last executing test programs: 32.843129083s ago: executing program 0: mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="86", 0x1}], 0x1, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) socket$l2tp(0x2, 0x2, 0x73) bind$unix(r3, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007ed, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x6c) sendmmsg$inet(r3, &(0x7f0000000300)=[{{&(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000580)="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", 0xff}], 0x1, &(0x7f00000001c0)}}], 0x1, 0xc010) r6 = socket$inet(0x2, 0x802, 0x1) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r6, 0x0, 0xc, &(0x7f00000000c0)=0xfff, 0x4) write(r6, &(0x7f0000000080)="08008edf773c8000", 0xfd) recvmmsg(r6, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, r1}, 0x90) 32.613581839s ago: executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000000)=0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x1, 'ip6tnl0\x00'}) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000740)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x20, 0x20, 0x3, 0x44581c34b365c15b, @mcast2, @empty, 0x40, 0x8000, 0x5, 0x81}}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8000000011000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035006970766c616e30000000000000000000140035006272696467653000000000000000000008", @ANYRES32=r4, @ANYBLOB="1a0018004e383331b060b4cc0b5d2ce2c0339459bd183b34687a0a000100aa03aaaaaaaa000000000000000000"], 0x80}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000480)={@remote, @private, 0x0}, &(0x7f00000004c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x8780, 0x40, 0x4, 0x9, {{0x28, 0x4, 0x2, 0x3, 0xa0, 0x64, 0x0, 0xf8, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}, {[@timestamp_prespec={0x44, 0x2c, 0xb5, 0x3, 0x7, [{@multicast1, 0x1f26}, {@loopback, 0x7f}, {@empty, 0xe88a}, {@rand_addr=0x64010100, 0x1000}, {@empty, 0x3caf}]}, @timestamp_addr={0x44, 0x14, 0x1e, 0x1, 0x2, [{@multicast2, 0x5}, {@loopback, 0xb47}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x37, 0xffffffffffffffff, [{0x7, 0x7, "0247aa8418"}, {0x5, 0xe, "16eead05dd72e7e849d2dcc7"}, {0x6, 0x10, "1eba3621573e5b13c7fba92c74ab"}, {0x7, 0xc, "7ceb8dd4dd749f9dc162"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x85, 0x0, 0x9, [0x200]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000c80)=ANY=[@ANYBLOB="e8000000b1285e6d6421bfaa8e1e1c20c149bd0dfae413ec4009f483776f1f0ea59a15ac34baee7fc9bc33fcd5ad895151cdf9a6d9c96bf9f02596b44fae28e5ba7edde8c5c3aac8ea3c054d1cc1b0c7d977f389ca99ffbc56e0d07572af215b011601fbf0d549c0438ad4ad269f583973930500000000000000909e697bd3d4b7574f9f3284aca6b95fc101b7280b34fb62538fd104da078b621ea6cbf4f88dce0979ecda97ad1965a6701de10a5e3d1405a1b98692a17ff638dc0ba8ddb75bfbf600"/206, @ANYRES16=r5, @ANYRES32, @ANYBLOB="08000100", @ANYRES16, @ANYRES32=r6, @ANYBLOB="14000200776c616e3100000000000000000000001800018014100200766c616e3000000000000000000000004c00018008000100", @ANYRES32=r7, @ANYBLOB="080003000300000008000300040000001400020073797a6b616c6c6572310000000000001400020076657468305f746f"], 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r8) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000240), &(0x7f00000002c0)=0x8) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="adac57225603bf08352c33cd3cf326893c22a31916691a1db707c7338233099a32b2849a371b6841e3fde4b485ff1acb782bca2de9df8119c1ad066cec5b3c30b5e1877ee9ae56da8f73fff0cb686710ec1850b6fe602c", @ANYRES16=r9, @ANYBLOB="891f00000000fbdbdf250b0000000c0001800800030003000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @loopback={0x0, 0xffff8881a56043d8}, 0x0, 0x40}}) r12 = socket(0x840000000002, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7fffffff, 0x8, 0x8, 0xd01, 0xffffffffffffffff, 0xfffff803, '\x00', r7, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0xd}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r13, &(0x7f0000000300), 0x20000000}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x5, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r4], &(0x7f0000000380)='GPL\x00', 0x4, 0x73, &(0x7f00000008c0)=""/115, 0x40f00, 0x8, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0xa, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x8, 0x8, 0xc5d}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r13]}, 0x90) accept4(r8, &(0x7f0000000a80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000000b00)=0x80, 0x80000) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r12, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r12, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 32.374387618s ago: executing program 0: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@random="ff1bfc0d7bb3", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "926917", 0x0, 0x2b, 0x0, @loopback, @mcast2, [@routing={0x0, 0x2, 0x4, 0x0, 0x0, [@remote]}]}}}}}}}, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="0100000000000000000008000b00"/28], 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x0, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x7800}}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket(0x0, 0x802, 0x0) write(r1, &(0x7f0000000000)="fc00000018000703ab092500090007000a070200000000020000369321000100f9e553b40005d0000000000000b7550c8292773411419da79bb94b46fe000000bc000500ff006c6c256f1a272f2e118934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddefefe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41000000000000000000", 0xf9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x8040, 0x0, 0x0, 0x5, {{0x5, 0x4, 0x1, 0xb, 0x14, 0xfffe, 0x0, 0x1, 0x29, 0x0, @multicast1, @multicast1}}}}) r2 = socket(0xa, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000000)) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x7, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x0, 0x8000, 0x3, 0x6, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x64, 0x0, 0x0, 0x0, 0x0, @multicast1, @local}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYBLOB="00000000080000000400140024031680ac0001800c0003000000000000000000100006000000000000000000000000000c00040000000000000000002c000c8014000100"/80], 0x348}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xa6, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000700600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYBLOB="c0"], 0x0) 32.295493345s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$inet(0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0xa, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 32.091533804s ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window], 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000ffe9645a586eb479242acd66a5b9ef066efef896814743dba2cf82e3ce9bb8ebebeca215576a5d2e04eb2a6a05f9e5d91c27663c76b6de5a26a6c26652d676d74a96e9dcc7614a9940973f5d768e5833bda72cf21dc0cfd81b4c0e5636c89466d494a2fd4f58f17e83f943403da81ff35c475dd56efabe26a670a10898e1582d8aab48dbc7e66956354326ad6124b85e7b451737fc8aa255ceb68a8034a4c12f75e0d213c330696b52113357d0860efbe4ca59ef4c4f9d7443aec85fc95252f730ffe17af74883132374afb89bcf728b448b558f557881f26ad32fad348d89dbe4fe5ac56fd40000000000", @ANYRES16=r4, @ANYBLOB="000227bd7000ffdbdf250800000005000d00000000000c001000ffffffffffffffff08001800ac1e000106000e00360000000500040003000000"], 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x20000c0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x1, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}]}) setsockopt$llc_int(r3, 0x10c, 0x6, &(0x7f00000003c0)=0x6, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x0, 0xe8, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x10, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 0x0, 0x0, {@mac}, {@mac, {[0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'nicvf0\x00', 'lo\x00'}, 0xc0, 0x110, 0x0, {0xb000000}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @broadcast, @multicast2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x20, 0x0, 0x0, 0x0, 0x0, 0x6, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x20}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 32.055132758s ago: executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f0000000a40)=[{r0}], 0x1, &(0x7f0000000100), 0x0, 0x0) 31.951636589s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x0, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 31.784279286s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x53}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x7800, 0x700, 0x6, 0x3, {{0x7, 0x4, 0x2, 0x1, 0x1c, 0x68, 0x0, 0x8, 0x29, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x28}, {[@rr={0x7, 0x7, 0x1e, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) unshare(0x22020400) syz_emit_ethernet(0x1f, &(0x7f00000011c0)={@local, @link_local, @void, {@llc_tr={0x11, {@snap={0x0, 0x0, 'o', "e2b506", 0x0, "6f5fd3138960e3d34b"}}}}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}]}, 0x50}, 0x1, 0x400000000000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{}, 0xf}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x3a, 0x18, 0x0, 0x310) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x3, 0x5, 0x7, 0x8c0, 0x1, 0x0, '\x00', r0, r1, 0x4, 0x1}, 0x48) 31.733203219s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x54}}, 0x8081) (async) writev(r0, &(0x7f0000000040), 0x2) (async) socketpair(0x1f, 0x1, 0x20, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='syzkaller0\x00', 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000480)={'#! ', '', [], 0xa, '9'}, 0x5) (async) preadv(r4, &(0x7f0000001380)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000a40)={r6, 0x31, 0x0, [0xad6, 0x100, 0x1, 0x31, 0x44359c18], [0x1f, 0xae9, 0x400, 0x6f7, 0x100, 0x8, 0x3f, 0x8000000000000001, 0x100000000, 0xffffffffffffff7f, 0xff, 0x3, 0x200, 0x9c, 0x2, 0x2, 0x4000000, 0x8, 0x100, 0x3ff, 0x179a, 0x7fffffffffffffff, 0x78f, 0x6, 0x4, 0xfffffffffffffeff, 0x4, 0x9, 0x6, 0x9, 0x2, 0x0, 0x800, 0x8000, 0x3, 0x9, 0xb2, 0x8, 0x400, 0x80000001, 0xfffffffffffffffd, 0x9, 0x80000001, 0x10001, 0x0, 0x1, 0x9, 0x5, 0x7, 0x7f, 0xfe, 0x1b0, 0x1ff, 0x88a, 0xcf, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x0, 0x4, 0xfffffffffffffffd, 0x4, 0x7, 0x5, 0x401, 0x0, 0x5, 0x9f4, 0x4, 0x3, 0x0, 0xfffffffffffffff8, 0x0, 0x2, 0x500, 0x6, 0x1000, 0x9, 0x2, 0x4, 0x0, 0xa5, 0x20, 0x6, 0x1000, 0x60, 0xffffffffffffffff, 0x7, 0xfffffffffffffffb, 0x1f, 0x5, 0xa1, 0x400, 0x1, 0x4, 0xfffffffffffffffd, 0x800, 0x81, 0x3, 0x2, 0x3, 0x3fad, 0x8000000000000001, 0x1, 0x4, 0x2, 0x5c, 0x62fe9d90, 0x150, 0x81, 0x8000000000000001, 0xb172, 0x4, 0x1, 0xe8, 0x8, 0x2, 0xa2, 0x8, 0x1]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000002600)={r6, "17ecbcb431f36313485cd634d6b2ab7e"}) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000070a01010000000000000000000000dd"], 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r0) 31.718833718s ago: executing program 1: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000000)=0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x1, 'ip6tnl0\x00'}) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000740)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x20, 0x20, 0x3, 0x44581c34b365c15b, @mcast2, @empty, 0x40, 0x8000, 0x5, 0x81}}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8000000011000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035006970766c616e30000000000000000000140035006272696467653000000000000000000008", @ANYRES32=r4, @ANYBLOB="1a0018004e383331b060b4cc0b5d2ce2c0339459bd183b34687a0a000100aa03aaaaaaaa000000000000000000"], 0x80}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000480)={@remote, @private, 0x0}, &(0x7f00000004c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x8780, 0x40, 0x4, 0x9, {{0x28, 0x4, 0x2, 0x3, 0xa0, 0x64, 0x0, 0xf8, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}, {[@timestamp_prespec={0x44, 0x2c, 0xb5, 0x3, 0x7, [{@multicast1, 0x1f26}, {@loopback, 0x7f}, {@empty, 0xe88a}, {@rand_addr=0x64010100, 0x1000}, {@empty, 0x3caf}]}, @timestamp_addr={0x44, 0x14, 0x1e, 0x1, 0x2, [{@multicast2, 0x5}, {@loopback, 0xb47}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x37, 0xffffffffffffffff, [{0x7, 0x7, "0247aa8418"}, {0x5, 0xe, "16eead05dd72e7e849d2dcc7"}, {0x6, 0x10, "1eba3621573e5b13c7fba92c74ab"}, {0x7, 0xc, "7ceb8dd4dd749f9dc162"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x85, 0x0, 0x9, [0x200]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000c80)=ANY=[@ANYBLOB="e8000000b1285e6d6421bfaa8e1e1c20c149bd0dfae413ec4009f483776f1f0ea59a15ac34baee7fc9bc33fcd5ad895151cdf9a6d9c96bf9f02596b44fae28e5ba7edde8c5c3aac8ea3c054d1cc1b0c7d977f389ca99ffbc56e0d07572af215b011601fbf0d549c0438ad4ad269f583973930500000000000000909e697bd3d4b7574f9f3284aca6b95fc101b7280b34fb62538fd104da078b621ea6cbf4f88dce0979ecda97ad1965a6701de10a5e3d1405a1b98692a17ff638dc0ba8ddb75bfbf600"/206, @ANYRES16=r5, @ANYRES32, @ANYBLOB="08000100", @ANYRES16, @ANYRES32=r6, @ANYBLOB="14000200776c616e3100000000000000000000001800018014100200766c616e3000000000000000000000004c00018008000100", @ANYRES32=r7, @ANYBLOB="080003000300000008000300040000001400020073797a6b616c6c6572310000000000001400020076657468305f746f"], 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r8) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000240), &(0x7f00000002c0)=0x8) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="adac57225603bf08352c33cd3cf326893c22a31916691a1db707c7338233099a32b2849a371b6841e3fde4b485ff1acb782bca2de9df8119c1ad066cec5b3c30b5e1877ee9ae56da8f73fff0cb686710ec1850b6fe602c", @ANYRES16=r9, @ANYBLOB="891f00000000fbdbdf250b0000000c0001800800030003000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @loopback={0x0, 0xffff8881a56043d8}, 0x0, 0x40}}) r12 = socket(0x840000000002, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7fffffff, 0x8, 0x8, 0xd01, 0xffffffffffffffff, 0xfffff803, '\x00', r7, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0xd}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r13, &(0x7f0000000300), 0x20000000}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x5, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r4], &(0x7f0000000380)='GPL\x00', 0x4, 0x73, &(0x7f00000008c0)=""/115, 0x40f00, 0x8, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0xa, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x8, 0x8, 0xc5d}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r13]}, 0x90) accept4(r8, &(0x7f0000000a80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000000b00)=0x80, 0x80000) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r12, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r12, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 31.570487948s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000010180)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000280)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000500)={&(0x7f0000000180)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@flowinfo={{0x14, 0x29, 0x3b}}], 0x18}, 0x0) mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0, 0x11, r1, 0x0) shutdown(r0, 0x2) 31.468726995s ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 31.440874654s ago: executing program 0: r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000280)=""/207, 0xcf, 0x40000022, 0x0, 0xf) r3 = socket$inet6(0xa, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000100)={@local}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES64=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000940300000000000695"], &(0x7f0000000000)='GPL\x00'}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r6, 0x0, 0xa0028000}, 0x38) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000100), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x700}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x42}, 0x10) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000060400000000000000000000030000000002000000050002000000000000002c1969bbba01d4f1f3d06c7d1d81e11473213473920e8109670b354450a31a873fa7e3dfa050fc2c012a40269fd98168624eaf233f051ab2f392f44901483e8fd9a652a3da1515a9c6700b3684308d5119e2facb64cfb5c2bf3f695a96945f6a019068ca88670419af25fdf2297fc137ddb4d4e8c294bc63d02865c551bea94a"], 0x0, 0x3e}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) 31.432143795s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x11, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.348013509s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061104c0000000000670a00ff000000009500000c00000000"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x36, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x30) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='freezer.self_freezing\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271b, 0x0, &(0x7f0000000080)=0x39) 31.273827692s ago: executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f0000000a40)=[{r0}], 0x1, &(0x7f0000000100), 0x0, 0x0) 