last executing test programs: 39.886126994s ago: executing program 1 (id=1185): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0xd000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.70172668s ago: executing program 1 (id=1187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000680)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x2, 0x0, 0x400d}, 0x10) 39.473572089s ago: executing program 1 (id=1191): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYBLOB="000000000000000014001680100001800c000900000000800000000008"], 0x3c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a1180015000600142603600e1209", 0x1f}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="8252", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8}}], 0x18}}], 0x2, 0x4404c000) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$sock(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000480)="aa83b17f3209c79eaab38920125ebd9ae8fbd20a1cb19d1208a67b489ccc561b2b7d9259d6781c6bb5a9a9e974fdd0448de457532d4d3c021400ef5bddefe2336cb906abbcb4b393f7b2db779e1cfb219751bcca0ebb8a97d316b79ad1caf669f546e2bd06bb1625ef8148b5b95d1d0bf8a865c7b6ed69bf2792", 0x7a}, {&(0x7f0000000500)="dbbe6c7f84b23126572ccad002e604911f28518ad4f80d02fd170835d7a6f847b552c392df9d0f1d2e97b30a18749535c30ea92118f1342872bef9d9354ab8f4c0a611f6a3b19f55d7859825a4b71ba9670c3cd14f028a34d7e7567e37851a557afa6a9445ec9f771a9f2d285c5da5aff4005bd0d3a247aa1511c4ea453366bc97d4fe5a781f6414f67e09edbc52f81ed4450cd77a93731365d38627c2d334d5669402c2c3d7cf95035cb38ec234a333769da10dbaff48fc97efb324aa91e65a2769d866b3f20c951218cc5f196e5747c3aa6037632af53708d62837e1751c0050c1b312b53b51b30d81cd1afe8c3ad2b268581136cf1a74", 0xf8}, {&(0x7f0000000600)="9b455e0bed1406aa46dd1d6b84043cbef2b2a604cda3a27324576bc53f5236bfd84049417865991adf0665afc6b0016f934e81570896ccd6c48852920c05489acdfa36529ec2202f86", 0x49}, {&(0x7f0000000680)="34ecb6b297d67e753ef04880ef998bcd09f1682971ab8f660ecf76fff23453791728194edbdb2391fc151f37be3705e01ea545c0303a4be208e103db2d4d733675ea1645eb19809e9bffccbae61459", 0x4f}, {&(0x7f0000000700)="6005cebafe52dd23e07b7ffad85cbb87670a43feaf13edc0e37f393ca73c09c5af40eb8b6e62c3aefd5c244c08cf55195ab2bada69131ed3c44920753002fcc44a102ea8d85b7cbb3e55e3e9e25dfffea680dcc101877bbeeba9afe5c05803502089739547290628ce93d6a390a693907d22f2452ed209bd59948f9e314bb8c10650bee10e84f4b0d70e2c2b03277af3e62d71b4b8e85e7486306c9cd1736a5047d5854be85322ff00c21ca645594e222b381c15b0f0afbccd19d8ebca613d9eabde45d8d07650fc5cc804a1cbb22536bc382b57af2186372100d3ea4255762f314e2682d46b464fd9b1175b47230fb6", 0xf0}], 0x5, &(0x7f0000000880)=[@timestamping={{0x14, 0x1, 0x25, 0x6316}}, @mark={{0x14, 0x1, 0x24, 0x10001}}], 0x30}, 0x81) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) listen(r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8}]}}}]}]}], {0x14}}, 0xd8}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket(0x10, 0x803, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) ioctl$sock_inet_SIOCRTMSG(r5, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000200)='veth1\x00', 0x8000000000000001, 0x2f5, 0xf000}) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) 39.087995239s ago: executing program 1 (id=1197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x4, 0xf9}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2}}}}}}, 0x0) 23.7551116s ago: executing program 1 (id=1197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x4, 0xf9}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2}}}}}}, 0x0) 8.423130897s ago: executing program 1 (id=1197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp={0x44, 0x4, 0xf9}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2}}}}}}, 0x0) 3.933645814s ago: executing program 2 (id=1527): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)='%', 0x1, 0x4004001, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000008c0)="9c", 0x1}], 0x1, &(0x7f0000001c00)=ANY=[@ANYBLOB="14000000000000000000000002000000050000000000000014000000000000000000000002000000008000000000000014000000000000000000000002000000ff03000000000000100000000000000000000000070000001c"], 0x78}}], 0x1, 0x40805) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x5400) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d0000f51e000000002001", @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000040)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f00000000c0)={0x1, 0xb32, 0x0, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "8361efb5167aade3"}}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x80000001, 0x200, 0x81, 0x400, r3, 0x10001, '\x00', r6, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x48) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 3.652093299s ago: executing program 4 (id=1529): syz_emit_ethernet(0x46, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f0000000180)=""/112, 0x70, 0x0, &(0x7f0000000400)=""/151, 0x97}}, 0x10) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)=@o_path={&(0x7f0000000540)='./file0\x00', 0x0, 0x4010}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec081208", 0x4d}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x7fffffff, 0x3, {{0x16, 0x4, 0x2, 0x3, 0x58, 0x65, 0x0, 0x40, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x89, 0xf, "3adaa257cc2a1ddd72011c840c"}, @timestamp_addr={0x44, 0x34, 0xb6, 0x1, 0x9, [{@empty, 0xffff}, {@private=0xa010100, 0x7fffffff}, {@rand_addr=0x64010100, 0x4}, {@remote, 0xfffff1cf}, {@empty, 0xfffffff7}, {@broadcast}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x16800004}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r3, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000100)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100"/15], &(0x7f00000000c0)='GPL\x00'}, 0x90) socket$inet_smc(0x2b, 0x1, 0x0) 3.493752557s ago: executing program 4 (id=1530): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xd4c, 0x7f}, 0x8) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback={0x4c0d000000000000}}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) 2.945871745s ago: executing program 2 (id=1537): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00000000a1442d2ac2b3e9a17245f7c0a4a1b485f09cc42450f193000ed4c3540e074458fc36c8b7cb03a6061516c0f67e68caa52c26f2817ebfc9711cc57f6932e23c48e3f0498ec891f86b6e3dcffb6b12a4b6712b6605d2370e90f0fc9e9c00", @ANYRES16=0x0, @ANYBLOB="0100000000000000000045000000"], 0x14}}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000bc0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESHEX=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000001140)=ANY=[@ANYBLOB="18027a00ffff0000000000003b00000018470000f8ffffff0000000000000000181100005830c7ac40f63eb20dd15a9840cad6de97fa3047ce023ff8748afbd7a8b2905c965ec13841b74146ba771afae28ac309375545efc37c97bbf6b5a2be93f107ac770abba0a0cb3c4f3c9f272e1ac672bc2ddd85f6f350858558441aa38f064d3c529333955f9d702d7b6a05e5c4e3114860c3eedf1c432def914038344b196fe20f4809c514b29b40d3fb974496e4ccc952186a8dd2ad35ef43e54a7d9f1c01260b1fff34ad556b21a492a024f88cd7294a6850dc58ecbf31", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0xfd44, &(0x7f0000001c80)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r0, 0xfffffffffffffc66}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000001240)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r5, @ANYBLOB="82a46e3cb058e77b6f45f7da71ffa38c8eae851c9da8b4438d3341e565d8e4ffa100dd5371f39107dc63a15373ed04e525bb6a0f3bcf236e7a3754927ca72b9d165e438c5f686ac89ea58432fb3384c83ecbb6eceb1422cabffdf9622d6563b50f951960d214caa436b70ff141e0b770127bccc5b6136119731616935900c1fc201cc8315c994fc13dad79c4703fc0add5331379d5", @ANYBLOB="e68fc2692fdf5cb6c842bb0f3f12f99984ffb43d6cb64cf4dedca1a636164dda76de9d1385d9b0bd5354a2690e3aa39769f3dbeb164f77c11ee899893c2c0377bd19bb4e422b0470c74a24e92b5cabb8398076207c176781f79daa81ceebd90c917009c15438d092a2bf911c072f3c6805f1f74b4e3912d02046aea692f647aaf70700ee9014be377d965bfd275848550fc9827e858d06fec614bc0b30f7e9845761e9f9978e9194ec73f7bda36e64820bea65d0fc818def8027a7a44f4d48860bcb9415723467d0e2aeaec535f5da367d5b3dcd5dc4a9fa99db5f6c793ca29c526ca653d78b5d568c13a1d7e5b5470f6edf38bb26fa24", @ANYRES16=r1], 0x0, 0x37, 0x0, 0x0, 0x80000000}, 0x20) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000008000000000028001080000000100"/26, @ANYRES32=r7, @ANYBLOB], 0x38}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r12 = socket(0x9, 0x80000, 0x0) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x80000000, 0xb}}}}]}, 0x40}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="94000080", @ANYRES16=r11, @ANYBLOB="00012abd7000ffdbdf250200000005000500030000004c000680050002000400000014000400ff0200000000000000000000000000010800060004000000060005004e200000080003006401010114000400fe8000000000000000000000000000aa1c00018008000300ac14143d060001000200000008000700", @ANYRES32=r14, @ANYBLOB="080004000600000008000400625c0000"], 0x94}, 0x1, 0x0, 0x0, 0x20000884}, 0x4004000) close(r9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x10, &(0x7f0000000880)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x7}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r15 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r15, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r10, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000a40)={0x144, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xbb}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0x144}, 0x1, 0x0, 0x0, 0x810}, 0x8001) writev(r9, &(0x7f0000000680)=[{&(0x7f0000000080)="00c3", 0x2}, {&(0x7f0000000000)='G', 0x1}], 0x2) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x5, 0x4, 0x2, 0x7, 0x21, 0xffffffffffffffff, 0xa69, '\x00', r14, r6, 0x2, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r16, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 2.788743781s ago: executing program 3 (id=1539): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="1627", 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="380700000000000000000000000000001811000030d9778869e6a480080d36ed6dd6fd653b9db9f9f62ebef7c4041eb6e56b0ef80e6fcb1ff131", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000031000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0x0, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) bind$alg(r9, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000003c060000181100", @ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES64=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff0000", @ANYRES32, @ANYBLOB], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 2.593453466s ago: executing program 4 (id=1540): syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000850000009e00000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec0500000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='jbd2_handle_stats\x00', r0}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002f00)={0x0, 0x0}, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x2}, 0x48) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) close(r1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r4, 0x890b, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r7}, 0x9) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000003980)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000000), &(0x7f0000000040)=r10}, 0x20) r11 = socket(0x10, 0x3, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r12, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x2, 0x9, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3}, @NFCTH_STATUS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$nl_route(r11, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ID={0x8}, @NHA_ENCAP_TYPE={0x6}, @NHA_FDB={0x4}]}, 0x2c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r10, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.594182439s ago: executing program 3 (id=1543): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0xa00, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5}]}}, 0x0, 0x42}, 0x20) 1.566259771s ago: executing program 4 (id=1544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x98, r1, 0x5, 0xa000000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @val, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'Z'}]]}, 0x98}}, 0x0) 1.437727473s ago: executing program 2 (id=1545): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a320f0407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x0, 0x0, 0x0) 1.369089881s ago: executing program 3 (id=1546): socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet6(0xa, 0x6, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000006200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x8000}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) socket$netlink(0x10, 0x3, 0x1) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x4}}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66}, @initr0, @exit, @printk={@d, {0x3, 0x0, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xe2, &(0x7f0000000240)=""/226}, 0x90) 1.335087886s ago: executing program 4 (id=1547): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f00000000c0)=0x3, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)='%', 0x1, 0x4004001, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000008c0)="9c", 0x1}], 0x1, &(0x7f0000001c00)=ANY=[@ANYBLOB="14000000000000000000000002000000050000000000000014000000000000000000000002000000008000000000000014000000000000000000000002000000ff03000000000000100000000000000000000000070000001c"], 0x78}}], 0x1, 0x40805) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x5400) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r6}, 0x10, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="01000000cd0d0000f51e000000002001", @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000040)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f00000000c0)={0x1, 0xb32, 0x0, {0x77359400}, {}, {}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "8361efb5167aade3"}}, 0x48}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1a, 0x80000001, 0x200, 0x81, 0x400, r3, 0x10001, '\x00', r6, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x48) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 1.269683134s ago: executing program 0 (id=1548): r0 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={0xffffffffffffffff, 0x3f, 0x8}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x51, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0xb, &(0x7f0000000180)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x7, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc0, &(0x7f0000000640)=""/192, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x90) 1.245703255s ago: executing program 2 (id=1549): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 1.066368088s ago: executing program 0 (id=1550): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000003c0)={r4, @in6={{0xa, 0x0, 0x0, @empty}}, 0x8e34}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@sack_info={r4, 0x3, 0x632}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x88) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000000000040000000000000000", @ANYRES32=r8, @ANYBLOB="060015000800000018001680140001800d000200277d2a5d212f3a5e00000000"], 0x44}}, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r10 = accept4(r6, 0x0, 0x0, 0x0) recvmsg(r10, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x4}}, 0xe8) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r11, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 961.601821ms ago: executing program 2 (id=1551): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) socket$rxrpc(0x21, 0x2, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r4, 0x8917, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0x39, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x40}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x10, 0x1}]}}, &(0x7f0000000080)=""/227, 0x26, 0xe3, 0x1}, 0x20) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000300)) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000004c001280110001006272696467655f736c6176650000000034000580050019000200000005000900000000000500010001000000080025"], 0x98}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x7b, &(0x7f0000000100), 0x8) 956.569074ms ago: executing program 3 (id=1552): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={r4, 0x2}, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000dbd6000000007fffffff8500000050000000850000000500000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000b00)='ext4_discard_preallocations\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000b00)='ext4_discard_preallocations\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xd4c, 0x7f}, 0x8) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @local}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)='\b', 0x1}], 0x1}}], 0x1, 0x0) 817.069069ms ago: executing program 0 (id=1553): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000880)="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", 0xfde) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b25d5ff00000000b7080000000000007b8af0ff00000000af810000000000000708002f34abcfffbfa400000000000007040000f0ffffff", @ANYRES32, @ANYBLOB], 0x0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000010000791028000000000061000040000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xffc7, &(0x7f000000cf3d)=""/195}, 