last executing test programs: 1.815927798s ago: executing program 1 (id=597): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x1000f) 1.658883135s ago: executing program 1 (id=599): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000c80)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.524270448s ago: executing program 3 (id=600): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e01, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 1.304266738s ago: executing program 1 (id=605): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000005002000000000000c001f00706879300a"], 0x28}}, 0x4090) 1.168652239s ago: executing program 1 (id=609): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x1000f) 1.084272393s ago: executing program 2 (id=610): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x3, @loopback, 0x2}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x50, 0x0, &(0x7f0000000100)) 1.016890455s ago: executing program 4 (id=612): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 995.163553ms ago: executing program 2 (id=613): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 974.798235ms ago: executing program 1 (id=614): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/117, 0x11}], 0x1}, 0x40002100) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 828.148548ms ago: executing program 0 (id=615): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 827.763178ms ago: executing program 4 (id=616): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000840)=[{0x6}]}) 820.203469ms ago: executing program 2 (id=617): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 750.444893ms ago: executing program 0 (id=618): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x4, 0x73b8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 664.185106ms ago: executing program 2 (id=619): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 663.878697ms ago: executing program 4 (id=620): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$inet6(0xa, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000080)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 625.63434ms ago: executing program 3 (id=621): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000280)=""/92, 0x5c}], 0x2}, 0x40002100) sendmsg$kcm(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000580)="5b19d909cef3e7514f00795f25a21fd0fc17eea81124fe72286f1c36add4f5f9bd9b596eca81f3fd6410b4eeb8f9f8bb4a428362aeacfaa8a673f578d713f2866952732f935c9315c5063b1bc805f2be7a1c26", 0x53}, {&(0x7f0000002cc0)="e79763f565573c46f656a9eff79a04fac6f86187dd8353487b9c9606f56c0b2675fb7c412263462fa4c17b9515e22c95e2713ce16ae09148b167a41fc0d90b1122123eb60a42664198fc5cf2ec9fdbfbb91d3ed1a4cbcd063b1e689bf6db75f2c1aee3fd5e5ef0f5df4dd6572a05d97cd008ab8421e694", 0x77}], 0x2}, 0x24004848) 598.836106ms ago: executing program 4 (id=622): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1f, &(0x7f0000000140)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x183}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 492.228791ms ago: executing program 0 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000340)="cd88879ff92c", &(0x7f0000000600)=""/235}, 0x20) 469.565692ms ago: executing program 2 (id=624): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x3, @loopback, 0x2}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x50, 0x0, &(0x7f0000000100)) 468.136639ms ago: executing program 3 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 408.263221ms ago: executing program 4 (id=626): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1b, 0x0, &(0x7f0000000180), &(0x7f00000002c0)='GPL\x00', 0x87c4, 0x98, &(0x7f0000000500)=""/152, 0x41100, 0xa0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x0, 0x5, 0xf4, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x73, @void, @value}, 0x94) 372.800513ms ago: executing program 0 (id=627): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000", @ANYRES32, @ANYBLOB="20000000000000001850000000000000000000000000000018400000f8ffffff000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940)={0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 305.285304ms ago: executing program 4 (id=628): syz_80211_inject_frame(&(0x7f0000001040), &(0x7f0000001080)=@ctrl_frame=@ba={{}, {0x7}, @device_b, @device_b, @multi={{0x0, 0x1, 0x1, 0x0, 0x2}, [{0x0, 0x4, {0x0, 0xe}, "179d9eedf33ba57c"}, {0x0, 0x9, {0x6}, "8e43a5d62a529d27"}], {0x0, 0x5, {0x6, 0x1}, "a5a4afa10fa75e0a"}}}, 0x36) 208.645486ms ago: executing program 3 (id=629): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000f0"], 0x0, 0x46, 0x0, 0x1, 0x3, 0x0, @void, @value}, 0x28) 208.341609ms ago: executing program 0 (id=630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0xe, 0x0, &(0x7f00000003c0)="f8ad73cc02cb29dcc0295d1dba98", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 207.976919ms ago: executing program 2 (id=631): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e01, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 121.956347ms ago: executing program 3 (id=632): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 67.521255ms ago: executing program 0 (id=633): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], &(0x7f0000000800)=""/196, 0x26, 0xc4, 0x1, 0x0, 0x0, @void, @value}, 0x20) 263.74µs ago: executing program 1 (id=634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 0s ago: executing program 3 (id=635): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c", 0x15) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000280)=""/92, 0x5c}], 0x2}, 0x40002100) sendmsg$kcm(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000580)="5b19d909cef3e7514f00795f25a21fd0fc17eea81124fe72286f1c36add4f5f9bd9b596eca81f3fd6410b4eeb8f9f8bb4a428362aeacfaa8a673f578d713f2866952732f935c9315c5063b1bc805f2be7a1c26", 0x53}, {&(0x7f0000002cc0)="e79763f565573c46f656a9eff79a04fac6f86187dd8353487b9c9606f56c0b2675fb7c412263462fa4c17b9515e22c95e2713ce16ae09148b167a41fc0d90b1122123eb60a42664198fc5cf2ec9fdbfbb91d3ed1a4cbcd063b1e689bf6db75f2c1aee3fd5e5ef0f5df4dd6572a05d97cd008ab8421e694", 0x77}], 0x2}, 0x24004848) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 114.848230][ T5829] cgroup: Unknown subsys name 'net' [ 114.977335][ T5829] cgroup: Unknown subsys name 'cpuset' [ 114.985797][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 116.583023][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 