last executing test programs: 40.873331896s ago: executing program 2 (id=1235): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x16}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 40.649320917s ago: executing program 2 (id=1237): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16], 0x1c}}, 0xe6a4d86a3a7a1790) 40.502042121s ago: executing program 2 (id=1238): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x18, 0x2, 0x0, 0x1, [@generic="14007a577106dba73a8db37f0f09b96ab5be2be3"]}]}, 0x3c}, 0x1, 0x0, 0xfff0}, 0xc000) 40.373783272s ago: executing program 2 (id=1240): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r2) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100000000800000000007000000080001"], 0x1c}}, 0x80) (async) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 40.061295676s ago: executing program 2 (id=1245): sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x400c4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x0) 16.903471458s ago: executing program 2 (id=1253): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x1, 0x3}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x8040) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7}, 0x18) (async) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x1, 0x3}, 0xfe}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) 16.900687463s ago: executing program 32 (id=1253): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x8040) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7}, 0x18) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x1, 0x3}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x8040) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r7}, 0x18) (async) sendmsg$can_j1939(r8, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) bind$can_j1939(r8, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x1, 0x3}, 0xfe}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) 1.27648868s ago: executing program 1 (id=1509): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 1.148798696s ago: executing program 5 (id=1511): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xbffff034}, {0x80000006}]}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) 993.443218ms ago: executing program 0 (id=1512): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 914.950704ms ago: executing program 1 (id=1514): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000ae8ff"], 0x1c}}, 0x0) 914.378263ms ago: executing program 5 (id=1515): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x168, 0x9, 0x0, 0xb, 0x360, 0x250, 0x250, 0x360, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_bridge\x00', 'nicvf0\x00'}, 0x6000000, 0xa8, 0xf0, 0x0, {0x0, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@loopback, 'team0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', @random='\a\x00\x00 \x00'}) 914.140596ms ago: executing program 3 (id=1516): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x970b) 815.31524ms ago: executing program 1 (id=1518): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1b) 761.868034ms ago: executing program 4 (id=1519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100ff00000000000c41090000140014"], 0x30}, 0x1, 0x0, 0x0, 0xc804}, 0x0) 729.239008ms ago: executing program 0 (id=1520): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYBLOB="62951d"], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 729.115865ms ago: executing program 3 (id=1521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}}, 0x4000800) 729.00864ms ago: executing program 4 (id=1522): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044084}, 0x0) 670.283178ms ago: executing program 5 (id=1523): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r3, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0) 565.633753ms ago: executing program 1 (id=1524): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 565.453634ms ago: executing program 3 (id=1525): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1000000017010000030000000108000010000000170100000200000000000000100000001701000004"], 0x30}], 0x1, 0x0) 535.369965ms ago: executing program 0 (id=1526): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)=@acquire={0x124, 0x17, 0x1, 0x0, 0x0, {{@in6=@mcast2, 0x4}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {@in6=@remote, @in6=@empty}, {{@in, @in=@private, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000}}}}, 0x124}}, 0x0) 503.586532ms ago: executing program 4 (id=1527): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x60, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @device_b, @device_a, @initial, {0x4}}, 0xa78, 0x6a, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a, {0x8000, 0x2, 0x7, 0x0, {0xe, 0xe, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x2, 0x3}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 429.932923ms ago: executing program 5 (id=1528): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003002d"], 0x30}}, 0x0) 360.138043ms ago: executing program 3 (id=1529): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x10, 0x2900, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @multicast1}}}}) 359.973388ms ago: executing program 0 (id=1530): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) 359.524217ms ago: executing program 1 (id=1531): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r0 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 341.970575ms ago: executing program 4 (id=1532): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x970b) 221.783617ms ago: executing program 1 (id=1533): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) recvmsg$can_raw(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x40010042) 220.243835ms ago: executing program 5 (id=1534): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x5af1, 0x1, 0x8}, 0x10) 219.166188ms ago: executing program 0 (id=1535): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001000000000000000a008020", @ANYBLOB="b7"], 0x38}}, 0x0) 200.186702ms ago: executing program 4 (id=1536): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1a8, 0x65, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x158, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x144, 0x6, [@m_simple={0x10c, 0xe, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, '\\}#\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xfffe000, 0x7, 0x4, 0xa7b4}}, @TCA_DEF_DATA={0xd, 0x3, '/dev/kvm\x00'}, @TCA_DEF_DATA={0x7, 0x3, '&&\x00'}, @TCA_DEF_DATA={0xa, 0x3, '\xff\xff\xff\xff\xff\xff'}, @TCA_DEF_DATA={0x15, 0x3, '+{%^/\xa9{$+*\xad&)!%\'\x00'}]}, {0x81, 0x6, "fe5a2070be52f0035382619e6cb23eefc87329b3b2ddf2f1abcb28f900804dbc701d717ed71dd1fcfb88dad905899a1ec43e1e3a515ca2eb0774d7ba1859fd1b230d96606ce59c18977b874df89f812968658e86ed2227b583c11e7e17de60d1536b09f47a2c3a5c98687257648ee2f5daf28ba52f8fe8b4ad68d67b4e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6}}}}, @m_connmark={0x34, 0x3ffd, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffe}, @TCA_CHAIN={0x8, 0xb, 0xfffffffd}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x1a8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0xc5}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 147.790849ms ago: executing program 3 (id=1537): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x614}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @broadcast}]}}}]}, 0x50}, 0x9}, 0x0) 11.245488ms ago: executing program 0 (id=1538): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002080), 0x2cf4cedbf79fe5, 0x832b, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 11.128305ms ago: executing program 3 (id=1539): r0 = socket$inet(0x2, 0x2, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 10.718523ms ago: executing program 4 (id=1540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 0s ago: executing program 5 (id=1541): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts. [ 57.149679][ T5815] cgroup: Unknown subsys name 'net' [ 57.319508][ T5815] cgroup: Unknown subsys name 'cpuset' [ 57.327251][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.614199][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.648919][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.680627][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.690711][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.698874][ T5833] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.706631][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.714659][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.714781][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.723332][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.729317][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.744150][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.752920][ T5833] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.761213][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.761836][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.775083][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.784331][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.791628][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.795471][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.799622][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.805615][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.813537][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.829410][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.837273][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.837453][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.852636][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.853375][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.860328][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.868123][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.874696][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.881403][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.896436][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.317312][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 61.380850][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 61.394986][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 61.472357][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 61.502163][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 61.577694][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.587062][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.594418][ T5826] bridge_slave_0: entered allmulticast mode [ 61.601669][ T5826] bridge_slave_0: entered promiscuous mode [ 61.611464][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.618649][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.625856][ T5826] bridge_slave_1: entered allmulticast mode [ 61.632423][ T5826] bridge_slave_1: entered promiscuous mode [ 61.653051][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.660269][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.667582][ T5837] bridge_slave_0: entered allmulticast mode [ 61.674227][ T5837] bridge_slave_0: entered promiscuous mode [ 61.725694][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.732868][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.740325][ T5837] bridge_slave_1: entered allmulticast mode [ 61.747590][ T5837] bridge_slave_1: entered promiscuous mode [ 61.757702][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.764820][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.772568][ T5825] bridge_slave_0: entered allmulticast mode [ 61.779410][ T5825] bridge_slave_0: entered promiscuous mode [ 61.787187][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.794296][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.801669][ T5825] bridge_slave_1: entered allmulticast mode [ 61.808820][ T5825] bridge_slave_1: entered promiscuous mode [ 61.820381][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.831704][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.880072][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.920349][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.945339][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.958605][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.976294][ T5826] team0: Port device team_slave_0 added [ 61.988301][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.996312][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.003542][ T5835] bridge_slave_0: entered allmulticast mode [ 62.010992][ T5835] bridge_slave_0: entered promiscuous mode [ 62.032325][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.039534][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.046901][ T5840] bridge_slave_0: entered allmulticast mode [ 62.053436][ T5840] bridge_slave_0: entered promiscuous mode [ 62.061437][ T5826] team0: Port device team_slave_1 added [ 62.077147][ T5837] team0: Port device team_slave_0 added [ 62.083642][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.091292][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.098550][ T5835] bridge_slave_1: entered allmulticast mode [ 62.105070][ T5835] bridge_slave_1: entered promiscuous mode [ 62.113846][ T5825] team0: Port device team_slave_0 added [ 62.120876][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.128345][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.135655][ T5840] bridge_slave_1: entered allmulticast mode [ 62.142215][ T5840] bridge_slave_1: entered promiscuous mode [ 62.157242][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.164209][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.190437][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.205173][ T5837] team0: Port device team_slave_1 added [ 62.219519][ T5825] team0: Port device team_slave_1 added [ 62.240879][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.249657][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.276193][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.310966][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.322087][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.343023][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.381629][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.388761][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.415117][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.443844][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.467667][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.474640][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.501617][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.513582][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.520943][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.547236][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.562483][ T5835] team0: Port device team_slave_0 added [ 62.581039][ T5826] hsr_slave_0: entered promiscuous mode [ 62.587815][ T5826] hsr_slave_1: entered promiscuous mode [ 62.594713][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.601803][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.627930][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.654284][ T5835] team0: Port device team_slave_1 added [ 62.662554][ T5840] team0: Port device team_slave_0 added [ 62.670731][ T5840] team0: Port device team_slave_1 added [ 62.738960][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.746413][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.772765][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.787151][ T5837] hsr_slave_0: entered promiscuous mode [ 62.794431][ T5837] hsr_slave_1: entered promiscuous mode [ 62.800643][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.808835][ T5837] Cannot create hsr debugfs directory [ 62.818132][ T5825] hsr_slave_0: entered promiscuous mode [ 62.824328][ T5825] hsr_slave_1: entered promiscuous mode [ 62.830611][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.838217][ T5825] Cannot create hsr debugfs directory [ 62.844030][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.851357][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.877353][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.894079][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.901298][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.927766][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.946252][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.953230][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.956602][ T5141] Bluetooth: hci0: command tx timeout [ 62.979528][ T5832] Bluetooth: hci2: command tx timeout [ 62.984826][ T5841] Bluetooth: hci1: command tx timeout [ 62.990771][ T5832] Bluetooth: hci4: command tx timeout [ 62.995875][ T5834] Bluetooth: hci3: command tx timeout [ 63.007604][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.093785][ T5840] hsr_slave_0: entered promiscuous mode [ 63.100150][ T5840] hsr_slave_1: entered promiscuous mode [ 63.106690][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.114254][ T5840] Cannot create hsr debugfs directory [ 63.179753][ T5835] hsr_slave_0: entered promiscuous mode [ 63.186586][ T5835] hsr_slave_1: entered promiscuous mode [ 63.192489][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.200375][ T5835] Cannot create hsr debugfs directory [ 63.455025][ T5826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.468523][ T5826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.478087][ T5826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.489947][ T5826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.542517][ T5825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.558859][ T5825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.568363][ T5825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.593304][ T5825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.637830][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.657305][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.692635][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.713070][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.754045][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.778227][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.791311][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.822759][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.871733][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.907975][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.914839][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.928100][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.951944][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.964138][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.992264][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.013787][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.026239][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.033536][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.057943][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.065088][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.084668][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.096136][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.103222][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.154727][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.162054][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.220154][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.248826][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.255989][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.277455][ T5825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.289306][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.317539][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.324660][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.336901][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.409068][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.447234][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.454381][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.493654][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.500820][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.534414][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.565369][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.578163][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.638335][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.675010][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.709564][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.716732][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.740266][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.798102][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.805449][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.878599][ T5826] veth0_vlan: entered promiscuous mode [ 64.909294][ T5826] veth1_vlan: entered promiscuous mode [ 64.934753][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.959093][ T5825] veth0_vlan: entered promiscuous mode [ 64.977737][ T5825] veth1_vlan: entered promiscuous mode [ 64.993834][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.036342][ T5834] Bluetooth: hci4: command tx timeout [ 65.041798][ T5834] Bluetooth: hci3: command tx timeout [ 65.048070][ T5141] Bluetooth: hci2: command tx timeout [ 65.053499][ T5141] Bluetooth: hci0: command tx timeout [ 65.059983][ T5841] Bluetooth: hci1: command tx timeout [ 65.073436][ T5825] veth0_macvtap: entered promiscuous mode [ 65.100212][ T5826] veth0_macvtap: entered promiscuous mode [ 65.110214][ T5825] veth1_macvtap: entered promiscuous mode [ 65.130588][ T5826] veth1_macvtap: entered promiscuous mode [ 65.194460][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.214702][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.228069][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.239945][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.261097][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.283058][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.295239][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.306687][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.329958][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.340832][ T5825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.350342][ T5825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.360912][ T5825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.369796][ T5825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.384777][ T5826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.394004][ T5826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.403845][ T5826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.412854][ T5826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.453995][ T5837] veth0_vlan: entered promiscuous mode [ 65.500324][ T5837] veth1_vlan: entered promiscuous mode [ 65.574049][ T5835] veth0_vlan: entered promiscuous mode [ 65.605693][ T5837] veth0_macvtap: entered promiscuous mode [ 65.608429][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.614405][ T5837] veth1_macvtap: entered promiscuous mode [ 65.621035][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.636645][ T5835] veth1_vlan: entered promiscuous mode [ 65.693567][ T5840] veth0_vlan: entered promiscuous mode [ 65.703175][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.703185][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.703200][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.717024][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.739971][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.748033][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.758208][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.768728][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.780281][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.790436][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.801209][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.812018][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.822831][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.841072][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.854811][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.869771][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.878858][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.887796][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.918547][ T5840] veth1_vlan: entered promiscuous mode [ 65.934218][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.950078][ T5835] veth0_macvtap: entered promiscuous mode [ 65.966559][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.972774][ T5835] veth1_macvtap: entered promiscuous mode [ 65.974385][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.052022][ T5840] veth0_macvtap: entered promiscuous mode [ 66.103903][ T5840] veth1_macvtap: entered promiscuous mode [ 66.136697][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.153518][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.165204][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.176174][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.186269][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.197164][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.219267][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.227164][ T5914] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4'. [ 66.286919][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.294814][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.313732][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.347287][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.365467][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.389834][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.418811][ T5923] Bluetooth: MGMT ver 1.23 [ 66.424602][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.441424][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.457678][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.474625][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.492054][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.508706][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.520801][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.533879][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.544410][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.562185][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.573861][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.585154][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.613670][ T5929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9'. [ 66.643911][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.674887][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.706169][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.731373][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.743052][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.761290][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.785531][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.809009][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.820896][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.828009][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 66.832137][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.849525][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.859278][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.868083][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.881304][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.890305][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.900198][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.909532][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.927395][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.937197][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.115919][ T5141] Bluetooth: hci2: command tx timeout [ 67.121412][ T5141] Bluetooth: hci4: command tx timeout [ 67.128395][ T5841] Bluetooth: hci0: command tx timeout [ 67.133886][ T5834] Bluetooth: hci1: command tx timeout [ 67.133908][ T5832] Bluetooth: hci3: command tx timeout [ 67.294729][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.311562][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.324930][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.334401][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.338800][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.343279][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.366521][ T5955] IPv6: sit1: Disabled Multicast RS [ 67.492732][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.518966][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.603709][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.699552][ T5967] netlink: 'syz.2.18': attribute type 6 has an invalid length. [ 67.739677][ T5970] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'. [ 67.986326][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 68.021002][ T5979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.23'. [ 68.041640][ T5985] warning: `syz.2.