0x48) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x12, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000001900)) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000001940)=ANY=[@ANYRES64, @ANYBLOB="4a213c618c6a2ca8cf8ae7049160d34c92ce43fb605775949f3fbf63666d65674b39f70848406e2a8000ae6fcec33ac8e65c0633424a2f0f206d11731db8d3e0f8cb468ee601f5c3c9a3c5c9c194a58c7bac6d8778f555add65290aaea1d6da197358327e610f6415836fe8d0fc88ff9ea264ab51790036f92a67347c6b3930af760ccb03b73011e63b7b750415de15ddd4921f67143600b6077c288856149", @ANYRES32=0x41424344, @ANYBLOB="90c20000907800001e040200ac031400000020f0ddf9a66a"], 0x0) 641.416928ms ago: executing program 3 (id=1554): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) write$ppp(0xffffffffffffffff, &(0x7f00000002c0)="1627", 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="380700000000000000000000000000001811000030d9778869e6a480080d36ed6dd6fd653b9db9f9f62ebef7c4041eb6e56b0ef80e6fcb1ff131", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000031000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0x0, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) bind$alg(r8, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(anubis-generic)\x00'}, 0x58) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0xf0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000003c060000181100", @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES64=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff0000", @ANYRES32, @ANYBLOB], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 501.379387ms ago: executing program 0 (id=1555): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f00000002c0)={0x2, 0x0, @local}, 0x10, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000005c0)="f554219fbae679ce3b6b72bbec86b2358b29a9b3ce120c56cb1038a9dd3fee0f5b175906e6dc1f3a2a999dcdc5e66885b17d9cd67dba9e02769e8d04cb83d8bc215cd4fd3d64cb397357434245f2d8524920d793d391d049b2aff78ee7603a", 0x5f}], 0x2, &(0x7f0000000740)}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="93", 0x1}], 0x1, &(0x7f0000000900), 0x4000}}], 0x2, 0x4810) 298.805067ms ago: executing program 0 (id=1556): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000b15000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x4efb7000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000440)="ff915a45d7c5f7c8568ebdc57386a19e302e55f53d1b2a9388fd12ad903c29d3e976d8100612cd0800000000000000d7a274b8c2401413676458fa504e09e887ef6ff0cdd758010df00f564a11c1713dbcabd72ba811021faee1ac8d79bebdc3fe43f43c66e89dd70c176a25738767a6a417a9ef94cf1b85c3", 0x79}, {0x0}, {&(0x7f00000006c0)}, {0x0}], 0x4, 0x0, 0xffffffa1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[], 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200f5", 0x34, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x0, 0x1, 0x4, 0xfffffff8, 0x8}, @exp_fastopen={0xfe, 0x13, 0xf989, "5937cae93a5e2678967658b7ee03c7"}]}}}}}}}}, 0x0) 205.688384ms ago: executing program 4 (id=1557): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x6, 0x88c, [0x0, 0x20000580, 0x2000067e, 0x20000932], 0x0, &(0x7f0000000040), &(0x7f0000000580)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0xd, 0x9300, 'veth0\x00', 'dvmrp1\x00', 'gre0\x00', 'veth1_to_batadv\x00', @remote, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0xff, 0xff, 0xff], 0x9e, 0x9e, 0xce, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x1, 0x1}}}], [], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{0x11, 0x10, 0x892f, 'pim6reg0\x00', 'macsec0\x00', 'pimreg0\x00', 'veth0_to_bridge\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@nflog={'nflog\x00', 0x50, {{0x3, 0x2, 0x40, 0x0, 0x0, "486ff122e2eeadac6f39a927ab12180d208260e71116acf1265910c109a8f816f8b70cf0c460830701c90d0370ed336ac3fdaea9288469592b08aa9e19964074"}}}}, {0x3, 0x50, 0x88ca, 'veth0_vlan\x00', 'veth0_to_batadv\x00', 'lo\x00', 'netpci0\x00', @empty, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @broadcast, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0xae, 0x126, 0x19e, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x5, 0x200, 0x1, 0x1}}}], [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x81, 0xf3, {0x200}}}}, @common=@AUDIT={'AUDIT\x00', 0x8}], @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x1, 0xf012, 0x0, 0x0, "6f6a737429e568da0435e2f65980490725dc587a9933cd0ca5b24812e7e59d524bc05325ac5cbec7e9876fc59e279427338c082c98fe2a8134cf518ffa73c155"}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffc, 0x1, [{0x14, 0x26, 0x806, 'veth1_to_bridge\x00', 'syzkaller1\x00', 'veth0_to_batadv\x00', 'veth0_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0xff, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0x11e, 0x14e, 0x196, [@mark_m={{'mark_m\x00', 0x0, 0x18}, {{0x1000, 0x8, 0x2}}}, @rateest={{'rateest\x00', 0x0, 0x48}, {{'dvmrp0\x00', 'netdevsim0\x00', 0x21, 0x2, 0x2, 0x958d, 0xffffffad, 0x53c8, {}, {0x5}}}}], [@common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x1, 0x3f, {0x7}}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x2, [{0x11, 0x24, 0x16, 'macsec0\x00', 'wg1\x00', 'tunl0\x00', 'caif0\x00', @broadcast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @multicast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x116, 0x116, 0x246, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, [0xff000000, 0xff], [0x0, 0x0, 0xffffff00, 0xffffffff], 0x1, 0x2, 0x64, 0x5, 0x4e22, 0x4e22, 0x4e20, 0x4e24}}}, @vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x7, 0x1b, 0x5}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x4, 'system_u:object_r:hostname_exec_t:s0\x00'}}}}, {0x5, 0x1, 0x18, 'ip6_vti0\x00', 'pim6reg1\x00', 'bond0\x00', 'pim6reg\x00', @empty, [0xff, 0xff, 0xff, 0xff, 0xff], @multicast, [0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}}]}]}, 0x904) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000002c0)=@req={0x28, &(0x7f0000000240)={'syzkaller0\x00', @ifru_addrs=@sco={0x1f, @none}}}) 137.47977ms ago: executing program 3 (id=1558): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002c00)={'hsr0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18002e05ef581851", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x8, 0x5, 0x101, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) socket(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x0, 0x0, &(0x7f0000000080)=0x1b00) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="38010000100033060000000000000000ffffffff0000000000000000000000006401010100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000032000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000080001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00000000000000000000000000000026bd7000000000000a000400000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="010000000000000000003900000008000300fcaff6dd63c0c19400971984efd8e843aeeb858d390844e115d80291321176338a9cd71b16c90de9b5164ea5f75724885b69c0edaf8fab1aceb762ec3065959d641b0db4fc5f896c5f671f2c767b9f640385418129638bf57a59dc7157ba08534d556f6548b37856109fb6f532fc3e17082f8121fc6ad7621169e8406b9fef1b241e07c69301e9", @ANYRES32=r7, @ANYBLOB="1c005a80180001801400030000000000000000000000000500000000"], 0x38}}, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) epoll_create1(0x0) socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x40}}}, 0xb8}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013007b990000000000000000fc0000"], 0xb8}}, 0x0) 60.865226ms ago: executing program 0 (id=1559): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="a78700000000000000a213"], 0x14}}, 0x0) 0s ago: executing program 2 (id=1560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x2c, 0x1200}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x2f00, 0x0, 0x1, 0x0, @private, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}}}, 0xfdef) kernel console output (not intermixed with test programs): 5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.872873][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.917207][ T5095] veth0_vlan: entered promiscuous mode [ 71.962783][ T5095] veth1_vlan: entered promiscuous mode [ 72.037179][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.104153][ T5100] veth0_vlan: entered promiscuous mode [ 72.135188][ T5092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.165743][ T5095] veth0_macvtap: entered promiscuous mode [ 72.193491][ T5095] veth1_macvtap: entered promiscuous mode [ 72.219336][ T5100] veth1_vlan: entered promiscuous mode [ 72.309701][ T5098] veth0_vlan: entered promiscuous mode [ 72.334925][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.358373][ T5098] veth1_vlan: entered promiscuous mode [ 72.373012][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.412985][ T5095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.428783][ T5095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.439530][ T5095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.456344][ T5095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.496147][ T5103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.559931][ T5100] veth0_macvtap: entered promiscuous mode [ 72.572756][ T5100] veth1_macvtap: entered promiscuous mode [ 72.608716][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.650873][ T5108] Bluetooth: hci0: command tx timeout [ 72.674618][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.685993][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.703878][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.720966][ T5108] Bluetooth: hci4: command tx timeout [ 72.727238][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.737820][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.749756][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.774621][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.800684][ T5108] Bluetooth: hci2: command tx timeout [ 72.806165][ T5108] Bluetooth: hci3: command tx timeout [ 72.810234][ T5102] Bluetooth: hci1: command tx timeout [ 72.817531][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.843643][ T5098] veth0_macvtap: entered promiscuous mode [ 72.852285][ T5100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.861398][ T5100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.871170][ T5100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.879919][ T5100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.946774][ T5103] veth0_vlan: entered promiscuous mode [ 72.986466][ T5098] veth1_macvtap: entered promiscuous mode [ 73.009962][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.035544][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.061678][ T5103] veth1_vlan: entered promiscuous mode [ 73.077543][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.113010][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.123857][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.134476][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.148173][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.184404][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.196534][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.210295][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.221170][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.234306][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.275145][ T5098] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.288211][ T5098] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.303849][ T5098] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.315002][ T5098] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.450953][ T2461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.467562][ T2461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.494358][ T5092] veth0_vlan: entered promiscuous mode [ 73.506815][ T5092] veth1_vlan: entered promiscuous mode [ 73.556046][ T5103] veth0_macvtap: entered promiscuous mode [ 73.604214][ T2461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.622911][ T5103] veth1_macvtap: entered promiscuous mode [ 73.632523][ T2461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.658188][ T5181] netlink: 'syz.2.6': attribute type 4 has an invalid length. [ 73.724936][ T5092] veth0_macvtap: entered promiscuous mode [ 73.769574][ T5092] veth1_macvtap: entered promiscuous mode [ 73.868615][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.890972][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.908038][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.928526][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.938528][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.949290][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.971821][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.025132][ T2461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.046107][ T2461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.089165][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.101559][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.113851][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.124534][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.135689][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.147881][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.169446][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.183370][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.194150][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.204135][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.215019][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.224927][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.235427][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.249429][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.262314][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.274454][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.349549][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.353667][ T5103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.380242][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.402245][ T5103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.428927][ T5103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.444161][ T5103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.459781][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.471319][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.486665][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.490339][ T5197] Cannot find add_set index 0 as target [ 74.497424][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.516656][ T5198] FAULT_INJECTION: forcing a failure. [ 74.516656][ T5198] name failslab, interval 1, probability 0, space 0, times 1 [ 74.529702][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.543735][ T5198] CPU: 0 PID: 5198 Comm: syz.2.9 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 74.553628][ T5198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 74.563827][ T5198] Call Trace: [ 74.567148][ T5198] [ 74.570113][ T5198] dump_stack_lvl+0x241/0x360 [ 74.574861][ T5198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.580102][ T5198] ? __pfx__printk+0x10/0x10 [ 74.584747][ T5198] ? __pfx___might_resched+0x10/0x10 [ 74.590082][ T5198] ? dynamic_dname+0x141/0x1b0 [ 74.594907][ T5198] should_fail_ex+0x3b0/0x4e0 [ 74.599652][ T5198] ? tomoyo_encode+0x26f/0x540 [ 74.604447][ T5198] should_failslab+0x9/0x20 [ 74.609074][ T5198] __kmalloc_noprof+0xd8/0x400 [ 74.613865][ T5198] tomoyo_encode+0x26f/0x540 [ 74.618482][ T5198] ? __pfx_sockfs_dname+0x10/0x10 [ 74.623554][ T5198] tomoyo_realpath_from_path+0x59e/0x5e0 [ 74.629247][ T5198] tomoyo_path_number_perm+0x23a/0x880 [ 74.631291][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.634741][ T5198] ? tomoyo_path_number_perm+0x208/0x880 [ 74.648642][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.650155][ T5198] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 74.650234][ T5198] ? __fget_files+0x29/0x470 [ 74.650268][ T5198] ? __fget_files+0x3f6/0x470 [ 74.650296][ T5198] ? __fget_files+0x29/0x470 [ 74.650334][ T5198] security_file_ioctl+0x75/0xb0 [ 74.650371][ T5198] __se_sys_ioctl+0x47/0x170 [ 74.650402][ T5198] do_syscall_64+0xf3/0x230 [ 74.650427][ T5198] ? clear_bhb_loop+0x35/0x90 [ 74.650458][ T5198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.650500][ T5198] RIP: 0033:0x7fd7a0b75b99 [ 74.650525][ T5198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.650544][ T5198] RSP: 002b:00007fd7a19e6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.650571][ T5198] RAX: ffffffffffffffda RBX: 00007fd7a0d04078 RCX: 00007fd7a0b75b99 [ 74.650589][ T5198] RDX: 0000000020000340 RSI: 000000000000890c RDI: 0000000000000005 [ 74.650603][ T5198] RBP: 00007fd7a19e60a0 R08: 0000000000000000 R09: 0000000000000000 [ 74.650618][ T5198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.769729][ T5198] R13: 000000000000006e R14: 00007fd7a0d04078 R15: 00007fff8eb8e598 [ 74.777732][ T5198] [ 74.790178][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.811467][ T5198] ERROR: Out of memory at tomoyo_realpath_from_path. [ 74.816615][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 74.819344][ T53] Bluetooth: hci0: command tx timeout [ 74.835906][ T53] Bluetooth: hci4: command tx timeout [ 74.844662][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.885855][ T53] Bluetooth: hci1: command tx timeout [ 74.896872][ T5102] Bluetooth: hci3: command tx timeout [ 74.896892][ T5108] Bluetooth: hci2: command tx timeout [ 74.927204][ T5092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.928556][ T5204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 74.952522][ T5092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.963620][ T5092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.972428][ T5092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.993017][ T5204] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 75.409885][ T5214] syz.3.14 uses obsolete (PF_INET,SOCK_PACKET) [ 75.469572][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.486485][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.498394][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.528141][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.704633][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.720557][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.739523][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.783281][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.974877][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 76.045967][ T5224] Cannot find add_set index 0 as target [ 76.407354][ T5237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21'. [ 76.504045][ T5237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21'. [ 76.980444][ T29] audit: type=1804 audit(1719769228.797:2): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5" name="/root/syzkaller.LyNa43/0/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 77.322463][ T5267] sctp: [Deprecated]: syz.0.28 (pid 5267) Use of int in max_burst socket option. [ 77.322463][ T5267] Use struct sctp_assoc_value instead [ 77.337616][ T5268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27'. [ 77.523691][ T5272] Cannot find add_set index 0 as target [ 77.531525][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 77.592945][ T5281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.27'. [ 77.721578][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 77.849185][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 78.042387][ T5297] netlink: 16 bytes leftover after parsing attributes in process `syz.1.34'. [ 78.377375][ T5311] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.513182][ T5311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.40'. [ 78.558366][ T5318] Cannot find add_set index 0 as target [ 78.728145][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 78.854519][ T5331] warning: `syz.1.