120.441038][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.450643][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.461119][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.469679][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.482535][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 120.490765][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.500892][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.510446][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 120.518484][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.526570][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 120.535158][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.542528][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.548569][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.551575][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.561950][ T5858] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 120.564215][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.570866][ T5858] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.578625][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 120.588482][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 120.591970][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 120.606017][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.610583][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 120.613609][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.628069][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 120.634260][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 120.643478][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.651398][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 120.664669][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 120.683854][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 120.703660][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 121.117380][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 121.188727][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 121.246010][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 121.321037][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 121.369103][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 121.441626][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.449095][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.457263][ T5849] bridge_slave_0: entered allmulticast mode [ 121.464874][ T5849] bridge_slave_0: entered promiscuous mode [ 121.490341][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.497571][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.504900][ T5852] bridge_slave_0: entered allmulticast mode [ 121.511652][ T5852] bridge_slave_0: entered promiscuous mode [ 121.539128][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.546710][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.554781][ T5849] bridge_slave_1: entered allmulticast mode [ 121.561519][ T5849] bridge_slave_1: entered promiscuous mode [ 121.569114][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.576510][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.583799][ T5850] bridge_slave_0: entered allmulticast mode [ 121.590568][ T5850] bridge_slave_0: entered promiscuous mode [ 121.597721][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.605085][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.612339][ T5852] bridge_slave_1: entered allmulticast mode [ 121.619368][ T5852] bridge_slave_1: entered promiscuous mode [ 121.669955][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.677356][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.685173][ T5850] bridge_slave_1: entered allmulticast mode [ 121.691920][ T5850] bridge_slave_1: entered promiscuous mode [ 121.727755][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.770728][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.801015][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.844825][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.858280][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.867677][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.875734][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.882923][ T5844] bridge_slave_0: entered allmulticast mode [ 121.890219][ T5844] bridge_slave_0: entered promiscuous mode [ 121.897194][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.905009][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.912935][ T5842] bridge_slave_0: entered allmulticast mode [ 121.919966][ T5842] bridge_slave_0: entered promiscuous mode [ 121.928403][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.935761][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.942955][ T5842] bridge_slave_1: entered allmulticast mode [ 121.950408][ T5842] bridge_slave_1: entered promiscuous mode [ 121.960147][ T5849] team0: Port device team_slave_0 added [ 121.968620][ T5849] team0: Port device team_slave_1 added [ 121.977304][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.003303][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.010511][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.017918][ T5844] bridge_slave_1: entered allmulticast mode [ 122.025143][ T5844] bridge_slave_1: entered promiscuous mode [ 122.059195][ T5850] team0: Port device team_slave_0 added [ 122.077974][ T5852] team0: Port device team_slave_0 added [ 122.110849][ T5850] team0: Port device team_slave_1 added [ 122.126319][ T5852] team0: Port device team_slave_1 added [ 122.141250][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.164260][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.171331][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.198923][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.229133][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.241959][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.252294][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.259897][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.286907][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.298606][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.305852][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.332319][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.345763][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.352759][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.379386][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.400427][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.407515][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.433503][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.448640][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.495473][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.502556][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.528966][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.551423][ T5842] team0: Port device team_slave_0 added [ 122.593099][ T5842] team0: Port device team_slave_1 added [ 122.611917][ T5849] hsr_slave_0: entered promiscuous mode [ 122.618671][ T5849] hsr_slave_1: entered promiscuous mode [ 122.630477][ T5850] hsr_slave_0: entered promiscuous mode [ 122.637262][ T5850] hsr_slave_1: entered promiscuous mode [ 122.644419][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.652486][ T5850] Cannot create hsr debugfs directory [ 122.664462][ T5845] Bluetooth: hci3: command tx timeout [ 122.670496][ T5142] Bluetooth: hci1: command tx timeout [ 122.696511][ T5844] team0: Port device team_slave_0 added [ 122.742325][ T5852] hsr_slave_0: entered promiscuous mode [ 122.748442][ T5142] Bluetooth: hci0: command tx timeout [ 122.755278][ T5845] Bluetooth: hci4: command tx timeout [ 122.755290][ T55] Bluetooth: hci2: command tx timeout [ 122.755870][ T5852] hsr_slave_1: entered promiscuous mode [ 122.772719][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.780948][ T5852] Cannot create hsr debugfs directory [ 122.788695][ T5844] team0: Port device team_slave_1 added [ 122.802757][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.810081][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.837135][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.879662][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.886803][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.912983][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.926204][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.933192][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.959381][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.001919][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.009068][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.037114][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.129923][ T5842] hsr_slave_0: entered promiscuous mode [ 123.136987][ T5842] hsr_slave_1: entered promiscuous mode [ 123.143155][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.151277][ T5842] Cannot create hsr debugfs directory [ 123.179632][ T5844] hsr_slave_0: entered promiscuous mode [ 123.186433][ T5844] hsr_slave_1: entered promiscuous mode [ 123.192565][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.200301][ T5844] Cannot create hsr debugfs directory [ 123.487118][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.498133][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.524897][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 123.539543][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 123.572799][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 123.582949][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 123.597852][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 123.619646][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 123.668703][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.707222][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.721227][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.732521][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.828827][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.839207][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.849751][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.860401][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.940181][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.950659][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.967260][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.980183][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.993111][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.025640][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.067649][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.077912][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.119223][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.126518][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.142403][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.149595][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.181007][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.188203][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.210277][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.227243][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.234428][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.343775][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.385951][ T5850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.406469][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.413635][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.430173][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.451824][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.474639][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.481842][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.535940][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.549962][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.569333][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.576702][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.607591][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.614861][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.655435][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.662584][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.694339][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.701468][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.744308][ T5142] Bluetooth: hci1: command tx timeout [ 124.749791][ T5142] Bluetooth: hci3: command tx timeout [ 124.769808][ T5844] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.787967][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.823651][ T5142] Bluetooth: hci2: command tx timeout [ 124.829315][ T5142] Bluetooth: hci0: command tx timeout [ 124.835144][ T5845] Bluetooth: hci4: command tx timeout [ 124.857371][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.990918][ T5852] veth0_vlan: entered promiscuous