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.049408][ T5979] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23'. [ 68.179584][ T5990] Zero length message leads to an empty skb [ 68.273445][ T5995] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.773803][ T6014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.31'. [ 68.776463][ T6018] netlink: 'syz.0.33': attribute type 2 has an invalid length. [ 68.877211][ T6018] netlink: 'syz.0.33': attribute type 2 has an invalid length. [ 69.149947][ T6037] netlink: 'syz.0.38': attribute type 1 has an invalid length. [ 69.186140][ T6037] netlink: 134744 bytes leftover after parsing attributes in process `syz.0.38'. [ 69.199180][ T5832] Bluetooth: hci3: command tx timeout [ 69.204642][ T5832] Bluetooth: hci4: command tx timeout [ 69.210136][ T5845] Bluetooth: hci1: command tx timeout [ 69.212153][ T5141] Bluetooth: hci0: command tx timeout [ 69.216671][ T5845] Bluetooth: hci2: command tx timeout [ 69.228872][ T6035] netlink: 132 bytes leftover after parsing attributes in process `syz.2.37'. [ 69.365966][ T6051] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 69.390230][ T6051] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 70.366023][ T6098] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 70.783367][ T6125] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 70.830723][ T6124] netlink: 'syz.4.69': attribute type 10 has an invalid length. [ 70.998322][ T6124] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 71.264716][ T6151] workqueue: name exceeds WQ_NAME_LEN. Truncating to: þÜ»}ÆÓžäءÑV§ïj×ì·Pbôõ=Ì [ 71.265172][ T6146] xt_hashlimit: size too large, truncated to 1048576 [ 71.308759][ T6146] xt_hashlimit: max too large, truncated to 1048576 [ 71.326681][ T6146] xt_hashlimit: overflow, try lower: 0/0 [ 71.607384][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.654369][ T6174] __nla_validate_parse: 6 callbacks suppressed [ 71.654388][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.3.86'. [ 71.848964][ T6194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.88'. [ 71.918245][ T6192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.88'. [ 72.227045][ T6216] netlink: 'syz.0.92': attribute type 4 has an invalid length. [ 72.300952][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.94'. [ 72.541831][ T6232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.99'. [ 73.337372][ T6278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.111'. [ 73.537394][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.113'. [ 73.797586][ T6296] netlink: 44 bytes leftover after parsing attributes in process `syz.1.117'. [ 73.866679][ T6303] netlink: 24 bytes leftover after parsing attributes in process `syz.2.119'. [ 73.876529][ T6305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.119'. [ 74.030945][ T6315] netlink: 'syz.1.122': attribute type 1 has an invalid length. [ 74.253848][ T6327] FAULT_INJECTION: forcing a failure. [ 74.253848][ T6327] name failslab, interval 1, probability 0, space 0, times 1 [ 74.282069][ T6327] CPU: 0 UID: 0 PID: 6327 Comm: syz.3.124 Not tainted 6.13.0-rc1-syzkaller-00229-g3dd002f20098 #0 [ 74.292693][ T6327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.302775][ T6327] Call Trace: [ 74.306074][ T6327] [ 74.309021][ T6327] dump_stack_lvl+0x241/0x360 [ 74.313736][ T6327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.318965][ T6327] ? __pfx__printk+0x10/0x10 [ 74.323580][ T6327] ? ref_tracker_alloc+0x332/0x490 [ 74.328709][ T6327] should_fail_ex+0x3b0/0x4e0 [ 74.333407][ T6327] should_failslab+0xac/0x100 [ 74.338124][ T6327] ? skb_clone+0x20c/0x390 [ 74.342647][ T6327] kmem_cache_alloc_noprof+0x70/0x380 [ 74.348051][ T6327] skb_clone+0x20c/0x390 [ 74.352326][ T6327] __netlink_deliver_tap+0x3cc/0x7f0 [ 74.357645][ T6327] ? netlink_deliver_tap+0x2e/0x1b0 [ 74.362857][ T6327] netlink_deliver_tap+0x19d/0x1b0 [ 74.367991][ T6327] __netlink_sendskb+0x60/0xd0 [ 74.372781][ T6327] netlink_dump+0x9f0/0xe10 [ 74.377324][ T6327] ? __pfx_netlink_dump+0x10/0x10 [ 74.382381][ T6327] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 74.388992][ T6327] ? kmemdup_noprof+0x45/0x60 [ 74.393691][ T6327] ? __asan_memcpy+0x40/0x70 [ 74.398305][ T6327] ? kmemdup_noprof+0x45/0x60 [ 74.403010][ T6327] __netlink_dump_start+0x5a2/0x790 [ 74.408233][ T6327] ? nft_netlink_dump_start_rcu+0xcd/0x200 [ 74.414069][ T6327] nft_netlink_dump_start_rcu+0x139/0x200 [ 74.419823][ T6327] nf_tables_getset+0x76f/0xd60 [ 74.424695][ T6327] ? __pfx___nla_validate_parse+0x10/0x10 [ 74.430449][ T6327] ? __pfx_nf_tables_getset+0x10/0x10 [ 74.435856][ T6327] ? __pfx_nf_tables_dump_sets_start+0x10/0x10 [ 74.442032][ T6327] ? __pfx_nf_tables_dump_sets+0x10/0x10 [ 74.447688][ T6327] ? __pfx_nf_tables_dump_sets_done+0x10/0x10 [ 74.453786][ T6327] ? __nla_parse+0x40/0x60 [ 74.458227][ T6327] ? nfnetlink_rcv_msg+0x225/0x1180 [ 74.463446][ T6327] ? __pfx_nf_tables_getset+0x10/0x10 [ 74.468838][ T6327] nfnetlink_rcv_msg+0x8a2/0x1180 [ 74.473897][ T6327] ? nfnetlink_rcv_msg+0x225/0x1180 [ 74.479149][ T6327] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 74.484629][ T6327] ? stack_trace_save+0x118/0x1d0 [ 74.489698][ T6327] ? dev_hard_start_xmit+0x27a/0x7d0 [ 74.495007][ T6327] ? __dev_queue_xmit+0x1b73/0x3f50 [ 74.500225][ T6327] ? __netlink_deliver_tap+0x56b/0x7f0 [ 74.505701][ T6327] ? netlink_deliver_tap+0x19d/0x1b0 [ 74.511005][ T6327] ? netlink_unicast+0x7c4/0x990 [ 74.515967][ T6327] ? netlink_sendmsg+0x8e4/0xcb0 [ 74.520925][ T6327] ? __sock_sendmsg+0x221/0x270 [ 74.525805][ T6327] ? ____sys_sendmsg+0x52a/0x7e0 [ 74.530767][ T6327] ? __sys_sendmsg+0x269/0x350 [ 74.535564][ T6327] netlink_rcv_skb+0x1e3/0x430 [ 74.540352][ T6327] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 74.545837][ T6327] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 74.551154][ T6327] ? apparmor_capable+0x13b/0x1b0 [ 74.556204][ T6327] ? bpf_lsm_capable+0x9/0x10 [ 74.560907][ T6327] ? security_capable+0x7e/0x2d0 [ 74.565879][ T6327] nfnetlink_rcv+0x297/0x2ab0 [ 74.570590][ T6327] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 74.576343][ T6327] ? __dev_queue_xmit+0x2f4/0x3f50 [ 74.581498][ T6327] ? __dev_queue_xmit+0x1775/0x3f50 [ 74.586721][ T6327] ? kasan_save_track+0x51/0x80 [ 74.591600][ T6327] ? ____sys_sendmsg+0x52a/0x7e0 [ 74.596568][ T6327] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 74.601705][ T6327] ? __dev_queue_xmit+0x2f4/0x3f50 [ 74.606846][ T6327] ? __pfx___dev_queue_xmit+0x10/0x10 [ 74.612345][ T6327] ? ref_tracker_free+0x643/0x7e0 [ 74.617397][ T6327] ? __asan_memcpy+0x40/0x70 [ 74.622015][ T6327] ? __pfx_ref_tracker_free+0x10/0x10 [ 74.627430][ T6327] ? netlink_deliver_tap+0x2e/0x1b0 [ 74.632649][ T6327] ? skb_clone+0x240/0x390 [ 74.637085][ T6327] ? __pfx_lock_release+0x10/0x10 [ 74.642119][ T6327] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 74.647611][ T6327] ? netlink_deliver_tap+0x2e/0x1b0 [ 74.652813][ T6327] netlink_unicast+0x7f6/0x990 [ 74.657595][ T6327] ? __pfx_netlink_unicast+0x10/0x10 [ 74.662964][ T6327] ? __virt_addr_valid+0x183/0x530 [ 74.668068][ T6327] ? __check_object_size+0x48e/0x900 [ 74.673354][ T6327] netlink_sendmsg+0x8e4/0xcb0 [ 74.678119][ T6327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.683398][ T6327] ? aa_sock_msg_perm+0x91/0x160 [ 74.688333][ T6327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.693697][ T6327] __sock_sendmsg+0x221/0x270 [ 74.698374][ T6327] ____sys_sendmsg+0x52a/0x7e0 [ 74.703135][ T6327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.708408][ T6327] ? __fget_files+0x2a/0x410 [ 74.713009][ T6327] ? __fget_files+0x2a/0x410 [ 74.717600][ T6327] __sys_sendmsg+0x269/0x350 [ 74.722181][ T6327] ? __pfx_lock_release+0x10/0x10 [ 74.727215][ T6327] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.732347][ T6327] ? __pfx_vfs_write+0x10/0x10 [ 74.737129][ T6327] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.743463][ T6327] ? do_syscall_64+0x100/0x230 [ 74.748250][ T6327] ? do_syscall_64+0xb6/0x230 [ 74.752932][ T6327] do_syscall_64+0xf3/0x230 [ 74.757437][ T6327] ? clear_bhb_loop+0x35/0x90 [ 74.762220][ T6327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.768111][ T6327] RIP: 0033:0x7f928c77ff19 [ 74.772534][ T6327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.792142][ T6327] RSP: 002b:00007f928d597058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.800900][ T6327] RAX: ffffffffffffffda RBX: 00007f928c945fa0 RCX: 00007f928c77ff19 [ 74.808869][ T6327] RDX: 0000000004000040 RSI: 0000000020000140 RDI: 0000000000000004 [ 74.816832][ T6327] RBP: 00007f928d5970a0 R08: 0000000000000000 R09: 0000000000000000 [ 74.824804][ T6327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.832790][ T6327] R13: 0000000000000000 R14: 00007f928c945fa0 R15: 00007ffcc9e66eb8 [ 74.840787][ T6327] [ 76.934754][ T6453] x_tables: duplicate underflow at hook 3 [ 77.073943][ T6463] __nla_validate_parse: 9 callbacks suppressed [ 77.073964][ T6463] netlink: 40 bytes leftover after parsing attributes in process `syz.1.161'. [ 77.220373][ T6466] tap0: tun_chr_ioctl cmd 1074025677 [ 77.246307][ T6466] tap0: linktype set to 778 [ 77.268995][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 77.864160][ T6495] macsec1: entered promiscuous mode [ 77.888335][ T6495] macsec1: entered allmulticast mode [ 77.904364][ T6495] veth1_macvtap: entered allmulticast mode [ 77.958238][ T6495] veth1_macvtap: left allmulticast mode [ 79.262229][ T6535] veth0: entered promiscuous mode [ 79.309991][ T6542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.335366][ T6529] veth0: left promiscuous mode [ 79.501860][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.180'. [ 79.636699][ T6560] netlink: 60 bytes leftover after parsing attributes in process `syz.2.185'. [ 79.879930][ T6571] syz.2.190[6571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.880031][ T6571] syz.2.190[6571] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.988363][ T6573] bond1: entered promiscuous mode [ 80.045808][ T6573] bond1: entered allmulticast mode [ 80.054250][ T6581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.062030][ T6573] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.669459][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'. [ 80.704082][ T6616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.847635][ T6628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 80.886261][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 81.573627][ T6665] vxcan1: tx address claim with dlc 90 [ 81.609378][ T6665] delete_channel: no stack [ 81.671310][ T6668] netlink: 'syz.0.218': attribute type 1 has an invalid length. [ 81.693657][ T6668] netlink: 'syz.0.218': attribute type 2 has an invalid length. [ 81.706858][ T6678] netlink: 340 bytes leftover after parsing attributes in process `syz.2.220'. [ 81.873058][ T25] cfg80211: failed to load regulatory.db [ 81.879077][ T6687] netlink: 60 bytes leftover after parsing attributes in process `syz.3.223'. [ 83.267951][ T6757] netlink: 148 bytes leftover after parsing attributes in process `syz.3.240'. [ 83.722184][ T6780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.962354][ T6792] syz.0.247 uses obsolete (PF_INET,SOCK_PACKET) [ 83.962380][ T6791] netlink: 60 bytes leftover after parsing attributes in process `syz.3.246'. [ 83.994989][ T6796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.244'. [ 84.038413][ T6798] netlink: 'syz.2.248': attribute type 3 has an invalid length. [ 84.060825][ T6798] netlink: 766 bytes leftover after parsing attributes in process `syz.2.248'. [ 84.232136][ T6807] xt_cgroup: invalid path, errno=-2 [ 84.824303][ T6834] netlink: 60 bytes leftover after parsing attributes in process `syz.3.259'. [ 85.307814][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.266'. [ 85.390695][ T6861] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 85.405552][ T6861] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 85.469065][ T6864] bridge0: entered allmulticast mode [ 85.716040][ T6889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.273'. [ 85.830441][ T6891] IPVS: Error connecting to the multicast addr [ 85.852661][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.277'. [ 85.877142][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.277'. [ 86.111272][ T6912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.281'. [ 87.096187][ T6964] IPv4: Oversized IP packet from 172.20.20.24 [ 87.103991][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 87.110801][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 87.283015][ T6976] netlink: 'syz.3.296': attribute type 29 has an invalid length. [ 87.356452][ T6976] netlink: 'syz.3.296': attribute type 29 has an invalid length. [ 88.448170][ T7045] netlink: 'syz.2.317': attribute type 10 has an invalid length. [ 88.565327][ T7045] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.610783][ T7051] __nla_validate_parse: 19 callbacks suppressed [ 88.610802][ T7051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.319'. [ 88.638273][ T7045] bond0: (slave team0): Enslaving as an active interface with an up link [ 88.683830][ T7053] bridge_slave_0: left allmulticast mode [ 88.741247][ T7053] bridge_slave_0: left promiscuous mode [ 88.787035][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.849677][ T7053] bridge_slave_1: left allmulticast mode [ 88.864730][ T7053] bridge_slave_1: left promiscuous mode [ 88.872203][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.885201][ T7053] bond0: (slave bond_slave_0): Releasing backup interface [ 88.910064][ T7053] bond0: (slave bond_slave_1): Releasing backup interface [ 88.947234][ T7053] team0: Port device team_slave_0 removed [ 88.969502][ T7053] team0: Port device team_slave_1 removed [ 88.983155][ T7053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.991313][ T7053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.000492][ T7053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.008518][ T7053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.034671][ T7061] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 89.052176][ T7061] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 89.217377][ T7079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.325'. [ 89.427529][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.328'. [ 89.971174][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.339'. [ 90.025775][ T7125] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.339'. [ 90.036176][ T7124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.341'. [ 90.334309][ T7144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.349'. [ 90.353173][ T7144] netlink: 16 bytes leftover after parsing attributes in process `syz.0.349'. [ 90.545757][ T7158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.345'. [ 90.606709][ T7165] xt_bpf: check failed: parse error [ 90.786394][ T7177] netlink: 64 bytes leftover after parsing attributes in process `syz.3.357'. [ 90.812039][ T7177] netlink: 