31.240423182s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x0, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 31.180740146s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'netdevsim0\x00', @random='\x00\x00\x00 \x00'}) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000180)={0xa}) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) (async, rerun: 32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async, rerun: 32) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500001c00000000082f90787f000001e0000001000065580008907803029aa99d178e0948d6926ba27d06f43c9e6312cec90a2583427f418ae05125d36a9535d02bb18bf9f2e7f488aa4f4f5dd4b2ef1c45ff56ce7a5316e3b968546c9e092fdc587de5a895a8d6594df1c87f5a0d590f9846a95e154304677f05dcc1856b84b36cd4adadc83dd1916c74dd4db36188609f6b14cdd72bdadc009270a6d951015f985c6b60242013c89abd4d12d4be0079b4bb3e497b83ec0ab73ac62cb51708bb04f38ea960a3fa0507b683e013e826b5"], 0x2e) (rerun: 32) 31.140879887s ago: executing program 3: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0x4}]}}, @timestamp={0x2b}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000004480)=ANY=[@ANYBLOB="4c0000001000210420000000fcdbdf2500000000", @ANYRES32=r3, @ANYBLOB="adffa888d2260000050021"], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000000340)=@raw=[@ldst={0x3, 0x0, 0x4, 0x3, 0x4, 0x20}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}], &(0x7f0000000080)='syzkaller\x00', 0x7d, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x90) 31.077700295s ago: executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x88a8, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x48}}, 0x0) 31.061247975s ago: executing program 2: socket$inet6(0xa, 0x6, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d3, &(0x7f0000000100)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB="6802000000050104000000000000000000000000540201"], 0x268}}, 0x0) 30.979515726s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x8, 0x10}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000190000000000000000000000000400002c347cf5d5b9335c38c619c11e76340ddb043a15bce85f8f9f450a9a20b82eb9d7b14d02e25a038a55d654fe74e84d1a7483"], 0x14}, 0x1, 0x3000000, 0x0, 0x4008040}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c80)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20044080}, 0x40) socket$inet6_sctp(0xa, 0x5, 0x84) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000180)=0xfffffffe, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x7, 0x37}, "475566172f45f011", "bd14060000000000800092f94413582b", 'W\x00', "15b188e5e74e13ed"}, 0x28) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000280)="a965a8fd68805ffb0af9738209d665314ab7fff5fa763a55875d5e2be52e5b930e13f7038bed4d44ec9a5e659dc393ca41b48ec0e406b7f8ec7ba10211dc889c613ab89fe23a53e2e294042e6fb9db89b94ba8c8b454b483ed3c2d994618d309ada9af8309007ca49226", 0x7ffff000}, {&(0x7f0000000100)="0cc5979d72f6ab68e8d05b56a4d6939baf14b2487f58", 0x16}], 0x2) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x8) shutdown(r5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="000000000000458300000000000000000000000009000100737925736470af46e21dee0a21ab2580310602400040000001400000000008000b40000000000500030006000000"], 0x4c}}, 0x0) splice(r5, 0x0, r4, 0x0, 0x7ffff041, 0x0) 30.958020333s ago: executing program 2: syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@random="ff1bfc0d7bb3", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "926917", 0x0, 0x2b, 0x0, @loopback, @mcast2, [@routing={0x0, 0x2, 0x4, 0x0, 0x0, [@remote]}]}}}}}}}, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="0100000000000000000008000b00"/28], 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x0, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x7800}}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = socket(0x0, 0x802, 0x0) write(r1, &(0x7f0000000000)="fc00000018000703ab092500090007000a070200000000020000369321000100f9e553b40005d0000000000000b7550c8292773411419da79bb94b46fe000000bc000500ff006c6c256f1a272f2e118934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddefefe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41000000000000000000", 0xf9) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x8040, 0x0, 0x0, 0x5, {{0x5, 0x4, 0x1, 0xb, 0x14, 0xfffe, 0x0, 0x1, 0x29, 0x0, @multicast1, @multicast1}}}}) r2 = socket(0xa, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000000)) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x7, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000680)={'tunl0\x00', 0x0, 0x0, 0x8000, 0x3, 0x6, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x64, 0x0, 0x0, 0x0, 0x0, @multicast1, @local}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYBLOB="00000000080000000400140024031680ac0001800c0003000000000000000000100006000000000000000000000000000c00040000000000000000002c000c8014000100"/80], 0x348}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xa6, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaac4bc9cac968686dd6000000000700600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYBLOB="c0"], 0x0) 30.867655992s ago: executing program 3: r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000000)=0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x1, 'ip6tnl0\x00'}) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000740)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0x20, 0x20, 0x3, 0x44581c34b365c15b, @mcast2, @empty, 0x40, 0x8000, 0x5, 0x81}}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8000000011000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140035006970766c616e30000000000000000000140035006272696467653000000000000000000008", @ANYRES32=r4, @ANYBLOB="1a0018004e383331b060b4cc0b5d2ce2c0339459bd183b34687a0a000100aa03aaaaaaaa000000000000000000"], 0x80}}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000480)={@remote, @private, 0x0}, &(0x7f00000004c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x8780, 0x40, 0x4, 0x9, {{0x28, 0x4, 0x2, 0x3, 0xa0, 0x64, 0x0, 0xf8, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}, {[@timestamp_prespec={0x44, 0x2c, 0xb5, 0x3, 0x7, [{@multicast1, 0x1f26}, {@loopback, 0x7f}, {@empty, 0xe88a}, {@rand_addr=0x64010100, 0x1000}, {@empty, 0x3caf}]}, @timestamp_addr={0x44, 0x14, 0x1e, 0x1, 0x2, [{@multicast2, 0x5}, {@loopback, 0xb47}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x37, 0xffffffffffffffff, [{0x7, 0x7, "0247aa8418"}, {0x5, 0xe, "16eead05dd72e7e849d2dcc7"}, {0x6, 0x10, "1eba3621573e5b13c7fba92c74ab"}, {0x7, 0xc, "7ceb8dd4dd749f9dc162"}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x85, 0x0, 0x9, [0x200]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000c80)=ANY=[@ANYBLOB="e8000000b1285e6d6421bfaa8e1e1c20c149bd0dfae413ec4009f483776f1f0ea59a15ac34baee7fc9bc33fcd5ad895151cdf9a6d9c96bf9f02596b44fae28e5ba7edde8c5c3aac8ea3c054d1cc1b0c7d977f389ca99ffbc56e0d07572af215b011601fbf0d549c0438ad4ad269f583973930500000000000000909e697bd3d4b7574f9f3284aca6b95fc101b7280b34fb62538fd104da078b621ea6cbf4f88dce0979ecda97ad1965a6701de10a5e3d1405a1b98692a17ff638dc0ba8ddb75bfbf600"/206, @ANYRES16=r5, @ANYRES32, @ANYBLOB="08000100", @ANYRES16, @ANYRES32=r6, @ANYBLOB="14000200776c616e3100000000000000000000001800018014100200766c616e3000000000000000000000004c00018008000100", @ANYRES32=r7, @ANYBLOB="080003000300000008000300040000001400020073797a6b616c6c6572310000000000001400020076657468305f746f"], 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r8) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000240), &(0x7f00000002c0)=0x8) sendmsg$ETHTOOL_MSG_FEATURES_GET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="adac57225603bf08352c33cd3cf326893c22a31916691a1db707c7338233099a32b2849a371b6841e3fde4b485ff1acb782bca2de9df8119c1ad066cec5b3c30b5e1877ee9ae56da8f73fff0cb686710ec1850b6fe602c", @ANYRES16=r9, @ANYBLOB="891f00000000fbdbdf250b0000000c0001800800030003000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x0, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @loopback={0x0, 0xffff8881a56043d8}, 0x0, 0x40}}) r12 = socket(0x840000000002, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x4, 0x8}, 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x7fffffff, 0x8, 0x8, 0xd01, 0xffffffffffffffff, 0xfffff803, '\x00', r7, 0xffffffffffffffff, 0x3, 0x5, 0x2, 0xd}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r13, &(0x7f0000000300), 0x20000000}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x5, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r4], &(0x7f0000000380)='GPL\x00', 0x4, 0x73, &(0x7f00000008c0)=""/115, 0x40f00, 0x8, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0xa, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000980)={0x4, 0x8, 0x8, 0xc5d}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r13]}, 0x90) accept4(r8, &(0x7f0000000a80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000000b00)=0x80, 0x80000) setsockopt$SO_BINDTODEVICE(r12, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r12, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) sendmmsg$inet(r12, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 30.027889542s ago: executing program 2: syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400}, 0x48) ioctl$BTRFS_IOC_QGROUP_ASSIGN(0xffffffffffffffff, 0x40189429, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x38, 0x17, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0x41}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004844}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_REQ_PARAM(r5, 0x116, 0x80, &(0x7f0000000000)="23a16ee5b39c89ddf5771609b36bc6edae9be9797f4e33d609a4ce23bbd5354093480c6dadd620b08eef033b9c2e7b375b2b781a832498478d2c0237064fb2d440cf613985ba879f8259bad9a22f626dab4c8a7f9965ad441470f5199a02efc1d46fe7a7f2c1", 0x66) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), r6) 1.409385296s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x4, 0x6, 0x504}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) pipe(&(0x7f00000003c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x44000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, r0}, 0x38) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x0, 0x0}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x3e}, 0x20) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_buf(r9, 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call, @map_val, @ringbuf_output, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @snprintf]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) socket(0x1, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0x98}}, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1.151207691s ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x21, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 1.05030366s ago: executing program 0: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x40e00, 0x0, '\x00', r1, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x50}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001500), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0xfffffffffffffff1) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x10, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x30, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000002c0), 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r2, 0x1) syz_open_procfs$namespace(0x0, 0x0) 840.329067ms ago: executing program 3: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) shutdown(r0, 0x0) ppoll(&(0x7f0000000a40)=[{r0}], 0x1, &(0x7f0000000100), 0x0, 0x0) 0s ago: executing program 2: r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000280)=""/207, 0xcf, 0x40000022, 0x0, 0xf) r3 = socket$inet6(0xa, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000100)={@local}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES64=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000940300000000000695"], &(0x7f0000000000)='GPL\x00'}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r6, 0x0, 0xa0028000}, 0x38) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000100), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0x700}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000080)={0x42}, 0x10) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000060400000000000000000000030000000002000000050002000000000000002c1969bbba01d4f1f3d06c7d1d81e11473213473920e8109670b354450a31a873fa7e3dfa050fc2c012a40269fd98168624eaf233f051ab2f392f44901483e8fd9a652a3da1515a9c6700b3684308d5119e2facb64cfb5c2bf3f695a96945f6a019068ca88670419af25fdf2297fc137ddb4d4e8c294bc63d02865c551bea94a"], 0x0, 0x3e}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): d impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.499406][T13352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.532087][T13352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.557203][T13352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.623946][T13352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.824208][T13352] hsr_slave_0: entered promiscuous mode [ 269.831433][T13352] hsr_slave_1: entered promiscuous mode [ 269.853859][T13352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.871279][T13352] Cannot create hsr debugfs directory [ 270.047456][T13419] batadv0: entered promiscuous mode [ 270.053474][T13419] macvtap1: entered promiscuous mode [ 270.059305][T13419] macvtap1: entered allmulticast mode [ 270.065030][T13419] batadv0: entered allmulticast mode [ 270.076930][T13419] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 270.225891][ T53] Bluetooth: hci4: command tx timeout [ 270.446747][T13352] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.622466][T13352] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.758322][T13352] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.867263][T13352] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.045166][T13462] __nla_validate_parse: 9 callbacks suppressed [ 271.045185][T13462] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.160445][T13471] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 271.256596][T13352] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 271.293058][T13475] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.324954][T13352] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 271.339131][T13475] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.341909][T13352] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 271.382757][T13352] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 271.439035][T13477] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 271.706603][T13352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.749829][T13352] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.792836][ T5213] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.800095][ T5213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.871568][ T5213] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.878971][ T5213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.108667][T13352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.219092][T13507] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 272.295192][ T53] Bluetooth: hci4: command tx timeout [ 272.597763][T13517] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 272.653935][T13352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.664620][T13517] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.4'. [ 272.996066][T13352] veth0_vlan: entered promiscuous mode [ 273.056845][T13352] veth1_vlan: entered promiscuous mode [ 273.154562][T13352] veth0_macvtap: entered promiscuous mode [ 273.187638][T13352] veth1_macvtap: entered promiscuous mode [ 273.271220][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.296687][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.306757][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.319181][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.350430][T13352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.366301][T13552] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.380543][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.397072][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.407436][T13352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.419399][T13352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.438816][T13352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.478789][T13352] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.514455][T13352] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.538407][T13352] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.564726][T13352] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.696626][T13561] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 273.741098][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.771004][T13562] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 273.801457][T13565] xt_TCPMSS: Only works on TCP SYN packets [ 273.842152][T13562] rdma_op ffff888077d7a9f0 