mode [ 125.050258][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.090705][ T5852] veth1_vlan: entered promiscuous mode [ 125.165803][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.259490][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.286361][ T5844] veth0_vlan: entered promiscuous mode [ 125.317578][ T5852] veth0_macvtap: entered promiscuous mode [ 125.332993][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.359012][ T5844] veth1_vlan: entered promiscuous mode [ 125.376759][ T5852] veth1_macvtap: entered promiscuous mode [ 125.430917][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.469225][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.491101][ T5844] veth0_macvtap: entered promiscuous mode [ 125.511980][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.522194][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.531623][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.541645][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.554002][ T5849] veth0_vlan: entered promiscuous mode [ 125.570910][ T5844] veth1_macvtap: entered promiscuous mode [ 125.607065][ T5842] veth0_vlan: entered promiscuous mode [ 125.633100][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.644442][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.656379][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.665827][ T5849] veth1_vlan: entered promiscuous mode [ 125.682901][ T5850] veth0_vlan: entered promiscuous mode [ 125.698537][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.711292][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.725823][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.734844][ T5842] veth1_vlan: entered promiscuous mode [ 125.761465][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.770634][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.780965][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.791154][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.827647][ T5850] veth1_vlan: entered promiscuous mode [ 125.923989][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.930180][ T5850] veth0_macvtap: entered promiscuous mode [ 125.931966][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.947435][ T5842] veth0_macvtap: entered promiscuous mode [ 125.963873][ T5849] veth0_macvtap: entered promiscuous mode [ 126.004469][ T3494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.012343][ T3494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.026472][ T5850] veth1_macvtap: entered promiscuous mode [ 126.037668][ T5849] veth1_macvtap: entered promiscuous mode [ 126.066717][ T5842] veth1_macvtap: entered promiscuous mode [ 126.079097][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.087666][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.095033][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.095086][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.095101][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.095117][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.096185][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.133687][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.157625][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.195854][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.207585][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.220341][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.231020][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.247270][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.268477][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.288933][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.298996][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.309607][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.317258][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 126.319550][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.345150][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.357911][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.367345][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.381713][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.392123][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.402785][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.414082][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.425439][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.435474][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.446012][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.458613][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.473051][ T5850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.482272][ T5850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.491494][ T5850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.501310][ T5850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.514817][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.526984][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.540748][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.554757][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.567823][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.599420][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.611702][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.627843][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.638681][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.649250][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.659919][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.670150][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.680679][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.690631][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.701149][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.712481][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.723756][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.732533][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.741425][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.750933][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.789393][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.803155][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.818074][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 126.821974][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.836434][ T5142] Bluetooth: hci3: command tx timeout [ 126.841977][ T5142] Bluetooth: hci1: