: f3 e5 10 07 14 d8 54 9c 28 3e 3d 7b f2 d6 95 15 [ 217.070215][T11550] skb frag: 00000050: 78 6a cc 71 a0 a6 f2 d7 41 b5 88 eb 68 28 f3 c3 [ 217.078764][T11550] skb frag: 00000060: 55 f2 d1 34 28 4c 20 f0 7f 68 d4 e9 e4 76 18 15 [ 217.087312][T11550] skb frag: 00000070: 1c 74 29 f7 a7 0d 76 35 40 b0 ba 6b f6 84 6d a1 [ 217.095859][T11550] skb frag: 00000080: 62 3f 77 e4 0e 82 0d 2f 85 cc 44 ea 25 5a 99 76 [ 217.104403][T11550] skb frag: 00000090: f2 53 [ 217.109278][T11550] ------------[ cut here ]------------ [ 217.114784][T11550] ip6tnl0: caps=(0x00000006401d7869, 0x00000006401d7869) [ 217.122430][T11550] WARNING: CPU: 0 PID: 11550 at net/core/dev.c:3293 skb_warn_bad_offload+0x166/0x1a0 [ 217.131975][T11550] Modules linked in: [ 217.135920][T11550] CPU: 0 PID: 11550 Comm: syz.2.2210 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 217.146112][T11550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 217.156208][T11550] RIP: 0010:skb_warn_bad_offload+0x166/0x1a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 217.162304][T11550] Code: e8 5f 94 a3 f8 49 8b 04 24 48 8d 88 a0 03 00 00 48 85 c0 48 0f 44 cd 48 c7 c7 00 cc c5 8c 4c 89 f6 48 89 da e8 fb 92 ff f7 90 <0f> 0b 90 90 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 44 89 f9 [ 217.181978][T11550] RSP: 0018:ffffc90013736dc8 EFLAGS: 00010246 [ 217.188107][T11550] RAX: eadca611bbe47500 RBX: ffff88806a7c80b8 RCX: 0000000000040000 [ 217.196156][T11550] RDX: ffffc90009eb1000 RSI: 000000000003ffff RDI: 0000000000040000 [ 217.204186][T11550] RBP: ffffffff8cc5cbc0 R08: ffffffff815857b2 R09: fffffbfff1c39994 [ 217.212188][T11550] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffff88807b007dd8 [ 217.220219][T11550] R13: dffffc0000000000 R14: ffff88806a7c8130 R15: ffff88806a7c8130 [ 217.228245][T11550] FS: 00007f6f3b3f56c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 217.237236][T11550] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.243871][T11550] CR2: 0000000020001180 CR3: 0000000068396000 CR4: 00000000003506f0 [ 217.251886][T11550] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.259923][T11550] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 217.267953][T11550] Call Trace: [ 217.271253][T11550] [ 217.274229][T11550] ? __warn+0x163/0x4e0 [ 217.278490][T11550] ? skb_warn_bad_offload+0x166/0x1a0 [ 217.283923][T11550] ? report_bug+0x2b3/0x500 [ 217.288447][T11550] ? skb_warn_bad_offload+0x166/0x1a0 [ 217.293894][T11550] ? handle_bug+0x3e/0x70 [ 217.298255][T11550] ? exc_invalid_op+0x1a/0x50 [ 217.303035][T11550] ? asm_exc_invalid_op+0x1a/0x20 [ 217.308115][T11550] ? __warn_printk+0x292/0x360 [ 217.313013][T11550] ? skb_warn_bad_offload+0x166/0x1a0 [ 217.318445][T11550] ? skb_warn_bad_offload+0x165/0x1a0 [ 217.323890][T11550] __skb_gso_segment+0x3be/0x4c0 [ 217.328862][T11550] validate_xmit_skb+0x585/0x1120 [ 217.333947][T11550] ? rcu_read_lock_bh_held+0x7e/0x120 [ 217.339342][T11550] ? __pfx_validate_xmit_skb+0x10/0x10 [ 217.344876][T11550] __dev_queue_xmit+0x17a4/0x3e90 [ 217.349939][T11550] ? __dev_queue_xmit+0x2da/0x3e90 [ 217.355104][T11550] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 217.361113][T11550] ? __pfx___dev_queue_xmit+0x10/0x10 [ 217.366586][T11550] ? neigh_connected_output+0x1d5/0x450 [ 217.372179][T11550] ? read_seqbegin+0x157/0x2b0 [ 217.377004][T11550] ? lockdep_hardirqs_on+0x99/0x150 [ 217.382286][T11550] ? read_seqbegin+0x208/0x2b0 [ 217.387131][T11550] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 217.392938][T11550] ? neigh_connected_output+0x3a7/0x450 [ 217.398576][T11550] ip6_finish_output2+0xffa/0x1680 [ 217.403723][T11550] ? __pfx_lock_acquire+0x10/0x10 [ 217.408831][T11550] ? ip6_finish_output2+0x712/0x1680 [ 