conn xmit_rdma 0000000000000000 [ 273.920244][ T2807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.953281][ T2807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.025659][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.048557][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.375138][ T53] Bluetooth: hci4: command tx timeout [ 275.567755][T13654] smc: adding net device syzkaller0 with user defined pnetid SYZ1 [ 276.464566][ T53] Bluetooth: hci4: command tx timeout [ 278.266159][T13652] smc: removing net device syzkaller0 with user defined pnetid SYZ1 [ 278.282324][T13694] __nla_validate_parse: 8 callbacks suppressed [ 278.282344][T13694] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 278.304633][T13699] syz-executor.1: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 278.361822][T13699] CPU: 1 PID: 13699 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 278.372397][T13699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 278.382547][T13699] Call Trace: [ 278.385857][T13699] [ 278.388818][T13699] dump_stack_lvl+0x241/0x360 [ 278.393645][T13699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.398890][T13699] ? __pfx__printk+0x10/0x10 [ 278.403691][T13699] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 278.410149][T13699] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 278.416710][T13699] warn_alloc+0x278/0x410 [ 278.421094][T13699] ? __pfx_warn_alloc+0x10/0x10 [ 278.425983][T13699] ? fq_pie_init+0x429/0x820 [ 278.430580][T13699] ? __get_vm_area_node+0x23d/0x270 [ 278.435784][T13699] __vmalloc_node_range_noprof+0x69f/0x1460 [ 278.441700][T13699] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 278.448043][T13699] ? rcu_is_watching+0x15/0xb0 [ 278.452810][T13699] ? trace_kmalloc+0x1f/0xd0 [ 278.457405][T13699] ? __kmalloc_node_noprof+0x247/0x440 [ 278.462871][T13699] ? kvmalloc_node_noprof+0x72/0x190 [ 278.468208][T13699] kvmalloc_node_noprof+0x142/0x190 [ 278.473401][T13699] ? fq_pie_init+0x429/0x820 [ 278.477995][T13699] fq_pie_init+0x429/0x820 [ 278.482412][T13699] ? qdisc_lookup+0x350/0x6b0 [ 278.487096][T13699] ? __pfx_fq_pie_init+0x10/0x10 [ 278.492031][T13699] qdisc_create+0x9d4/0x11a0 [ 278.496659][T13699] ? __pfx_qdisc_create+0x10/0x10 [ 278.501710][T13699] tc_modify_qdisc+0xa26/0x1e40 [ 278.506583][T13699] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 278.511893][T13699] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 278.517972][T13699] rtnetlink_rcv_msg+0x89b/0x1180 [ 278.523129][T13699] ? rtnetlink_rcv_msg+0x208/0x1180 [ 278.528387][T13699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.533866][T13699] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 278.540727][T13699] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.547071][T13699] ? __local_bh_enable_ip+0x168/0x200 [ 278.552475][T13699] ? lockdep_hardirqs_on+0x99/0x150 [ 278.557703][T13699] ? __local_bh_enable_ip+0x168/0x200 [ 278.563088][T13699] ? dev_hard_start_xmit+0x773/0x7e0 [ 278.568444][T13699] ? __dev_queue_xmit+0x2d2/0x3d30 [ 278.573611][T13699] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 278.579467][T13699] ? __dev_queue_xmit+0x2d2/0x3d30 [ 278.584593][T13699] ? __dev_queue_xmit+0x16c9/0x3d30 [ 278.589805][T13699] ? __dev_queue_xmit+0x2d2/0x3d30 [ 278.595052][T13699] ? ref_tracker_free+0x643/0x7e0 [ 278.600110][T13699] netlink_rcv_skb+0x1e3/0x430 [ 278.604886][T13699] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.610785][T13699] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.616118][T13699] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.621422][T13699] netlink_unicast+0x7ea/0x980 [ 278.626222][T13699] ? __pfx_netlink_unicast+0x10/0x10 [ 278.631537][T13699] ? __virt_addr_valid+0x183/0x520 [ 278.636852][T13699] ? __check_object_size+0x49c/0x900 [ 278.642228][T13699] ? bpf_lsm_netlink_send+0x9/0x10 [ 278.647362][T13699] netlink_sendmsg+0x8db/0xcb0 [ 278.652145][T13699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.658135][T13699] ? __import_iovec+0x536/0x820 [ 278.662989][T13699] ? aa_sock_msg_perm+0x91/0x160 [ 278.668018][T13699] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 278.673389][T13699] ? security_socket_sendmsg+0x87/0xb0 [ 278.678949][T13699] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.684237][T13699] __sock_sendmsg+0x221/0x270 [ 278.688927][T13699] ____sys_sendmsg+0x525/0x7d0 [ 278.693871][T13699] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.699196][T13699] __sys_sendmsg+0x2b0/0x3a0 [ 278.703786][T13699] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.709099][T13699] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.715466][T13699] ? do_syscall_64+0x100/0x230 [ 278.720232][T13699] ? do_syscall_64+0xb6/0x230 [ 278.724918][T13699] do_syscall_64+0xf3/0x230 [ 278.729422][T13699] ? clear_bhb_loop+0x35/0x90 [ 278.734212][T13699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.740141][T13699] RIP: 0033:0x7f855767cf29 [ 278.744595][T13699] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 278.764474][T13699] RSP: 002b:00007f855836b0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.773023][T13699] RAX: ffffffffffffffda RBX: 00007f85577b4050 RCX: 00007f855767cf29 [ 278.781025][T13699] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000007 [ 278.789015][T13699] RBP: 00007f85576ec074 R08: 0000000000000000 R09: 0000000000000000 [ 278.796994][T13699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.804965][T13699] R13: 000000000000006e R14: 00007f85577b4050 R15: 00007ffebd4c88a8 [ 278.812955][T13699] [ 278.875175][T13699] Mem-Info: [ 278.878358][T13699] active_anon:18586 inactive_anon:0 isolated_anon:0 [ 278.878358][T13699] active_file:0 inactive_file:46686 isolated_file:0 [ 278.878358][T13699] unevictable:768 dirty:0 writeback:0 [ 278.878358][T13699] slab_reclaimable:10594 slab_unreclaimable:100113 [ 278.878358][T13699] mapped:18462 shmem:1577 pagetables:680 [ 278.878358][T13699] sec_pagetables:0 bounce:0 [ 278.878358][T13699] kernel_misc_reclaimable:0 [ 278.878358][T13699] free:1377836 free_pcp:1138 free_cma:0 [ 278.964597][T13699] Node 0 active_anon:74544kB inactive_anon:0kB active_file:0kB inactive_file:186668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73848kB dirty:0kB writeback:0kB shmem:4772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10660kB pagetables:2720kB sec_pagetables:0kB all_unreclaimable? no [ 279.045160][T13699] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 279.095451][T13699] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 279.131422][T13699] lowmem_reserve[]: 0 2571 2571 0 0 [ 279.137028][T13699] Node 0 DMA32 free:1553744kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:74700kB inactive_anon:0kB active_file:0kB inactive_file:186352kB unevictable:1536kB writepending:0kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:1380kB local_pcp:592kB free_cma:0kB [ 279.167350][T13699] lowmem_reserve[]: 0 0 0 0 0 [ 279.172115][T13699] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 279.236809][T13699] lowmem_reserve[]: 0 0 0 0 0 [ 279.241615][T13699] Node 1 Normal free:3942768kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:3264kB local_pcp:0kB free_cma:0kB [ 279.290200][T13699] lowmem_reserve[]: 0 0 0 0 0 [ 279.319189][T13699] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 279.349952][T13699] Node 0 DMA32: 269*4kB (UME) 306*8kB (UME) 217*16kB (UME) 364*32kB (UME) 66*64kB (UME) 34*128kB (UME) 4*256kB (UME) 4*512kB (ME) 3*1024kB (UME) 0*2048kB 371*4096kB (UM) = 1552980kB [ 279.382101][T13699] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 279.417862][T13699] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 0*64kB 0*128kB 1*256kB (M) 2*512kB (UM) 1*1024kB (U) 0*2048kB 962*4096kB (M) = 3942768kB [ 279.451872][T13699] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 279.473375][T13699] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 279.495036][T13699] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 279.504771][T13699] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 279.514218][T13699] 48263 total pagecache pages [ 279.520956][T13699] 0 pages in swap cache [ 279.529039][T13699] Free swap = 124996kB [ 279.533247][T13699] Total swap = 124996kB [ 279.537519][T13699] 2097051 pages RAM [ 279.542694][T13699] 0 pages HighMem/MovableOnly [ 279.547720][T13699] 400873 pages reserved [ 279.551969][T13699] 0 pages cma reserved [ 279.570277][T13708] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 279.808629][T13755] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 279.898403][T13757] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE. [ 279.920990][T13757] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.1'. [ 280.528572][ T29] audit: type=1804 audit(1718856869.849:5): pid=13780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2678435355/syzkaller.O2JSwz/587/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 280.659845][T13782] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 280.839745][T13787] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.291263][T13804] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.308315][T13804] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.658146][T13822] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.072053][T13836] netlink: 207640 bytes leftover after parsing attributes in process `syz-executor.1'. [ 282.290873][T13845] tipc: Started in network mode [ 282.297580][T13845] tipc: Node identity e0000002, cluster identity 4711 [ 282.313852][T13845] tipc: Enabling of bearer rejected, failed to enable media [ 282.485005][T13857] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 282.512434][ T2474] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 282.704865][T13863] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 282.713013][T13863] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 282.739977][T13863] netlink: 9328 bytes leftover after parsing attributes in process `syz-executor.1'. [ 282.754730][T13863] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 283.650607][T13915] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 283.674828][T13915] bridge_slave_1: left allmulticast mode [ 283.700653][T13915] bridge_slave_1: left promiscuous mode [ 283.742192][T13915] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.797193][T13915] bridge_slave_0: left allmulticast mode [ 283.819385][T13915] bridge_slave_0: left promiscuous mode [ 283.827040][T13915] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.990315][T13930] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 284.038649][T13930] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 284.338911][ T29] audit: type=1804 audit(1718856873.659:6): pid=13945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir758901785/syzkaller.rSvv64/600/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 284.479280][T13958] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 284.585938][T13968] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 284.625679][T13963] IPVS: stopping backup sync thread 13968 ... [ 284.713497][T13974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 284.757056][T13976] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 285.397970][T14016] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 285.414153][T14016] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 285.483885][T14016] batadv_slave_1: entered promiscuous mode [ 285.499368][T14021] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 285.515933][T14020] IPVS: stopping backup sync thread 14021 ... [ 285.583818][T14025] netem: change failed [ 285.591693][T14016] batadv_slave_1: left promiscuous mode [ 285.832676][T14041] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.212353][T14063] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 286.238160][T14062] IPVS: stopping backup sync thread 14063 ... [ 286.324042][T14067] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 286.595689][T14082] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 286.657213][T14084] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 286.679189][T14084] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.092977][T14107] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 287.125346][T14102] IPVS: stopping backup sync thread 14107 ... [ 287.780805][T14145] smc: adding net device syzkaller0 with user defined pnetid SYZ1 [ 288.010468][T14159] Cannot find add_set index 0 as target [ 288.742629][T14198] __nla_validate_parse: 2 callbacks suppressed [ 288.742646][T14198] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 288.868592][T14202] Cannot find set identified by id 632 to match [ 288.951403][T14211] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 289.251995][T14222] ipt_REJECT: TCP_RESET invalid for non-tcp [ 289.885684][T14257] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 290.151958][T14275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.449478][T14290] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 290.941377][T14316] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.101087][T14317] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.537166][T14345] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.611399][ T5111] IPVS: starting estimator thread 0... [ 291.726850][T14358] IPVS: using max 22 ests per chain, 52800 per kthread [ 291.782502][T14370] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 292.375458][T14400] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 292.482726][T14403] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 293.105279][T14440] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 293.128240][T14440] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 293.157049][T14440] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 293.248596][T14447] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 293.380882][T14459] team0: Port device bond0 removed [ 293.405914][T14459] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 294.773243][T14507] __nla_validate_parse: 5 callbacks suppressed [ 294.773367][T14507] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 294.998588][ T4491] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.010188][ T4491] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.026488][ T4491] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.042621][T14512] netlink: 4680 bytes leftover after parsing attributes in process `syz-executor.3'. [ 295.057914][T14512] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 295.075485][ T4491] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.083441][ T4491] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 295.091309][ T4491] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.600920][T14509] chnl_net:caif_netlink_parms(): no params data found [ 295.758170][T14509] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.766752][T14509] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.774054][T14509] bridge_slave_0: entered allmulticast mode [ 295.781967][T14509] bridge_slave_0: entered promiscuous mode [ 295.792755][T14509] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.800382][T14509] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.807801][T14509] bridge_slave_1: entered allmulticast mode [ 295.815410][T14509] bridge_slave_1: entered promiscuous mode [ 295.920610][T14509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.956275][T14509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.069246][T14509] team0: Port device team_slave_0 added [ 296.105790][T14509] team0: Port device team_slave_1 added [ 296.284603][T14566] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.325817][T14509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.346690][T14509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.383951][T14509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.398455][T14509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.407380][T14509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.451873][T14509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.526844][T14509] hsr_slave_0: entered promiscuous mode [ 296.545269][T14509] hsr_slave_1: entered promiscuous mode [ 296.553583][T14509] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.581422][T14509] Cannot create hsr debugfs directory [ 296.728590][T14580] netlink: 4680 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.762237][T14580] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 297.071908][T14509] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.177859][ T4491] Bluetooth: hci0: command tx timeout [ 297.269011][T14604] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 297.271212][T14509] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.293024][T14604] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.391070][T14509] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.410283][T14610] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.497354][T14509] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.741868][T14509] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 