command tx timeout [ 126.843489][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.903987][ T5845] Bluetooth: hci2: command tx timeout [ 126.905214][ T5142] Bluetooth: hci0: command tx timeout [ 126.909440][ T5845] Bluetooth: hci4: command tx timeout [ 127.155352][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.170791][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.217825][ T5934] Bluetooth: MGMT ver 1.23 [ 127.277841][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.298990][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.360843][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.379206][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.422459][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.431598][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.509565][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.550341][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.683659][ T5946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13'. [ 127.685168][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.725711][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.766614][ T5948] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 127.801267][ T5948] Cannot find add_set index 0 as target [ 128.300277][ T5954] syz.3.15 uses obsolete (PF_INET,SOCK_PACKET) [ 128.634527][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 128.874141][ T5976] xt_SECMARK: invalid mode: 0 [ 128.904761][ T5142] Bluetooth: hci1: command tx timeout [ 128.910882][ T55] Bluetooth: hci3: command tx timeout [ 128.952095][ T5980] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 128.971856][ T5980] vxcan3: entered allmulticast mode [ 128.983599][ T5142] Bluetooth: hci4: command tx timeout [ 128.990737][ T55] Bluetooth: hci2: command tx timeout [ 128.997031][ T5853] Bluetooth: hci0: command tx timeout [ 129.333349][ T5845] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 129.495048][ T5990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.010814][ T6002] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 130.420651][ T6018] netlink: 'syz.1.35': attribute type 49 has an invalid length. [ 130.675021][ T6021] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.748618][ T6032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 131.066388][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.085446][ T6042] warning: `syz.0.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 131.375242][ T6054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.561143][ T6061] bond0: entered allmulticast mode [ 132.104588][ T6087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 132.150619][ T6090] netlink: 32 bytes leftover after parsing attributes in process `syz.0.63'. [ 132.207668][ T6087] vxcan1: Master is either lo or non-ether device [ 132.757697][ T6112] netlink: 36 bytes leftover after parsing attributes in process `syz.4.70'. [ 132.833415][ T6112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.70'. [ 132.842327][ T6112] netlink: 36 bytes leftover after parsing attributes in process `syz.4.70'. [ 132.869969][ T6112] netlink: 36 bytes leftover after parsing attributes in process `syz.4.70'. [ 133.066848][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.073748][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.320926][ T6138] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 133.461341][ T6143] netlink: zone id is out of range [ 133.477264][ T6143] netlink: zone id is out of range [ 133.496563][ T6143] netlink: zone id is out of range [ 133.673437][ T5929] IPVS: starting estimator thread 0... [ 133.773446][ T6151] IPVS: using max 22 ests per chain, 52800 per kthread [ 134.144504][ T6173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.88'. [ 134.178671][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.187615][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.188574][ T6175] Driver unsupported XDP return value 0 on prog (id 16) dev N/A, expect packet loss! [ 134.567152][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.581280][ T6153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.706934][ T6153] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.716376][ T6153] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.726219][ T6153] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.735306][ T6153] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.805386][ T6173] team_slave_0: entered promiscuous mode [ 134.811415][ T6173] team_slave_1: entered promiscuous mode [ 134.882297][ T6173] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.952412][ T6173] team_slave_0: left promiscuous mode [ 134.958111][ T6173] team_slave_1: left promiscuous mode [ 135.514098][ T6213] netlink: 'syz.3.102': attribute type 11 has an invalid length. [ 135.681610][ T6218] Zero length message leads to an empty skb [ 135.943373][ T5845] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 135.943428][ T5142] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.087020][ T6232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.612408][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.121'. [ 136.632265][ T6258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.121'. [ 136.700068][ T6258] veth0: entered promiscuous mode [ 136.708650][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 136.801174][ T6258] batadv0: entered promiscuous mode [ 137.005795][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 137.118659][ T6274] __nla_validate_parse: 1 callbacks suppressed [ 137.118681][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.128'. [ 137.574498][ T6288] xt_SECMARK: invalid mode: 0 [ 137.673320][ T6288] vxcan3: entered allmulticast mode [ 137.682203][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 137.761971][ T6295] macvtap1: entered promiscuous mode [ 137.770372][ T6295] batadv0: entered promiscuous mode [ 137.786836][ T6296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.806193][ T6295] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 137.832874][ T6295] batadv0: left promiscuous mode [ 137.877228][ T6293] vxcan1: Master is either lo or non-ether device [ 139.531492][ T6317] netlink: 'syz.3.145': attribute type 10 has an invalid length. [ 139.587279][ T6324] Cannot find add_set index 0 as target [ 139.647537][ T6317] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 139.845704][ T6331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.150'. [ 139.992497][ T6335] syz.4.153: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 140.029436][ T6335] CPU: 1 UID: 0 PID: 6335 Comm: syz.4.153 Not tainted 6.13.0-rc1-syzkaller-00230-g15bfb14727bc #0 [ 140.040109][ T6335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 140.050234][ T6335] Call Trace: [ 140.053527][ T6335] [ 140.056470][ T6335] dump_stack_lvl+0x241/0x360 [ 140.061200][ T6335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.066437][ T6335] ? __pfx__printk+0x10/0x10 [ 140.071053][ T6335] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 140.077496][ T6335] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 140.084026][ T6335] warn_alloc+0x278/0x410 [ 140.088373][ T6335] ? stack_depot_save_flags+0x6e4/0x830 [ 140.093933][ T6335] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 140.100014][ T6335] ? __pfx_warn_alloc+0x10/0x10 [ 140.104897][ T6335] ? kasan_save_track+0x3f/0x80 [ 140.109785][ T6335] ? __kasan_kmalloc+0x98/0xb0 [ 140.114579][ T6335] ? xsk_setsockopt+0x4ea/0x950 [ 140.119445][ T6335] ? do_sock_setsockopt+0x3af/0x720 [ 140.124656][ T6335] ? __x64_sys_setsockopt+0x1ee/0x280 [ 140.130039][ T6335] ? do_syscall_64+0xf3/0x230 [ 140.134739][ T6335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.140846][ T6335] __vmalloc_node_range_noprof+0x126/0x1380 [ 140.146781][ T6335] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 140.153134][ T6335] ? __kasan_kmalloc+0x98/0xb0 [ 140.157924][ T6335] vmalloc_user_noprof+0x74/0x80 [ 140.162876][ T6335] ? xskq_create+0xb6/0x170 [ 140.167394][ T6335] xskq_create+0xb6/0x170 [ 140.171746][ T6335] xsk_init_queue+0xa1/0x100 [ 140.176363][ T6335] xsk_setsockopt+0x4ea/0x950 [ 140.181089][ T6335] ? __pfx_xsk_setsockopt+0x10/0x10 [ 140.186322][ T6335] ? __pfx_aa_sk_perm+0x10/0x10 [ 140.191204][ T6335] ? aa_sock_opt_perm+0x79/0x120 [ 140.196158][ T6335] ? __pfx_xsk_setsockopt+0x10/0x10 [ 140.201370][ T6335] do_sock_setsockopt+0x3af/0x720 [ 140.206415][ T6335] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 140.212064][ T6335] ? __fget_files+0x395/0x410 [ 140.216752][ T6335] ? __fget_files+0x2a/0x410 [ 140.221361][ T6335] __x64_sys_setsockopt+0x1ee/0x280 [ 140.226579][ T6335] do_syscall_64+0xf3/0x230 [ 140.231103][ T6335] ? clear_bhb_loop+0x35/0x90 [ 140.235804][ T6335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.241736][ T6335] RIP: 0033:0x7f64bdb85d19 [ 140.246177][ T6335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.265798][ T6335] RSP: 002b:00007f64be967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 140.274242][ T6335] RAX: ffffffffffffffda RBX: 00007f64bdd75fa0 RCX: 00007f64bdb85d19 [ 140.282226][ T6335] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 140.290300][ T6335] RBP: 00007f64bdc01a20 R08: 0000000000000004 R09: 0000000000000000 [ 140.298304][ T6335] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.306296][ T6335] R13: 0000000000000000 R14: 00007f64bdd75fa0 R15: 00007ffc652f0b48 [ 140.314307][ T6335] [ 140.344231][ T6335] Mem-Info: [ 140.352165][ T6335] active_anon:6946 inactive_anon:0 isolated_anon:0 [ 140.352165][ T6335] active_file:1158 inactive_file:38256 isolated_file:0 [ 140.352165][ T6335] unevictable:768 dirty:488 writeback:0 [ 140.352165][ T6335] slab_reclaimable:9705 slab_unreclaimable:97330 [ 140.352165][ T6335] mapped:30798 shmem:3664 pagetables:806 [ 140.352165][ T6335] sec_pagetables:0 bounce:0 [ 140.352165][ T6335] kernel_misc_reclaimable:0 [ 140.352165][ T6335] free:1345583 free_pcp:818 free_cma:0 [ 140.398915][ T6335] Node 0 active_anon:29684kB inactive_anon:0kB active_file:4632kB inactive_file:152944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125092kB dirty:1948kB writeback:0kB shmem:15020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11032kB pagetables:3224kB sec_pagetables:0kB all_unreclaimable? no [ 140.438386][ T6335] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 140.491909][ T6335] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.615920][ T6335] lowmem_reserve[]: 0 2465 2466 0 0 [ 140.621287][ T6335] Node 0 DMA32 free:1459520kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:28544kB inactive_anon:0kB active_file:4632kB inactive_file:152108kB unevictable:1536kB writepending:1944kB present:3129332kB managed:2552844kB mlocked:0kB bounce:0kB free_pcp:2504kB local_pcp:260kB free_cma:0kB [ 140.716128][ T6335] lowmem_reserve[]: 0 0 0 0 0 [ 140.741467][ T6335] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.797007][ T6335] lowmem_reserve[]: 0 0 0 0 0 [ 140.801899][ T6335] Node 1 Normal free:3908996kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.833656][ T6335] lowmem_reserve[]: 0 0 0 0 0 [ 140.838938][ T6335] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 140.862942][ T6335] Node 0 DMA32: 523*4kB (UME) 573*8kB (UME) 383*16kB (UME) 288*32kB (UME) 93*64kB (UME) 41*128kB (UME) 14*256kB (UME) 5*512kB (UME) 2*1024kB (UE) 3*2048kB (ME) 347*4096kB (M) = 1468868kB [ 140.920766][ T6335] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 140.983486][ T6335] Node 1 Normal: 191*4kB (UE) 59*8kB (UME) 31*16kB (UME) 198*32kB (UME) 94*64kB (UME) 37*128kB (UME) 16*256kB (UM) 10*512kB (UME) 4*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3908996kB [ 141.009179][ T6335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.021035][ T6335] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 141.028161][ T6354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.032144][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.062713][ T6335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.080241][ T6335] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 141.094645][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.102273][ T6335] 40853 total pagecache pages [ 141.109259][ T6335] 0 pages in swap cache [ 141.173400][ T6335] Free swap = 124996kB [ 141.177641][ T6335] Total swap = 124996kB [ 141.181845][ T6335] 2097051 pages RAM [ 141.234335][ T6335] 0 pages HighMem/MovableOnly [ 141.239094][ T6335] 426990 pages reserved [ 141.251668][ T6335] 0 pages cma reserved [ 141.728560][ T6377] netlink: 'syz.3.165': attribute type 21 has an invalid length. [ 141.811816][ T6377] netlink: 132 bytes leftover after parsing attributes in process `syz.3.165'. [ 141.907327][ T6377] netlink: 'syz.3.165': attribute type 1 has an invalid length. [ 141.920993][ T6377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 142.229607][ T6397] lo speed is unknown, defaulting to 1000 [ 