'syz.3.357': attribute type 1 has an invalid length. [ 90.847914][ T7177] netlink: 'syz.3.357': attribute type 1 has an invalid length. [ 91.076196][ T7194] netlink: 'syz.4.361': attribute type 1 has an invalid length. [ 91.090754][ T7183] dccp_close: ABORT with 1 bytes unread [ 91.329935][ T7196] syzkaller0: entered allmulticast mode [ 91.424524][ T7208] xt_addrtype: ipv6 does not support BROADCAST matching [ 91.469764][ T7196] syzkaller0: create flow: hash 3726981045 index 1 [ 91.555541][ T7217] xt_TCPMSS: Only works on TCP SYN packets [ 91.632254][ T7220] Cannot find set identified by id 0 to match [ 91.654743][ T7193] syzkaller0: delete flow: hash 3726981045 index 1 [ 93.314773][ T7244] ip6gre1: entered allmulticast mode [ 94.094243][ T7298] __nla_validate_parse: 5 callbacks suppressed [ 94.094262][ T7298] netlink: 76 bytes leftover after parsing attributes in process `syz.1.389'. [ 94.142954][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.389'. [ 94.336109][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.395'. [ 94.947924][ T7347] netlink: 340 bytes leftover after parsing attributes in process `syz.1.403'. [ 95.270455][ T7362] FAULT_INJECTION: forcing a failure. [ 95.270455][ T7362] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.336269][ T7362] CPU: 0 UID: 0 PID: 7362 Comm: syz.1.407 Not tainted 6.13.0-rc1-syzkaller-00229-g3dd002f20098 #0 [ 95.346919][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.356993][ T7362] Call Trace: [ 95.360292][ T7362] [ 95.363238][ T7362] dump_stack_lvl+0x241/0x360 [ 95.367953][ T7362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.373180][ T7362] ? __pfx__printk+0x10/0x10 [ 95.377587][ T7371] FAULT_INJECTION: forcing a failure. [ 95.377587][ T7371] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 95.377776][ T7362] ? __pfx_lock_release+0x10/0x10 [ 95.395823][ T7362] should_fail_ex+0x3b0/0x4e0 [ 95.400523][ T7362] _copy_from_user+0x2f/0xc0 [ 95.405138][ T7362] copy_msghdr_from_user+0xae/0x680 [ 95.410361][ T7362] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 95.416188][ T7362] ? __fget_files+0x2a/0x410 [ 95.420799][ T7362] ? __fget_files+0x2a/0x410 [ 95.425399][ T7362] __sys_sendmsg+0x209/0x350 [ 95.430001][ T7362] ? __pfx_lock_release+0x10/0x10 [ 95.435035][ T7362] ? __pfx___sys_sendmsg+0x10/0x10 [ 95.440160][ T7362] ? __pfx_vfs_write+0x10/0x10 [ 95.444948][ T7362] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 95.451286][ T7362] ? do_syscall_64+0x100/0x230 [ 95.456061][ T7362] ? do_syscall_64+0xb6/0x230 [ 95.460751][ T7362] do_syscall_64+0xf3/0x230 [ 95.465263][ T7362] ? clear_bhb_loop+0x35/0x90 [ 95.469952][ T7362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.475852][ T7362] RIP: 0033:0x7fc1fe37ff19 [ 95.480274][ T7362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.499882][ T7362] RSP: 002b:00007fc1ff13a058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 95.508308][ T7362] RAX: ffffffffffffffda RBX: 00007fc1fe545fa0 RCX: 00007fc1fe37ff19 [ 95.516293][ T7362] RDX: 0000000000000080 RSI: 00000000200000c0 RDI: 0000000000000003 [ 95.524271][ T7362] RBP: 00007fc1ff13a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 95.532245][ T7362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.540219][ T7362] R13: 0000000000000000 R14: 00007fc1fe545fa0 R15: 00007ffcd4934f28 [ 95.548208][ T7362] [ 95.551233][ T7371] CPU: 1 UID: 0 PID: 7371 Comm: syz.3.411 Not tainted 6.13.0-rc1-syzkaller-00229-g3dd002f20098 #0 [ 95.561839][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.571918][ T7371] Call Trace: [ 95.575217][ T7371] [ 95.578159][ T7371] dump_stack_lvl+0x241/0x360 [ 95.582841][ T7371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.588041][ T7371] ? __pfx__printk+0x10/0x10 [ 95.592638][ T7371] ? __pfx_lock_release+0x10/0x10 [ 95.597667][ T7371] should_fail_ex+0x3b0/0x4e0 [ 95.602343][ T7371] _copy_from_iter+0x21f/0x1e70 [ 95.607192][ T7371] ? __virt_addr_valid+0x183/0x530 [ 95.612299][ T7371] ? __pfx_lock_release+0x10/0x10 [ 95.617323][ T7371] ? __alloc_skb+0x28f/0x440 [ 95.621909][ T7371] ? __pfx__copy_from_iter+0x10/0x10 [ 95.627192][ T7371] ? __virt_addr_valid+0x183/0x530 [ 95.632395][ T7371] ? __virt_addr_valid+0x183/0x530 [ 95.637531][ T7371] ? __virt_addr_valid+0x45f/0x530 [ 95.642666][ T7371] ? __check_object_size+0x48e/0x900 [ 95.647965][ T7371] netlink_sendmsg+0x73d/0xcb0 [ 95.652742][ T7371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.658030][ T7371] ? aa_sock_msg_perm+0x91/0x160 [ 95.662970][ T7371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 95.668252][ T7371] __sock_sendmsg+0x221/0x270 [ 95.672934][ T7371] ____sys_sendmsg+0x52a/0x7e0 [ 95.677702][ T7371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 95.682982][ T7371] ? __fget_files+0x2a/0x410 [ 95.687572][ T7371] ? __fget_files+0x2a/0x410 [ 95.692162][ T7371] __sys_sendmmsg+0x36a/0x720 [ 95.696845][ T7371] ? __pfx___sys_sendmmsg+0x10/0x10 [ 95.702045][ T7371] ? __pfx_lock_release+0x10/0x10 [ 95.707066][ T7371] ? kstrtouint_from_user+0x128/0x190 [ 95.712448][ T7371] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 95.718342][ T7371] ? ksys_write+0x22a/0x2b0 [ 95.722843][ T7371] ? __pfx_lock_release+0x10/0x10 [ 95.727869][ T7371] ? vfs_write+0x730/0xd30 [ 95.732290][ T7371] ? __mutex_unlock_slowpath+0x21e/0x790 [ 95.737942][ T7371] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 95.743923][ T7371] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 95.750247][ T7371] ? do_syscall_64+0x100/0x230 [ 95.755015][ T7371] __x64_sys_sendmmsg+0xa0/0xb0 [ 95.759868][ T7371] do_syscall_64+0xf3/0x230 [ 95.764376][ T7371] ? clear_bhb_loop+0x35/0x90 [ 95.769058][ T7371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.774950][ T7371] RIP: 0033:0x7f928c77ff19 [ 95.779359][ T7371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.798973][ T7371] RSP: 002b:00007f928d597058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 95.807384][ T7371] RAX: ffffffffffffffda RBX: 00007f928c945fa0 RCX: 00007f928c77ff19 [ 95.815350][ T7371] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 95.823320][ T7371] RBP: 00007f928d5970a0 R08: 0000000000000000 R09: 0000000000000000 [ 95.831300][ T7371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.839276][ T7371] R13: 0000000000000000 R14: 00007f928c945fa0 R15: 00007ffcc9e66eb8 [ 95.847259][ T7371] [ 95.947192][ T7376] IPVS: set_ctl: invalid protocol: 30 36.78.0.0:1024 [ 96.095996][ T7385] netlink: 340 bytes leftover after parsing attributes in process `syz.0.417'. [ 96.120023][ T7388] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.415'. [ 96.121390][ T7383] netlink: 64 bytes leftover after parsing attributes in process `syz.3.414'. [ 96.138852][ T7383] netlink: 64 bytes leftover after parsing attributes in process `syz.3.414'. [ 96.145957][ T7388] openvswitch: netlink: Unknown key attributes 20 [ 96.288010][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.517104][ T7404] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 96.562727][ T7405] netlink: 'syz.0.421': attribute type 2 has an invalid length. [ 96.598083][ T7405] netlink: 92 bytes leftover after parsing attributes in process `syz.0.421'. [ 96.604320][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.632229][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.641338][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.421'. [ 96.897635][ T7423] FAULT_INJECTION: forcing a failure. [ 96.897635][ T7423] name failslab, interval 1, probability 0, space 0, times 0 [ 96.945519][ T7423] CPU: 1 UID: 0 PID: 7423 Comm: syz.0.427 Not tainted 6.13.0-rc1-syzkaller-00229-g3dd002f20098 #0 [ 96.956182][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.966259][ T7423] Call Trace: [ 96.969546][ T7423] [ 96.972489][ T7423] dump_stack_lvl+0x241/0x360 [ 96.977196][ T7423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.982413][ T7423] ? __pfx__printk+0x10/0x10 [ 96.987032][ T7423] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 96.993132][ T7423] ? __pfx___might_resched+0x10/0x10 [ 96.998446][ T7423] should_fail_ex+0x3b0/0x4e0 [ 97.003148][ T7423] should_failslab+0xac/0x100 [ 97.007851][ T7423] kmem_cache_alloc_node_noprof+0x77/0x380 [ 97.013683][ T7423] ? __alloc_skb+0x1c3/0x440 [ 97.018300][ T7423] __alloc_skb+0x1c3/0x440 [ 97.022744][ T7423] ? __pfx___alloc_skb+0x10/0x10 [ 97.027708][ T7423] ? netlink_autobind+0xd6/0x2f0 [ 97.032668][ T7423] ? netlink_autobind+0x2b0/0x2f0 [ 97.037703][ T7423] netlink_sendmsg+0x638/0xcb0 [ 97.042470][ T7423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.047754][ T7423] ? aa_sock_msg_perm+0x91/0x160 [ 97.052695][ T7423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.057973][ T7423] __sock_sendmsg+0x221/0x270 [ 97.062649][ T7423] ____sys_sendmsg+0x52a/0x7e0 [ 97.067425][ T7423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.072715][ T7423] ? __fget_files+0x2a/0x410 [ 97.077319][ T7423] ? __fget_files+0x2a/0x410 [ 97.081907][ T7423] __sys_sendmsg+0x269/0x350 [ 97.086495][ T7423] ? __pfx_lock_release+0x10/0x10 [ 97.091522][ T7423] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.096642][ T7423] ? __pfx_vfs_write+0x10/0x10 [ 97.101426][ T7423] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.107750][ T7423] ? do_syscall_64+0x100/0x230 [ 97.112513][ T7423] ? do_syscall_64+0xb6/0x230 [ 97.117189][ T7423] do_syscall_64+0xf3/0x230 [ 97.121690][ T7423] ? clear_bhb_loop+0x35/0x90 [ 97.126370][ T7423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.132294][ T7423] RIP: 0033:0x7fe63c97ff19 [ 97.136704][ T7423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.156303][ T7423] RSP: 002b:00007fe63d86f058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.164800][ T7423] RAX: ffffffffffffffda RBX: 00007fe63cb45fa0 RCX: 00007fe63c97ff19 [ 97.172768][ T7423] RDX: 0000000000000080 RSI: 00000000200000c0 RDI: 0000000000000003 [ 97.180736][ T7423] RBP: 00007fe63d86f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.188706][ T7423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.196681][ T7423] R13: 0000000000000000 R14: 00007fe63cb45fa0 R15: 00007ffdd3959b18 [ 97.204674][ T7423] [ 97.466730][ T7454] veth0_virt_wifi: mtu greater than device maximum [ 98.172669][ T7481] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 98.178029][ T7476] netlink: 'syz.0.440': attribute type 29 has an invalid length. [ 98.194164][ T7481] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 98.222796][ T7481] netlink: 'syz.2.441': attribute type 2 has an invalid length. [ 98.285972][ T7481] netlink: 'syz.2.441': attribute type 1 has an invalid length. [ 98.528054][ T7491] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 98.586377][ T7490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.597398][ T7490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.636912][ T7490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.685502][ T7490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.734373][ T7490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.759215][ T7490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.828415][ T7513] ip6gre1: entered allmulticast mode [ 98.904821][ T7513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.914246][ T7513] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 98.948227][ T7513] bond0: (slave ip6gre1): Error -95 calling set_mac_address [ 99.272026][ T7535] bridge_slave_0: left allmulticast mode [ 99.277984][ T7535] bridge_slave_0: left promiscuous mode [ 99.283697][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.346677][ T7535] bridge_slave_1: left allmulticast mode [ 99.380373][ T7535] bridge_slave_1: left promiscuous mode [ 99.387437][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.414044][ T7535] bond0: (slave bond_slave_0): Releasing backup interface [ 99.426826][ T7535] bond0: (slave bond_slave_1): Releasing backup interface [ 99.446172][ T7535] team0: Port device team_slave_0 removed [ 99.454531][ T7535] team0: Port device team_slave_1 removed [ 99.462523][ T7535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.470172][ T7535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.479185][ T7547] __nla_validate_parse: 9 callbacks suppressed [ 99.479201][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 99.496928][ T7535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.509780][ T7535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.518323][ T7556] sctp: [Deprecated]: syz.3.454 (pid 7556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 99.518323][ T7556] Use struct sctp_sack_info instead [ 99.791915][ T7569] netlink: 60 bytes leftover after parsing attributes in process `syz.1.460'. [ 99.825812][ T7566] netlink: 60 bytes leftover after parsing attributes in process `syz.1.460'. [ 100.010516][ T7577] netlink: 340 bytes leftover after parsing attributes in process `syz.0.464'. [ 100.353388][ T7598] netlink: 48 bytes leftover after parsing attributes in process `syz.1.467'. [ 100.644761][ T7618] netlink: 104 bytes leftover after parsing attributes in process `syz.1.477'. [ 100.836515][ T7629] netlink: 340 bytes leftover after parsing attributes in process `syz.0.479'. [ 101.094387][ T7644] netlink: 10 bytes leftover after parsing attributes in process `syz.0.483'. [ 101.144257][ T7644] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 101.380350][ T7663] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 101.787782][ T7681] netlink: 340 bytes leftover after parsing attributes in process `syz.4.493'. [ 101.810879][ T7687] xt_ecn: cannot match TCP bits for non-tcp packets [ 101.888873][ T7690] netlink: 'syz.0.495': attribute type 1 has an invalid length. [ 101.917519][ T7690] netlink: 236 bytes leftover after parsing attributes in process `syz.0.495'. [ 102.151454][ T7707] team0: Device bond0 is already an upper device of the team interface [ 102.432265][ T7722] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 102.444735][ T7723] nbd: must specify an index to disconnect [ 103.658912][ T7783] netlink: 'syz.4.518': attribute type 10 has an invalid length. [ 103.669903][ T7783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.747445][ T7783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.848721][ T7783] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 104.095114][ T7808] netlink: 'syz.4.524': attribute type 1 has an invalid length. [ 105.203819][ T7875] FAULT_INJECTION: forcing a failure. [ 105.203819][ T7875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.235778][ T7875] CPU: 0 UID: 0 PID: 7875 Comm: syz.1.537 Not tainted 6.13.0-rc1-syzkaller-00229-g3dd002f20098 #0 [ 105.246415][ T7875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.256507][ T7875] Call Trace: [ 105.259810][ T7875] [ 105.262760][ T7875] dump_stack_lvl+0x241/0x360 [ 105.267471][ T7875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.272701][ T7875] ? __pfx__printk+0x10/0x10 [ 105.277320][ T7875] ? __pfx_lock_release+0x10/0x10 [ 105.282373][ T7875] should_fail_ex+0x3b0/0x4e0 [ 105.287080][ T7875] _copy_from_user+0x2f/0xc0 [ 105.291701][ T7875] __sys_bpf+0x1a4/0x810 [ 105.295966][ T7875] ? __pfx___sys_bpf+0x10/0x10 [ 105.300749][ T7875] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 105.306729][ T7875] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.313058][ T7875] ? do_syscall_64+0x100/0x230 [ 105.317826][ T7875] __x64_sys_bpf+0x7c/0x90 [ 105.322244][ T7875] do_syscall_64+0xf3/0x230 [ 105.326744][ T7875] ? clear_bhb_loop+0x35/0x90 [ 105.331420][ T7875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.337308][ T7875] RIP: 0033:0x7fc1fe37ff19 [ 105.341719][ T7875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.361324][ T7875] RSP: 002b:00007fc1ff13a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.369741][ T7875] RAX: ffffffffffffffda RBX: 00007fc1fe545fa0 RCX: 00007fc1fe37ff19 [ 105.377711][ T7875] RDX: 0000000000000004 RSI: 00000000200002c0 RDI: 0000000000000022 [ 105.385675][ T7875] RBP: 00007fc1ff13a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.393639][ T7875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.401605][ T7875] R13: 0000000000000000 R14: 00007fc1fe545fa0 R15: 00007ffcd4934f28 [ 105.409600][ T7875] [ 105.498262][ T7883] xt_hashlimit: max too large, truncated to 1048576 [ 105.903992][ T7900] syz.4.544 (7900) used greatest stack depth: 18160 bytes left [ 105.966016][ T7902] __nla_validate_parse: 8 callbacks suppressed [ 105.966034][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.545'. [ 106.012873][ T7902] netlink: 48 bytes leftover after parsing attributes in process `syz.0.545'. [ 106.045458][ T7902] netlink: 36 bytes leftover after parsing attributes in process `syz.0.545'. [ 106.097834][ T7902] vlan2: entered allmulticast mode [ 106.461559][ T7931] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 106.470691][ T7922] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.972574][ T7959] netlink: 340 bytes leftover after parsing attributes in process `syz.2.564'. [ 107.191190][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 107.207215][ T7969] netlink: 'syz.1.569': attribute type 32 has an invalid length. [ 107.241101][ T7969] netlink: 'syz.1.569': attribute type 2 has an invalid length. [ 107.270155][ T7969] netlink: 'syz.1.569': attribute type 9 has an invalid length. [ 107.302160][ T7969] netlink: 210620 bytes leftover after parsing attributes in process `syz.1.569'. [ 107.373953][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 107.436057][ T7980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.571'. [ 107.883088][ T8008] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 107.891281][ T8008] netlink: 'syz.1.579': attribute type 3 has an invalid length. [ 107.899341][ T8008] netlink: 224 bytes leftover after parsing attributes in process `syz.1.579'. [ 107.908806][ T8008] NCSI netlink: No device for ifindex 0 [ 108.238622][ T8022] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 108.258711][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 108.271630][ T8022] x_tables: duplicate underflow at hook 1 [ 108.290074][ T8021] dccp_close: ABORT with 32 bytes unread [ 108.749775][ T8050] batadv0: entered promiscuous mode [ 108.796221][ T8050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.783320][ T8104] netlink: 'syz.2.607': attribute type 29 has an invalid length. [ 109.799437][ T8104] netlink: 'syz.2.607': attribute type 29 has an invalid length. [ 109.813027][ T8104] netlink: 'syz.2.607': attribute type 29 has an invalid length. [ 109.849277][ T8104] Bluetooth: MGMT ver 1.23 [ 109.871244][ T8112] netlink: 'syz.2.607': attribute type 29 has an invalid length. [ 110.042433][ T8118] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.074740][ T8118] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.093934][ T8118] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.103694][ T8118] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 110.119768][ T8118] geneve2: entered promiscuous mode [ 110.125134][ T8118] geneve2: entered allmulticast mode [ 110.142946][ T8118] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 110.181877][ T8118] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 110.201403][ T8118] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 110.240007][ T8118] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 110.369966][ T8141] netlink: 'syz.0.612': attribute type 6 has an invalid length. [ 110.564406][ T8148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 110.617031][ T8154] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 111.049715][ T8179] __nla_validate_parse: 3 callbacks suppressed [ 111.049735][ T8179] netlink: 288 bytes leftover after parsing attributes in process `syz.3.622'. [ 111.116852][ T8179] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff [ 111.207317][ T8187] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.236182][ T8187] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.256913][ T8187] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.284775][ T8187] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.300959][ T8187] geneve2: entered promiscuous mode [ 111.311079][ T8187] geneve2: entered allmulticast mode [ 111.327916][ T8187] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 111.343653][ T8187] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 111.353115][ T8187] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 111.364029][ T8187] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 111.793275][ T8221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.631'. [ 111.879497][ T8221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 112.217548][ T8243] veth0_vlan: left promiscuous mode [ 112.241484][ T8243] veth0_vlan: entered promiscuous mode [ 112.253840][ T8242] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.636'. [ 112.423966][ T8253] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.465505][ T8253] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.491217][ T8253] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.514944][ T8253] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 112.526163][ T8257] delete_channel: no stack [ 112.542468][ T8253] geneve2: entered promiscuous mode [ 112.565808][ T8253] geneve2: entered allmulticast mode [ 112.595268][ T8253] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 112.625607][ T8253] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 112.635102][ T8253] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 112.677964][ T8253] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 112.767225][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.642'. [ 112.951532][ T8278] netlink: 576 bytes leftover after parsing attributes in process `syz.1.645'. [ 112.962148][ T8283] netlink: 72 bytes leftover after parsing attributes in process `syz.4.646'. [ 113.048387][ T8278] validate_nla: 1 callbacks suppressed [ 113.048406][ T8278] netlink: 'syz.1.645': attribute type 4 has an invalid length. [ 113.151938][ T8283] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 113.160772][ T8283] sock: sock_timestamping_bind_phc: sock not bind to device [ 113.169128][ T8283] netlink: 728 bytes leftover after parsing attributes in process `syz.4.646'. [ 113.451650][ T8315] netlink: 'syz.0.653': attribute type 4 has an invalid length. [ 113.503391][ T8319] netlink: 'syz.0.653': attribute type 4 has an invalid length. [ 113.795111][ T8331] netlink: 'syz.1.657': attribute type 8 has an invalid length. [ 113.972318][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 114.015579][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.660'. [ 114.958068][ T25] IPVS: starting estimator thread 0... [ 115.046159][ T8394] IPVS: using max 21 ests per chain, 50400 per kthread [ 115.488297][ T8418] geneve2: entered promiscuous mode [ 115.498386][ T8418] geneve2: entered allmulticast mode [ 115.824336][ T8436] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 116.081210][ T8445] __nla_validate_parse: 2 callbacks suppressed [ 116.081229][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.694'. [ 116.146416][ T8445] bridge_slave_1: left allmulticast mode [ 116.152114][ T8445] bridge_slave_1: left promiscuous mode [ 116.206369][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.469657][ T8445] bridge_slave_0: left allmulticast mode [ 116.479974][ T8445] bridge_slave_0: left promiscuous mode [ 116.523174][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.693137][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 116.791446][ T8458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.697'. [ 117.310689][ T8474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.702'. [ 117.471232][ T8474] syz.4.702: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 117.486633][ T8474] CPU: 1 UID: 0 PID: 8474 Comm: syz.4.702 Not tainted 6.13.0-rc1-syzkaller-00229-g3dd002f20098 #0 [ 117.497268][ T8474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.507360][ T8474] Call Trace: [ 117.510670][ T8474] [ 117.513623][ T8474] dump_stack_lvl+0x241/0x360 [ 117.518355][ T8474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.523589][ T8474] ? __pfx__printk+0x10/0x10 [ 117.528218][ T8474] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 117.534671][ T8474] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 117.541211][ T8474] warn_alloc+0x278/0x410 [ 117.545571][ T8474] ? stack_depot_save_flags+0x29/0x830 [ 117.551064][ T8474] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 117.557165][ T8474] ? __pfx_warn_alloc+0x10/0x10 [ 117.562051][ T8474] ? kasan_save_track+0x3f/0x80 [ 117.566934][ T8474] ? __kasan_kmalloc+0x98/0xb0 [ 117.571735][ T8474] ? xsk_setsockopt+0x4ea/0x950 [ 117.576615][ T8474] ? do_sock_setsockopt+0x3af/0x720 [ 117.581845][ T8474] ? __x64_sys_setsockopt+0x1ee/0x280 [ 117.587244][ T8474] ? do_syscall_64+0xf3/0x230 [ 117.591960][ T8474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.598074][ T8474] __vmalloc_node_range_noprof+0x126/0x1380 [ 117.604043][ T8474] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 117.610415][ T8474] ? __kasan_kmalloc+0x98/0xb0 [ 117.615212][ T8474] vmalloc_user_noprof+0x74/0x80 [ 117.620174][ T8474] ? xskq_create+0xb6/0x170 [ 117.624703][ T8474] xskq_create+0xb6/0x170 [ 117.629061][ T8474] xsk_init_queue+0xa1/0x100 [ 117.633679][ T8474] xsk_setsockopt+0x4ea/0x950 [ 117.638383][ T8474] ? __pfx_xsk_setsockopt+0x10/0x10 [ 117.643609][ T8474] ? __pfx_aa_sk_perm+0x10/0x10 [ 117.648504][ T8474] ? aa_sock_opt_perm+0x79/0x120 [ 117.653479][ T8474] ? __pfx_xsk_setsockopt+0x10/0x10 [ 117.658710][ T8474] do_sock_setsockopt+0x3af/0x720 [ 117.663778][ T8474] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 117.669371][ T8474] ? __fget_files+0x395/0x410 [ 117.674079][ T8474] ? __fget_files+0x2a/0x410 [ 117.678742][ T8474] __x64_sys_setsockopt+0x1ee/0x280 [ 117.683981][ T8474] do_syscall_64+0xf3/0x230 [ 117.688521][ T8474] ? clear_bhb_loop+0x35/0x90 [ 117.693237][ T8474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.699167][ T8474] RIP: 0033:0x7f81e3f7ff19 [ 117.703615][ T8474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.723256][ T8474] RSP: 002b:00007f81e4d3e058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 117.731720][ T8474] RAX: ffffffffffffffda RBX: 00007f81e4145fa0 RCX: 00007f81e3f7ff19 [ 117.739728][ T8474] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 117.747729][ T8474] RBP: 00007f81e3ff3cc8 R08: 0000000000000004 R09: 0000000000000000 [ 117.755728][ T8474] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.763726][ T8474] R13: 0000000000000000 R14: 00007f81e4145fa0 R15: 00007ffd344005a8 [ 117.771748][ T8474] [ 117.781568][ T8474] Mem-Info: [ 117.784807][ T8474] active_anon:5497 inactive_anon:0 isolated_anon:0 [ 117.784807][ T8474] active_file:1360 inactive_file:38221 isolated_file:0 [ 117.784807][ T8474] unevictable:768 dirty:296 writeback:0 [ 117.784807][ T8474] slab_reclaimable:10812 slab_unreclaimable:105081 [ 117.784807][ T8474] mapped:28746 shmem:1505 pagetables:795 [ 117.784807][ T8474] sec_pagetables:0 bounce:0 [ 117.784807][ T8474] kernel_misc_reclaimable:0 [ 117.784807][ T8474] free:1333841 free_pcp:711 free_cma:0 [ 117.831357][ T8474] Node 0 active_anon:21788kB inactive_anon:0kB active_file:5440kB inactive_file:152808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114884kB dirty:1184kB writeback:0kB shmem:4484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11060kB pagetables:3080kB sec_pagetables:0kB all_unreclaimable? no [ 117.833849][ T8477] netlink: 'syz.4.702': attribute type 3 has an invalid length. [ 117.864241][ T8474] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 117.906899][ T8474] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 117.936813][ T8474] lowmem_reserve[]: 0 2465 2466 0 0 [ 117.942122][ T8474] Node 0 DMA32 free:1414764kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:21952kB inactive_anon:0kB active_file:5440kB inactive_file:151968kB unevictable:1536kB writepending:1184kB present:3129332kB managed:2552844kB mlocked:0kB bounce:0kB free_pcp:1932kB local_pcp:1196kB free_cma:0kB [ 117.982456][ T8474] lowmem_reserve[]: 0 0 0 0 0 [ 117.987350][ T8474] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:840kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 118.014792][ T8474] lowmem_reserve[]: 0 0 0 0 0 [ 118.019952][ T8474] Node 1 Normal free:3906636kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 118.054421][ T8474] lowmem_reserve[]: 0 0 0 0 0 [ 118.059584][ T8474] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 118.083194][ T8474] Node 0 DMA32: 66*4kB (M) 140*8kB (UME) 72*16kB (UME) 74*32kB (UME) 90*64kB (UME) 55*128kB (UME) 25*256kB (UME) 12*512kB (UM) 6*1024kB (UE) 3*2048kB (UM) 335*4096kB (M) = 1414696kB [ 118.101710][ T8474] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 118.120668][ T8474] Node 1 Normal: 241*4kB (UE) 69*8kB (UME) 36*16kB (UME) 258*32kB (UME) 102*64kB (UME) 35*128kB (UME) 13*256kB (UME) 14*512kB (UME) 4*1024kB (UM) 4*2048kB (UE) 943*4096kB (M) = 3906668kB [ 118.153366][ T8474] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.163993][ T8474] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.191841][ T8474] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.223335][ T8474] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.275572][ T8474] 41068 total pagecache pages [ 118.284978][ T8474] 0 pages in swap cache [ 118.306719][ T8474] Free swap = 124996kB [ 118.310926][ T8474] Total swap = 124996kB [ 