297.785736][T14509] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 297.805632][T14509] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 297.833789][T14509] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 298.140086][T14509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.212000][T14509] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.247862][ T5213] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.255092][ T5213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.292436][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.299686][ T5111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.417565][T14641] netlink: 4680 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.488010][T14641] team0: Port device team_slave_0 removed [ 298.511214][T14641] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 298.574459][T14650] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 298.892092][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 299.156840][T14509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.263201][ T4491] Bluetooth: hci0: command tx timeout [ 299.648597][T14699] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 299.802589][T14509] veth0_vlan: entered promiscuous mode [ 299.909013][T14509] veth1_vlan: entered promiscuous mode [ 300.015543][T14509] veth0_macvtap: entered promiscuous mode [ 300.042251][T14509] veth1_macvtap: entered promiscuous mode [ 300.100974][T14509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.134972][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.154538][T14509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.180565][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.204638][T14509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.234378][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.267350][T14509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.289939][T14509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.314445][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.324695][T14509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.338559][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.348928][T14509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.359695][T14509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.373200][T14509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.414285][T14509] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.431584][T14509] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.459066][T14509] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.488550][T14509] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.335630][ T4491] Bluetooth: hci0: command tx timeout [ 303.001626][T14751] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.022528][T14759] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.043982][T14759] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.087858][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 303.123014][T14764] vlan2: entered promiscuous mode [ 303.135525][T14764] vlan2: entered allmulticast mode [ 303.150666][T14773] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 303.187636][ T2914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.215642][ T2914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.312125][ T2832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.334927][ T2832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.356962][T14787] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 303.416047][ T4491] Bluetooth: hci0: command tx timeout [ 303.570342][T14796] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 303.984845][T14787] infiniband syz0: set active [ 303.990056][T14787] infiniband syz0: added veth0_vlan [ 304.109631][T14819] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 304.190739][T14824] ɶƣ0GC: entered promiscuous mode [ 304.196943][T14787] RDS/IB: syz0: added [ 304.202272][T14824] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 304.213969][T14787] smc: adding ib device syz0 with port count 1 [ 304.255101][T14787] smc: ib device syz0 port 1 has pnetid [ 304.350888][T14828] netem: unknown loss type 8 [ 304.376856][T14828] netem: change failed [ 304.485693][T14829] xt_CT: No such helper "snmp_trap" [ 304.509596][T14829] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 306.634570][T14848] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 306.719597][T14846] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 306.782996][T14846] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 308.202878][T14902] __nla_validate_parse: 1 callbacks suppressed [ 308.202901][T14902] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 308.671931][T14926] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.714805][T14926] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.762675][T14929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.791763][T14929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.820399][T14929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.850784][T14929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.865233][T14929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.885309][T14929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.918402][T14929] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 309.095910][T14942] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 309.115812][T14942] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 309.135454][T14942] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 309.179595][T14945] infiniband syz0: set active [ 309.325571][T14954] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 310.752961][T15019] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.932574][T15019] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.116223][T15019] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.276207][T15019] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.398796][T15054] bridge_slave_1: left allmulticast mode [ 311.425394][T15054] bridge_slave_1: left promiscuous mode [ 311.444191][T15054] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.486745][T15054] bridge_slave_0: left allmulticast mode [ 311.516126][T15054] bridge_slave_0: left promiscuous mode [ 311.521974][T15054] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.787089][T15019] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.871652][T15019] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.928535][T15019] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.970108][T15019] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.525317][T15145] __nla_validate_parse: 29 callbacks suppressed [ 313.525337][T15145] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.543648][T14309] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 314.081350][T15170] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 314.727479][T15201] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 315.201213][T15211] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.224828][T15211] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 315.835662][T15250] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.225819][T15262] veth1_macvtap: left promiscuous mode [ 316.630828][T15276] syzkaller0: entered promiscuous mode [ 316.644286][T15276] syzkaller0: entered allmulticast mode [ 317.659762][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.804647][T15300] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.933381][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 320.064129][T15326] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 320.106563][T15326] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 320.746498][T15370] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 321.666415][T15405] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 322.023230][T15418] SET target dimension over the limit! [ 322.055688][T15418] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.907512][T15457] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 323.296998][ T29] audit: type=1804 audit(1718856912.609:7): pid=15469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D74657374646972323637383433353335352F73797A6B616C6C65722E4F324A53777A2F3730302FA3 dev="sda1" ino=1962 res=1 errno=0 [ 323.374738][T15465] Cannot find set identified by id 632 to match [ 323.419137][ T29] audit: type=1804 audit(1718856912.729:8): pid=15469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name=2F726F6F742F73797A6B616C6C65722D74657374646972323637383433353335352F73797A6B616C6C65722E4F324A53777A2F3730302FA3 dev="sda1" ino=1962 res=1 errno=0 [ 323.768875][T15495] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 324.084607][T15510] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 324.202809][T15515] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 324.738801][T15538] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 325.590858][T15565] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.685501][T15567] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 325.893895][T15581] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 325.922878][T15580] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 325.952402][T15580] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 326.096280][T15580] infiniband syz0: set active [ 326.138103][T15591] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 326.300501][T15599] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 326.770752][T15619] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 326.875499][T15623] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 326.908602][T15623] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 326.956473][T15623] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 327.476029][T15659] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 330.687303][T15807] __nla_validate_parse: 6 callbacks suppressed [ 330.687322][T15807] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 330.712880][T15807] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 331.015784][T15833] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 331.109165][T15835] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 332.041273][T15874] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 332.162566][T15876] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 332.227371][T15878] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 332.367611][T15880] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 332.405296][T15880] sit0: entered promiscuous mode [ 332.424928][T15880] sit0: entered allmulticast mode [ 332.943854][T15911] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 332.958227][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 333.010337][T15918] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 333.032720][T15918] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 333.042048][T15918] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'. [ 333.267032][T15930] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 333.996876][T15956] macvtap0: entered promiscuous mode [ 334.011473][T15956] macvtap0: entered allmulticast mode [ 334.024616][T15956] veth0_macvtap: entered allmulticast mode [ 334.298281][T15975] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 334.833558][T15994] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 334.942941][T16006] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 334.970181][T16006] bond1: entered promiscuous mode [ 335.206457][T16011] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 335.227359][T16017] bond0: (slave vlan2): Opening slave failed [ 335.259366][T16015] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 336.116679][T16059] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 336.174287][T16059] bond1: entered promiscuous mode [ 336.540255][T16085] __nla_validate_parse: 7 callbacks suppressed [ 336.540278][T16085] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.825210][T16094] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 336.955827][T16098] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 337.018667][T16098] vlan2: entered promiscuous mode [ 337.054414][T16098] ip6gretap0: entered promiscuous mode [ 337.460228][T16120] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 337.606166][T16127] xt_l2tp: v2 sid > 0xffff: 150994944 [ 338.069637][T16150] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 338.101547][T16151] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 338.146942][T16151] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 338.165198][T16151] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 338.187720][T16151] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 338.209111][T16151] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 338.506692][T16163] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 338.834773][T16184] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 339.134561][T16187] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 339.747306][T16228] netlink: 'syz-executor.1': attribute type 19 has an invalid length. [ 339.789530][T16228] xt_time: unknown flags 0x4 [ 339.819291][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 340.223497][T16249] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 341.289588][T16297] team_slave_1: entered promiscuous mode [ 341.296118][T16297] macvtap1: entered promiscuous mode [ 341.303951][T16297] team0: entered promiscuous mode [ 341.321310][T16297] macvtap1: entered allmulticast mode [ 341.335428][T16297] team0: entered allmulticast mode [ 341.344544][T16297] team_slave_1: entered allmulticast mode [ 341.382216][T16297] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 341.399780][T16301] team0: left allmulticast mode [ 341.405354][T16301] team_slave_1: left allmulticast mode [ 341.412415][T16301] team0: left promiscuous mode [ 341.425785][T16301] team_slave_1: left promiscuous mode [ 341.438427][T16301] macvtap1: left promiscuous mode [ 341.448682][T16301] macvtap1: left allmulticast mode [ 341.643502][T16307] syz-executor.1 uses old SIOCAX25GETINFO [ 341.820277][T16311] __nla_validate_parse: 8 callbacks suppressed [ 341.820299][T16311] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 341.964174][T16316] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 342.055539][T16325] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 342.141383][T16328] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 343.540338][T16387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 343.576197][T16391] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.709564][T16397] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 344.565617][ T2832] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 344.569383][T16424] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 344.590982][T16423] bond0: (slave vlan3): Opening slave failed [ 345.056359][T16436] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 345.456967][T16445] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 348.055920][T16516] team0: Port device bond0 removed [ 348.113998][T16518] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 348.321514][T16523] __nla_validate_parse: 1 callbacks suppressed [ 348.321536][T16523] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 349.645959][T16567] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 349.763178][T16572] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 349.876343][T16572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.907206][T16572] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 350.281317][T16597] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 350.399422][T16597] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 350.415766][T16598] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 350.454598][T16597] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 350.652300][T16615] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 350.847255][ T29] audit: type=1804 audit(1718856940.169:9): pid=16620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2678435355/syzkaller.O2JSwz/776/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 351.416405][T16636] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 351.703045][T16659] infiniband syz0: set down [ 351.730256][T16662] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 352.047304][T16683] vlan2: entered promiscuous mode [ 352.054161][T16683] dummy0: entered promiscuous mode [ 352.075036][T16683] dummy0: left promiscuous mode [ 352.419559][T16699] vlan3: entered promiscuous mode [ 352.437739][T16699] dummy0: entered promiscuous mode [ 352.462888][T16699] team0: Port device vlan3 added [ 352.523589][T16709] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 