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.125862][ T5340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.48'. [ 80.009726][ T5386] __nla_validate_parse: 3 callbacks suppressed [ 80.009747][ T5386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.64'. [ 80.138606][ T5394] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.204605][ T5390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.64'. [ 80.224339][ T5390] nbd: device at index 64 is going down [ 80.372287][ T5398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.67'. [ 80.418043][ T5398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.67'. [ 80.459498][ T5398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.67'. [ 80.624568][ T5412] netlink: 'syz.1.71': attribute type 5 has an invalid length. [ 80.645441][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 80.737856][ T5412] : entered promiscuous mode [ 80.836232][ T5420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.75'. [ 80.853860][ T5420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.75'. [ 80.888519][ T5421] netlink: 24 bytes leftover after parsing attributes in process `syz.2.74'. [ 81.265537][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.77'. [ 81.312234][ T5429] nbd: couldn't find a device at index 0 [ 81.402246][ T5442] trusted_key: syz.1.83 sent an empty control message without MSG_MORE. [ 81.767546][ T5459] netlink: 'syz.3.89': attribute type 1 has an invalid length. [ 82.056413][ T5472] netlink: 'syz.3.91': attribute type 7 has an invalid length. [ 82.086892][ T5472] netlink: 'syz.3.91': attribute type 3 has an invalid length. [ 83.071956][ T5507] Bluetooth: MGMT ver 1.22 [ 83.212244][ T5513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.437422][ T5517] netlink: 'syz.4.108': attribute type 3 has an invalid length. [ 83.812215][ T5522] netlink: 'syz.4.109': attribute type 2 has an invalid length. [ 84.255722][ T5543] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 85.216137][ T5577] ip6t_REJECT: ECHOREPLY is not supported [ 85.491249][ T5587] __nla_validate_parse: 14 callbacks suppressed [ 85.491270][ T5587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.133'. [ 85.549183][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.133'. [ 85.595906][ T5588] batadv_slave_1: entered promiscuous mode [ 85.625107][ T5588] vlan1: entered promiscuous mode [ 85.702524][ T5583] vlan1: left promiscuous mode [ 85.708821][ T5583] batadv_slave_1: left promiscuous mode [ 85.936163][ T5607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 86.081348][ T5609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 86.204689][ T5619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 86.420716][ T5627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 86.458809][ T5627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.151'. [ 86.621951][ T5637] netlink: 596 bytes leftover after parsing attributes in process `syz.0.153'. [ 87.075098][ T5652] netlink: 64 bytes leftover after parsing attributes in process `syz.2.161'. [ 87.092424][ T5654] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 87.147225][ T9] cfg80211: failed to load regulatory.db [ 87.533844][ T5666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 88.615628][ T5708] Zero length message leads to an empty skb [ 89.642099][ T29] audit: type=1804 audit(1719769241.467:3): pid=5742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.189" name="/root/syzkaller.iky6xH/37/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 89.775746][ T5748] netlink: 'syz.4.195': attribute type 30 has an invalid length. [ 89.988993][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.837389][ T5779] Bluetooth: MGMT ver 1.22 [ 91.155688][ T5795] __nla_validate_parse: 13 callbacks suppressed [ 91.155711][ T5795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 91.217495][ T5799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.213'. [ 91.277845][ T5800] netlink: 'syz.0.214': attribute type 2 has an invalid length. [ 91.342717][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.216'. [ 92.087709][ T5823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.216322][ T5838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.227'. [ 92.248038][ T5838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 92.460976][ T5845] pim6reg1: entered promiscuous mode [ 92.481299][ T5845] pim6reg1: entered allmulticast mode [ 93.155311][ T5864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.239'. [ 93.371393][ T5879] netlink: 'syz.2.241': attribute type 1 has an invalid length. [ 93.500351][ T5884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.242'. [ 93.547691][ T5884] netlink: 4 bytes leftover after parsing attributes in process `syz.4.242'. [ 93.832003][ T5898] tipc: Started in network mode [ 93.851563][ T5898] tipc: Node identity 00000000000000000000ffffac1414, cluster identity 4711 [ 93.874060][ T5898] tipc: Enabling of bearer rejected, failed to enable media [ 93.905619][ T5898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.246'. [ 93.950711][ T5898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.246'. [ 94.174232][ T5909] bridge1: entered promiscuous mode [ 94.191878][ T5909] bridge1: entered allmulticast mode [ 95.021918][ T5944] IPv4: Oversized IP packet from 127.202.26.0 [ 95.747335][ T5979] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 95.765413][ T5979] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 95.843434][ T5979] macvlan2: entered promiscuous mode [ 95.867597][ T5979] macvlan2: entered allmulticast mode [ 95.878264][ T5979] bridge0: entered promiscuous mode [ 95.888014][ T5979] bridge0: entered allmulticast mode [ 95.904325][ T5979] team0: Port device macvlan2 added [ 96.300602][ T5996] netlink: 'syz.1.284': attribute type 9 has an invalid length. [ 96.369542][ T6012] sctp: [Deprecated]: syz.4.289 (pid 6012) Use of int in max_burst socket option deprecated. [ 96.369542][ T6012] Use struct sctp_assoc_value instead [ 96.731276][ T6025] __nla_validate_parse: 9 callbacks suppressed [ 96.731298][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.4.290'. [ 96.793104][ T6027] netlink: 224 bytes leftover after parsing attributes in process `syz.3.294'. [ 96.813431][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 96.869347][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.290'. [ 97.176303][ T6044] netlink: 'syz.2.301': attribute type 11 has an invalid length. [ 97.465218][ T6056] netlink: 12 bytes leftover after parsing attributes in process `syz.1.306'. [ 97.520473][ T6059] netlink: 224 bytes leftover after parsing attributes in process `syz.4.308'. [ 97.583119][ T6066] netlink: 24 bytes leftover after parsing attributes in process `syz.3.310'. [ 97.688728][ T6072] netlink: 'syz.4.312': attribute type 9 has an invalid length. [ 97.822158][ T5143] block nbd64: NBD_DISCONNECT [ 97.867350][ T6071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 97.918439][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 97.975587][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.309'. [ 98.086146][ T6089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.115228][ T6091] vlan2: entered promiscuous mode [ 98.718261][ T6116] sch_tbf: burst 0 is lower than device bridge2 mtu (1514) ! [ 99.712372][ T6159] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 99.730250][ T6159] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 100.257961][ T6179] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 100.841931][ T6198] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 101.697600][ T6231] team0: Port device bridge1 added [ 102.103222][ T6247] __nla_validate_parse: 20 callbacks suppressed [ 102.103246][ T6247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.373'. [ 102.342986][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.375'. [ 102.371094][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.375'. [ 102.393346][ T6257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 102.426727][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 102.441362][ T6257] nbd: couldn't find a device at index 0 [ 102.863768][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 102.896844][ T6276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 103.217371][ T6298] netlink: 'syz.3.392': attribute type 7 has an invalid length. [ 103.336746][ T6298] Êü: entered promiscuous mode [ 103.370683][ T6296] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744071562067969) [ 103.406285][ T6296] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 103.473252][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.393'. [ 103.501592][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.4.393'. [ 103.542727][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.393'. [ 104.460713][ T6347] ÿÿÿG: entered promiscuous mode [ 104.755472][ T6360] netlink: 'syz.2.413': attribute type 1 has an invalid length. [ 104.806199][ T6360] netlink: 'syz.2.413': attribute type 2 has an invalid length. [ 104.843273][ T6367] tipc: Started in network mode [ 104.848301][ T6367] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 104.881712][ T6367] tipc: Enabled bearer , priority 16 [ 105.605105][ T6408] mac80211_hwsim hwsim8 €: renamed from wlan0 (while UP) [ 105.883318][ T25] tipc: Node number set to 10922666 [ 106.558655][ T6450] bond0: option use_carrier: invalid value (215) [ 107.078338][ T6474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.469890][ T6498] __nla_validate_parse: 14 callbacks suppressed [ 107.469913][ T6498] netlink: 64 bytes leftover after parsing attributes in process `syz.1.458'. [ 107.525555][ T6498] netlink: 'syz.1.458': attribute type 4 has an invalid length. [ 107.550219][ T6498] netlink: 224 bytes leftover after parsing attributes in process `syz.1.458'. [ 107.581479][ T6501] cgroup: fork rejected by pids controller in /syz2 [ 107.932142][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 107.998577][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 108.387009][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 108.421182][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 108.594549][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 108.784385][ T2791] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.819228][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 108.933338][ T2791] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.066412][ T2791] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.161761][ T6664] netlink: 'syz.1.477': attribute type 32 has an invalid length. [ 109.183249][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 109.197046][ T6664] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 109.339500][ T2791] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.571556][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.481'. [ 109.821743][ T5102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.832383][ T5102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.843092][ T5102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.851942][ T5102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.863484][ T5102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 109.872118][ T5102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 110.027617][ T2791] bridge_slave_1: left allmulticast mode [ 110.041730][ T2791] bridge_slave_1: left promiscuous mode [ 110.062884][ T2791] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.157281][ T2791] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.268605][ T2791] tipc: Resetting bearer [ 111.132843][ T2791] tipc: Disabling bearer [ 111.297973][ T2791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.315021][ T2791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.326388][ T2791] bond0 (unregistering): Released all slaves [ 111.510385][ T2791] tipc: Left network mode [ 111.660798][ T6771] netlink: 'syz.3.504': attribute type 10 has an invalid length. [ 111.772811][ T6771] team0: Device veth1_macvtap failed to register rx_handler [ 111.848200][ T6779] netlink: 'syz.0.507': attribute type 1 has an invalid length. [ 111.920331][ T53] Bluetooth: hci1: command tx timeout [ 111.935993][ T6771] syz.3.504 (6771) used greatest stack depth: 18224 bytes left [ 112.305965][ T6792] netlink: 'syz.1.511': attribute type 2 has an invalid length. [ 112.541090][ T6808] __nla_validate_parse: 6 callbacks suppressed [ 112.541111][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.514'. [ 112.672028][ T5247] block nbd64: NBD_DISCONNECT [ 112.698547][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 112.720241][ T5142] IPVS: starting estimator thread 0... [ 112.781855][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 112.797047][ T6816] netlink: 256 bytes leftover after parsing attributes in process `syz.3.516'. [ 112.889645][ T6787] syzkaller0: entered promiscuous mode [ 112.897778][ T6822] IPVS: using max 16 ests per chain, 38400 per kthread [ 112.908919][ T6787] syzkaller0: entered allmulticast mode [ 113.099044][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.518'. [ 114.013651][ T53] Bluetooth: hci1: command tx timeout [ 114.578072][ T2791] hsr_slave_0: left promiscuous mode [ 114.596100][ T2791] hsr_slave_1: left promiscuous mode [ 114.617909][ T2791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.630178][ T2791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.644806][ T2791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.656534][ T2791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.697997][ T2791] veth1_macvtap: left promiscuous mode [ 114.704485][ T2791] veth0_macvtap: left promiscuous mode [ 114.711665][ T2791] veth1_vlan: left promiscuous mode [ 114.717405][ T2791] veth0_vlan: left promiscuous mode [ 114.987613][ T6858] syz.4.524[6858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.987887][ T6858] syz.4.524[6858] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.385263][ T2791] team0 (unregistering): Port device team_slave_1 removed [ 115.437681][ T2791] team0 (unregistering): Port device team_slave_0 removed [ 115.928530][ T6693] chnl_net:caif_netlink_parms(): no params data found [ 116.070859][ T6864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.527'. [ 116.084421][ T53] Bluetooth: hci1: command tx timeout [ 116.184665][ T6709] block nbd64: NBD_DISCONNECT [ 116.305113][ T6874] macsec0: entered allmulticast mode [ 116.312744][ T6874] veth1_macvtap: entered allmulticast mode [ 116.440470][ T6879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.528'. [ 116.523860][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.528'. [ 116.637240][ T6693] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.663841][ T6693] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.674230][ T6693] bridge_slave_0: entered allmulticast mode [ 116.704709][ T6693] bridge_slave_0: entered promiscuous mode [ 116.749816][ T6693] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.797891][ T6693] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.835857][ T6693] bridge_slave_1: entered allmulticast mode [ 116.872337][ T6693] bridge_slave_1: entered promiscuous mode [ 117.081850][ T6693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.153384][ T6693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.357695][ T6924] netlink: 12 bytes leftover after parsing attributes in process `syz.0.540'. [ 117.393285][ T6693] team0: Port device team_slave_0 added [ 117.458982][ T6693] team0: Port device team_slave_1 added [ 117.532158][ T6932] netlink: 24 bytes leftover after parsing attributes in process `syz.4.541'. [ 117.566280][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.600453][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.660072][ T6693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.733456][ T6693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.750556][ T6693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.836075][ T6693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.981937][ T6944] netlink: 'syz.3.546': attribute type 10 has an invalid length. [ 118.014610][ T6944] netlink: 55 bytes leftover after parsing attributes in process `syz.3.546'. [ 118.160654][ T53] Bluetooth: hci1: command tx timeout [ 118.162066][ T6954] netlink: 'syz.1.548': attribute type 1 has an invalid length. [ 118.192572][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.547'. [ 118.202540][ T6954] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.548'. [ 118.235646][ T6954] netlink: 1 bytes leftover after parsing attributes in process `syz.1.548'. [ 118.251445][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 118.404740][ T6693] hsr_slave_0: entered promiscuous mode [ 118.450684][ T6693] hsr_slave_1: entered promiscuous mode [ 118.474256][ T6693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.492757][ T6693] Cannot create hsr debugfs directory [ 118.498420][ T6968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 118.894062][ T6983] netlink: 'syz.4.555': attribute type 4 has an invalid length. [ 118.922832][ T6988] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 119.018498][ T6982] macsec0: entered allmulticast mode [ 119.044637][ T6982] veth1_macvtap: entered allmulticast mode [ 119.073005][ T6993] netlink: 24 bytes leftover after parsing attributes in process `syz.0.558'. [ 119.187507][ T5143] block nbd64: NBD_DISCONNECT [ 119.313791][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 119.802356][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 119.851442][ T7028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.564'. [ 120.572868][ T7042] netlink: 'syz.4.569': attribute type 2 has an invalid length. [ 120.701076][ T7050] netlink: 'syz.3.572': attribute type 6 has an invalid length. [ 120.732796][ T7050] netlink: 'syz.3.572': attribute type 5 has an invalid length. [ 120.749157][ T7055] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 120.903697][ T6693] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 120.938272][ T6693] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 120.983562][ T7062] netlink: 'syz.3.575': attribute type 3 has an invalid length. [ 121.002825][ T6693] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 121.105749][ T6693] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 121.601469][ T6693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.732851][ T6693] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.907036][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.914313][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.977191][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.984425][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.236532][ T7116] bridge_slave_1: left allmulticast mode [ 122.253297][ T7116] bridge_slave_1: left promiscuous mode [ 122.270835][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.307400][ T7116] bridge_slave_0: left allmulticast mode [ 122.314714][ T7116] bridge_slave_0: left promiscuous mode [ 122.323300][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.920937][ T7143] syzkaller1: entered promiscuous mode [ 122.926483][ T7143] syzkaller1: entered allmulticast mode [ 123.045175][ T7152] __nla_validate_parse: 16 callbacks suppressed [ 123.045195][ T7152] netlink: 60 bytes leftover after parsing attributes in process `syz.3.599'. [ 123.107879][ T7152] netlink: 172 bytes leftover after parsing attributes in process `syz.3.599'. [ 123.166280][ T6693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.203208][ T7156] tipc: Started in network mode [ 123.209104][ T7156] tipc: Node identity ac1414aa, cluster identity 4711 [ 123.222137][ T7156] tipc: Enabled bearer , priority 10 [ 123.428303][ T6693] veth0_vlan: entered promiscuous mode [ 123.492606][ T6693] veth1_vlan: entered promiscuous mode [ 123.558822][ T7171] raw_sendmsg: syz.0.605 forgot to set AF_INET. Fix it! [ 123.587105][ T7174] netlink: 'syz.4.606': attribute type 21 has an invalid length. [ 123.608429][ T7173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.604'. [ 123.654082][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 123.693356][ T6693] veth0_macvtap: entered promiscuous mode [ 123.719687][ T7173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 123.753877][ T6693] veth1_macvtap: entered promiscuous mode [ 123.851214][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.893796][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.955225][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.983044][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.022893][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.054335][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.082580][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.106234][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.126564][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.176285][ T7196] netlink: 'syz.0.611': attribute type 4 has an invalid length. [ 124.198149][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.211381][ T7196] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.611'. [ 124.228844][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.241474][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.259476][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.272764][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.293913][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.345002][ T5208] tipc: Node number set to 2886997162 [ 124.381059][ T6693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.433125][ T6693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.494261][ T6693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.529451][ T6693] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.580092][ T6693] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.589174][ T6693] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.635341][ T6693] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.699948][ T7216] netlink: 36 bytes leftover after parsing attributes in process `syz.0.617'. [ 124.754515][ T7204] veth1_macvtap: left allmulticast mode [ 124.801211][ T7204] macsec0: entered promiscuous mode [ 125.013411][ T7229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.619'. [ 125.032228][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.081520][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.619'. [ 125.083601][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.143553][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.619'. [ 125.211603][ T7228] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 125.271728][ T5307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.310203][ T5307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.806026][ T7253] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 127.020441][ T7306] netlink: 'syz.1.641': attribute type 2 has an invalid length. [ 127.080542][ T7306] FAULT_INJECTION: forcing a failure. [ 127.080542][ T7306] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 127.140174][ T7306] CPU: 0 PID: 7306 Comm: syz.1.641 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 127.150343][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 127.160441][ T7306] Call Trace: [ 127.163755][ T7306] [ 127.166716][ T7306] dump_stack_lvl+0x241/0x360 [ 127.171454][ T7306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.176697][ T7306] ? __pfx__printk+0x10/0x10 [ 127.181349][ T7306] ? snprintf+0xda/0x120 [ 127.185645][ T7306] should_fail_ex+0x3b0/0x4e0 [ 127.190385][ T7306] _copy_to_user+0x2f/0xb0 [ 127.194853][ T7306] simple_read_from_buffer+0xca/0x150 [ 127.200278][ T7306] proc_fail_nth_read+0x1e9/0x250 [ 127.205350][ T7306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.210944][ T7306] ? rw_verify_area+0x514/0x6b0 [ 127.215859][ T7306] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 127.221450][ T7306] vfs_read+0x204/0xbd0 [ 127.225649][ T7306] ? __pfx_lock_release+0x10/0x10 [ 127.230724][ T7306] ? __pfx_vfs_read+0x10/0x10 [ 127.235452][ T7306] ? __fget_files+0x29/0x470 [ 127.240101][ T7306] ? __fget_files+0x3f6/0x470 [ 127.244841][ T7306] ksys_read+0x1a0/0x2c0 [ 127.249140][ T7306] ? __pfx_ksys_read+0x10/0x10 [ 127.253953][ T7306] ? do_syscall_64+0x100/0x230 [ 127.258761][ T7306] ? do_syscall_64+0xb6/0x230 [ 127.263489][ T7306] do_syscall_64+0xf3/0x230 [ 127.268035][ T7306] ? clear_bhb_loop+0x35/0x90 [ 127.272765][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.278695][ T7306] RIP: 0033:0x7fd26cb7467c [ 127.283136][ T7306] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 127.302751][ T7306] RSP: 002b:00007fd26d8fa040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 127.311178][ T7306] RAX: ffffffffffffffda RBX: 00007fd26cd03fa0 RCX: 00007fd26cb7467c [ 127.319161][ T7306] RDX: 000000000000000f RSI: 00007fd26d8fa0b0 RDI: 0000000000000004 [ 127.327139][ T7306] RBP: 00007fd26d8fa0a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.335116][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 127.343094][ T7306] R13: 000000000000000b R14: 00007fd26cd03fa0 R15: 00007ffdd4295b08 [ 127.351093][ T7306] [ 128.137144][ T7347] __nla_validate_parse: 8 callbacks suppressed [ 128.137166][ T7347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.654'. [ 128.435812][ T7361] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 128.575871][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 128.609924][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 128.776669][ T7361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.661'. [ 128.844294][ T7378] Cannot find add_set index 0 as target [ 129.110762][ T7388] FAULT_INJECTION: forcing a failure. [ 129.110762][ T7388] name failslab, interval 1, probability 0, space 0, times 0 [ 129.168278][ T7388] CPU: 0 PID: 7388 Comm: syz.4.668 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 129.178340][ T7388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 129.188443][ T7388] Call Trace: [ 129.191760][ T7388] [ 129.194726][ T7388] dump_stack_lvl+0x241/0x360 [ 129.199450][ T7388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.204691][ T7388] ? __pfx__printk+0x10/0x10 [ 129.209339][ T7388] ? __lock_acquire+0x1346/0x1fd0 [ 129.214418][ T7388] should_fail_ex+0x3b0/0x4e0 [ 129.219148][ T7388] ? __alloc_skb+0x1c3/0x440 [ 129.223786][ T7388] should_failslab+0x9/0x20 [ 129.228331][ T7388] kmem_cache_alloc_node_noprof+0x71/0x320 [ 129.234197][ T7388] __alloc_skb+0x1c3/0x440 [ 129.238667][ T7388] ? __pfx___alloc_skb+0x10/0x10 [ 129.243656][ T7388] ? __pfx___might_resched+0x10/0x10 [ 129.248994][ T7388] alloc_skb_with_frags+0xc3/0x770 [ 129.254174][ T7388] sock_alloc_send_pskb+0x91a/0xa60 [ 129.259448][ T7388] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 129.265223][ T7388] ? __pfx_lock_acquire+0x10/0x10 [ 129.270294][ T7388] ? aa_file_perm+0x137/0xf60 [ 129.275015][ T7388] ? __pfx_lock_release+0x10/0x10 [ 129.280086][ T7388] ? iov_iter_advance+0x8f/0x1b0 [ 129.285073][ T7388] tun_get_user+0xcce/0x4560 [ 129.289740][ T7388] ? __pfx_tun_get_user+0x10/0x10 [ 129.294826][ T7388] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 129.300338][ T7388] ? tun_get+0x1e/0x2f0 [ 129.304567][ T7388] ? tun_get+0x1e/0x2f0 [ 129.308772][ T7388] ? tun_get+0x27d/0x2f0 [ 129.313069][ T7388] tun_chr_write_iter+0x113/0x1f0 [ 129.318145][ T7388] vfs_write+0xa72/0xc90 [ 129.322440][ T7388] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 129.328039][ T7388] ? __pfx_vfs_write+0x10/0x10 [ 129.332876][ T7388] ksys_write+0x1a0/0x2c0 [ 129.337258][ T7388] ? __pfx_ksys_write+0x10/0x10 [ 129.342160][ T7388] ? do_syscall_64+0x100/0x230 [ 129.346971][ T7388] ? do_syscall_64+0xb6/0x230 [ 129.351756][ T7388] do_syscall_64+0xf3/0x230 [ 129.356300][ T7388] ? clear_bhb_loop+0x35/0x90 [ 129.361032][ T7388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.366968][ T7388] RIP: 0033:0x7f136a975b99 [ 129.371429][ T7388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.391165][ T7388] RSP: 002b:00007f136b764048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 129.399630][ T7388] RAX: ffffffffffffffda RBX: 00007f136ab03fa0 RCX: 00007f136a975b99 [ 129.407650][ T7388] RDX: 000000000000004e RSI: 0000000020000280 RDI: 0000000000000003 [ 129.415663][ T7388] RBP: 00007f136b7640a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.423676][ T7388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.431693][ T7388] R13: 000000000000000b R14: 00007f136ab03fa0 R15: 00007ffd210a6c48 [ 129.439731][ T7388] [ 129.520403][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 130.059835][ T7425] Illegal XDP return value 731250612 on prog (id 146) dev N/A, expect packet loss! [ 130.265859][ T7429] vlan2: entered allmulticast mode [ 130.276682][ T7429] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 130.307010][ T7429] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 130.769694][ T7450] netlink: 'syz.2.691': attribute type 10 has an invalid length. [ 131.075107][ T7445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.687'. [ 131.255465][ T7471] netlink: 248 bytes leftover after parsing attributes in process `syz.3.699'. [ 132.054072][ T29] audit: type=1804 audit(1719769283.867:4): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.698" name="/root/syzkaller.LyNa43/155/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 132.104661][ T7503] ɶƣ0GC¦: entered promiscuous mode [ 132.114852][ T7506] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 132.232287][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.714'. [ 132.377702][ T7512] sctp: [Deprecated]: syz.1.715 (pid 7512) Use of int in maxseg socket option. [ 132.377702][ T7512] Use struct sctp_assoc_value instead [ 132.582259][ T7507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.712'. [ 132.971061][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.722'. [ 133.204041][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.211817][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.359130][ T7552] netlink: 'syz.1.727': attribute type 5 has an invalid length. [ 133.583413][ T7556] netlink: 16 bytes leftover after parsing attributes in process `syz.1.729'. [ 133.605951][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 133.625460][ T7556] netlink: 60 bytes leftover after parsing attributes in process `syz.1.729'. [ 133.851154][ T7565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.734'. [ 133.874000][ T29] audit: type=1800 audit(1719769285.697:5): pid=7546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.723" name="cgroup.controllers" dev="sda1" ino=1972 res=0 errno=0 [ 134.166524][ T7569] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 134.528878][ T7583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.736'. [ 134.773430][ T7600] FAULT_INJECTION: forcing a failure. [ 134.773430][ T7600] name failslab, interval 1, probability 0, space 0, times 0 [ 134.792745][ T7600] CPU: 0 PID: 7600 Comm: syz.1.743 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 134.802798][ T7600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 134.812900][ T7600] Call Trace: [ 134.816222][ T7600] [ 134.819193][ T7600] dump_stack_lvl+0x241/0x360 [ 134.823924][ T7600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.829171][ T7600] ? __pfx__printk+0x10/0x10 [ 134.833825][ T7600] ? __pfx___might_resched+0x10/0x10 [ 134.839174][ T7600] should_fail_ex+0x3b0/0x4e0 [ 134.843914][ T7600] should_failslab+0x9/0x20 [ 134.848563][ T7600] __kmalloc_node_noprof+0xdf/0x440 [ 134.853801][ T7600] ? kvmalloc_node_noprof+0x72/0x190 [ 134.859110][ T7600] kvmalloc_node_noprof+0x72/0x190 [ 134.864234][ T7600] seq_read_iter+0x202/0xd60 [ 134.868834][ T7600] ? __pfx_aa_file_perm+0x10/0x10 [ 134.873874][ T7600] ? kernfs_fop_read_iter+0x143/0x640 [ 134.879254][ T7600] ? __pfx_lock_acquire+0x10/0x10 [ 134.884296][ T7600] do_iter_readv_writev+0x5a4/0x800 [ 134.889519][ T7600] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 134.895264][ T7600] ? rw_verify_area+0x514/0x6b0 [ 134.900137][ T7600] vfs_readv+0x2b6/0xa90 [ 134.904406][ T7600] ? __pfx_vfs_readv+0x10/0x10 [ 134.909277][ T7600] ? __fget_files+0x29/0x470 [ 134.913897][ T7600] __x64_sys_preadv+0x1c7/0x2d0 [ 134.918764][ T7600] ? __pfx___x64_sys_preadv+0x10/0x10 [ 134.924154][ T7600] ? do_syscall_64+0x100/0x230 [ 134.928927][ T7600] ? do_syscall_64+0xb6/0x230 [ 134.933621][ T7600] do_syscall_64+0xf3/0x230 [ 134.938134][ T7600] ? clear_bhb_loop+0x35/0x90 [ 134.943260][ T7600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.949165][ T7600] RIP: 0033:0x7fd26cb75b99 [ 134.953595][ T7600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.973209][ T7600] RSP: 002b:00007fd26d8fa048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 