217.414169][T11550] ? nf_hook+0x9e/0x450 [ 217.418342][T11550] ? __ip6_local_out+0x7c1/0x800 [ 217.423300][T11550] ? __pfx_ip6_finish_output2+0x10/0x10 [ 217.428943][T11550] ? skb_gso_transport_seglen+0x345/0x580 [ 217.434731][T11550] ? skb_gso_validate_network_len+0x12e/0x290 [ 217.440848][T11550] ip6_finish_output+0x41e/0x810 [ 217.445841][T11550] ip6_send_skb+0x112/0x230 [ 217.450395][T11550] udp_v6_send_skb+0xbf5/0x1870 [ 217.455422][T11550] udpv6_sendmsg+0x23b3/0x3270 [ 217.460257][T11550] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 217.465864][T11550] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 217.471029][T11550] ? inet_send_prepare+0x21/0x260 [ 217.476122][T11550] ? inet_send_prepare+0x5a/0x260 [ 217.481158][T11550] __sock_sendmsg+0xef/0x270 [ 217.485784][T11550] ____sys_sendmsg+0x525/0x7d0 [ 217.490556][T11550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.495897][T11550] __sys_sendmmsg+0x3b2/0x740 [ 217.500591][T11550] ? __pfx___sys_sendmmsg+0x10/0x10 [ 217.505850][T11550] ? wake_up_q+0xdc/0x120 [ 217.510184][T11550] ? futex_wait+0x285/0x360 [ 217.514729][T11550] ? __pfx_futex_wait+0x10/0x10 [ 217.519594][T11550] ? do_futex+0x33b/0x560 [ 217.523988][T11550] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 217.529972][T11550] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.536334][T11550] ? do_syscall_64+0x100/0x230 [ 217.541111][T11550] __x64_sys_sendmmsg+0xa0/0xb0 [ 217.545995][T11550] do_syscall_64+0xf3/0x230 [ 217.550505][T11550] ? clear_bhb_loop+0x35/0x90 [ 217.555230][T11550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.561133][T11550] RIP: 0033:0x7f6f3a575bd9 [ 217.565577][T11550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.585331][T11550] RSP: 002b:00007f6f3b3f5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 217.593906][T11550] RAX: ffffffffffffffda RBX: 00007f6f3a703f60 RCX: 00007f6f3a575bd9 [ 217.601885][T11550] RDX: 0000000000000001 RSI: 0000000020003cc0 RDI: 0000000000000003 [ 217.609871][T11550] RBP: 00007f6f3a5e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 217.617872][T11550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.625885][T11550] R13: 000000000000000b R14: 00007f6f3a703f60 R15: 00007ffd9c324d98 [ 217.633921][T11550] [ 217.636953][T11550] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 217.644237][T11550] CPU: 0 PID: 11550 Comm: syz.2.2210 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 217.654380][T11550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 217.664433][T11550] Call Trace: [ 217.667743][T11550] [ 217.670665][T11550] dump_stack_lvl+0x241/0x360 [ 217.675341][T11550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.680530][T11550] ? __pfx__printk+0x10/0x10 [ 217.685120][T11550] ? vscnprintf+0x5d/0x90 [ 217.689447][T11550] panic+0x349/0x860 [ 217.693337][T11550] ? __warn+0x172/0x4e0 [ 217.697488][T11550] ? __pfx_panic+0x10/0x10 [ 217.701914][T11550] __warn+0x346/0x4e0 [ 217.705890][T11550] ? skb_warn_bad_offload+0x166/0x1a0 [ 217.711260][T11550] report_bug+0x2b3/0x500 [ 217.715577][T11550] ? skb_warn_bad_offload+0x166/0x1a0 [ 217.720948][T11550] handle_bug+0x3e/0x70 [ 217.725100][T11550] exc_invalid_op+0x1a/0x50 [ 217.729594][T11550] asm_exc_invalid_op+0x1a/0x20 [ 217.734527][T11550] RIP: 0010:skb_warn_bad_offload+0x166/0x1a0 [ 217.740500][T11550] Code: e8 5f 94 a3 f8 49 8b 04 24 48 8d 88 a0 03 00 00 48 85 c0 48 0f 44 cd 48 c7 c7 00 cc c5 8c 4c 89 f6 48 89 da e8 fb 92 ff f7 90 <0f> 0b 90 90 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 44 89 f9 [ 217.760097][T11550] RSP: 0018:ffffc90013736dc8 EFLAGS: 00010246 [ 217.766251][T11550] RAX: eadca611bbe47500 RBX: ffff88806a7c80b8 RCX: 0000000000040000 [ 217.774220][T11550] RDX: ffffc90009eb1000 RSI: 