352.524423][T16705] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 352.565927][T16704] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 352.756935][T16718] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 352.782924][T16718] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 353.036374][T16737] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 353.460611][T16762] smc: net device ip6_vti0 erased user defined pnetid SYZ0 [ 353.615461][T16764] vxcan1: left allmulticast mode [ 353.741923][T16777] __nla_validate_parse: 2 callbacks suppressed [ 353.741944][T16777] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 354.290282][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 354.562361][T16824] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 355.253759][T16863] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 355.286598][T16863] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 355.337788][T16869] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 355.726178][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 356.138454][T16917] team0: Port device virt_wifi0 added [ 356.329721][T16927] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 356.530986][T16937] IPVS: Error joining to the multicast group [ 356.661822][T16942] syzkaller0: entered promiscuous mode [ 356.681999][T16942] syzkaller0: entered allmulticast mode [ 356.943277][ T29] audit: type=1800 audit(1718856946.259:10): pid=16965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1947 res=0 errno=0 [ 357.007589][ T29] audit: type=1804 audit(1718856946.259:11): pid=16965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3591688072/syzkaller.yZ1LCc/149/memory.events" dev="sda1" ino=1947 res=1 errno=0 [ 357.111314][T16974] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 357.327864][T16983] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 358.146121][T17020] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.865689][T17064] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 359.024255][T17073] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.136142][T17076] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 359.453736][T17092] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 359.482604][T17092] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 359.502538][T17092] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.1'. [ 359.535986][T17092] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 359.566009][T17092] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 359.599039][T17092] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.1'. [ 360.573428][T17128] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 361.025056][T17149] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 361.045240][T17149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 361.061124][T17149] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 361.079121][T17149] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 362.605427][T17211] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 363.029116][T17225] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 363.045294][T17225] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 363.544094][T17242] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 363.747534][T17249] nbd: must specify a size in bytes for the device [ 363.987298][T17263] smc: removing ib device syz0 [ 364.184968][T17280] __nla_validate_parse: 9 callbacks suppressed [ 364.184990][T17280] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 365.229883][T17301] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.361686][T17306] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 365.388452][T17301] bond4: entered promiscuous mode [ 365.414099][T17309] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 365.454711][T17309] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 365.464164][T17309] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.2'. [ 365.475094][T17304] bond_slave_0: entered promiscuous mode [ 365.481558][T17304] bond4: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.523237][T17308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.557387][T17309] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 365.570486][T17309] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 365.594712][T17309] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.2'. [ 365.675153][T17308] bond4 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.709069][T17308] bond_slave_0: left promiscuous mode [ 365.746594][T17308] bond4 (unregistering): Released all slaves [ 365.938303][T17314] nbd: must specify a size in bytes for the device [ 366.026685][T17319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 366.210942][T17324] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 366.658623][T17346] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 366.781540][T17352] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 367.244871][T17364] nbd: must specify a size in bytes for the device [ 367.585459][T17384] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 367.852571][T17389] bond0: (slave vlan2): Opening slave failed [ 368.057987][T17394] netlink: 'syz-executor.0': attribute type 28 has an invalid length. [ 368.329505][ T5117] syz-executor.3 (5117) used greatest stack depth: 18864 bytes left [ 368.383660][T17405] nbd: must specify a size in bytes for the device [ 368.582069][T17414] syz-executor.1[17414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.943972][T17429] bond0: (slave vlan2): Opening slave failed [ 369.238258][T17442] __nla_validate_parse: 3 callbacks suppressed [ 369.238281][T17442] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.252866][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 369.266409][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 369.290080][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 369.311704][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 369.320899][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 369.329250][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.680214][T17445] chnl_net:caif_netlink_parms(): no params data found [ 369.793020][T17473] Bluetooth: MGMT ver 1.22 [ 370.038986][T17485] xt_recent: Unsupported userspace flags (00000076) [ 370.096669][T17445] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.120197][T17445] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.144741][T17445] bridge_slave_0: entered allmulticast mode [ 370.165492][T17445] bridge_slave_0: entered promiscuous mode [ 370.176392][T17445] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.183877][T17445] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.193968][T17445] bridge_slave_1: entered allmulticast mode [ 370.202415][T17445] bridge_slave_1: entered promiscuous mode [ 370.291538][T17491] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 370.349459][T17445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.383828][T17445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.529025][T17445] team0: Port device team_slave_0 added [ 370.557715][T17445] team0: Port device team_slave_1 added [ 370.637909][T17496] bond0: (slave vlan3): Opening slave failed [ 370.749174][T17445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.769179][T17445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.813800][T17445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.835491][T17509] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 370.849190][T17509] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 370.867849][ T29] audit: type=1804 audit(1718856960.179:12): pid=17516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2678435355/syzkaller.O2JSwz/829/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 370.935067][T17509] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 370.971146][T17445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.979018][T17445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.076398][T17445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.217016][T14311] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.312967][T17535] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 371.403669][T14311] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.424463][ T53] Bluetooth: hci2: command tx timeout [ 371.529036][T17445] hsr_slave_0: entered promiscuous mode [ 371.542431][T17445] hsr_slave_1: entered promiscuous mode [ 371.572179][T17445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.580759][T17445] Cannot create hsr debugfs directory [ 371.673335][T14311] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.854093][T17549] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 371.894492][ T4491] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 371.908029][T17549] bond4: entered promiscuous mode [ 371.940816][T14311] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.985732][T17550] bond_slave_0: entered promiscuous mode [ 372.022883][T17550] bond4: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.059707][T17555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 372.074164][T17555] bond4 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.084124][T17555] bond_slave_0: left promiscuous mode [ 372.102759][T17555] bond4 (unregistering): Released all slaves [ 372.161348][T17564] bond0: (slave vlan2): Opening slave failed [ 372.989469][T14311] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 373.001555][T14311] bond0 (unregistering): Released all slaves [ 373.018851][T14311] bond1 (unregistering): Released all slaves [ 373.274244][T17599] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 373.504855][ T4491] Bluetooth: hci2: command 0x041b tx timeout [ 373.984046][T14311] hsr_slave_0: left promiscuous mode [ 374.026725][T14311] hsr_slave_1: left promiscuous mode [ 374.043901][T14311] veth0: left allmulticast mode [ 374.052540][T14311] veth0: left promiscuous mode [ 374.059168][T14311] veth0_macvtap: left allmulticast mode [ 374.066000][T14311] veth0_macvtap: left promiscuous mode [ 374.071977][T14311] veth1_vlan: left promiscuous mode [ 374.678436][T17651] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 374.688663][T17651] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 374.698844][T17651] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 374.708435][T17651] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 374.918432][T17656] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 374.945556][T17656] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 374.980202][T17657] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 375.574568][ T4491] Bluetooth: hci2: command 0x041b tx timeout [ 375.591248][ T11] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 375.642666][T17663] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 375.843176][T17445] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 375.896089][T17445] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 375.945426][T17445] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 376.019509][T17445] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 376.175711][T17679] vlan3: entered allmulticast mode [ 376.180896][T17679] bridge_slave_0: entered allmulticast mode [ 376.313782][T17679] bridge_slave_0: left allmulticast mode [ 376.629463][T17698] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.4'. [ 376.772107][T17445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.805717][T17704] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 376.829663][T17698] Cannot find add_set index 0 as target [ 376.882209][T17445] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.941362][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.948635][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.015681][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.022872][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.105344][T17715] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 377.450965][T17741] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 377.528635][T17741] No such timeout policy "syz0" [ 377.658050][ T4491] Bluetooth: hci2: command 0x041b tx timeout [ 377.672184][T17746] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 377.716024][T17746] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 377.760807][T17746] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 377.847124][T17751] vlan2: entered allmulticast mode [ 377.862353][T17751] bridge_slave_0: entered allmulticast mode [ 377.902913][T17751] bridge_slave_0: left allmulticast mode [ 378.007154][T17445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.435476][T17445] veth0_vlan: entered promiscuous mode [ 378.490272][T17445] veth1_vlan: entered promiscuous mode [ 378.610918][T17445] veth0_macvtap: entered promiscuous mode [ 378.647664][T17445] veth1_macvtap: entered promiscuous mode [ 378.699957][T17794] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 378.841226][T17445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.865879][T17445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.881147][T17445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.902316][T17445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.938913][T17445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.965008][T17445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.982514][T17445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.993553][T17445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.006134][T17445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.031192][T17445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.062654][T17445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.083932][T17445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.098190][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.113327][T17445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.126294][T17445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.136935][T17445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.146926][T17445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.158237][T17445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.183517][T17445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.231362][T17445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.269175][T17445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.290567][T17445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.314709][T17445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.460529][T17821] Bluetooth: MGMT ver 1.22 [ 379.497713][T17811] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 379.526146][T17811] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 379.556975][T17811] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 379.734743][ T4491] Bluetooth: hci2: command 0x041b tx timeout [ 379.902106][T17833] __nla_validate_parse: 4 callbacks suppressed [ 379.902125][T17833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 379.904583][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.984553][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.036686][T17840] vlan4: entered allmulticast mode [ 380.041888][T17840] bridge_slave_0: entered allmulticast mode [ 380.053782][T17840] bridge_slave_0: left allmulticast mode [ 380.095064][T17839] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 380.151588][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.174900][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.236573][ T29] audit: type=1800 audit(1718856969.549:13): pid=17850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 380.340458][ T29] audit: type=1804 audit(1718856969.549:14): pid=17850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2678435355/syzkaller.O2JSwz/849/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 380.367594][T17857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 380.444609][ T29] audit: type=1804 audit(1718856969.619:15): pid=17853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2678435355/syzkaller.O2JSwz/849/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 380.757367][T17872] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 380.787585][T17872] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 380.800416][T17872] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 380.940042][T17884] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 380.971669][T17884] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 381.077138][T17888] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 381.097191][T17888] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 381.162075][T17891] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 381.251873][T17894] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 381.397319][T17892] vlan2: entered allmulticast mode [ 381.402504][T17892] bridge_slave_0: entered allmulticast mode [ 381.497626][T17892] bridge_slave_0: left allmulticast mode [ 381.793159][T17905] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 381.904951][T17913] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 382.242511][T17928] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 382.296599][T17928] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 382.334891][T17928] bond0: (slave ipvlan3): Error -95 calling set_mac_address [ 382.495659][T17942] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 382.802578][T17946] vlan2: entered allmulticast mode [ 382.822649][T17946] bridge_slave_0: entered allmulticast mode [ 382.863035][T17946] bridge_slave_0: left allmulticast mode [ 384.387559][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 385.185075][T18069] __nla_validate_parse: 6 callbacks suppressed [ 385.185094][T18069] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 385.429832][T18088] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.3'. [ 386.056912][T18114] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.0'. [ 386.114636][T18118] macvlan2: entered promiscuous mode [ 386.121034][T18118] vlan1: entered promiscuous mode [ 386.135608][T18118] team0: Port device macvlan2 added [ 386.155378][T18116] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 386.176440][T18116] bridge_slave_1: left allmulticast mode [ 386.182145][T18116] bridge_slave_1: left promiscuous mode [ 386.221986][T18116] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.320097][T18116] bridge_slave_0: left allmulticast mode [ 386.365434][T18116] bridge_slave_0: left promiscuous mode [ 386.384703][T18116] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.182787][T18180] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 387.297257][T18186] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 387.781073][T18200] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 40007 - 0 [ 387.816768][T18200] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 40007 - 0 [ 387.844947][T18200] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 40007 - 0 [ 387.864236][T18200] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 40007 - 0 [ 387.884148][T18200] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 60067 - 0 [ 387.922379][T18200] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 60067 - 0 [ 387.954604][T18200] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 60067 - 0 [ 387.984489][T18200] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 60067 - 0 [ 388.009854][T18200] geneve2: entered promiscuous mode [ 388.052853][T18200] geneve2: entered allmulticast mode [ 388.090214][T18212] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.227564][T18232] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 388.242067][T18233] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 388.741933][T18259] netlink: 199008 bytes leftover after parsing attributes in process `syz-executor.1'. [ 388.980823][T18269] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 389.474161][T18298] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 390.485708][T18352] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 390.515015][T18352] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 390.544184][T18353] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 390.578864][T18353] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 390.613729][T18352] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 390.708450][T18363] __nla_validate_parse: 6 callbacks suppressed [ 390.708470][T18363] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 391.053664][T18383] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 391.421184][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 391.430953][T18402] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.1'. [ 391.678671][T18419] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 391.859522][ T29] audit: type=1804 audit(1718856981.179:16): pid=18427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2394367199/syzkaller.uQTRg3/311/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 392.027451][ T5163] IPVS: starting estimator thread 0... [ 392.036786][T18435] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 392.144825][T18436] IPVS: using max 20 ests per chain, 48000 per kthread [ 392.169909][T18444] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 392.723827][T18478] delete_channel: no stack [ 392.771000][ T29] audit: type=1804 audit(1718856982.089:17): pid=18478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2678435355/syzkaller.O2JSwz/882/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 393.300623][T18499] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 393.584103][T18514] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 393.660796][T18514] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 393.714478][T18514] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 394.846423][T18565] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.154277][T18542] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.195368][T18542] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 395.853977][T18611] __nla_validate_parse: 1 callbacks suppressed [ 395.853996][T18611] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 396.179522][T18619] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 396.283613][T18631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 396.335113][T18635] team0: Device is already in use. [ 396.476019][T18644] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 396.476871][T18644] SET target dimension over the limit! [ 396.866858][T18665] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 398.088860][T18708] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 398.178544][T18708] bond2: (slave bridge0): Enslaving as a backup interface with an up link [ 398.188113][T18712] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 398.253220][T18716] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 398.609819][T18731] netlink: 19 bytes leftover after parsing attributes in process `syz-executor.4'. [ 398.639147][T18733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 398.692939][T18731] caif0: entered allmulticast mode [ 398.706104][T18731] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 398.734688][T18731] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 399.180269][T18754] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.4'. [ 399.203009][T18754] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 399.490413][T18761] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 399.508076][T18768] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 399.927871][ T29] audit: type=1800 audit(1718856989.239:18): pid=18789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 399.984731][ T29] audit: type=1804 audit(1718856989.249:19): pid=18789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2678435355/syzkaller.O2JSwz/899/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 400.069785][ T29] audit: type=1804 audit(1718856989.249:20): pid=18789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2678435355/syzkaller.O2JSwz/899/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 400.276128][T18802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 400.356965][T18802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.384485][T18802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.431239][T18802] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 400.569081][T18809] syzkaller0: left promiscuous mode [ 400.582354][T18809] syzkaller0: left allmulticast mode [ 400.606147][T18811] team0: Device is already in use. [ 400.881192][T18819] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744071562067969) [ 400.905767][T18819] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 400.937002][T18824] __nla_validate_parse: 3 callbacks suppressed [ 400.937021][T18824] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 401.300065][T18838] x_tables: unsorted underflow at hook 2 [ 401.476349][T18844] team0: Device is already in use. [ 401.695364][T18858] xt_ecn: cannot match TCP bits for non-tcp packets [ 401.851468][T18869] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 402.049586][T18876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 402.071491][T18877] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 402.471985][T18889] team0: Device is already in use. [ 402.595670][T18893] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 402.755983][T18906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 402.913631][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 402.953197][T18923] team0: Device is already in use. [ 402.976697][T18920] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 403.008573][T18925] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 403.143272][T18925] bond2: (slave bridge0): Releasing backup interface [ 403.830607][T18981] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 403.928616][T18985] syz-executor.4[18985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.928835][T18985] syz-executor.4[18985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 404.140561][T18995] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 404.285027][T19000] : renamed from team0 (while UP) [ 404.479353][T19005] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 404.640840][T19014] team0: Device is already in use. [ 405.879499][T19079] sock: sock_timestamping_bind_phc: sock not bind to device [ 406.010772][T19085] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 406.191532][T19101] __nla_validate_parse: 4 callbacks suppressed [ 406.191555][T19101] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 406.488617][T19110] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 406.619207][T14310] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 406.952014][T19136] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 407.158389][T19152] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 407.327169][T19158] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 407.563492][T19171] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.927944][T19180] ɶƣ0GCTw: entered promiscuous mode [ 408.046232][T19174] ɶƣ0GC: entered promiscuous mode [ 408.098031][T19174] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.2'. [ 408.137185][T19194] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 408.185816][T19194] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 408.247494][T19194] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 408.269754][T19201] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 408.622692][T19216] bond2: entered promiscuous mode [ 408.772146][T19220] bond0: (slave bond_slave_0): Releasing backup interface [ 408.863899][T19220] bond_slave_0: entered promiscuous mode [ 408.886921][T19220] bond2: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.512674][T19259] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 409.899308][T19273] ɶƣ0GCTw: entered promiscuous mode [ 410.129263][T19273] ɶƣ0GC: entered promiscuous mode [ 410.767197][ T29] audit: type=1804 audit(1718857000.089:21): pid=19313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2678435355/syzkaller.O2JSwz/932/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 411.230373][T19333] __nla_validate_parse: 10 callbacks suppressed [ 411.230393][T19333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 411.459444][T19342] ɶƣ0GCTw: entered promiscuous mode [ 411.531484][T19342] ɶƣ0GC: entered promiscuous mode [ 411.558160][T19349] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 411.607033][T19342] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.4'. [ 411.648445][T19355] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 411.728612][T19354] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 411.764462][T19354] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 411.998208][T19372] Cannot find map_set index 0 as target [ 412.171932][T19375] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 412.340255][T19383] team0: Device is already in use. [ 412.500768][T19389] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 412.505006][T19392] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 412.531760][T19389] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 412.544700][T19394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 412.571604][T19389] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.4'. [ 412.969985][T19421] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 413.516268][T19453] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 413.586334][T19453] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 415.347522][T19546] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 415.434029][T19553] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 415.697028][T19571] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 415.752873][T19571] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 415.827449][T19582] team0: Device is already in use. [ 416.938191][T19639] syzkaller0: entered promiscuous mode [ 416.964147][T19639] syzkaller0: entered allmulticast mode [ 416.997616][T19638] __nla_validate_parse: 10 callbacks suppressed [ 416.997647][T19638] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 417.316554][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 419.251850][T19710] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 421.160503][T19683] pim6reg0: tun_chr_ioctl cmd 1074025676 [ 421.166552][T19683] pim6reg0: owner set to 0 [ 421.218672][T19700] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 421.471414][T19721] team0: Device is already in use. [ 421.918629][T19740] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 421.950320][T19740] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 421.983425][T19740] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 421.992756][T19743] xt_l2tp: v2 sid > 0xffff: 16777216 [ 422.006089][T19740] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 422.059311][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 422.072758][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 422.075260][T19744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 422.100960][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 422.111760][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 422.120689][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 422.128600][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 422.136414][ T5120] Bluetooth: hci0: command 0x0405 tx timeout [ 422.256456][ T1267] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.267289][ T1267] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 40007 - 0 [ 422.278264][ T1267] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 60067 - 0 [ 422.311691][T19754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 422.334420][T19754] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.0'. [ 422.344143][T19754] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.0'. [ 422.439394][ T1267] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.475329][ T1267] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 40007 - 0 [ 422.502910][ T1267] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 60067 - 0 [ 422.528838][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 422.589957][T19766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 422.681320][ T1267] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.707821][ T1267] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 40007 - 0 [ 422.720534][ T1267] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 60067 - 0 [ 422.766789][T19776] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 422.850335][ T1267] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.878086][ T1267] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 40007 - 0 [ 422.905719][ T1267] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 60067 - 0 [ 423.247433][T19801] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 423.397122][T19745] chnl_net:caif_netlink_parms(): no params data found [ 423.419801][T19807] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 424.029008][ T1267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.041959][ T1267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.054074][ T1267] bond0 (unregistering): Released all slaves [ 424.224937][ T4491] Bluetooth: hci2: command tx timeout [ 424.486905][T19745] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.496258][T19745] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.503606][T19745] bridge_slave_0: entered allmulticast mode [ 424.519516][T19745] bridge_slave_0: entered promiscuous mode [ 424.592373][T19745] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.634521][T19745] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.660218][T19745] bridge_slave_1: entered allmulticast mode [ 424.673333][T19745] bridge_slave_1: entered promiscuous mode [ 424.882843][T19745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.941258][T19745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.033205][ T1267] hsr_slave_0: left promiscuous mode [ 425.045950][ T1267] hsr_slave_1: left promiscuous mode [ 425.063585][ T1267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.072039][ T1267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.081452][ T1267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.090068][ T1267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.114041][ T1267] veth1_macvtap: left promiscuous mode [ 425.120874][ T1267] veth0_macvtap: left promiscuous mode [ 425.126940][ T1267] veth1_vlan: left promiscuous mode [ 425.132591][ T1267] veth0_vlan: left promiscuous mode [ 425.798834][ T1267] team0 (unregistering): Port device team_slave_1 removed [ 425.872190][ T1267] team0 (unregistering): Port device team_slave_0 removed [ 426.307346][ T4491] Bluetooth: hci2: command tx timeout [ 426.576073][T19745] team0: Port device team_slave_0 added [ 426.620821][T19745] team0: Port device team_slave_1 added [ 426.754615][T19745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.777511][T19745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.817552][T19745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.874925][T19901] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.2'. [ 426.896497][T19745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.903486][T19745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.984139][T19745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.249413][T19745] hsr_slave_0: entered promiscuous mode [ 427.272594][T19745] hsr_slave_1: entered promiscuous mode [ 427.293119][T19745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.324671][T19745] Cannot create hsr debugfs directory [ 427.334723][T19918] bridge_slave_0: entered promiscuous mode [ 427.423381][ T1267] IPVS: stop unused estimator thread 0... [ 427.660419][T19928] syzkaller0: entered promiscuous mode [ 427.679466][T19928] syzkaller0: entered allmulticast mode [ 428.375276][ T4491] Bluetooth: hci2: command tx timeout [ 428.426782][T19900] warn_alloc: 1 callbacks suppressed [ 428.426804][T19900] syz-executor.1: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 428.456175][T19900] CPU: 0 PID: 19900 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 428.466714][T19900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 428.476802][T19900] Call Trace: [ 428.480102][T19900] [ 428.483052][T19900] dump_stack_lvl+0x241/0x360 [ 428.487740][T19900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.492951][T19900] ? __pfx__printk+0x10/0x10 [ 428.497642][T19900] ? __rcu_read_unlock+0xa1/0x110 [ 428.502662][T19900] warn_alloc+0x278/0x410 [ 428.506992][T19900] ? __pfx_warn_alloc+0x10/0x10 [ 428.511842][T19900] ? hash_netiface_create+0x356/0x1040 [ 428.517308][T19900] ? __get_vm_area_node+0x23d/0x270 [ 428.522540][T19900] __vmalloc_node_range_noprof+0x69f/0x1460 [ 428.528487][T19900] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 428.534831][T19900] ? hash_netiface_create+0x356/0x1040 [ 428.540306][T19900] ? __get_vm_area_node+0x23d/0x270 [ 428.545505][T19900] __vmalloc_node_range_noprof+0x5bf/0x1460 [ 428.551396][T19900] ? hash_netiface_create+0x356/0x1040 [ 428.557214][T19900] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 428.563555][T19900] ? rcu_is_watching+0x15/0xb0 [ 428.568328][T19900] ? trace_kmalloc+0x1f/0xd0 [ 428.572948][T19900] ? __kmalloc_node_noprof+0x247/0x440 [ 428.578435][T19900] ? kvmalloc_node_noprof+0x72/0x190 [ 428.583736][T19900] kvmalloc_node_noprof+0x142/0x190 [ 428.588933][T19900] ? hash_netiface_create+0x356/0x1040 [ 428.594385][T19900] hash_netiface_create+0x356/0x1040 [ 428.599689][T19900] ? __pfx_hash_netiface_create+0x10/0x10 [ 428.605424][T19900] ip_set_create+0xa5c/0x17d0 [ 428.610186][T19900] ? ip_set_create+0x45e/0x17d0 [ 428.615046][T19900] ? __pfx_ip_set_create+0x10/0x10 [ 428.620173][T19900] ? trace_contention_end+0x3c/0x120 [ 428.625526][T19900] ? nfnetlink_rcv_msg+0x225/0x1180 [ 428.630762][T19900] nfnetlink_rcv_msg+0xbec/0x1180 [ 428.635828][T19900] ? 0xffffffffa0000908 [ 428.640004][T19900] ? nfnetlink_rcv_msg+0x225/0x1180 [ 428.645274][T19900] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 428.650786][T19900] ? kasan_save_track+0x51/0x80 [ 428.655668][T19900] ? kasan_save_track+0x3f/0x80 [ 428.660519][T19900] ? kasan_save_free_info+0x40/0x50 [ 428.665727][T19900] ? __dev_queue_xmit+0x1b0e/0x3d30 [ 428.670949][T19900] ? __netlink_deliver_tap+0x54d/0x7c0 [ 428.676434][T19900] ? netlink_deliver_tap+0x19d/0x1b0 [ 428.681737][T19900] ? netlink_unicast+0x7b8/0x980 [ 428.686677][T19900] ? netlink_sendmsg+0x8db/0xcb0 [ 428.691613][T19900] ? ____sys_sendmsg+0x525/0x7d0 [ 428.696555][T19900] netlink_rcv_skb+0x1e3/0x430 [ 428.701317][T19900] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 428.706773][T19900] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 428.712131][T19900] ? apparmor_capable+0x138/0x1b0 [ 428.717168][T19900] ? bpf_lsm_capable+0x9/0x10 [ 428.721882][T19900] ? security_capable+0x90/0xb0 [ 428.726909][T19900] nfnetlink_rcv+0x297/0x2a80 [ 428.731620][T19900] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.737974][T19900] ? __local_bh_enable_ip+0x168/0x200 [ 428.743407][T19900] ? lockdep_hardirqs_on+0x99/0x150 [ 428.748612][T19900] ? __local_bh_enable_ip+0x168/0x200 [ 428.753973][T19900] ? dev_hard_start_xmit+0x773/0x7e0 [ 428.759254][T19900] ? __dev_queue_xmit+0x2d2/0x3d30 [ 428.764366][T19900] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 428.770110][T19900] ? __dev_queue_xmit+0x2d2/0x3d30 [ 428.775241][T19900] ? __dev_queue_xmit+0x16c9/0x3d30 [ 428.780478][T19900] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 428.785643][T19900] ? __dev_queue_xmit+0x2d2/0x3d30 [ 428.790802][T19900] ? ref_tracker_free+0x643/0x7e0 [ 428.795860][T19900] ? __asan_memcpy+0x40/0x70 [ 428.800489][T19900] ? __pfx_ref_tracker_free+0x10/0x10 [ 428.805917][T19900] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.811192][T19900] ? skb_clone+0x240/0x390 [ 428.815635][T19900] ? __pfx_lock_release+0x10/0x10 [ 428.820689][T19900] ? __netlink_deliver_tap+0x77e/0x7c0 [ 428.826289][T19900] ? netlink_deliver_tap+0x2e/0x1b0 [ 428.831515][T19900] netlink_unicast+0x7ea/0x980 [ 428.836316][T19900] ? __pfx_netlink_unicast+0x10/0x10 [ 428.841633][T19900] ? __virt_addr_valid+0x183/0x520 [ 428.846783][T19900] ? __check_object_size+0x49c/0x900 [ 428.852091][T19900] ? bpf_lsm_netlink_send+0x9/0x10 [ 428.857256][T19900] netlink_sendmsg+0x8db/0xcb0 [ 428.862068][T19900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.867391][T19900] ? __import_iovec+0x536/0x820 [ 428.872271][T19900] ? aa_sock_msg_perm+0x91/0x160 [ 428.877244][T19900] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 428.882553][T19900] ? security_socket_sendmsg+0x87/0xb0 [ 428.888030][T19900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.893308][T19900] __sock_sendmsg+0x221/0x270 [ 428.897980][T19900] ____sys_sendmsg+0x525/0x7d0 [ 428.902739][T19900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.908027][T19900] __sys_sendmsg+0x2b0/0x3a0 [ 428.912608][T19900] ? __pfx___sys_sendmsg+0x10/0x10 [ 428.917775][T19900] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 428.924127][T19900] ? do_syscall_64+0x100/0x230 [ 428.928915][T19900] ? do_syscall_64+0xb6/0x230 [ 428.933625][T19900] do_syscall_64+0xf3/0x230 [ 428.938126][T19900] ? clear_bhb_loop+0x35/0x90 [ 428.942804][T19900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.948706][T19900] RIP: 0033:0x7f855767cf29 [ 428.953130][T19900] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 428.972743][T19900] RSP: 002b:00007f855838c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.981177][T19900] RAX: ffffffffffffffda RBX: 00007f85577b3f80 RCX: 00007f855767cf29 [ 428.989145][T19900] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 428.997109][T19900] RBP: 00007f85576ec074 R08: 0000000000000000 R09: 0000000000000000 [ 429.005075][T19900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.013068][T19900] R13: 000000000000000b R14: 00007f85577b3f80 R15: 00007ffebd4c88a8 [ 429.021095][T19900] [ 429.030189][T19900] Mem-Info: [ 429.033376][T19900] active_anon:22881 inactive_anon:0 isolated_anon:0 [ 429.033376][T19900] active_file:0 inactive_file:46696 isolated_file:0 [ 429.033376][T19900] unevictable:768 dirty:25 writeback:0 [ 429.033376][T19900] slab_reclaimable:10953 slab_unreclaimable:107558 [ 429.033376][T19900] mapped:18499 shmem:5711 pagetables:669 [ 429.033376][T19900] sec_pagetables:0 bounce:0 [ 429.033376][T19900] kernel_misc_reclaimable:0 [ 429.033376][T19900] free:1332776 free_pcp:314 free_cma:0 [ 429.079607][T19900] Node 0 active_anon:91524kB inactive_anon:0kB active_file:0kB inactive_file:186708kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73996kB dirty:92kB writeback:0kB shmem:21308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10780kB pagetables:2676kB sec_pagetables:0kB all_unreclaimable? no [ 429.111949][T19900] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 429.144223][T19900] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 429.173253][T19900] lowmem_reserve[]: 0 2571 2571 0 0 [ 429.186706][T19900] Node 0 DMA32 free:1370900kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:91480kB inactive_anon:0kB active_file:0kB inactive_file:186392kB unevictable:1536kB writepending:88kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:272kB local_pcp:248kB free_cma:0kB [ 429.225565][T19900] lowmem_reserve[]: 0 0 0 0 0 [ 429.230489][T19900] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 429.259540][T19900] lowmem_reserve[]: 0 0 0 0 0 [ 429.264561][T19900] Node 1 Normal free:3945260kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:8kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:752kB local_pcp:752kB free_cma:0kB [ 429.294027][T19900] lowmem_reserve[]: 0 0 0 0 0 [ 429.298931][T19900] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 429.311702][T19900] Node 0 DMA32: 137*4kB (UME) 83*8kB (UME) 30*16kB (UME) 77*32kB (UME) 28*64kB (UME) 12*128kB (UME) 11*256kB (UME) 11*512kB (UME) 5*1024kB (M) 5*2048kB (UME) 327*4096kB (M) = 1370684kB [ 429.330352][T19900] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 429.342344][T19900] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 1*64kB (U) 3*128kB (U) 3*256kB (UM) 3*512kB (UM) 0*1024kB 1*2048kB (U) 962*4096kB (M) = 3945260kB [ 429.359340][T19900] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 429.371171][T19900] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 429.380572][T19900] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 429.390466][T19900] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 429.399895][T19900] 52402 total pagecache pages [ 429.404742][T19900] 0 pages in swap cache [ 429.408940][T19900] Free swap = 124996kB [ 429.413115][T19900] Total swap = 124996kB [ 429.417712][T19900] 2097051 pages RAM [ 429.421534][T19900] 0 pages HighMem/MovableOnly [ 429.426327][T19900] 400873 pages reserved [ 429.430594][T19900] 0 pages cma reserved [ 430.454742][ T4491] Bluetooth: hci2: command tx timeout [ 432.893291][T19987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 433.022621][T19993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 433.181616][T19745] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 433.199387][T19745] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 433.231331][T19745] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 433.257299][T19745] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 433.430678][T20011] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 433.575737][T19745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.661589][T19745] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.677897][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.685128][ T5111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.707870][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.715070][ T5111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.737302][T20020] tipc: Enabled bearer , priority 10 [ 433.759227][T20020] tipc: Resetting bearer [ 433.857882][T20020] tipc: Disabling bearer [ 436.512107][T20041] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 436.558981][T20053] tipc: Started in network mode [ 436.576031][T20053] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 436.586604][T20053] tipc: Enabled bearer , priority 10 [ 436.611477][T20054] tipc: Resetting bearer [ 436.708449][T20054] tipc: Disabling bearer [ 436.873541][T19745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.999273][T19745] veth0_vlan: entered promiscuous mode [ 437.041540][T19745] veth1_vlan: entered promiscuous mode [ 437.140180][T19745] veth0_macvtap: entered promiscuous mode [ 437.170974][T19745] veth1_macvtap: entered promiscuous mode [ 437.221141][T19745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.244741][T19745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.275726][T19745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.296886][T19745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.323636][T19745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.354559][T19745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.378350][T19745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.417219][T19745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.454731][T19745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.481638][T19745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.502566][T19745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.520835][T19745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.544623][T19745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.584606][T19745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.624536][T19745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.645889][T14311] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 437.673409][T19745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.697350][T20092] tipc: Enabling of bearer rejected, failed to enable media [ 437.782351][T19745] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.800906][T19745] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.814273][T19745] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.825122][T19745] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.990952][T14310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.000807][T20120] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 438.015360][T20120] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 438.031633][T14310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.116681][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.138454][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.467548][T20141] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 438.517367][T20141] team0: Device erspan0 is up. Set it down before adding it as a team port [ 438.543188][T20142] tipc: Started in network mode [ 438.551925][T20142] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 438.568333][T20142] tipc: Enabled bearer , priority 10 [ 438.592910][T20144] tipc: Resetting bearer [ 438.717782][T20144] tipc: Disabling bearer [ 439.061954][T20167] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 439.122445][T20169] ɶƣ0GC: entered promiscuous mode [ 439.769392][T20197] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 439.928203][T20201] tipc: Started in network mode [ 439.933238][T20201] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 439.943963][T20201] tipc: Enabled bearer , priority 10 [ 439.965003][T20201] tipc: Resetting bearer [ 440.055519][T20201] tipc: Disabling bearer [ 440.194619][T20224] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 440.538423][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.294768][T20279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 441.467918][T20282] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 441.512735][T20282] bridge_slave_1: left allmulticast mode [ 441.530265][T20282] bridge_slave_1: left promiscuous mode [ 441.557000][T20282] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.587219][T20282] bridge_slave_0: left allmulticast mode [ 441.606909][T20282] bridge_slave_0: left promiscuous mode [ 441.612765][T20282] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.828592][T20286] team0: Device is already in use. [ 442.187860][T20320] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 442.770813][T20350] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 442.943558][T20356] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 443.130742][T20362] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 443.431330][T20374] syzkaller0: entered allmulticast mode [ 443.463725][T20382] syzkaller0 (unregistering): left allmulticast mode [ 443.685904][T20394] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 443.715223][T20394] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 443.760502][T20396] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 443.777531][T20394] No such timeout policy "syz0" [ 444.117968][T20420] team0: Device is already in use. [ 444.651791][T20451] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 444.676327][T20452] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 444.714155][T20451] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 444.728792][T20455] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 444.756169][T20455] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 444.778445][T20455] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 444.798525][T20455] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 444.830609][T20462] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 444.833218][T20461] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 444.877307][T20455] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 444.929093][T20462] xt_limit: Overflow, try lower: 16384/524288 [ 445.461287][T20497] SET target dimension over the limit! [ 445.491881][ T29] audit: type=1800 audit(1718857034.809:22): pid=20494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1947 res=0 errno=0 [ 445.584562][ T29] audit: type=1804 audit(1718857034.809:23): pid=20494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="memory.events" dev="sda1" ino=1947 res=1 errno=0 [ 446.312068][T20535] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 446.362828][T20535] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 447.078417][T20574] team0: Device is already in use. [ 449.302819][T20706] __nla_validate_parse: 5 callbacks suppressed [ 449.302840][T20706] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 449.661198][T20715] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 449.797962][ T29] audit: type=1800 audit(1718857039.119:24): pid=20720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 450.020281][T20734] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 450.244826][T20755] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 450.735646][T20783] macvlan6: entered allmulticast mode [ 450.746368][T20783] bond0: (slave macvlan6): Error -22 calling dev_set_mtu [ 451.476209][T20825] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 452.098184][T20868] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 452.146396][T20868] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 452.168531][T20872] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 452.206206][T20868] syzkaller0: entered promiscuous mode [ 452.212613][T20868] syzkaller0: entered allmulticast mode [ 452.313732][T20879] team0: Device is already in use. [ 452.666850][T20898] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 453.065980][T20916] team0: Device is already in use. [ 453.387454][T20938] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 454.258399][T20969] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 454.437615][T20994] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 455.077764][T21025] team0: Device is already in use. [ 455.199913][T21029] team0: Device is already in use. [ 455.215927][T21033] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 455.313844][T21037] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 455.684431][T21052] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 455.707605][T21052] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 455.724857][T21056] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 455.746803][T21052] Bluetooth: hci3: invalid length 1, exp 2 for type 10 [ 455.760265][T21056] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.0'. [ 455.771535][T21050] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 456.027005][T21073] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 456.111749][T21073] bond3: entered promiscuous mode [ 456.142498][T21073] ip6gretap1: entered promiscuous mode [ 456.156685][T21073] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 456.183020][T21073] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 456.218578][T21073] bond3: entered allmulticast mode [ 456.232966][T21073] ip6gretap1: entered allmulticast mode [ 456.243766][T21073] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.253549][T21082] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 456.566297][T21093] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 456.946077][T21078] dccp_close: ABORT with 32 bytes unread [ 458.085651][ T29] audit: type=1107 audit(1718857047.399:25): pid=21177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ctOr&ݰ۸~F M!!PY #8Q sʦ [ 458.085651][ T29] 8),ך?rV #%l>I c[\Tіg' [ 458.615699][T21209] IPVS: Error joining to the multicast group [ 459.016660][T21230] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 459.032543][T21231] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 459.475376][T21254] __nla_validate_parse: 8 callbacks suppressed [ 459.475395][T21254] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 459.584062][T21263] team0: Device is already in use. [ 459.692463][T21269] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 459.770045][T21269] bridge0: port 1(bridge_slave_1) entered blocking state [ 459.791346][T21269] bridge0: port 1(bridge_slave_1) entered disabled state [ 459.801891][T21269] bridge_slave_1: entered allmulticast mode [ 459.823367][T21269] bridge_slave_1: entered promiscuous mode [ 459.850290][T21269] bridge0: port 1(bridge_slave_1) entered blocking state [ 459.857551][T21269] bridge0: port 1(bridge_slave_1) entered forwarding state [ 460.077394][T21289] sctp: [Deprecated]: syz-executor.3 (pid 21289) Use of int in maxseg socket option. [ 460.077394][T21289] Use struct sctp_assoc_value instead [ 460.104693][T21269] bridge0: port 2(veth1_to_bond) entered blocking state [ 460.111807][T21269] bridge0: port 2(veth1_to_bond) entered disabled state [ 460.134823][T21269] veth1_to_bond: entered allmulticast mode [ 460.156754][T21269] veth1_to_bond: entered promiscuous mode [ 460.163520][T21269] bridge0: port 2(veth1_to_bond) entered blocking state [ 460.170629][T21269] bridge0: port 2(veth1_to_bond) entered forwarding state [ 460.186640][T21292] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 460.908532][T21331] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 460.931258][T21331] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 460.934748][ T4491] Bluetooth: hci0: command tx timeout [ 460.988226][T21337] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 461.186247][T21343] team0: Device is already in use. [ 461.408890][T21357] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 461.854126][T21390] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 463.561957][T21439] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 468.672358][T14311] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 492.579276][ T5114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 492.591276][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 492.614909][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 492.625415][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 492.646249][ T5114] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 492.665229][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 492.970097][ T4491] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 492.981217][ T4491] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 492.990221][ T4491] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 493.041400][ T4491] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 493.054839][ T4491] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 493.064681][ T4491] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 493.157935][ T4491] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 493.168056][ T4491] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 493.185534][ T4491] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 493.195444][ T4491] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 493.206548][ T4491] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 493.213948][ T4491] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 493.251785][ T5114] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 493.263515][ T5114] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 493.284896][ T5114] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 493.295661][ T5114] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 493.303398][ T5114] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 493.312161][ T5114] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 493.924229][ T5114] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 493.936165][ T5114] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 493.946006][ T5114] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 493.955731][ T5114] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 493.963582][ T5114] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 493.972472][ T5114] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 494.785541][ T4491] Bluetooth: hci5: command tx timeout [ 495.094510][ T4491] Bluetooth: hci6: command tx timeout [ 495.264767][ T4491] Bluetooth: hci7: command tx timeout [ 495.344725][ T4491] Bluetooth: hci8: command tx timeout [ 496.054692][ T4491] Bluetooth: hci9: command tx timeout [ 496.855722][ T4491] Bluetooth: hci5: command tx timeout [ 497.174584][ T5114] Bluetooth: hci6: command tx timeout [ 497.342962][ T5114] Bluetooth: hci7: command tx timeout [ 497.422741][ T5114] Bluetooth: hci8: command tx timeout [ 498.135602][ T5114] Bluetooth: hci9: command tx timeout [ 498.934551][ T5114] Bluetooth: hci5: command tx timeout [ 499.254487][ T5114] Bluetooth: hci6: command tx timeout [ 499.423006][ T5114] Bluetooth: hci7: command tx timeout [ 499.506088][ T5114] Bluetooth: hci8: command tx timeout [ 499.597642][ T2914] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 500.214785][ T5114] Bluetooth: hci9: command tx timeout [ 501.014678][ T5114] Bluetooth: hci5: command tx timeout [ 501.344398][ T5114] Bluetooth: hci6: command tx timeout [ 501.502690][ T5114] Bluetooth: hci7: command tx timeout [ 501.574906][ T5114] Bluetooth: hci8: command tx timeout [ 501.990696][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.303333][ T5114] Bluetooth: hci9: command tx timeout [ 530.625051][ T51] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 545.014621][ T4491] Bluetooth: hci2: command 0x0406 tx timeout [ 557.443728][ T4491] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 557.456126][ T4491] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 557.464121][ T4491] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 557.496280][ T4491] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 557.517374][ T4491] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 557.526056][ T4491] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 557.847196][ T4491] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 557.858733][ T4491] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 557.868310][ T4491] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 557.876535][ T4491] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 557.884510][ T4491] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 557.892029][ T4491] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 558.073487][ T4491] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 558.085235][ T4491] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 558.093826][ T4491] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 558.102276][ T4491] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 558.110719][ T4491] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 558.119219][ T4491] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 558.471108][ T4491] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 558.486381][ T4491] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 558.496688][ T4491] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 558.511442][ T4491] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 558.519638][ T4491] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 558.527433][ T4491] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 559.137668][ T5114] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 559.156050][ T5114] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 559.165597][ T5114] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 559.173854][ T5114] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 559.183084][ T5114] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 559.190669][ T5114] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 559.575285][ T4491] Bluetooth: hci10: command tx timeout [ 559.984633][ T4491] Bluetooth: hci11: command tx timeout [ 560.144615][ T4491] Bluetooth: hci12: command tx timeout [ 560.614534][ T4491] Bluetooth: hci13: command tx timeout [ 561.254633][ T4491] Bluetooth: hci14: command tx timeout [ 561.549397][T14311] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 561.654683][ T4491] Bluetooth: hci10: command tx timeout [ 562.054892][ T4491] Bluetooth: hci11: command tx timeout [ 562.216479][ T4491] Bluetooth: hci12: command tx timeout [ 562.704230][ T4491] Bluetooth: hci13: command tx timeout [ 563.344583][ T4491] Bluetooth: hci14: command tx timeout [ 563.430830][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.744638][ T4491] Bluetooth: hci10: command tx timeout [ 564.135978][ T4491] Bluetooth: hci11: command tx timeout [ 564.295066][ T4491] Bluetooth: hci12: command tx timeout [ 564.774586][ T4491] Bluetooth: hci13: command tx timeout [ 565.414632][ T4491] Bluetooth: hci14: command tx timeout [ 565.814544][ T4491] Bluetooth: hci10: command tx timeout [ 566.214844][ T4491] Bluetooth: hci11: command tx timeout [ 566.375060][ T4491] Bluetooth: hci12: command tx timeout [ 566.854921][ T4491] Bluetooth: hci13: command tx timeout [ 567.494713][ T4491] Bluetooth: hci14: command tx timeout [ 592.474112][T14311] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 607.575130][ T30] INFO: task syz-executor.4:21415 blocked for more than 143 seconds. [ 607.583268][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 607.605546][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/20 04:19:56 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 607.631781][ T30] task:syz-executor.4 state:D stack:28344 pid:21415 tgid:21411 ppid:14509 flags:0x00000006 [ 607.664569][ T30] Call Trace: [ 607.667913][ T30] [ 607.671034][ T30] __schedule+0x17e8/0x4a20 [ 607.694933][ T30] ? __pfx___schedule+0x10/0x10 [ 607.699865][ T30] ? __pfx_lock_release+0x10/0x10 [ 607.714343][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 607.719864][ T30] ? schedule+0x90/0x320 [ 607.724142][ T30] schedule+0x14b/0x320 [ 607.745522][ T30] schedule_preempt_disabled+0x13/0x30 [ 607.751061][ T30] __mutex_lock+0x6a4/0xd70 [ 607.764354][ T30] ? __mutex_lock+0x527/0xd70 [ 607.769094][ T30] ? dev_ethtool+0x21e/0x1bc0 [ 607.773814][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 607.794913][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 607.799749][ T30] ? dev_ethtool+0x145/0x1bc0 [ 607.814559][ T30] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 607.820010][ T30] dev_ethtool+0x21e/0x1bc0 [ 607.835016][ T30] ? dev_load+0x21/0x1f0 [ 607.839319][ T30] ? __pfx_dev_ethtool+0x10/0x10 [ 607.844285][ T30] ? dev_load+0x21/0x1f0 [ 607.860215][ T30] dev_ioctl+0x785/0x1340 [ 607.874468][ T30] sock_do_ioctl+0x240/0x460 [ 607.879120][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 607.884266][ T30] sock_ioctl+0x629/0x8e0 [ 607.904598][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 607.909516][ T30] ? __fget_files+0x29/0x470 [ 607.914211][ T30] ? __fget_files+0x3f6/0x470 [ 607.934421][ T30] ? __fget_files+0x29/0x470 [ 607.944944][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 607.950023][ T30] ? security_file_ioctl+0x87/0xb0 [ 607.965704][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 607.970629][ T30] __se_sys_ioctl+0xfc/0x170 [ 607.994514][ T30] do_syscall_64+0xf3/0x230 [ 607.999084][ T30] ? clear_bhb_loop+0x35/0x90 [ 608.003781][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.024597][ T30] RIP: 0033:0x7fee92e7cf29 [ 608.029638][ T30] RSP: 002b:00007fee93bbb0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.054627][ T30] RAX: ffffffffffffffda RBX: 00007fee92fb4050 RCX: 00007fee92e7cf29 [ 608.062668][ T30] RDX: 0000000020000900 RSI: 0000000000008946 RDI: 0000000000000065 [ 608.087329][ T30] RBP: 00007fee92eec074 R08: 0000000000000000 R09: 0000000000000000 [ 608.104409][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.112422][ T30] R13: 000000000000000b R14: 00007fee92fb4050 R15: 00007ffcacb75588 [ 608.134972][ T30]