142.253589][ T6397] lo speed is unknown, defaulting to 1000 [ 142.268499][ T6397] lo speed is unknown, defaulting to 1000 [ 142.288167][ T6397] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 142.302084][ T6397] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 142.316093][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.178'. [ 142.344259][ T6397] lo speed is unknown, defaulting to 1000 [ 142.351536][ T6397] lo speed is unknown, defaulting to 1000 [ 142.358583][ T6397] lo speed is unknown, defaulting to 1000 [ 142.366365][ T6397] lo speed is unknown, defaulting to 1000 [ 142.379081][ T6397] lo speed is unknown, defaulting to 1000 [ 142.391712][ T6404] bridge0: entered promiscuous mode [ 142.400808][ T6404] macsec1: entered promiscuous mode [ 142.406325][ T6404] macsec1: entered allmulticast mode [ 142.421911][ T6404] bridge0: entered allmulticast mode [ 142.432989][ T6404] bridge0: port 3(macsec1) entered blocking state [ 142.459378][ T6404] bridge0: port 3(macsec1) entered disabled state [ 142.535266][ T6404] bridge0: left allmulticast mode [ 142.546181][ T6404] bridge0: left promiscuous mode [ 142.578024][ T6397] lo speed is unknown, defaulting to 1000 [ 142.815099][ T6413] vcan0: entered promiscuous mode [ 142.858807][ T6413] vcan0: left promiscuous mode [ 143.067964][ T6420] syzkaller1: entered promiscuous mode [ 143.103413][ T6420] syzkaller1: entered allmulticast mode [ 143.149151][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 143.311232][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.189'. [ 143.364653][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.194'. [ 145.070019][ T6520] IPVS: Error joining to the multicast group [ 145.180970][ T6527] netlink: 'syz.0.225': attribute type 1 has an invalid length. [ 145.282236][ T6527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.559423][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.231'. [ 145.720384][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 146.156690][ T6551] lo speed is unknown, defaulting to 1000 [ 146.229060][ T6567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.323665][ T6571] vlan0: entered promiscuous mode [ 146.328899][ T6571] vlan0: entered allmulticast mode [ 146.712613][ T6589] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 146.939750][ T6589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.260556][ T6618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.254'. [ 147.302983][ T6618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.328370][ T6618] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.359791][ T6618] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 147.401672][ T6618] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 147.502224][ T6625] bridge0: entered promiscuous mode [ 147.536004][ T6625] bridge0: port 3(macvlan2) entered blocking state [ 147.542772][ T6625] bridge0: port 3(macvlan2) entered disabled state [ 147.560768][ T6625] macvlan2: entered allmulticast mode [ 147.572481][ T6625] bridge0: entered allmulticast mode [ 147.589091][ T6625] macvlan2: left allmulticast mode [ 147.612012][ T6625] bridge0: left allmulticast mode [ 147.630719][ T6625] bridge0: left promiscuous mode [ 147.811161][ T6631] lo speed is unknown, defaulting to 1000 [ 147.941885][ T6635] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 148.099488][ T6635] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.342473][ T6645] netlink: 'syz.0.264': attribute type 4 has an invalid length. [ 148.381497][ T6647] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.265'. [ 149.000194][ T6668] lo speed is unknown, defaulting to 1000 [ 149.111652][ T6668] veth0_vlan: left promiscuous mode [ 149.127786][ T6668] veth0_vlan: entered promiscuous mode [ 149.134476][ T6668] veth0_vlan: entered allmulticast mode [ 149.204556][ T6678] netlink: 'syz.1.274': attribute type 1 has an invalid length. [ 149.583837][ T6687] lo speed is unknown, defaulting to 1000 [ 149.660034][ T6693] netlink: 20 bytes leftover after parsing attributes in process `syz.3.283'. [ 150.131677][ T6713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.838183][ T6737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.991256][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.999963][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.044047][ T6790] bridge0: entered allmulticast mode [ 152.232515][ T6801] syzkaller0: entered promiscuous mode [ 152.245405][ T6801] syzkaller0: entered allmulticast mode [ 152.559213][ T6818] netlink: 36 bytes leftover after parsing attributes in process `syz.3.340'. [ 152.580356][ T6818] netlink: 16 bytes leftover after parsing attributes in process `syz.3.340'. [ 152.598004][ T6818] netlink: 36 bytes leftover after parsing attributes in process `syz.3.340'. [ 152.622542][ T6818] netlink: 36 bytes leftover after parsing attributes in process `syz.3.340'. [ 153.934409][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 154.128423][ T6831] netlink: 68 bytes leftover after parsing attributes in process `syz.2.343'. [ 154.164564][ T6834] batadv_slave_1: entered promiscuous mode [ 154.203961][ T6833] batadv_slave_1: left promiscuous mode [ 154.660007][ T6858] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.489660][ T6956] netlink: 104 bytes leftover after parsing attributes in process `syz.2.398'. [ 156.612067][ T6960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.678126][ T6964] netlink: 32 bytes leftover after parsing attributes in process `syz.2.402'. [ 157.013709][ T6973] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 157.022805][ T6973] netlink: 'syz.1.406': attribute type 2 has an invalid length. [ 157.033090][ T6973] netlink: 44 bytes leftover after parsing attributes in process `syz.1.406'. [ 158.567025][ T7019] lo speed is unknown, defaulting to 1000 [ 159.394144][ T7050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 161.324967][ T7109] netlink: 56 bytes leftover after parsing attributes in process `syz.1.458'. [ 161.619021][ T7122] netlink: 'syz.1.465': attribute type 1 has an invalid length. [ 161.903606][ T7122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.941007][ T7125] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 161.950830][ T7125] bond2: (slave batadv2): making interface the new active one [ 161.962693][ T7125] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 161.983467][ T7129] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 162.422854][ T7159] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.828533][ T7183] netlink: 'syz.2.487': attribute type 1 has an invalid length. [ 162.874927][ T7183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.893127][ T7188] netlink: 88 bytes leftover after parsing attributes in process `syz.0.489'. [ 163.039620][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 163.912302][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 165.023703][ T7294] netlink: 'syz.3.530': attribute type 1 has an invalid length. [ 165.082013][ T7294] 8021q: adding VLAN 0 to HW filter on device bond3 [ 165.823588][ T7320] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 166.415363][ T7354] netlink: 16 bytes leftover after parsing attributes in process `syz.3.558'. [ 166.886056][ T7377] netlink: 68 bytes leftover after parsing attributes in process `syz.0.570'. [ 168.632275][ T7459] netlink: 4 bytes leftover after parsing attributes in process `syz.4.607'. [ 169.139058][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 169.592945][ T7500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.821265][ T7509] [ 169.823650][ T7509] ============================= [ 169.828512][ T7509] [ BUG: Invalid wait context ] [ 169.833374][ T7509] 6.13.0-rc1-syzkaller-00230-g15bfb14727bc #0 Not tainted [ 169.840603][ T7509] ----------------------------- [ 169.845439][ T7509] syz.3.635/7509 is trying to lock: [ 169.850622][ T7509] ffff888078fa1200 (&trie->lock){....}-{3:3}, at: trie_delete_elem+0x96/0x6a0 [ 169.859504][ T7509] other info that might help us debug this: [ 169.865381][ T7509] context-{5:5} [ 169.868828][ T7509] 4 locks held by syz.3.635/7509: [ 169.873839][ T7509] #0: ffff888030329f20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x165/0xc20 [ 169.882891][ T7509] #1: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x82/0x380 [ 169.892375][ T7509] #2: ffff8880b863e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 169.902301][ T7509] #3: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1fc/0x540 [ 169.911696][ T7509] stack backtrace: [ 169.915404][ T7509] CPU: 0 UID: 0 PID: 7509 Comm: syz.3.635 Not tainted 6.13.0-rc1-syzkaller-00230-g15bfb14727bc #0 [ 169.925991][ T7509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 169.936038][ T7509] Call Trace: [ 169.939313][ T7509] [ 169.942237][ T7509] dump_stack_lvl+0x241/0x360 [ 169.946915][ T7509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.952111][ T7509] ? __pfx__printk+0x10/0x10 [ 169.956706][ T7509] __lock_acquire+0x15a8/0x2100 [ 169.961580][ T7509] lock_acquire+0x1ed/0x550 [ 169.966076][ T7509] ? trie_delete_elem+0x96/0x6a0 [ 169.971014][ T7509] ? __pfx_lock_acquire+0x10/0x10 [ 169.976041][ T7509] ? __lock_acquire+0x1397/0x2100 [ 169.981068][ T7509] _raw_spin_lock_irqsave+0xd5/0x120 [ 169.986371][ T7509] ? trie_delete_elem+0x96/0x6a0 [ 169.991309][ T7509] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 169.997219][ T7509] ? __pfx_lock_acquire+0x10/0x10 [ 170.002252][ T7509] trie_delete_elem+0x96/0x6a0 [ 170.007014][ T7509] ? __pfx___cant_migrate+0x10/0x10 [ 170.012231][ T7509] ? bpf_trace_run2+0x1fc/0x540 [ 170.017077][ T7509] bpf_prog_969c4f6b520dc8dc+0x46/0x74 [ 170.022719][ T7509] bpf_trace_run2+0x2ec/0x540 [ 170.027392][ T7509] ? __pfx_bpf_trace_run2+0x10/0x10 [ 170.032586][ T7509] trace_tlb_flush+0x11c/0x140 [ 170.037378][ T7509] switch_mm_irqs_off+0x77a/0xa70 [ 170.042399][ T7509] ? psi_task_switch+0x387/0x7a0 [ 170.047337][ T7509] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 170.052913][ T7509] __schedule+0x10c8/0x4c30 [ 170.057434][ T7509] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.063775][ T7509] ? lockdep_hardirqs_on+0x99/0x150 [ 170.068986][ T7509] ? __pfx___schedule+0x10/0x10 [ 170.073842][ T7509] ? lock_acquire+0x264/0x550 [ 170.078531][ T7509] ? preempt_schedule+0xe1/0xf0 [ 170.083401][ T7509] preempt_schedule_common+0x84/0xd0 [ 170.088693][ T7509] preempt_schedule+0xe1/0xf0 [ 170.093369][ T7509] ? __pfx_preempt_schedule+0x10/0x10 [ 170.098742][ T7509] preempt_schedule_thunk+0x1a/0x30 [ 170.103958][ T7509] _raw_spin_unlock+0x3e/0x50 [ 170.108633][ T7509] unmap_page_range+0x37fa/0x4230 [ 170.113669][ T7509] ? __pfx_unmap_page_range+0x10/0x10 [ 170.119056][ T7509] ? mas_next_slot+0xdc6/0xea0 [ 170.123841][ T7509] ? uprobe_munmap+0x183/0x460 [ 170.128611][ T7509] ? unmap_single_vma+0x1bd/0x2b0 [ 170.133656][ T7509] unmap_vmas+0x3cc/0x5f0 [ 170.137988][ T7509] ? __pfx_unmap_vmas+0x10/0x10 [ 170.142869][ T7509] ? preempt_schedule+0xe1/0xf0 [ 170.147725][ T7509] ? preempt_schedule_thunk+0x1a/0x30 [ 170.153116][ T7509] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 170.158579][ T7509] exit_mmap+0x275/0xc20 [ 170.162821][ T7509] ? __pfx_exit_mmap+0x10/0x10 [ 170.167588][ T7509] ? __pfx_exit_aio+0x10/0x10 [ 170.172268][ T7509] ? uprobe_clear_state+0x271/0x290 [ 170.177464][ T7509] ? mm_update_next_owner+0xa4/0x810 [ 170.182753][ T7509] ? do_raw_spin_unlock+0x13c/0x8b0 [ 170.187966][ T7509] __mmput+0x115/0x3c0 [ 170.192038][ T7509] exit_mm+0x220/0x310 [ 170.196102][ T7509] ? __pfx_exit_mm+0x10/0x10 [ 170.200689][ T7509] ? taskstats_exit+0x326/0xa60 [ 170.205541][ T7509] do_exit+0x9b2/0x28e0 [ 170.209695][ T7509] ? preempt_schedule_common+0x84/0xd0 [ 170.215153][ T7509] ? __pfx_do_exit+0x10/0x10 [ 170.219745][ T7509] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 170.225721][ T7509] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.232080][ T7509] ? preempt_schedule_thunk+0x1a/0x30 [ 170.237451][ T7509] do_group_exit+0x207/0x2c0 [ 170.242042][ T7509] __x64_sys_exit_group+0x3f/0x40 [ 170.247065][ T7509] x64_sys_call+0x26a8/0x26b0 [ 170.251734][ T7509] do_syscall_64+0xf3/0x230 [ 170.256239][ T7509] ? clear_bhb_loop+0x35/0x90 [ 170.260929][ T7509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.266822][ T7509] RIP: 0033:0x7f175b985d19 [ 170.271253][ T7509] Code: Unable to access opcode bytes at 0x7f175b985cef. [ 170.278259][ T7509] RSP: 002b:00007ffe9809b6c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 170.286667][ T7509] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f175b985d19 [ 170.294630][ T7509] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.302596][ T7509] RBP: 00007ffe9809b71c R08: 00007ffe9809b7af R09: 00000000000296e3 [ 170.310583][ T7509] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 170.318545][ T7509] R13: 00000000000296e3 R14: 00007ffe9809b770 R15: 00007ffe9809b770 [ 170.326517][ T7509]