last executing test programs: 2.823444077s ago: executing program 3 (id=634): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) connect$vsock_stream(r0, &(0x7f0000000240), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0xb849, 0x9, 0x8000, 0x10, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2, 0xc}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r6, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) 2.451657609s ago: executing program 4 (id=639): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000280)={0x40, r1, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x0) 2.235683986s ago: executing program 3 (id=641): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x56) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="00b9", 0x2}], 0x1}, 0x200008d1) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='u', 0x1}], 0x1, &(0x7f0000000a80)=ANY=[@ANYBLOB="78000000000000000000000007000000070fb27f000001e0000002ac1414bb8927cce0000002e0000001e0000001ffffffff00000000ac141423e00000017f000001ac14144300440cc401ac1e010100000fff94040100000bba416311049117549344142cb1e00000010000c6707f000001fffffc01000014000000000000000000000001000000f70c0000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffffffffffff0000000014000000000000000000000001000000090000000000000011000000000000000000000001000000b400000000000000110000000000000000000000010000007a000000000000001c"], 0x118}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40010141) recvmsg(r1, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x42) 2.200845986s ago: executing program 4 (id=642): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000030000001100000008000300", @ANYRES32=r3], 0x1c}}, 0x0) 2.021882873s ago: executing program 4 (id=646): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000ff9, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000380)='scalable\x00', 0xffffffffffffff39) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r5, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$netlink(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="14000000270001"], 0x14}], 0x1}, 0x0) sendmsg$inet(r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20004845) socket$nl_netfilter(0x10, 0x3, 0xc) 1.986968454s ago: executing program 3 (id=647): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 1.610751803s ago: executing program 1 (id=651): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f00002b0000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f0000867000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 1.422723889s ago: executing program 2 (id=654): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @empty, 0x0, "d64724f6257e43b341dc333940c0ca00", 0xffffffff, 0x0, 0x409, 0xc3b}, 0x3c) 1.289101616s ago: executing program 1 (id=656): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000001400)=ANY=[@ANYBLOB="180200000c0010000000000000000000850000004100000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x12, 0xf00, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.223192969s ago: executing program 0 (id=657): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0x1c, &(0x7f0000000480)=ANY=[@ANYBLOB="1808000000", @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000002408f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x4c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000100)=r3, 0x4) 1.160099967s ago: executing program 1 (id=658): socket$packet(0x11, 0x3, 0x300) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x80005, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000215dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.113616994s ago: executing program 0 (id=659): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x50}}, 0x0) 1.035687497s ago: executing program 2 (id=660): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWSET={0xfc, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0xc0, 0x11, 0x0, 0x1, @match={{0xa}, @val={0xb0, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x9f, 0x1, 'qu\x0fA\xaaW\x91\xdf\xf2\xa3\xd7\"\'\x9d\x03\xe4ofh\xad\x1b\xa0\xc8\x8dz\x19LO\x8fj9m\x80\x96\xd6)\x9cq\x93\x83\xaf\x06\xd9,\x06\xe7\xb1^\xe9\xbcQ\xcb\xc7\xcf0>=\xa4\a\x82\x12\x15Z\xbe&i-H\xec4\xfa\x88 V\xd1\x81\x7f-\xd5\xffdY \x17D\xc6\xac\x92\xe8\xca\xc4\x9b\xd4Q\f\xe5\x8b\xfdhu\x87/\x15\x90\xb3\xe4\x96\r\x87:\x0f1\xba\xe9\xd8Z\x87\xf0\xf4\xe6\x05\x84c\x83\xcd\xa8 \x9c\xb0\xc5\xa6\x8d!qh\xf9\xafl\xc2\x00\x95\x94\x8e\x90\xf2\x13\x82M+\x87\x00\x00\x00\x00\x00'}]}}}]}], {0x14, 0x10}}, 0x124}}, 0x0) 993.537769ms ago: executing program 4 (id=661): r0 = socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x54}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000bff7f000000000000000024fc60", 0x14}], 0x1}, 0x0) 891.968275ms ago: executing program 2 (id=662): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200)=0xa, 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) 711.791041ms ago: executing program 2 (id=663): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'pimreg\x00', {0x3}}) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) 643.172374ms ago: executing program 1 (id=664): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'dummy0\x00', 