118.315094][ T8474] 2097051 pages RAM [ 118.342161][ T8474] 0 pages HighMem/MovableOnly [ 118.350493][ T8474] 426990 pages reserved [ 118.356821][ T8474] 0 pages cma reserved [ 118.389724][ T8511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.714'. [ 118.447465][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.714'. [ 118.861387][ T8537] sit2: entered promiscuous mode [ 118.890821][ T8537] sit2: entered allmulticast mode [ 119.265703][ T8556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 120.191415][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.744'. [ 120.216160][ T8613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.239857][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.744'. [ 120.296708][ T8627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.748'. [ 120.404706][ T8620] syzkaller1: entered promiscuous mode [ 120.456947][ T8620] syzkaller1: entered allmulticast mode [ 122.529618][ T8758] __nla_validate_parse: 2 callbacks suppressed [ 122.529637][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.770'. [ 122.722190][ T8767] hsr0: entered promiscuous mode [ 122.799788][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.772'. [ 122.870568][ T8784] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 122.903040][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 123.433299][ T8808] FAULT_INJECTION: forcing a failure. [ 123.433299][ T8808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.464382][ T8808] CPU: 1 UID: 0 PID: 8808 Comm: syz.1.776 Not tainted 6.13.0-rc1-syzkaller-00229-g3dd002f20098 #0 [ 123.475027][ T8808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 123.485106][ T8808] Call Trace: [ 123.488408][ T8808] [ 123.491365][ T8808] dump_stack_lvl+0x241/0x360 [ 123.496099][ T8808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.501324][ T8808] ? __pfx__printk+0x10/0x10 [ 123.505940][ T8808] ? __pfx_lock_release+0x10/0x10 [ 123.510994][ T8808] should_fail_ex+0x3b0/0x4e0 [ 123.515704][ T8808] _copy_from_iter+0x21f/0x1e70 [ 123.520581][ T8808] ? __virt_addr_valid+0x183/0x530 [ 123.525721][ T8808] ? __pfx_lock_release+0x10/0x10 [ 123.526236][ T8813] netlink: 16 bytes leftover after parsing attributes in process `syz.2.778'. [ 123.530754][ T8808] ? __alloc_skb+0x28f/0x440 [ 123.530806][ T8808] ? __pfx__copy_from_iter+0x10/0x10 [ 123.549512][ T8808] ? __local_bh_enable_ip+0x168/0x200 [ 123.554911][ T8808] ? __virt_addr_valid+0x183/0x530 [ 123.560041][ T8808] ? __virt_addr_valid+0x183/0x530 [ 123.565170][ T8808] ? __virt_addr_valid+0x45f/0x530 [ 123.570305][ T8808] ? __phys_addr_symbol+0x2f/0x70 [ 123.575352][ T8808] ? __check_object_size+0x48e/0x900 [ 123.575714][ T8810] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 123.580644][ T8808] pppoe_sendmsg+0x3ae/0x790 [ 123.580675][ T8808] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 123.602514][ T8808] __sock_sendmsg+0x221/0x270 [ 123.607226][ T8808] ____sys_sendmsg+0x52a/0x7e0 [ 123.612023][ T8808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.617336][ T8808] ? __fget_files+0x2a/0x410 [ 123.621943][ T8808] ? __fget_files+0x2a/0x410 [ 123.626563][ T8808] __sys_sendmsg+0x269/0x350 [ 123.631173][ T8808] ? __pfx_lock_release+0x10/0x10 [ 123.636220][ T8808] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.641376][ T8808] ? __pfx_vfs_write+0x10/0x10 [ 123.646198][ T8808] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.652553][ T8808] ? do_syscall_64+0x100/0x230 [ 123.657360][ T8808] ? do_syscall_64+0xb6/0x230 [ 123.662071][ T8808] do_syscall_64+0xf3/0x230 [ 123.666792][ T8808] ? clear_bhb_loop+0x35/0x90 [ 123.671500][ T8808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.677423][ T8808] RIP: 0033:0x7fc1fe37ff19 [ 123.681867][ T8808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.701492][ T8808] RSP: 002b:00007fc1ff13a058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.709942][ T8808] RAX: ffffffffffffffda RBX: 00007fc1fe545fa0 RCX: 00007fc1fe37ff19 [ 123.717933][ T8808] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000003 [ 123.725929][ T8808] RBP: 00007fc1ff13a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 123.733920][ T8808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.741909][ T8808] R13: 0000000000000000 R14: 00007fc1fe545fa0 R15: 00007ffcd4934f28 [ 123.749914][ T8808] [ 123.970096][ T8833] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 124.160663][ T8833] syzkaller0: entered promiscuous mode [ 124.167598][ T8833] syzkaller0: entered allmulticast mode [ 124.243607][ T8833] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 124.875773][ T5845] Bluetooth: hci0: command tx timeout [ 124.917703][ T8879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.794'. [ 126.091193][ T8892] netlink: 28 bytes leftover after parsing attributes in process `syz.4.797'. [ 126.104060][ T8892] netlink: 'syz.4.797': attribute type 7 has an invalid length. [ 126.137424][ T8892] netlink: 'syz.4.797': attribute type 8 has an invalid length. [ 126.145097][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'. [ 126.164103][ T8888] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 126.195470][ T8888] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 126.299922][ T8899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.800'. [ 126.554950][ T8918] vxcan1: entered allmulticast mode [ 126.590180][ T8918] vxcan1: left allmulticast mode [ 127.271016][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.813'. [ 127.315459][ T8957] netlink: 224 bytes leftover after parsing attributes in process `syz.4.813'. [ 127.410707][ T8964] openvswitch: netlink: IP tunnel dst address not specified [ 127.682943][ T8978] IPVS: persistence engine module ip_vs_pe_À not found [ 127.717528][ T8975] tipc: Enabling of bearer rejected, failed to enable media [ 127.744161][ T8975] netlink: 'syz.3.819': attribute type 1 has an invalid length. [ 127.944973][ T8995] __nla_validate_parse: 1 callbacks suppressed [ 127.944992][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 128.018565][ T9001] netlink: 'syz.3.825': attribute type 10 has an invalid length. [ 128.373901][ T9018] netlink: 'syz.2.831': attribute type 11 has an invalid length. [ 128.411172][ T9024] netlink: 'syz.0.834': attribute type 10 has an invalid length. [ 128.426533][ T9024] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 128.552303][ T9027] netlink: 'syz.4.835': attribute type 29 has an invalid length. [ 128.666571][ T9032] netlink: 'syz.4.835': attribute type 29 has an invalid length. [ 128.677819][ T9031] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 128.705551][ T9031] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 128.714525][ T9031] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 128.786515][ T9027] netlink: 500 bytes leftover after parsing attributes in process `syz.4.835'. [ 128.823559][ T9027] unsupported nla_type 40 [ 128.998345][ T9056] xt_cluster: you have exceeded the maximum number of cluster nodes (768 > 32) [ 129.059571][ T9056] netlink: 68 bytes leftover after parsing attributes in process `syz.3.841'. [ 129.099587][ T9061] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 129.115840][ T9061] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 129.140634][ T9061] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 129.172832][ T9061] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 129.192790][ T9061] geneve2: entered promiscuous mode [ 129.220662][ T9061] geneve2: entered allmulticast mode [ 129.242646][ T9061] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 129.252987][ T9061] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 129.266715][ T9061] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 129.276508][ T9061] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 129.977563][ T9097] netlink: 28 bytes leftover after parsing attributes in process `syz.2.852'. [ 130.122789][ T9103] netlink: 'syz.0.853': attribute type 10 has an invalid length. [ 130.136852][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.854'. [ 130.152115][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.854'. [ 130.162728][ T9103] veth1_macvtap: left promiscuous mode [ 130.397585][ T9118] bond0: entered promiscuous mode [ 130.425447][ T9118] bond_slave_0: entered promiscuous mode [ 130.431287][ T9118] bond_slave_1: entered promiscuous mode [ 130.496386][ T9118] bond0: entered allmulticast mode [ 130.545760][ T9118] bond_slave_0: entered allmulticast mode [ 130.551605][ T9118] bond_slave_1: entered allmulticast mode [ 131.019534][ T9158] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 131.041264][ T9158] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 131.947927][ T9205] netlink: 'syz.0.879': attribute type 10 has an invalid length. [ 131.981004][ T9205] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 132.560109][ T9233] netlink: 84 bytes leftover after parsing attributes in process `syz.0.887'. [ 132.570878][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.888'. [ 132.601490][ T9237] netlink: 28 bytes leftover after parsing attributes in process `syz.3.888'. [ 132.749952][ T9245] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 132.764134][ T9237] xt_recent: Unsupported userspace flags (00000042) [ 132.773069][ T9245] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 133.095956][ T9266] sock: sock_set_timeout: `syz.1.896' (pid 9266) tries to set negative timeout [ 133.186635][ T9266] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 133.206446][ T9270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.895'. [ 133.267638][ T9277] netlink: 108 bytes leftover after parsing attributes in process `syz.2.898'. [ 133.276395][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.899'. [ 133.730836][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.903'. [ 134.124253][ T9318] netlink: 'syz.4.908': attribute type 10 has an invalid length. [ 134.247806][ T9318] team0: Port device netdevsim0 added [ 134.495140][ T9340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.913'. [ 134.738004][ T9351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.916'. [ 134.854419][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.919'. [ 134.886868][ T9364] netlink: 'syz.4.920': attribute type 10 has an invalid length. [ 135.302812][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 135.432928][ T9390] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.134451][ T9448] netlink: 232 bytes leftover after parsing attributes in process `syz.0.937'. [ 136.660729][ T9490] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.949'. [ 137.349901][ T9522] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 137.401126][ T9522] team0: Device ipvlan2 is already an upper device of the team interface [ 137.493115][ T9526] netlink: 'syz.0.959': attribute type 11 has an invalid length. [ 137.695230][ T9542] netlink: 'syz.1.966': attribute type 1 has an invalid length. [ 137.799400][ T9542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.241272][ T9577] __nla_validate_parse: 4 callbacks suppressed [ 138.241292][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.975'. [ 138.285791][ T9577] netlink: 12 bytes leftover after parsing attributes in process `syz.2.975'. [ 138.480405][ T9585] netlink: 2 bytes leftover after parsing attributes in process `syz.1.976'. [ 138.563937][ T9592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.978'. [ 138.716109][ T5832] Bluetooth: hci4: command tx timeout [ 138.817885][ T9606] x_tables: duplicate underflow at hook 1 [ 138.919551][ T9611] bridge0: port 1(vlan3) entered blocking state [ 138.926099][ T9611] bridge0: port 1(vlan3) entered disabled state [ 138.932519][ T9611] vlan3: entered allmulticast mode [ 138.954234][ T9611] vlan3: left allmulticast mode [ 139.085272][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 139.132523][ T9612] netlink: 224 bytes leftover after parsing attributes in process `syz.0.983'. [ 139.175965][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.983'. [ 139.310745][ T9632] No such timeout policy "syz0" [ 139.925774][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.995'. [ 139.987106][ T9657] gtp0: entered promiscuous mode [ 139.992108][ T9657] gtp0: entered allmulticast mode [ 140.106645][ T9666] netlink: 256 bytes leftover after parsing attributes in process `syz.1.997'. [ 140.174943][ T9673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.998'. [ 140.842314][ T9710] netlink: 'syz.2.1008': attribute type 1 has an invalid length. [ 140.885620][ T9710] netlink: 'syz.2.1008': attribute type 1 has an invalid length. [ 142.139039][ T9785] netlink: 'syz.0.1024': attribute type 10 has an invalid length. [ 142.226800][ T9785] team0: Port device netdevsim0 added [ 142.557491][ T9806] IPVS: set_ctl: invalid protocol: 29 172.20.20.47:20003 [ 143.520777][ T9867] __nla_validate_parse: 15 callbacks suppressed [ 143.520797][ T9867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1042'. [ 143.617968][ T9871] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 144.265196][ T9900] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1050'. [ 144.480092][ T9913] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1054'. [ 144.677244][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1053'. [ 144.702668][ T9911] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 144.725676][ T9911] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 144.735610][ T9911] gretap1: entered promiscuous mode [ 144.740919][ T9911] gretap1: entered allmulticast mode [ 144.934564][ T9942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1061'. [ 144.988155][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'. [ 145.024519][ T9948] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1063'. [ 145.160763][ T9956] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1064'. [ 145.183776][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'. [ 145.478303][ T9974] netlink: 'syz.4.1064': attribute type 3 has an invalid length. [ 145.513238][ T9974] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1064'. [ 145.895296][ T9995] delete_channel: no stack [ 146.207113][T10002] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 147.344108][T10081] netlink: 'syz.0.1096': attribute type 1 has an invalid length. [ 147.354351][T10081] netlink: 'syz.0.1096': attribute type 2 has an invalid length. [ 147.850907][T10116] xt_l2tp: unknown flags: 18 [ 148.330322][T10150] netlink: 'syz.3.1114': attribute type 10 has an invalid length. [ 148.959797][T10188] netlink: 'syz.0.1126': attribute type 10 has an invalid length. [ 149.126988][T10197] netlink: 'syz.0.1127': attribute type 4 has an invalid length. [ 149.173881][T10199] __nla_validate_parse: 7 callbacks