000000000003ffff RDI: 0000000000040000 [ 217.782182][T11550] RBP: ffffffff8cc5cbc0 R08: ffffffff815857b2 R09: fffffbfff1c39994 [ 217.790147][T11550] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffff88807b007dd8 [ 217.798107][T11550] R13: dffffc0000000000 R14: ffff88806a7c8130 R15: ffff88806a7c8130 [ 217.806075][T11550] ? __warn_printk+0x292/0x360 [ 217.810844][T11550] ? skb_warn_bad_offload+0x165/0x1a0 [ 217.816221][T11550] __skb_gso_segment+0x3be/0x4c0 [ 217.821156][T11550] validate_xmit_skb+0x585/0x1120 [ 217.826211][T11550] ? rcu_read_lock_bh_held+0x7e/0x120 [ 217.831595][T11550] ? __pfx_validate_xmit_skb+0x10/0x10 [ 217.837079][T11550] __dev_queue_xmit+0x17a4/0x3e90 [ 217.842121][T11550] ? __dev_queue_xmit+0x2da/0x3e90 [ 217.847230][T11550] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 217.853212][T11550] ? __pfx___dev_queue_xmit+0x10/0x10 [ 217.858667][T11550] ? neigh_connected_output+0x1d5/0x450 [ 217.864276][T11550] ? read_seqbegin+0x157/0x2b0 [ 217.869058][T11550] ? lockdep_hardirqs_on+0x99/0x150 [ 217.874267][T11550] ? read_seqbegin+0x208/0x2b0 [ 217.879035][T11550] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 217.884771][T11550] ? neigh_connected_output+0x3a7/0x450 [ 217.890335][T11550] ip6_finish_output2+0xffa/0x1680 [ 217.895479][T11550] ? __pfx_lock_acquire+0x10/0x10 [ 217.900510][T11550] ? ip6_finish_output2+0x712/0x1680 [ 217.905788][T11550] ? nf_hook+0x9e/0x450 [ 217.909937][T11550] ? __ip6_local_out+0x7c1/0x800 [ 217.914868][T11550] ? __pfx_ip6_finish_output2+0x10/0x10 [ 217.920407][T11550] ? skb_gso_transport_seglen+0x345/0x580 [ 217.926127][T11550] ? skb_gso_validate_network_len+0x12e/0x290 [ 217.932192][T11550] ip6_finish_output+0x41e/0x810 [ 217.937130][T11550] ip6_send_skb+0x112/0x230 [ 217.941627][T11550] udp_v6_send_skb+0xbf5/0x1870 [ 217.946486][T11550] udpv6_sendmsg+0x23b3/0x3270 [ 217.951251][T11550] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 217.956796][T11550] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 217.961941][T11550] ? inet_send_prepare+0x21/0x260 [ 217.966972][T11550] ? inet_send_prepare+0x5a/0x260 [ 217.972007][T11550] __sock_sendmsg+0xef/0x270 [ 217.976606][T11550] ____sys_sendmsg+0x525/0x7d0 [ 217.981381][T11550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.986672][T11550] __sys_sendmmsg+0x3b2/0x740 [ 217.991348][T11550] ? __pfx___sys_sendmmsg+0x10/0x10 [ 217.996559][T11550] ? wake_up_q+0xdc/0x120 [ 218.000883][T11550] ? futex_wait+0x285/0x360 [ 218.005383][T11550] ? __pfx_futex_wait+0x10/0x10 [ 218.010240][T11550] ? do_futex+0x33b/0x560 [ 218.014584][T11550] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 218.020556][T11550] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.026889][T11550] ? do_syscall_64+0x100/0x230 [ 218.031667][T11550] __x64_sys_sendmmsg+0xa0/0xb0 [ 218.036526][T11550] do_syscall_64+0xf3/0x230 [ 218.041045][T11550] ? clear_bhb_loop+0x35/0x90 [ 218.045732][T11550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.051629][T11550] RIP: 0033:0x7f6f3a575bd9 [ 218.056041][T11550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.075676][T11550] RSP: 002b:00007f6f3b3f5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 218.084181][T11550] RAX: ffffffffffffffda RBX: 00007f6f3a703f60 RCX: 00007f6f3a575bd9 [ 218.092149][T11550] RDX: 0000000000000001 RSI: 0000000020003cc0 RDI: 0000000000000003 [ 218.100115][T11550] RBP: 00007f6f3a5e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 218.108176][T11550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.116141][T11550] R13: 000000000000000b R14: 00007f6f3a703f60 R15: 00007ffd9c324d98 [ 218.124118][T11550] [ 218.127374][T11550] Kernel Offset: disabled [ 218.131727][T11550] Rebooting in 86400 seconds..