134.981636][ T7600] RAX: ffffffffffffffda RBX: 00007fd26cd03fa0 RCX: 00007fd26cb75b99 [ 134.989615][ T7600] RDX: 0000000000000001 RSI: 00000000200004c0 RDI: 0000000000000004 [ 134.997590][ T7600] RBP: 00007fd26d8fa0a0 R08: 0000000000000000 R09: 0000000000000000 [ 135.005569][ T7600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.013549][ T7600] R13: 000000000000000b R14: 00007fd26cd03fa0 R15: 00007ffdd4295b08 [ 135.021542][ T7600] [ 135.421711][ T5208] IPVS: starting estimator thread 0... [ 135.560861][ T7609] IPVS: using max 16 ests per chain, 38400 per kthread [ 135.576762][ T7613] netlink: 56 bytes leftover after parsing attributes in process `syz.4.749'. [ 135.601067][ T7613] netlink: 56 bytes leftover after parsing attributes in process `syz.4.749'. [ 135.678635][ T7617] netlink: 288 bytes leftover after parsing attributes in process `syz.4.749'. [ 135.736536][ T7619] netlink: 'syz.3.752': attribute type 3 has an invalid length. [ 135.780947][ T7619] netlink: 36 bytes leftover after parsing attributes in process `syz.3.752'. [ 136.211106][ T7640] netlink: 52 bytes leftover after parsing attributes in process `syz.1.759'. [ 136.343955][ T7644] IPv6: NLM_F_REPLACE set, but no existing node found! [ 136.838313][ T7657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.035984][ T7657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.206179][ T7657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.473684][ T7657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.903387][ T7686] bridge0: port 2(bridge_slave_1) entered listening state [ 137.944687][ T7688] tc_dump_action: action bad kind [ 138.018737][ T7657] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.080294][ T7694] team_slave_1: Device is already in use. [ 138.123263][ T7657] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.164118][ T7696] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 138.210753][ T7696] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 138.220330][ T7657] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.269920][ T7657] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.279725][ T29] audit: type=1804 audit(1719769290.087:6): pid=7698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.780" name="/root/syzkaller.TqZiMn/42/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 138.844199][ T7724] __nla_validate_parse: 3 callbacks suppressed [ 138.844221][ T7724] netlink: 48 bytes leftover after parsing attributes in process `syz.0.789'. [ 139.030460][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.790'. [ 139.066289][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.790'. [ 139.134918][ T7728] netlink: 60 bytes leftover after parsing attributes in process `syz.4.790'. [ 139.169098][ T7728] netlink: 'syz.4.790': attribute type 1 has an invalid length. [ 139.184360][ T7728] netlink: 9348 bytes leftover after parsing attributes in process `syz.4.790'. [ 139.201720][ T7732] netlink: 'syz.0.792': attribute type 11 has an invalid length. [ 139.207273][ T7728] netlink: 'syz.4.790': attribute type 1 has an invalid length. [ 139.243297][ T7732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.792'. [ 139.249384][ T7728] netlink: 20 bytes leftover after parsing attributes in process `syz.4.790'. [ 139.859144][ T7755] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.950873][ T7757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 139.976965][ T7759] xt_hashlimit: invalid rate [ 140.606755][ T7774] No such timeout policy "syz0" [ 141.246710][ T7804] netlink: 'syz.3.819': attribute type 23 has an invalid length. [ 141.275170][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.3.819'. [ 141.316371][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.325474][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.350444][ T7804] bridge0: entered promiscuous mode [ 141.679472][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.687386][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.900544][ T7823] netlink: 'syz.2.824': attribute type 1 has an invalid length. [ 141.917037][ T7823] netlink: 9344 bytes leftover after parsing attributes in process `syz.2.824'. [ 141.940181][ T7823] netlink: 'syz.2.824': attribute type 1 has an invalid length. [ 142.191749][ T7831] ip6tnl1: entered promiscuous mode [ 142.218089][ T7831] ip6tnl1: entered allmulticast mode [ 142.238962][ T7839] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 142.510603][ T7853] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 142.555695][ T7856] tipc: Enabling of bearer rejected, failed to enable media [ 142.864284][ T7868] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1025 (only 8 groups) [ 143.248736][ T7880] xt_connbytes: Forcing CT accounting to be enabled [ 143.298452][ T7880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.484891][ T7887] netlink: 36 bytes leftover after parsing attributes in process `syz.3.846'. [ 143.943744][ T7897] netlink: 132 bytes leftover after parsing attributes in process `syz.4.850'. [ 144.342136][ T7921] nftables ruleset with unbound chain [ 144.371624][ T7920] x_tables: duplicate underflow at hook 4 [ 144.891326][ T7939] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 145.135415][ T7942] netlink: 132 bytes leftover after parsing attributes in process `syz.2.866'. [ 145.595618][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.872'. [ 145.653195][ T7960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.872'. [ 145.700506][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'. [ 145.786249][ T7967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.874'. [ 146.138158][ T7979] netlink: 20 bytes leftover after parsing attributes in process `syz.1.880'. [ 146.402168][ T7991] netlink: 'syz.1.883': attribute type 11 has an invalid length. [ 146.528583][ T7999] xt_cgroup: path and classid specified [ 146.571926][ T7999] netlink: zone id is out of range [ 146.605805][ T7999] netlink: zone id is out of range [ 146.630609][ T7999] netlink: zone id is out of range [ 146.646509][ T7999] netlink: zone id is out of range [ 146.667069][ T7999] netlink: zone id is out of range [ 146.676607][ T7999] netlink: zone id is out of range [ 146.708491][ T7999] netlink: zone id is out of range [ 146.742362][ T7999] netlink: zone id is out of range [ 146.770993][ T7999] netlink: zone id is out of range [ 146.776243][ T7999] netlink: zone id is out of range [ 147.595214][ T8039] netlink: 168 bytes leftover after parsing attributes in process `syz.4.903'. [ 147.635747][ T8039] netlink: 'syz.4.903': attribute type 2 has an invalid length. [ 147.643964][ T8039] netlink: 60 bytes leftover after parsing attributes in process `syz.4.903'. [ 147.867870][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 148.019026][ T29] audit: type=1804 audit(1719769299.837:7): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.902" name="/root/syzkaller.TqZiMn/68/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 148.676213][ T8080] tipc: Started in network mode [ 148.690074][ T8080] tipc: Node identity 9ca6, cluster identity 3 [ 148.716295][ T8080] tipc: Node number set to 40102 [ 149.145413][ T8102] bond0: entered promiscuous mode [ 149.169856][ T8102] bond_slave_0: entered promiscuous mode [ 149.201548][ T8102] bond_slave_1: entered promiscuous mode [ 149.888741][ T8132] pim6reg: entered allmulticast mode [ 149.889919][ T8140] __nla_validate_parse: 4 callbacks suppressed [ 149.889938][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'. [ 149.959457][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 150.021353][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 150.270869][ T8150] tun0: tun_chr_ioctl cmd 1074025677 [ 150.291501][ T8150] tun0: linktype set to 6 [ 150.603058][ T8165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'. [ 150.641454][ T8165] nbd: couldn't find a device at index 0 [ 150.696402][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.951'. [ 150.856888][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 150.900978][ T8174] ipvlan0: entered allmulticast mode [ 150.938821][ T8174] veth0_vlan: entered allmulticast mode [ 151.026275][ T8190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.957'. [ 151.065535][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'. [ 151.126514][ T8193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 151.531669][ T8207] FAULT_INJECTION: forcing a failure. [ 151.531669][ T8207] name failslab, interval 1, probability 0, space 0, times 0 [ 151.583194][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.966'. [ 151.606005][ T8207] CPU: 0 PID: 8207 Comm: syz.1.965 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 151.616090][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 151.626187][ T8207] Call Trace: [ 151.629507][ T8207] [ 151.632481][ T8207] dump_stack_lvl+0x241/0x360 [ 151.637212][ T8207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.642472][ T8207] ? __pfx__printk+0x10/0x10 [ 151.647124][ T8207] ? __pfx___might_resched+0x10/0x10 [ 151.652469][ T8207] should_fail_ex+0x3b0/0x4e0 [ 151.657202][ T8207] ? ptlock_alloc+0x20/0x70 [ 151.661743][ T8207] should_failslab+0x9/0x20 [ 151.666288][ T8207] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 151.671473][ T8210] xfrm1: entered promiscuous mode [ 151.671687][ T8207] ptlock_alloc+0x20/0x70 [ 151.676707][ T8210] xfrm1: entered allmulticast mode [ 151.681037][ T8207] pte_alloc_one+0xcd/0x5d0 [ 151.681070][ T8207] ? __pfx_pte_alloc_one+0x10/0x10 [ 151.681095][ T8207] ? mark_lock+0x9a/0x350 [ 151.681126][ T8207] ? __lock_acquire+0x1346/0x1fd0 [ 151.681157][ T8207] __pte_alloc+0x79/0x3a0 [ 151.681184][ T8207] ? mark_lock+0x9a/0x350 [ 151.713975][ T8207] ? __pfx___pte_alloc+0x10/0x10 [ 151.718948][ T8207] ? __lock_acquire+0x1346/0x1fd0 [ 151.724022][ T8207] handle_pte_fault+0x5531/0x7090 [ 151.729099][ T8207] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 151.734851][ T8207] ? __pfx_lock_acquire+0x10/0x10 [ 151.739898][ T8207] ? __pfx_handle_pte_fault+0x10/0x10 [ 151.745287][ T8207] ? do_raw_spin_lock+0x14f/0x370 [ 151.750347][ T8207] ? follow_page_pte+0xe96/0x1d90 [ 151.755380][ T8207] ? follow_page_pte+0xf17/0x1d90 [ 151.760425][ T8207] ? folio_mark_accessed+0x374/0x1ca0 [ 151.765832][ T8207] ? __pfx_lock_release+0x10/0x10 [ 151.770884][ T8207] ? do_raw_spin_unlock+0x13c/0x8b0 [ 151.776112][ T8207] handle_mm_fault+0x10df/0x1ba0 [ 151.781093][ T8207] ? __pfx_handle_mm_fault+0x10/0x10 [ 151.786413][ T8207] ? __pfx_find_vma+0x10/0x10 [ 151.791098][ T8207] ? vma_is_secretmem+0xd/0x50 [ 151.795869][ T8207] ? check_vma_flags+0x500/0x5a0 [ 151.800819][ T8207] __get_user_pages+0x6ef/0x1590 [ 151.805793][ T8207] ? __pfx___get_user_pages+0x10/0x10 [ 151.811229][ T8207] __gup_longterm_locked+0x1ff6/0x2a80 [ 151.816722][ T8207] ? __pfx_lock_acquire+0x10/0x10 [ 151.821770][ T8207] ? __pfx___gup_longterm_locked+0x10/0x10 [ 151.827589][ T8207] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 151.833580][ T8207] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.839913][ T8207] ? sanity_check_pinned_pages+0x12c2/0x13c0 [ 151.845918][ T8207] ? gup_fast_fallback+0x220d/0x2b40 [ 151.851214][ T8207] gup_fast_fallback+0x2732/0x2b40 [ 151.856364][ T8207] ? __pfx_gup_fast_fallback+0x10/0x10 [ 151.861833][ T8207] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.868177][ T8207] ? irqentry_exit+0x63/0x90 [ 151.872791][ T8207] ? poly1305_core_blocks+0x326/0x4c0 [ 151.878176][ T8207] ? is_valid_gup_args+0x124/0x200 [ 151.883298][ T8207] pin_user_pages_fast+0xcc/0x160 [ 151.888345][ T8207] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 151.893992][ T8207] ? nhpoly1305_units+0x3d4/0x420 [ 151.899036][ T8207] iov_iter_extract_pages+0x3db/0x720 [ 151.904429][ T8207] extract_iter_to_sg+0x890/0x22b0 [ 151.909556][ T8207] ? __asan_memcpy+0x40/0x70 [ 151.914164][ T8207] ? crypto_nhpoly1305_update_helper+0x1f3/0x2b0 [ 151.920540][ T8207] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 151.926103][ T8207] ? unpin_user_page+0xe0/0x1e0 [ 151.930972][ T8207] ? __pfx_unpin_user_page+0x10/0x10 [ 151.936293][ T8207] ? __asan_memset+0x23/0x50 [ 151.940894][ T8207] hash_sendmsg+0x513/0x1110 [ 151.945516][ T8207] ? __pfx_hash_sendmsg+0x10/0x10 [ 151.950571][ T8207] __sock_sendmsg+0x221/0x270 [ 151.955265][ T8207] ____sys_sendmsg+0x525/0x7d0 [ 151.960062][ T8207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.965376][ T8207] __sys_sendmmsg+0x3b2/0x740 [ 151.970077][ T8207] ? __pfx___sys_sendmmsg+0x10/0x10 [ 151.975327][ T8207] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 151.981235][ T8207] ? ksys_write+0x23e/0x2c0 [ 151.985749][ T8207] ? __pfx_lock_release+0x10/0x10 [ 151.990789][ T8207] ? vfs_write+0x7c4/0xc90 [ 151.995220][ T8207] ? __mutex_unlock_slowpath+0x21d/0x750 [ 152.000871][ T8207] ? __pfx_vfs_write+0x10/0x10 [ 152.005667][ T8207] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 152.011659][ T8207] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.018003][ T8207] ? do_syscall_64+0x100/0x230 [ 152.022783][ T8207] __x64_sys_sendmmsg+0xa0/0xb0 [ 152.027656][ T8207] do_syscall_64+0xf3/0x230 [ 152.032170][ T8207] ? clear_bhb_loop+0x35/0x90 [ 152.036865][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.042772][ T8207] RIP: 0033:0x7fd26cb75b99 [ 152.047194][ T8207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.066811][ T8207] RSP: 002b:00007fd26d8fa048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 152.075240][ T8207] RAX: ffffffffffffffda RBX: 00007fd26cd03fa0 RCX: 00007fd26cb75b99 [ 152.083220][ T8207] RDX: 0000000000000001 RSI: 0000000020004140 RDI: 0000000000000004 [ 152.091200][ T8207] RBP: 00007fd26d8fa0a0 R08: 0000000000000000 R09: 0000000000000000 [ 152.099181][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.107163][ T8207] R13: 000000000000000b R14: 00007fd26cd03fa0 R15: 00007ffdd4295b08 [ 152.115159][ T8207] [ 152.722316][ T8248] team0: Port device macvlan1 added [ 152.749583][ T8250] team_slave_0: entered promiscuous mode [ 152.806541][ T8250] vlan3: entered promiscuous mode [ 152.890181][ T8250] team0: entered promiscuous mode [ 152.902086][ T8250] team_slave_1: entered promiscuous mode [ 152.914587][ T29] audit: type=1804 audit(1719769304.737:8): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.980" name="/root/syzkaller.LyNa43/220/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 152.946649][ T8250] macvlan1: entered promiscuous mode [ 152.959731][ T8250] bond0: (slave vlan3): Enslaving as an active interface with an up link [ 153.160998][ T8267] net_ratelimit: 12 callbacks suppressed [ 153.161022][ T8267] openvswitch: netlink: Message has 4 unknown bytes. [ 153.356705][ T8272] x_tables: duplicate underflow at hook 2 [ 153.408434][ T8276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 153.488970][ T8280] netlink: 'syz.1.989': attribute type 4 has an invalid length. [ 153.850615][ T8295] team0: Port device macvlan1 added [ 153.916838][ T8297] team_slave_0: entered promiscuous mode [ 153.922694][ T8297] team_slave_1: entered promiscuous mode [ 153.984399][ T8297] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 154.269501][ T8312] netlink: 'syz.3.1001': attribute type 10 has an invalid length. [ 154.304412][ T8312] syz_tun: entered promiscuous mode [ 154.429002][ T8312] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 154.635371][ T8327] netlink: 'syz.4.1005': attribute type 29 has an invalid length. [ 154.659487][ T8327] netlink: 'syz.4.1005': attribute type 29 has an invalid length. [ 155.039228][ T8339] __nla_validate_parse: 11 callbacks suppressed [ 155.039251][ T8339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1011'. [ 155.147835][ T8343] netlink: 786 bytes leftover after parsing attributes in process `syz.3.1013'. [ 155.500510][ T8356] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 155.729300][ T8365] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1021'. [ 155.862714][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 156.258182][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1035'. [ 156.439293][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1036'. [ 158.146545][ T8417] netlink: 'syz.0.1041': attribute type 63 has an invalid length. [ 158.270043][ T8427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1046'. [ 158.344963][ T8432] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 [ 158.981098][ T8463] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1060'. [ 159.010788][ T8460] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 159.010788][ T8460] cct.usage_percpu_sys' [ 159.025486][ T8467] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1061'. [ 159.060380][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1061'. [ 159.080908][ C0] Unknown status report in ack skb [ 159.268107][ T8474] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 159.369415][ T8484] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 159.626987][ T8494] block nbd3: not configured, cannot reconfigure [ 160.156932][ T8520] netlink: 'syz.3.1077': attribute type 3 has an invalid length. [ 160.295147][ T8524] __nla_validate_parse: 1 callbacks suppressed [ 160.295170][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'. [ 160.402875][ T8524] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1079'. [ 160.464172][ T8532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1082'. [ 160.667574][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 