suppressed [ 149.173900][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'. [ 149.224528][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1130'. [ 149.500782][T10218] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 149.548029][T10218] team0: Device ipvlan2 is already an upper device of the team interface [ 149.563586][T10227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1135'. [ 150.027261][T10255] Driver unsupported XDP return value 0 on prog (id 276) dev N/A, expect packet loss! [ 150.067217][T10255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.202058][T10264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1145'. [ 151.007037][T10321] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1159'. [ 151.180148][T10331] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1161'. [ 151.257751][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1162'. [ 151.296553][T10335] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 151.484585][T10347] netlink: 'syz.4.1165': attribute type 4 has an invalid length. [ 151.568674][T10346] xt_TPROXY: Can be used only with -p tcp or -p udp [ 152.207646][T10386] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 152.312703][T10388] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1173'. [ 152.505038][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 152.535239][T10409] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 152.592601][T10409] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (65553) [ 152.619990][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 152.631762][T10409] netlink: 'syz.1.1176': attribute type 3 has an invalid length. [ 152.647209][T10405] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:1050:47ff:fe42:2f9a error=-28 [ 152.669366][T10406] netlink: 'syz.2.1177': attribute type 21 has an invalid length. [ 152.812403][T10424] netlink: 'syz.4.1182': attribute type 10 has an invalid length. [ 153.002884][T10432] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.156553][T10405] infiniband syz1: set active [ 153.177898][T10405] infiniband syz1: added team_slave_0 [ 153.409556][T10405] RDS/IB: syz1: added [ 153.414331][T10405] smc: adding ib device syz1 with port count 1 [ 153.456113][T10405] smc: ib device syz1 port 1 has pnetid [ 153.734037][T10468] netlink: 'syz.0.1194': attribute type 10 has an invalid length. [ 153.833236][T10474] netlink: 'syz.4.1196': attribute type 21 has an invalid length. [ 154.022891][ T29] audit: type=1107 audit(1733899743.324:2): pid=10481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 154.295069][T10495] __nla_validate_parse: 11 callbacks suppressed [ 154.295090][T10495] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1201'. [ 154.365264][T10497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1202'. [ 154.463538][T10495] openvswitch: netlink: Message has 44053 unknown bytes. [ 154.703728][T10510] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1204'. [ 154.770536][T10510] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1204'. [ 154.971954][T10520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'. [ 155.089930][T10524] netlink: 'syz.1.1208': attribute type 10 has an invalid length. [ 155.132667][T10524] team0: Device netdevsim0 is up. Set it down before adding it as a team port [ 155.190163][T10535] bridge0: port 3(gretap0) entered blocking state [ 155.207440][T10535] bridge0: port 3(gretap0) entered disabled state [ 155.214059][T10535] gretap0: entered allmulticast mode [ 155.281032][T10535] gretap0: entered promiscuous mode [ 155.315183][T10535] bridge0: port 3(gretap0) entered blocking state [ 155.321756][T10535] bridge0: port 3(gretap0) entered forwarding state [ 155.335689][T10542] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1214'. [ 155.362975][T10544] bond3: entered promiscuous mode [ 155.413557][T10544] bond3: entered allmulticast mode [ 155.424567][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1215'. [ 155.448078][T10544] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.677334][T10571] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1220'. [ 155.705847][T10569] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1220'. [ 155.780558][T10568] dvmrp0: entered allmulticast mode [ 156.113865][T10589] IPVS: Unknown mcast interface: dvmrp1 [ 156.130216][T10592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1229'. [ 156.134259][T10594] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 156.284134][T10599] xt_TCPMSS: Only works on TCP SYN packets [ 156.353149][T10607] tipc: Can't bind to reserved service type 1 [ 156.368192][T10604] IPVS: Unknown mcast interface: pim6reg1 [ 156.979100][T10634] xt_CT: You must specify a L4 protocol and not use inversions on it [ 157.030540][T10639] pim6reg: entered allmulticast mode [ 157.045843][T10641] pim6reg: left allmulticast mode [ 157.164316][T10634] netlink: 'syz.1.1239': attribute type 21 has an invalid length. [ 157.359415][T10660] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.378990][T10660] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.407812][T10660] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.444367][T10660] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 157.465796][T10660] geneve2: entered promiscuous mode [ 157.477472][T10660] geneve2: entered allmulticast mode [ 157.501313][T10660] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 157.525487][T10660] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 157.534545][T10660] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 157.543688][T10660] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 157.651976][T10672] netlink: 'syz.0.1248': attribute type 10 has an invalid length. [ 158.135319][T10701] FAULT_INJECTION: forcing a failure. [ 158.135319][T10701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.165206][T10701] CPU: 1 UID: 0 PID: 10701 Comm: syz.0.1257 Not tainted 6.13.0-rc1-syzkaller-00229-g3dd002f20098 #0 [ 158.176014][T10701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.186088][T10701] Call Trace: [ 158.189386][T10701] [ 158.192336][T10701] dump_stack_lvl+0x241/0x360 [ 158.197043][T10701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.202272][T10701] ? __pfx__printk+0x10/0x10 [ 158.206889][T10701] ? __pfx_lock_release+0x10/0x10 [ 158.211942][T10701] should_fail_ex+0x3b0/0x4e0 [ 158.216642][T10701] _copy_from_user+0x2f/0xc0 [ 158.221261][T10701] copy_msghdr_from_user+0xae/0x680 [ 158.226491][T10701] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 158.232321][T10701] ? __fget_files+0x2a/0x410 [ 158.236931][T10701] ? __fget_files+0x2a/0x410 [ 158.241541][T10701] __sys_sendmmsg+0x32b/0x720 [ 158.246240][T10701] ? __pfx___sys_sendmmsg+0x10/0x10 [ 158.251447][T10701] ? __pfx_lock_release+0x10/0x10 [ 158.256466][T10701] ? kstrtouint_from_user+0x128/0x190 [ 158.261848][T10701] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 158.267743][T10701] ? ksys_write+0x22a/0x2b0 [ 158.272242][T10701] ? __pfx_lock_release+0x10/0x10 [ 158.277266][T10701] ? vfs_write+0x730/0xd30 [ 158.281681][T10701] ? __mutex_unlock_slowpath+0x21e/0x790 [ 158.287325][T10701] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 158.293298][T10701] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 158.299620][T10701] ? do_syscall_64+0x100/0x230 [ 158.304385][T10701] __x64_sys_sendmmsg+0xa0/0xb0 [ 158.309234][T10701] do_syscall_64+0xf3/0x230 [ 158.313733][T10701] ? clear_bhb_loop+0x35/0x90 [ 158.318413][T10701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.324311][T10701] RIP: 0033:0x7fe63c97ff19 [ 158.328733][T10701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.348333][T10701] RSP: 002b:00007fe63d86f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.356743][T10701] RAX: ffffffffffffffda RBX: 00007fe63cb45fa0 RCX: 00007fe63c97ff19 [ 158.364710][T10701] RDX: 0000000000000001 RSI: 0000000020003cc0 RDI: 0000000000000005 [ 158.372672][T10701] RBP: 00007fe63d86f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.380637][T10701] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 158.388686][T10701] R13: 0000000000000000 R14: 00007fe63cb45fa0 R15: 00007ffdd3959b18 [ 158.396662][T10701] [ 180.512602][T11225] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.544489][T11225] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.569231][T11225] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.580953][T11230] __nla_validate_parse: 8 callbacks suppressed [ 180.580970][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1262'. [ 180.617455][T11225] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 180.653481][T11225] geneve2: entered promiscuous mode [ 180.677130][T11225] geneve2: entered allmulticast mode [ 180.714290][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.730920][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.748923][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.757016][T11225] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.767050][T11225] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.777504][T11225] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.787875][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.796007][T11225] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.806559][ T5845] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 180.813865][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.870485][T11241] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1269'. [ 181.129521][T11252] FAULT_INJECTION: forcing a failure. [ 181.129521][T11252] name failslab, interval 1, probability 0, space 0, times 0 [ 181.155766][T11252] CPU: 1 UID: 0 PID: 11252 Comm: syz.1.1273 Not tainted 6.13.0-rc1-syzkaller-00229-g3dd002f20098 #0 [ 181.166575][T11252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.176657][T11252] Call Trace: [ 181.179951][T11252] [ 181.182899][T11252] dump_stack_lvl+0x241/0x360 [ 181.187607][T11252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.192833][T11252] ? __pfx__printk+0x10/0x10 [ 181.197459][T11252] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 181.203467][T11252] ? __pfx___might_resched+0x10/0x10 [ 181.208776][T11252] should_fail_ex+0x3b0/0x4e0 [ 181.213472][T11252] should_failslab+0xac/0x100 [ 181.218173][T11252] kmem_cache_alloc_node_noprof+0x77/0x380 [ 181.224001][T11252] ? __alloc_skb+0x1c3/0x440 [ 181.228591][T11252] __alloc_skb+0x1c3/0x440 [ 181.233004][T11252] ? __pfx___alloc_skb+0x10/0x10 [ 181.238027][T11252] sock_omalloc+0xd5/0x1e0 [ 181.242447][T11252] msg_zerocopy_realloc+0x9a/0x7d0 [ 181.247558][T11252] __ip_append_data+0x95c/0x4110 [ 181.252506][T11252] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 181.258051][T11252] ? ip_route_output_key_hash+0xdf/0x2b0 [ 181.263678][T11252] ? __pfx___ip_append_data+0x10/0x10 [ 181.269045][T11252] ? ipv4_mtu+0x2bc/0x3d0 [ 181.273379][T11252] ? ip_setup_cork+0x4e0/0x9c0 [ 181.278139][T11252] ip_make_skb+0x198/0x420 [ 181.282557][T11252] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 181.288096][T11252] ? __pfx_ip_make_skb+0x10/0x10 [ 181.293039][T11252] udp_sendmsg+0x1bd7/0x2a50 [ 181.297637][T11252] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 181.303178][T11252] ? __pfx_udp_sendmsg+0x10/0x10 [ 181.308116][T11252] ? __pfx_lock_release+0x10/0x10 [ 181.313143][T11252] ? ima_match_policy+0x111/0x2230 [ 181.318273][T11252] udpv6_sendmsg+0x1373/0x32b0 [ 181.323038][T11252] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 181.328418][T11252] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 181.333525][T11252] ? __pfx___might_resched+0x10/0x10 [ 181.338815][T11252] ? aa_sk_perm+0x96d/0xab0 [ 181.343327][T11252] ? sock_rps_record_flow+0x1a/0x400 [ 181.348603][T11252] ? inet_send_prepare+0x21/0x260 [ 181.353630][T11252] __sock_sendmsg+0xef/0x270 [ 181.358224][T11252] ____sys_sendmsg+0x52a/0x7e0 [ 181.362992][T11252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.368275][T11252] ? __fget_files+0x2a/0x410 [ 181.372867][T11252] ? __fget_files+0x2a/0x410 [ 181.377456][T11252] __sys_sendmmsg+0x36a/0x720 [ 181.382137][T11252] ? __pfx___sys_sendmmsg+0x10/0x10 [ 181.387369][T11252] ? __pfx_lock_release+0x10/0x10 [ 181.392389][T11252] ? kstrtouint_from_user+0x128/0x190 [ 181.397771][T11252] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 181.403671][T11252] ? ksys_write+0x22a/0x2b0 [ 181.408169][T11252] ? __pfx_lock_release+0x10/0x10 [ 181.413194][T11252] ? vfs_write+0x730/0xd30 [ 181.417703][T11252] ? __mutex_unlock_slowpath+0x21e/0x790 [ 181.423612][T11252] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 181.429590][T11252] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 181.435931][T11252] ? do_syscall_64+0x100/0x230 [ 181.440696][T11252] __x64_sys_sendmmsg+0xa0/0xb0 [ 181.445548][T11252] do_syscall_64+0xf3/0x230 [ 181.450080][T11252] ? clear_bhb_loop+0x35/0x90 [ 181.454768][T11252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.460664][T11252] RIP: 0033:0x7fc1fe37ff19 [ 181.465085][T11252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.484700][T11252] RSP: 002b:00007fc1ff13a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 181.493117][T11252] RAX: ffffffffffffffda RBX: 00007fc1fe545fa0 RCX: 00007fc1fe37ff19 [ 181.501083][T11252] RDX: 0000000000000001 RSI: 0000000020003cc0 RDI: 0000000000000005 [ 181.509049][T11252] RBP: 00007fc1ff13a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 181.517015][T11252] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 181.524979][T11252] R13: 0000000000000000 R14: 00007fc1fe545fa0 R15: 00007ffcd4934f28 [ 181.532955][T11252] [ 181.689830][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1277'. [ 181.730779][T11264] tipc: Started in network mode [ 181.740243][ T5884] IPVS: starting estimator thread 0... [ 181.745974][T11264] tipc: Node identity ac1414aa, cluster identity 4711 [ 181.747396][T11264] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 181.796980][T11264] tipc: Enabled bearer , priority 10 [ 181.819533][T11233] chnl_net:caif_netlink_parms(): no params data found [ 181.876219][T11265] IPVS: using max 25 ests per chain, 60000 per kthread [ 181.886920][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 181.953308][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1281'. [ 181.969972][T11274] netlink: 'syz.0.1282': attribute type 2 has an invalid length. [ 181.980084][T11274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'. [ 182.016102][T11273] bridge_slave_1: left allmulticast mode [ 182.025458][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 182.038123][T11273] bridge_slave_1: left promiscuous mode [ 182.049628][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'. [ 182.065674][T11273] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.085183][T11273] bridge_slave_0: left allmulticast mode [ 182.092312][T11273] bridge_slave_0: left promiscuous mode [ 182.103748][T11283] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1285'. [ 182.105289][T11273] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.113442][T11283] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1285'. [ 182.165511][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 182.194577][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1283'. [ 182.305446][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 182.445734][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 182.585416][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 182.614279][T11233] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.624861][T11233] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.648884][T11233] bridge_slave_0: entered allmulticast mode [ 182.657310][T11233] bridge_slave_0: entered promiscuous mode [ 182.685880][T11233] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.693088][T11233] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.707016][T11233] bridge_slave_1: entered allmulticast mode [ 182.725477][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 182.732878][T11233] bridge_slave_1: entered promiscuous mode [ 182.844329][T11233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.867857][ T79] tipc: Node number set to 2886997162 [ 182.876314][ T5845] Bluetooth: hci5: command tx timeout [ 182.904760][T11233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.005467][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 183.019983][T11233] team0: Port device team_slave_0 added [ 183.050795][T11233] team0: Port device team_slave_1 added [ 183.210198][T11233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.234225][T11233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.275453][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 183.326203][T11233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.388254][T11233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.416241][T11233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.463245][T11233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.652796][T11233] hsr_slave_0: entered promiscuous mode [ 183.666611][T11356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1306'. [ 183.679502][T11233] hsr_slave_1: entered promiscuous mode [ 183.701128][T11233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.723993][T11233] Cannot create hsr debugfs directory [ 184.141978][T11372] netlink: 'syz.3.1311': attribute type 1 has an invalid length. [ 184.628011][T11233] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 184.671710][T11233] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 184.727467][T11395] batadv_slave_0: entered promiscuous mode [ 184.774499][T11233] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 184.872354][T11233] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 184.957469][ T5841] Bluetooth: hci5: command tx timeout [ 185.189997][T11233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.268801][T11233] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.315187][ T5960] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.322341][ T5960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.383082][ T5960] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.390242][ T5960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.547757][T11233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.825312][T11457] __nla_validate_parse: 3 callbacks suppressed [ 185.845998][T11457] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1332'. [ 186.074125][T11233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.319459][ T5141] Bluetooth: hci3: command 0x0406 tx timeout [ 186.321138][ T5839] Bluetooth: hci2: command 0x0406 tx timeout [ 186.326034][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 186.912864][T11233] veth0_vlan: entered promiscuous mode [ 186.955676][ C1] net_ratelimit: 6 callbacks suppressed [ 186.955697][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 186.975098][T11233] veth1_vlan: entered promiscuous mode [ 187.036025][ T5845] Bluetooth: hci5: command tx timeout [ 187.083635][T11233] veth0_macvtap: entered promiscuous mode [ 187.137280][T11233] veth1_macvtap: entered promiscuous mode [ 187.210782][T11233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.241942][T11233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.273979][T11233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.315537][T11233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.359217][T11233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.428986][T11233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.462499][T11233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.482414][T11233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.504675][T11233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.529265][T11233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.552426][T11233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.564748][T11233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.629756][T11233] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.661575][T11233] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.688807][T11233] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.714171][T11233] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.940283][ T5901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.954838][ T5901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.995650][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 188.063981][ T5901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.087925][ T5901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.324780][T11538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1355'. [ 189.035756][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 189.116428][ T5845] Bluetooth: hci5: command 0x0419 tx timeout [ 189.297030][T11566] tipc: Started in network mode [ 189.322280][T11566] tipc: Node identity 2ad62d525114, cluster identity 4711 [ 189.346600][T11566] tipc: Enabled bearer , priority 10 [ 190.052843][T11614] sch_tbf: peakrate 1024 is lower than or equals to rate 8879048424371485541 ! [ 190.075662][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 190.085081][T11615] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1387'. [ 190.282313][T11623] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.289679][T11623] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.311309][T11623] netlink: 'syz.5.1391': attribute type 10 has an invalid length. [ 190.326589][T11623] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.333864][T11623] bridge0: port 2(bridge_slave_1) entered listening state [ 190.341245][T11623] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.348406][T11623] bridge0: port 1(bridge_slave_0) entered listening state [ 190.356320][ T5927] tipc: Node number set to 2076323154 [ 190.368611][T11623] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 190.900716][T11653] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 191.013495][T11658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1405'. [ 191.030047][T11658] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1405'. [ 191.100371][T11661] netlink: 'syz.0.1408': attribute type 2 has an invalid length. [ 191.115628][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 191.197870][ T5834] Bluetooth: hci5: command 0x0419 tx timeout [ 191.313224][T11673] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 191.893546][T11702] xt_HMARK: spi-set and port-set can't be combined [ 192.155599][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 192.282901][T11722] netlink: 'syz.5.1434': attribute type 10 has an invalid length. [ 192.419955][T11722] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.427279][T11722] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.534674][T11724] tipc: Enabling of bearer rejected, failed to enable media [ 192.937956][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1442'. [ 193.195589][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 193.379145][T11760] tun0: tun_chr_ioctl cmd 1074025675 [ 193.384635][T11760] tun0: persist disabled [ 193.445834][T11764] netlink: 1688 bytes leftover after parsing attributes in process `syz.5.1454'. [ 193.738087][T11777] netlink: 'syz.3.1460': attribute type 1 has an invalid length. [ 194.084962][T11797] netlink: 'syz.3.1470': attribute type 1 has an invalid length. [ 194.139143][T11797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.211999][T11801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.236650][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 194.282123][T11801] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 194.300729][T11801] bond1: (slave gre1): Error -95 calling set_mac_address [ 194.404613][T11807] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.442957][T11809] tun0: tun_chr_ioctl cmd 1074025677 [ 194.484017][T11809] tun0: linktype set to 768 [ 194.595155][T11814] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.640060][T11814] batadv_slave_1: entered allmulticast mode [ 194.812451][T11823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1481'. [ 194.888028][T11828] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1485'. [ 195.167603][T11844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1491'. [ 195.275663][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 196.315595][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 197.355640][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 197.384578][T11952] [ 197.386947][T11952] ============================= [ 197.391800][T11952] [ BUG: Invalid wait context ] [ 197.396651][T11952] 6.13.0-rc1-syzkaller-00229-g3dd002f20098 #0 Not tainted [ 197.403757][T11952] ----------------------------- [ 197.408582][T11952] syz.4.1540/11952 is trying to lock: [ 197.413927][T11952] ffff88805739e200 (&trie->lock){..-.}-{3:3}, at: trie_delete_elem+0x96/0x6a0 [ 197.422782][T11952] other info that might help us debug this: [ 197.428646][T11952] context-{5:5} [ 197.432082][T11952] 2 locks held by syz.4.1540/11952: [ 197.437254][T11952] #0: ffff8880b873e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 197.447152][T11952] #1: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x244/0x590 [ 197.456525][T11952] stack backtrace: [ 197.460218][T11952] CPU: 1 UID: 0 PID: 11952 Comm: syz.4.1540 Not tainted 6.13.0-rc1-syzkaller-00229-g3dd002f20098 #0 [ 197.470953][T11952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 197.480985][T11952] Call Trace: [ 197.484246][T11952] [ 197.487158][T11952] dump_stack_lvl+0x241/0x360 [ 197.491824][T11952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.497020][T11952] ? __pfx__printk+0x10/0x10 [ 197.501593][T11952] ? validate_chain+0x11e/0x5920 [ 197.506532][T11952] __lock_acquire+0x15a8/0x2100 [ 197.511367][T11952] lock_acquire+0x1ed/0x550 [ 197.515853][T11952] ? trie_delete_elem+0x96/0x6a0 [ 197.520773][T11952] ? __pfx_lock_acquire+0x10/0x10 [ 197.525773][T11952] ? __lock_acquire+0x1397/0x2100 [ 197.530780][T11952] _raw_spin_lock_irqsave+0xd5/0x120 [ 197.536067][T11952] ? trie_delete_elem+0x96/0x6a0 [ 197.540986][T11952] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 197.546858][T11952] ? __pfx_lock_acquire+0x10/0x10 [ 197.551864][T11952] ? kvm_sched_clock_read+0x11/0x20 [ 197.557044][T11952] trie_delete_elem+0x96/0x6a0 [ 197.561791][T11952] ? __pfx___cant_migrate+0x10/0x10 [ 197.566990][T11952] ? bpf_trace_run4+0x244/0x590 [ 197.571820][T11952] bpf_prog_ae0c3e605f35524c+0x46/0x4a [ 197.577280][T11952] bpf_trace_run4+0x334/0x590 [ 197.581955][T11952] ? psi_group_change+0xb4e/0x1190 [ 197.587060][T11952] ? __pfx_bpf_trace_run4+0x10/0x10 [ 197.592248][T11952] ? __pfx_probe_sched_switch+0x10/0x10 [ 197.597777][T11952] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 197.604439][T11952] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 197.610493][T11952] __traceiter_sched_switch+0x98/0xd0 [ 197.615849][T11952] __schedule+0x22bc/0x4c30 [ 197.620340][T11952] ? __pfx___schedule+0x10/0x10 [ 197.625175][T11952] ? __pfx_lock_release+0x10/0x10 [ 197.630185][T11952] ? futex_wait_queue+0x27/0x1d0 [ 197.635104][T11952] ? schedule+0x90/0x320 [ 197.639324][T11952] schedule+0x14b/0x320 [ 197.643460][T11952] ? futex_wait_queue+0x27/0x1d0 [ 197.648385][T11952] futex_wait_queue+0x14e/0x1d0 [ 197.653236][T11952] __futex_wait+0x17f/0x320 [ 197.657723][T11952] ? __pfx___futex_wait+0x10/0x10 [ 197.662730][T11952] ? __pfx_futex_wake_mark+0x10/0x10 [ 197.668002][T11952] ? bpf_link_settle+0xbd/0x150 [ 197.672838][T11952] ? futex_hash+0x1e/0x1f0 [ 197.677235][T11952] futex_wait+0x101/0x360 [ 197.681547][T11952] ? __pfx_futex_wait+0x10/0x10 [ 197.686381][T11952] do_futex+0x33b/0x560 [ 197.690515][T11952] ? bpf_raw_tracepoint_open+0x18b/0x1f0 [ 197.696127][T11952] ? __pfx_do_futex+0x10/0x10 [ 197.700785][T11952] ? __pfx___sys_bpf+0x10/0x10 [ 197.705528][T11952] __se_sys_futex+0x3f9/0x480 [ 197.710188][T11952] ? __pfx___se_sys_futex+0x10/0x10 [ 197.715385][T11952] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 197.721695][T11952] ? do_syscall_64+0x100/0x230 [ 197.726441][T11952] ? __x64_sys_futex+0x21/0xf0 [ 197.731185][T11952] do_syscall_64+0xf3/0x230 [ 197.735670][T11952] ? clear_bhb_loop+0x35/0x90 [ 197.740335][T11952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.746212][T11952] RIP: 0033:0x7f81e3f7ff19 [ 197.750607][T11952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.770190][T11952] RSP: 002b:00007f81e4d3e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 197.778600][T11952] RAX: ffffffffffffffda RBX: 00007f81e4145fa8 RCX: 00007f81e3f7ff19 [ 197.786555][T11952] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f81e4145fa8 [ 197.794506][T11952] RBP: 00007f81e4145fa0 R08: 0000000000000000 R09: 0000000000000000 [ 197.802459][T11952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f81e4145fac [ 197.810412][T11952] R13: 0000000000000000 R14: 00007ffd344004c0 R15: 00007ffd344005a8 [ 197.818368][T11952] [ 198.395520][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 199.435522][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 200.475498][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 201.515863][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 202.555557][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 203.595542][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 204.635531][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 205.675760][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 206.715491][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available