160.721453][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 160.909692][ T8553] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1090'. [ 161.149339][ T8567] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1095'. [ 161.301693][ T8573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1095'. [ 161.387246][ T8573] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 161.391031][ T8573] block (null): Could not allocate knbd recv work queue. [ 161.438355][ T8573] nbd: failed to add new device [ 161.589675][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'. [ 161.642900][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'. [ 161.697340][ T5102] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 161.714943][ T5102] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 161.727294][ T5102] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 161.756505][ T5102] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 161.781970][ T5102] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 161.790593][ T5102] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 162.015103][ T11] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.220487][ T11] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.235251][ T8606] x_tables: duplicate underflow at hook 2 [ 162.372669][ T11] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.451530][ T11] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.591501][ T8618] netlink: 'syz.4.1108': attribute type 1 has an invalid length. [ 162.638785][ T8618] bond1: entered promiscuous mode [ 162.713886][ T8620] bond1: (slave ip6gretap1): making interface the new active one [ 162.722733][ T8620] ip6gretap1: entered promiscuous mode [ 162.733789][ T8620] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 162.968157][ T11] bridge_slave_1: left allmulticast mode [ 162.977166][ T11] bridge_slave_1: left promiscuous mode [ 162.997255][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.057664][ T11] bridge_slave_0: left allmulticast mode [ 163.079099][ T11] bridge_slave_0: left promiscuous mode [ 163.101923][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.598868][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.616414][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.630773][ T11] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 163.644882][ T11] team_slave_0: left promiscuous mode [ 163.650790][ T11] team_slave_1: left promiscuous mode [ 163.659351][ T11] bond0 (unregistering): Released all slaves [ 163.713941][ T8586] chnl_net:caif_netlink_parms(): no params data found [ 163.830241][ T11] ÿÿÿG: left promiscuous mode [ 163.840303][ T5102] Bluetooth: hci5: command tx timeout [ 164.458891][ T8667] netlink: 'syz.4.1122': attribute type 1 has an invalid length. [ 164.605885][ T8586] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.641681][ T8586] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.649047][ T8586] bridge_slave_0: entered allmulticast mode [ 164.696874][ T8586] bridge_slave_0: entered promiscuous mode [ 164.755126][ T8681] netlink: 'syz.3.1125': attribute type 1 has an invalid length. [ 164.857411][ T8681] bond1: entered promiscuous mode [ 164.863079][ T8586] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.870973][ T8586] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.878273][ T8586] bridge_slave_1: entered allmulticast mode [ 164.887844][ T8586] bridge_slave_1: entered promiscuous mode [ 164.953345][ T11] hsr_slave_0: left promiscuous mode [ 165.001273][ T11] hsr_slave_1: left promiscuous mode [ 165.034157][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.071104][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.096759][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.119260][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.191616][ T11] veth1_macvtap: left promiscuous mode [ 165.227432][ T11] veth0_macvtap: left promiscuous mode [ 165.233495][ T11] veth1_vlan: left promiscuous mode [ 165.238968][ T11] veth0_vlan: left promiscuous mode [ 165.725899][ T11] team0 (unregistering): Port device macvlan1 removed [ 165.846415][ T8716] IPv6: addrconf: prefix option has invalid lifetime [ 165.929004][ T5102] Bluetooth: hci5: command tx timeout [ 166.066355][ T11] team0 (unregistering): Port device team_slave_1 removed [ 166.113597][ T11] team0 (unregistering): Port device team_slave_0 removed [ 166.633245][ T8681] bond0: (slave bond_slave_0): Releasing backup interface [ 166.665574][ T8681] bond1: (slave bond_slave_0): making interface the new active one [ 166.680511][ T8681] bond_slave_0: entered promiscuous mode [ 166.691593][ T8681] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.703973][ T8688] __nla_validate_parse: 11 callbacks suppressed [ 166.703994][ T8688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 166.770586][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1135'. [ 166.842185][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1135'. [ 166.874309][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1135'. [ 166.876788][ T8586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.958578][ T8586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.975685][ T8728] netlink: 'syz.3.1136': attribute type 12 has an invalid length. [ 167.164909][ T8586] team0: Port device team_slave_0 added [ 167.218257][ T8586] team0: Port device team_slave_1 added [ 167.439368][ T8751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1144'. [ 167.470550][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.488326][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.558979][ T8586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.595706][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1143'. [ 167.608178][ T8745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.639377][ T8745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.664436][ T8745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.695007][ T8745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.862345][ T8586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.883270][ T8586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.954508][ T8586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.968808][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 168.010613][ T5102] Bluetooth: hci5: command tx timeout [ 168.245483][ T8586] hsr_slave_0: entered promiscuous mode [ 168.298194][ T8586] hsr_slave_1: entered promiscuous mode [ 168.418181][ T8794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1151'. [ 168.492565][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1151'. [ 168.583680][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1151'. [ 168.800145][ T29] audit: type=1800 audit(1719769320.617:9): pid=8779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1149" name="cgroup.controllers" dev="sda1" ino=1969 res=0 errno=0 [ 168.863312][ T8809] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 168.881208][ T8809] macsec1: entered promiscuous mode [ 168.905635][ T8809] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 169.843148][ T8848] netlink: 'syz.1.1171': attribute type 1 has an invalid length. [ 170.080351][ T5102] Bluetooth: hci5: command tx timeout [ 170.496984][ T8872] netlink: 'syz.2.1179': attribute type 1 has an invalid length. [ 170.584135][ T8586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 170.634837][ T8586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 170.712439][ T8586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 170.796166][ T8586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.317687][ T8586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.359933][ T8906] tipc: Can't bind to reserved service type 0 [ 171.536390][ T8909] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 171.559658][ T8586] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.561615][ T8912] xt_nat: multiple ranges no longer supported [ 171.618598][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.625884][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.778945][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.836994][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.844313][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.881315][ T8924] netlink: 'syz.2.1196': attribute type 4 has an invalid length. [ 171.945728][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.137060][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.253545][ T8937] __nla_validate_parse: 10 callbacks suppressed [ 172.253568][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1198'. [ 172.295788][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.335099][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'. [ 172.391482][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1198'. [ 172.655278][ T8951] bond0: entered promiscuous mode [ 172.679127][ T8951] bond_slave_1: entered promiscuous mode [ 172.718059][ T8951] team0: entered promiscuous mode [ 172.740284][ T8951] team_slave_0: entered promiscuous mode [ 172.746212][ T8951] team_slave_1: entered promiscuous mode [ 172.790363][ T8951] bridge1: entered promiscuous mode [ 172.943213][ T8586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.978325][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 172.991877][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 173.000489][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 173.020970][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 173.032626][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 173.040492][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 173.435547][ T8982] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1207'. [ 174.066398][ T9005] netlink: 'syz.4.1215': attribute type 30 has an invalid length. [ 174.219855][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.235836][ T9010] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1216'. [ 174.267629][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.298277][ T51] bond0 (unregistering): Released all slaves [ 174.327720][ T51] bond1 (unregistering): Released all slaves [ 174.546559][ T51] : left promiscuous mode [ 174.652662][ T9030] netlink: 'syz.3.1217': attribute type 29 has an invalid length. [ 174.690271][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 174.746147][ T9032] RDS: rds_bind could not find a transport for ::8000:20:0:0, load rds_tcp or rds_rdma? [ 174.757267][ T9030] netlink: 'syz.3.1217': attribute type 29 has an invalid length. [ 174.762499][ T9024] can: request_module (can-proto-0) failed. [ 174.804944][ T9030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 174.869357][ T51] ɶƣ0GC¦: left promiscuous mode [ 175.049613][ T8586] veth0_vlan: entered promiscuous mode [ 175.089317][ T8586] veth1_vlan: entered promiscuous mode [ 175.122841][ T5102] Bluetooth: hci2: command tx timeout [ 175.138432][ T51] tipc: Disabling bearer [ 175.165301][ T51] tipc: Left network mode [ 175.279582][ T9047] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 175.537789][ T8586] veth0_macvtap: entered promiscuous mode [ 175.562534][ T9065] netlink: 134292 bytes leftover after parsing attributes in process `syz.3.1228'. [ 175.665354][ T9065] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 175.676910][ T8586] veth1_macvtap: entered promiscuous mode [ 175.698809][ T9065] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 175.722805][ T8962] chnl_net:caif_netlink_parms(): no params data found [ 175.883693][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.914982][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.937397][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.964181][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.990124][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.020427][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.042467][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.088292][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.126325][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.147100][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.180112][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.205268][ T8586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.224899][ T8586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.247662][ T8586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.299801][ T9093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 176.449911][ T51] hsr_slave_0: left promiscuous mode [ 176.467744][ T51] hsr_slave_1: left promiscuous mode [ 176.490437][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.525843][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.578507][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.600826][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.646975][ T51] veth1_macvtap: left allmulticast mode [ 176.672586][ T51] veth1_macvtap: left promiscuous mode [ 176.678210][ T51] veth0_macvtap: left promiscuous mode [ 176.691068][ T51] veth1_vlan: left promiscuous mode [ 176.700792][ T51] veth0_vlan: left promiscuous mode [ 176.757875][ T9110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1241'. [ 177.210221][ T5102] Bluetooth: hci2: command tx timeout [ 177.274838][ T51] team0 (unregistering): Port device team_slave_1 removed [ 177.319468][ T51] team0 (unregistering): Port device team_slave_0 removed [ 177.754426][ T8586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.765765][ T8586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.775081][ T8586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.784304][ T8586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.795866][ T9103] __nla_validate_parse: 2 callbacks suppressed [ 177.795886][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'. [ 177.875928][ T9120] FAULT_INJECTION: forcing a failure. [ 177.875928][ T9120] name failslab, interval 1, probability 0, space 0, times 0 [ 177.888751][ T9120] CPU: 1 PID: 9120 Comm: syz.3.1243 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 177.898865][ T9120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 177.908962][ T9120] Call Trace: [ 177.912280][ T9120] [ 177.915243][ T9120] dump_stack_lvl+0x241/0x360 [ 177.919979][ T9120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.925301][ T9120] ? __pfx__printk+0x10/0x10 [ 177.929957][ T9120] should_fail_ex+0x3b0/0x4e0 [ 177.934690][ T9120] ? __alloc_skb+0x1c3/0x440 [ 177.939342][ T9120] should_failslab+0x9/0x20 [ 177.943896][ T9120] kmem_cache_alloc_node_noprof+0x71/0x320 [ 177.949756][ T9120] ? aa_label_sk_perm+0x4f0/0x6d0 [ 177.954843][ T9120] __alloc_skb+0x1c3/0x440 [ 177.959316][ T9120] ? __pfx___alloc_skb+0x10/0x10 [ 177.964313][ T9120] pfkey_sendmsg+0x1da/0x1050 [ 177.969064][ T9120] ? __pfx___might_resched+0x10/0x10 [ 177.974415][ T9120] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 177.979579][ T9120] ? aa_sk_perm+0x967/0xab0 [ 177.984143][ T9120] ? __pfx_aa_sk_perm+0x10/0x10 [ 177.989054][ T9120] ? __might_fault+0xaa/0x120 [ 177.993772][ T9120] ? __pfx_lock_release+0x10/0x10 [ 177.998852][ T9120] ? __import_iovec+0x536/0x820 [ 178.003747][ T9120] ? aa_sock_msg_perm+0x91/0x160 [ 178.008745][ T9120] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 178.014077][ T9120] ? security_socket_sendmsg+0x87/0xb0 [ 178.019587][ T9120] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 178.024743][ T9120] __sock_sendmsg+0x221/0x270 [ 178.029472][ T9120] ____sys_sendmsg+0x525/0x7d0 [ 178.034298][ T9120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.039657][ T9120] __sys_sendmsg+0x2b0/0x3a0 [ 178.044299][ T9120] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.049449][ T9120] ? vfs_write+0x7c4/0xc90 [ 178.053953][ T9120] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 178.060328][ T9120] ? do_syscall_64+0x100/0x230 [ 178.065130][ T9120] ? do_syscall_64+0xb6/0x230 [ 178.069857][ T9120] do_syscall_64+0xf3/0x230 [ 178.074409][ T9120] ? clear_bhb_loop+0x35/0x90 [ 178.079131][ T9120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.085071][ T9120] RIP: 0033:0x7f04c7975b99 [ 178.089515][ T9120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.109249][ T9120] RSP: 002b:00007f04c86ea048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.115294][ T9125] netlink: 468 bytes leftover after parsing attributes in process `syz.4.1245'. [ 178.117679][ T9120] RAX: ffffffffffffffda RBX: 00007f04c7b03fa0 RCX: 00007f04c7975b99 [ 178.117702][ T9120] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 178.117717][ T9120] RBP: 00007f04c86ea0a0 R08: 0000000000000000 R09: 0000000000000000 [ 178.150868][ T9120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.158870][ T9120] R13: 000000000000000b R14: 00007f04c7b03fa0 R15: 00007ffd77d61738 [ 178.166868][ T9120] [ 178.204620][ T9125] netlink: 'syz.4.1245': attribute type 5 has an invalid length. [ 178.223509][ T8962] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.260217][ T8962] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.280348][ T8962] bridge_slave_0: entered allmulticast mode [ 178.287934][ T8962] bridge_slave_0: entered promiscuous mode [ 178.307224][ T8962] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.318098][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.339899][ T8962] bridge_slave_1: entered allmulticast mode [ 178.361348][ T8962] bridge_slave_1: entered promiscuous mode [ 178.422982][ T9128] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1246'. [ 178.443270][ T9128] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.656598][ T8962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.776953][ T8962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.989344][ T8962] team0: Port device team_slave_0 added [ 179.022994][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.041731][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.069625][ T8962] team0: Port device team_slave_1 added [ 179.290373][ T5102] Bluetooth: hci2: command tx timeout [ 179.301861][ T9163] can: request_module (can-proto-0) failed. [ 179.316127][ T8962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.325387][ T8962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.352472][ T8962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.370465][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1253'. [ 179.386238][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1253'. [ 179.405217][ T8962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.412433][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.423816][ T51] IPVS: stop unused estimator thread 0... [ 179.435897][ T8962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.442883][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.477453][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1253'. [ 179.514908][ T8962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.831313][ T9194] netlink: 'syz.0.1093': attribute type 1 has an invalid length. [ 179.863090][ T9194] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1093'. [ 179.901564][ T8962] hsr_slave_0: entered promiscuous mode [ 179.950825][ T8962] hsr_slave_1: entered promiscuous mode [ 179.994037][ T8962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.010620][ T8962] Cannot create hsr debugfs directory [ 180.038858][ T9199] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1259'. [ 180.249730][ T9212] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1264'. [ 180.280138][ T9212] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1264'. [ 181.360866][ T5102] Bluetooth: hci2: command tx timeout [ 181.628143][ T8962] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.712029][ T8962] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.747996][ T8962] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.817478][ T8962] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 182.224061][ T9322] macsec0: entered allmulticast mode [ 182.229527][ T9322] veth1_macvtap: entered allmulticast mode [ 182.470533][ T9327] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 182.585857][ T8962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.688163][ T8962] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.763957][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.771620][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.806797][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.814089][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.855003][ T9342] __nla_validate_parse: 9 callbacks suppressed [ 182.855025][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1291'. [ 183.101866][ T9358] tun0: tun_chr_ioctl cmd 35108 [ 183.201174][ T9364] netlink: 'syz.0.1297': attribute type 2 has an invalid length. [ 183.284837][ T65] wlan1: Trigger new scan to find an IBSS to join [ 183.538062][ T9381] Cannot find set identified by id 0 to match [ 183.664484][ T9387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1299'. [ 183.764254][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 183.823700][ T9393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'. [ 183.959842][ T9397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1302'. [ 184.095660][ T8962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.449250][ T9415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1309'. [ 184.469584][ T9415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1309'. [ 184.643897][ T8962] veth0_vlan: entered promiscuous mode [ 184.696624][ T8962] veth1_vlan: entered promiscuous mode [ 184.854914][ T8962] veth0_macvtap: entered promiscuous mode [ 184.914356][ T8962] veth1_macvtap: entered promiscuous mode [ 184.994633][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1314'. [ 185.007956][ T8962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.052268][ T8962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.098080][ T8962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.129644][ T9447] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1316'. [ 185.145129][ T8962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.146359][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1314'. [ 185.177023][ T8962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.199143][ T8962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.216165][ T8962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.266290][ T8962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.309295][ T8962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.329529][ T8962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.375795][ T8962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.410108][ T8962] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.453833][ T8962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.486088][ T8962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.556240][ T8962] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.587211][ T8962] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.608110][ T8962] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.625626][ T8962] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.642520][ T9456] tun0: tun_chr_ioctl cmd 35108 [ 185.964897][ T9314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.965404][ T9479] netlink: 'syz.0.1325': attribute type 2 has an invalid length. [ 186.004463][ T9314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.154692][ T9297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.171191][ T9297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.094556][ T9312] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.099825][ T9527] x_tables: duplicate underflow at hook 1 [ 187.379677][ T9534] netlink: zone id is out of range [ 187.407360][ T9534] netlink: zone id is out of range [ 187.430583][ T9534] netlink: zone id is out of range [ 187.457278][ T9534] netlink: zone id is out of range [ 187.480186][ T9534] netlink: zone id is out of range [ 187.496526][ T9534] netlink: zone id is out of range [ 187.510205][ T9534] netlink: zone id is out of range [ 187.529670][ T9534] netlink: zone id is out of range [ 187.565914][ T9534] netlink: zone id is out of range [ 187.572533][ T9534] netlink: zone id is out of range [ 187.640656][ T9312] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.835989][ T9312] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.910438][ T9554] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 0, id = 0 [ 187.919733][ T9550] __nla_validate_parse: 4 callbacks suppressed [ 187.919750][ T9550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1351'. [ 187.992763][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 188.019183][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 188.028458][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 188.044257][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 188.061215][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 188.071178][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 188.122299][ T9312] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.262166][ T9297] wlan1: Trigger new scan to find an IBSS to join [ 188.465680][ T9577] FAULT_INJECTION: forcing a failure. [ 188.465680][ T9577] name failslab, interval 1, probability 0, space 0, times 0 [ 188.484329][ T9577] CPU: 1 PID: 9577 Comm: syz.2.1360 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 188.494482][ T9577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 188.504578][ T9577] Call Trace: [ 188.507887][ T9577] [ 188.510844][ T9577] dump_stack_lvl+0x241/0x360 [ 188.515578][ T9577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.520943][ T9577] ? __pfx__printk+0x10/0x10 [ 188.525604][ T9577] should_fail_ex+0x3b0/0x4e0 [ 188.530348][ T9577] ? sctp_add_bind_addr+0x89/0x3a0 [ 188.535512][ T9577] should_failslab+0x9/0x20 [ 188.540071][ T9577] kmalloc_trace_noprof+0x6c/0x2c0 [ 188.545238][ T9577] sctp_add_bind_addr+0x89/0x3a0 [ 188.550231][ T9577] sctp_copy_local_addr_list+0x311/0x500 [ 188.555915][ T9577] ? sctp_copy_local_addr_list+0xab/0x500 [ 188.561691][ T9577] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 188.567902][ T9577] ? sctp_v6_is_any+0x60/0x70 [ 188.572647][ T9577] sctp_bind_addr_copy+0xad/0x3b0 [ 188.577727][ T9577] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 188.584111][ T9577] sctp_connect_new_asoc+0x2f3/0x6c0 [ 188.589450][ T9577] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 188.595307][ T9577] ? sctp_get_af_specific+0x2a/0x80 [ 188.600569][ T9577] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 188.606440][ T9577] __sctp_connect+0x66d/0xe30 [ 188.608618][ T9579] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1361'. [ 188.611156][ T9577] ? __pfx___sctp_connect+0x10/0x10 [ 188.611258][ T9577] ? __might_fault+0xc6/0x120 [ 188.630115][ T9577] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 188.635714][ T9577] ? security_sctp_bind_connect+0x90/0xb0 [ 188.641492][ T9577] sctp_getsockopt_connectx3+0x46f/0x730 [ 188.647185][ T9577] ? __local_bh_enable_ip+0x168/0x200 [ 188.652607][ T9577] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 188.658812][ T9577] ? __local_bh_enable_ip+0x168/0x200 [ 188.664315][ T9577] ? sctp_getsockopt+0x13a/0xbb0 [ 188.669303][ T9577] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 188.675077][ T9577] sctp_getsockopt+0x8de/0xbb0 [ 188.679983][ T9577] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 188.685929][ T9577] do_sock_getsockopt+0x373/0x850 [ 188.691020][ T9577] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 188.696625][ T9577] ? __fget_files+0x3f6/0x470 [ 188.701362][ T9577] __sys_getsockopt+0x271/0x330 [ 188.706268][ T9577] ? __pfx___sys_getsockopt+0x10/0x10 [ 188.711695][ T9577] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 188.718160][ T9577] ? do_syscall_64+0x100/0x230 [ 188.722981][ T9577] __x64_sys_getsockopt+0xb5/0xd0 [ 188.728053][ T9577] do_syscall_64+0xf3/0x230 [ 188.732586][ T9577] ? clear_bhb_loop+0x35/0x90 [ 188.737298][ T9577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.743217][ T9577] RIP: 0033:0x7f7c60575b99 [ 188.747670][ T9577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.767446][ T9577] RSP: 002b:00007f7c612f8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 188.776014][ T9577] RAX: ffffffffffffffda RBX: 00007f7c60703fa0 RCX: 00007f7c60575b99 [ 188.784028][ T9577] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000004 [ 188.792041][ T9577] RBP: 00007f7c612f80a0 R08: 0000000020000440 R09: 0000000000000000 [ 188.800057][ T9577] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000002 [ 188.808068][ T9577] R13: 000000000000000b R14: 00007f7c60703fa0 R15: 00007fff86503fd8 [ 188.816194][ T9577] [ 188.875426][ T9312] bridge_slave_1: left allmulticast mode [ 188.917959][ T9312] bridge_slave_1: left promiscuous mode [ 188.940298][ T9312] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.968680][ T9312] bridge_slave_0: left allmulticast mode [ 188.994905][ T9312] bridge_slave_0: left promiscuous mode [ 189.028655][ T9589] nbd: device at index 3 is going down [ 189.036240][ T9312] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.575145][ T11] wlan1: Creating new IBSS network, BSSID 3e:47:40:36:4a:13 [ 189.879714][ T9312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.899751][ T9312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.911616][ T9312] bond0 (unregistering): Released all slaves [ 189.996493][ T9585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1362'. [ 190.164613][ T5102] Bluetooth: hci2: command tx timeout [ 190.191711][ T9623] x_tables: duplicate underflow at hook 2 [ 190.327107][ T9629] netlink: 'syz.2.1374': attribute type 1 has an invalid length. [ 190.338106][ T9629] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1374'. [ 190.348055][ T9629] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1374'. [ 190.809693][ T9555] chnl_net:caif_netlink_parms(): no params data found [ 191.231039][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1382'. [ 191.310060][ T9312] hsr_slave_0: left promiscuous mode [ 191.368559][ T9312] hsr_slave_1: left promiscuous mode [ 191.420854][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.439089][ T9312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.498280][ T9312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.516762][ T9312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.600587][ T5102] Bluetooth: hci4: command 0x0405 tx timeout [ 191.638282][ T9312] veth1_macvtap: left promiscuous mode [ 191.656156][ T9312] veth0_macvtap: left promiscuous mode [ 191.684545][ T9312] veth1_vlan: left promiscuous mode [ 191.704683][ T9312] veth0_vlan: left promiscuous mode [ 192.250743][ T53] Bluetooth: hci2: command tx timeout [ 192.447109][ T9312] team0 (unregistering): Port device team_slave_1 removed [ 192.494178][ T9312] team0 (unregistering): Port device team_slave_0 removed [ 192.952099][ T9683] netlink: 18 bytes leftover after parsing attributes in process `syz.2.1387'. [ 192.978367][ T9699] net_ratelimit: 334 callbacks suppressed [ 192.978390][ T9699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 193.120451][ T9555] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.127663][ T9555] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.186351][ T9555] bridge_slave_0: entered allmulticast mode [ 193.213419][ T9555] bridge_slave_0: entered promiscuous mode [ 193.252104][ T9711] dccp_invalid_packet: P.Data Offset(0) too small [ 193.262572][ T9555] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.288690][ T9555] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.327605][ T9555] bridge_slave_1: entered allmulticast mode [ 193.346029][ T9555] bridge_slave_1: entered promiscuous mode [ 193.365665][ T9720] netlink: 'syz.0.1393': attribute type 3 has an invalid length. [ 193.387125][ T9720] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1393'. [ 193.828734][ T9555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.879208][ T9555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.097672][ T9555] team0: Port device team_slave_0 added [ 194.133261][ T9555] team0: Port device team_slave_1 added [ 194.259139][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.279387][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.321068][ T53] Bluetooth: hci2: command tx timeout [ 194.358613][ T9555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.408042][ T9555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.442026][ T9555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.451370][ T9769] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1405'. [ 194.517046][ T9555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.635309][ T9773] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1406'. [ 194.649822][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.649941][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.779662][ T9555] hsr_slave_0: entered promiscuous mode [ 194.805158][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1407'. [ 194.816362][ T9555] hsr_slave_1: entered promiscuous mode [ 194.832948][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1407'. [ 194.843506][ T9555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.861784][ T9555] Cannot create hsr debugfs directory [ 194.897704][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1407'. [ 195.605854][ T9804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1414'. [ 195.648945][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'. [ 195.675995][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1414'. [ 196.400220][ T53] Bluetooth: hci2: command tx timeout [ 196.448047][ T9845] syzkaller1: entered promiscuous mode [ 196.456734][ T9845] syzkaller1: entered allmulticast mode [ 196.681287][ T29] audit: type=1804 audit(1719769348.507:10): pid=9857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1430" name="/root/syzkaller.TqZiMn/185/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 196.838819][ T9555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.922973][ T9555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.971933][ T9555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.015413][ T9555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.405970][ T29] audit: type=1800 audit(1719769349.227:11): pid=9882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1440" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 197.447684][ T9555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.478887][ T29] audit: type=1804 audit(1719769349.227:12): pid=9882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1440" name="/root/syzkaller.TqZiMn/188/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 197.545708][ T9555] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.561589][ T9887] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 197.575922][ T29] audit: type=1804 audit(1719769349.227:13): pid=9882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1440" name="/root/syzkaller.TqZiMn/188/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 197.592888][ T9887] File: /root/syzkaller.TqZiMn/188/memory.events PID: 9887 Comm: syz.2.1440 [ 197.610024][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.617241][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.649821][ T29] audit: type=1804 audit(1719769349.227:14): pid=9882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1440" name="/root/syzkaller.TqZiMn/188/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 197.677180][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.684449][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.746350][ T29] audit: type=1804 audit(1719769349.287:15): pid=9882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1440" name="/root/syzkaller.TqZiMn/188/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 197.816693][ T9900] netlink: 'syz.0.1442': attribute type 4 has an invalid length. [ 197.827469][ T29] audit: type=1804 audit(1719769349.287:16): pid=9882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1440" name="/root/syzkaller.TqZiMn/188/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 197.858918][ T9900] netlink: 'syz.0.1442': attribute type 4 has an invalid length. [ 197.928003][ T9555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.444369][ T9555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.609395][ T9928] __nla_validate_parse: 10 callbacks suppressed [ 198.609417][ T9928] netlink: 9356 bytes leftover after parsing attributes in process `syz.2.1451'. [ 198.640139][ T9928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1451'. [ 198.659924][ T9555] veth0_vlan: entered promiscuous mode [ 198.684480][ T9928] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1451'. [ 198.745665][ T9555] veth1_vlan: entered promiscuous mode [ 198.756709][ T9935] netlink: 'syz.0.1452': attribute type 10 has an invalid length. [ 198.771224][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1454'. [ 198.794685][ T9935] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1452'. [ 198.871309][ T9555] veth0_macvtap: entered promiscuous mode [ 198.908616][ T9555] veth1_macvtap: entered promiscuous mode [ 198.954301][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.986399][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.040377][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.063893][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.089003][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.128497][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.153923][ T9957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1457'. [ 199.166974][ T9555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.177553][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1457'. [ 199.208714][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'. [ 199.239027][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.261124][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.298356][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.329636][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.367047][ T9555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.387960][ T9555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.415328][ T9555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.471682][ T9966] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1462'. [ 199.515943][ T9555] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.546866][ T9555] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.590205][ T9555] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.609206][ T9555] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.661026][ T9966] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1462'. [ 199.925695][ T9312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.973132][ T9312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.115561][ T9987] bond0: entered promiscuous mode [ 200.142662][ T9987] bond_slave_0: entered promiscuous mode [ 200.168183][ T9987] bond_slave_1: entered promiscuous mode [ 200.217256][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.260018][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.402601][ T9993] atomic_op ffff888066eff998 conn xmit_atomic 0000000000000000 [ 202.076171][T10075] openvswitch: netlink: Flow key attribute not present in set flow. [ 202.567308][ T65] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.067196][ T65] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.380442][ T65] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.674046][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.695642][ T65] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.711218][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.720307][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 203.732141][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 203.745765][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 203.754292][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.162522][T10152] __nla_validate_parse: 9 callbacks suppressed [ 204.162543][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1504'. [ 204.214693][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1504'. [ 204.246287][T10152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1504'. [ 204.660433][ T65] bridge_slave_1: left allmulticast mode [ 204.667578][ T65] bridge_slave_1: left promiscuous mode [ 204.715565][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.764730][ T65] bridge_slave_0: left allmulticast mode [ 204.780876][ T65] bridge_slave_0: left promiscuous mode [ 204.795683][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.201196][T10187] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1514'. [ 205.582506][ T29] audit: type=1107 audit(1719769357.397:17): pid=10196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='e' [ 205.700243][ T29] audit: type=1804 audit(1719769357.517:18): pid=10201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1516" name="/root/syzkaller.iky6xH/320/cgroup.controllers" dev="sda1" ino=1975 res=1 errno=0 [ 205.850712][ T5102] Bluetooth: hci2: command tx timeout [ 205.965300][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.015420][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.035113][ T65] bond0 (unregistering): Released all slaves [ 206.047440][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1509'. [ 206.127083][T10182] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1513'. [ 206.146628][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1516'. [ 206.578505][T10133] chnl_net:caif_netlink_parms(): no params data found [ 206.678877][T10229] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1522'. [ 206.725708][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1522'. [ 206.778358][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1522'. [ 207.082284][ T65] hsr_slave_0: left promiscuous mode [ 207.140887][ T65] hsr_slave_1: left promiscuous mode [ 207.179427][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.195657][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.220854][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.253599][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.331979][ T65] veth1_macvtap: left promiscuous mode [ 207.337552][ T65] veth0_macvtap: left promiscuous mode [ 207.353976][ T65] veth1_vlan: left promiscuous mode [ 207.359433][ T65] veth0_vlan: left promiscuous mode [ 207.922275][ T5102] Bluetooth: hci2: command tx timeout [ 208.518331][ T65] team0 (unregistering): Port device team_slave_1 removed [ 208.566337][ T65] team0 (unregistering): Port device team_slave_0 removed [ 209.117482][T10133] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.169905][T10133] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.210518][T10133] bridge_slave_0: entered allmulticast mode [ 209.221879][T10133] bridge_slave_0: entered promiscuous mode [ 209.257880][T10133] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.281894][T10133] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.319917][T10133] bridge_slave_1: entered allmulticast mode [ 209.334793][T10133] bridge_slave_1: entered promiscuous mode [ 209.487132][T10133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.533530][T10133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.748593][T10133] team0: Port device team_slave_0 added [ 209.813950][T10133] team0: Port device team_slave_1 added [ 209.839531][T10316] __nla_validate_parse: 4 callbacks suppressed [ 209.839553][T10316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1550'. [ 209.937023][T10318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1551'. [ 209.980389][T10318] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1551'. [ 209.989430][T10318] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1551'. [ 210.002156][ T5102] Bluetooth: hci2: command tx timeout [ 210.112445][T10133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.144417][T10133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.188349][T10133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.213565][T10133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.229859][T10133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.312318][T10133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.314846][T10336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1554'. [ 210.376817][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1554'. [ 210.443065][T10334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1554'. [ 210.571797][T10133] hsr_slave_0: entered promiscuous mode [ 210.596452][T10346] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 210.638614][T10133] hsr_slave_1: entered promiscuous mode [ 210.691463][T10133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.730599][T10133] Cannot create hsr debugfs directory [ 210.758296][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1557'. [ 210.798467][T10353] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000194: 0000 [#1] PREEMPT SMP KASAN PTI [ 210.811123][T10353] KASAN: null-ptr-deref in range [0x0000000000000ca0-0x0000000000000ca7] [ 210.819570][T10353] CPU: 1 PID: 10353 Comm: syz.0.1559 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 210.829760][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 210.839855][T10353] RIP: 0010:coalesce_fill_reply+0xcc/0x1b70 [ 210.845822][T10353] Code: e8 59 cf f8 f7 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 63 9d 5e f8 bb a0 0c 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 45 9d 5e f8 48 8b 03 48 89 44 24 [ 210.865473][T10353] RSP: 0018:ffffc9000423eee0 EFLAGS: 00010202 [ 210.871584][T10353] RAX: 0000000000000194 RBX: 0000000000000ca0 RCX: 0000000000040000 [ 210.879599][T10353] RDX: ffffc9000b600000 RSI: 00000000000011ce RDI: 00000000000011cf [ 210.887609][T10353] RBP: ffffc9000423f118 R08: ffffffff899c0ee7 R09: 006e75745f7a7973 [ 210.895624][T10353] R10: dffffc0000000000 R11: ffffffff899d5700 R12: ffffffff899d5700 [ 210.903638][T10353] R13: dffffc0000000000 R14: ffff88807efa3d00 R15: ffff88802f0563c0 [ 210.911651][T10353] FS: 00007f6d41c2e6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 210.920625][T10353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 210.927331][T10353] CR2: 0000001b2c11fffc CR3: 000000002362c000 CR4: 00000000003506f0 [ 210.935352][T10353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 210.943363][T10353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 210.951375][T10353] Call Trace: [ 210.954687][T10353] [ 210.957654][T10353] ? __die_body+0x88/0xe0 [ 210.962039][T10353] ? die_addr+0x108/0x140 [ 210.966423][T10353] ? exc_general_protection+0x3dd/0x5d0 [ 210.972047][T10353] ? asm_exc_general_protection+0x26/0x30 [ 210.977826][T10353] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 210.983517][T10353] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 210.989211][T10353] ? ethnl_default_dumpit+0x517/0xb30 [ 210.994639][T10353] ? coalesce_fill_reply+0xcc/0x1b70 [ 210.999991][T10353] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 211.006027][T10353] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 211.011761][T10353] ? rcu_is_watching+0x15/0xb0 [ 211.016573][T10353] ? trace_contention_end+0x3c/0x120 [ 211.021909][T10353] ? nla_put+0x131/0x1e0 [ 211.026189][T10353] ? __asan_memcpy+0x40/0x70 [ 211.030802][T10353] ? nla_put+0x131/0x1e0 [ 211.035072][T10353] ? ethnl_fill_reply_header+0x295/0x3c0 [ 211.040727][T10353] ? __pfx_netdev_run_todo+0x10/0x10 [ 211.046051][T10353] ? __pfx_ethnl_fill_reply_header+0x10/0x10 [ 211.052049][T10353] ? ethnl_ops_complete+0xba/0xd0 [ 211.057082][T10353] ? coalesce_prepare_data+0x175/0x1e0 [ 211.062553][T10353] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 211.068202][T10353] ? ethnl_default_dumpit+0x83/0xb30 [ 211.073497][T10353] ethnl_default_dumpit+0x5ac/0xb30 [ 211.078716][T10353] ? ethnl_default_dumpit+0x83/0xb30 [ 211.084038][T10353] genl_dumpit+0x107/0x1a0 [ 211.088495][T10353] netlink_dump+0x647/0xd80 [ 211.093012][T10353] ? __pfx_netlink_dump+0x10/0x10 [ 211.098087][T10353] ? genl_start+0x597/0x6d0 [ 211.102607][T10353] __netlink_dump_start+0x59f/0x780 [ 211.107816][T10353] genl_rcv_msg+0x88c/0xec0 [ 211.112329][T10353] ? mark_lock+0x9a/0x350 [ 211.116678][T10353] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.121737][T10353] ? __pfx_genl_start+0x10/0x10 [ 211.126628][T10353] ? __pfx_genl_dumpit+0x10/0x10 [ 211.131577][T10353] ? __pfx_genl_done+0x10/0x10 [ 211.136358][T10353] ? __pfx_lock_acquire+0x10/0x10 [ 211.141388][T10353] ? __pfx_ethnl_default_start+0x10/0x10 [ 211.147048][T10353] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 211.152775][T10353] ? __pfx_ethnl_default_done+0x10/0x10 [ 211.158348][T10353] ? __pfx___might_resched+0x10/0x10 [ 211.163646][T10353] netlink_rcv_skb+0x1e3/0x430 [ 211.168426][T10353] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.173477][T10353] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.178816][T10353] ? __netlink_deliver_tap+0x77e/0x7c0 [ 211.184314][T10353] genl_rcv+0x28/0x40 [ 211.188347][T10353] netlink_unicast+0x7f0/0x990 [ 211.193122][T10353] ? __pfx_netlink_unicast+0x10/0x10 [ 211.198428][T10353] ? __virt_addr_valid+0x183/0x520 [ 211.203552][T10353] ? __check_object_size+0x49c/0x900 [ 211.208853][T10353] ? bpf_lsm_netlink_send+0x9/0x10 [ 211.213986][T10353] netlink_sendmsg+0x8e4/0xcb0 [ 211.218788][T10353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.224102][T10353] ? __import_iovec+0x536/0x820 [ 211.228961][T10353] ? aa_sock_msg_perm+0x91/0x160 [ 211.233947][T10353] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 211.239233][T10353] ? security_socket_sendmsg+0x87/0xb0 [ 211.244726][T10353] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.250024][T10353] __sock_sendmsg+0x221/0x270 [ 211.254722][T10353] ____sys_sendmsg+0x525/0x7d0 [ 211.259501][T10353] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.264824][T10353] __sys_sendmsg+0x2b0/0x3a0 [ 211.269425][T10353] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.274570][T10353] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.280974][T10353] ? do_syscall_64+0x100/0x230 [ 211.285765][T10353] ? do_syscall_64+0xb6/0x230 [ 211.290462][T10353] do_syscall_64+0xf3/0x230 [ 211.294991][T10353] ? clear_bhb_loop+0x35/0x90 [ 211.299677][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.305599][T10353] RIP: 0033:0x7f6d40d75b99 [ 211.310033][T10353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.329655][T10353] RSP: 002b:00007f6d41c2e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.338076][T10353] RAX: ffffffffffffffda RBX: 00007f6d40f03fa0 RCX: 00007f6d40d75b99 [ 211.346080][T10353] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000005 [ 211.354057][T10353] RBP: 00007f6d40df677e R08: 0000000000000000 R09: 0000000000000000 [ 211.362040][T10353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.370114][T10353] R13: 000000000000000b R14: 00007f6d40f03fa0 R15: 00007ffeca977198 [ 211.378118][T10353] [ 211.381142][T10353] Modules linked in: [ 211.393554][T10353] ---[ end trace 0000000000000000 ]--- [ 211.399067][T10353] RIP: 0010:coalesce_fill_reply+0xcc/0x1b70 [ 211.405401][T10353] Code: e8 59 cf f8 f7 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 63 9d 5e f8 bb a0 0c 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 45 9d 5e f8 48 8b 03 48 89 44 24 [ 211.426243][T10353] RSP: 0018:ffffc9000423eee0 EFLAGS: 00010202 [ 211.432647][T10353] RAX: 0000000000000194 RBX: 0000000000000ca0 RCX: 0000000000040000 [ 211.446510][T10353] RDX: ffffc9000b600000 RSI: 00000000000011ce RDI: 00000000000011cf [ 211.454789][T10353] RBP: ffffc9000423f118 R08: ffffffff899c0ee7 R09: 006e75745f7a7973 [ 211.463156][T10353] R10: dffffc0000000000 R11: ffffffff899d5700 R12: ffffffff899d5700 [ 211.476994][T10353] R13: dffffc0000000000 R14: ffff88807efa3d00 R15: ffff88802f0563c0 [ 211.487997][T10353] FS: 00007f6d41c2e6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 211.499600][T10353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.506587][T10353] CR2: 000000110c3afab7 CR3: 000000002362c000 CR4: 00000000003506f0 [ 211.510507][T10363] syzkaller1: entered promiscuous mode [ 211.514849][T10353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.522495][T10363] syzkaller1: entered allmulticast mode [ 211.531880][T10353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.544611][T10353] Kernel panic - not syncing: Fatal exception [ 211.551063][T10353] Kernel Offset: disabled [ 211.555427][T10353] Rebooting in 86400 seconds..