0x6}) socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000001c0)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="110000006a", 0x5}], 0x1}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x14, &(0x7f00000000c0), 0xb9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x29, 0x14, &(0x7f0000000200)=r4, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@ccm_128={{0x304}, "6e9297a2501046d3", "f8b7a5cf480884fa27a54bff53f6bdaa", "cba8a655", "f600"}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x0, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000c40)={{r5}, &(0x7f0000000bc0), &(0x7f0000000c00)='%-010d \x00'}, 0x20) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000b40)=0x2000000, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7fb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000780)=[{&(0x7f0000000340)="41c1275abffb30b21f98326c1a30825aeb0243eec955d1ada4aeeaa61b5d3962b81d827c962f3ede14eb95814763b2fd4f622e4b55f80de9fa38431d7dffa88a0f41d8fdd5763b63a9da11ab64cc1ddb3646909b801e93f9c80c972fa2eb1ee646ef3da376e7a32923fbda3eef86dc9386f46143b88951cba964f932173931ac94c77df479b9cb1740daf29d8e32c976de0c56785e07db49c6e1b4c37bf6408fdb717e6453648cdbb89da08770b08c561957c633fd62f6ec5e36c228fbda6632cb689df332253ab12365cb658770cf", 0x38}], 0x1000000000000351) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) 537.589861ms ago: executing program 3 (id=665): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) 522.283143ms ago: executing program 0 (id=666): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7f}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 480.606514ms ago: executing program 4 (id=667): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1bc, 0x4) r2 = socket(0x18, 0x0, 0x0) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000480), &(0x7f00000004c0)=0x4) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000080)={0xa0008210}) r4 = socket(0x200000100000011, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300), 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x38}}, 0x4000000) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="0fd126608032"}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 355.215091ms ago: executing program 1 (id=668): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001ac0)={0x50, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x93}]}]}, 0x50}}, 0x8084) 355.07451ms ago: executing program 0 (id=669): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r4, @ANYBLOB="fb1def39cd494b0eeb0b49e64f9ea388b6a035cabf99bf8f9082697f4467392062d4167cc25e0c5e5f67eb86de7dd1dcce55c58b27bd9e96f0810e3d8dc38adb7a"], 0x40}, 0x4, 0x700000000000000}, 0x0) 346.3134ms ago: executing program 2 (id=670): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) socket$inet6(0xa, 0x3, 0xff) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="84810000c2e95cdf10ecfa36b284ce34ca926add699aa2ec1c44af99cceeb5000000", @ANYRES16=r5, @ANYBLOB="000427bd7000fddbdf25100000001800028004000400080001000400000008000100010000800c00058008000100756470004000078008000100000001000c00030000000080ffffffff0c000400000001000000000008000100001000000c000400790000000000000008000200840e00000c0005800800010075647000"], 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x40081) syz_emit_ethernet(0x86, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "ca0c734891a263a2ef1df715fb24b095"}, @timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}, @fastopen={0x22, 0x3, 'l'}]}}}}}}}}, 0x0) 262.182952ms ago: executing program 3 (id=671): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'veth0_to_bond\x00', 0x100}) syz_emit_ethernet(0x437, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 210.950728ms ago: executing program 0 (id=672): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000001840)=[{{0x0, 0x2000, &(0x7f0000001500)=[{&(0x7f0000004ac0)=""/102389, 0xffd8}], 0x1}}], 0xa, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) 123.6724ms ago: executing program 1 (id=673): sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") 123.382695ms ago: executing program 2 (id=674): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)={0x2c, r1, 0x1, 0x0, 0x3, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000080), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r5, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x7, &(0x7f0000003480), &(0x7f0000000080)=0x80) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32], 0x34}}, 0x0) 103.42675ms ago: executing program 4 (id=675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@bridge_dellink={0x34, 0x13, 0x1, 0x0, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x40004}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x21}]}}]}]}, 0x34}}, 0x0) 82.729147ms ago: executing program 3 (id=676): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x800) 0s ago: executing program 0 (id=677): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000002c0), 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8994, &(0x7f0000000200)={'bond0\x00'}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x90) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000040800124080000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) ioctl$sock_bt_hci(r2, 0x400448e2, &(0x7f0000000300)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.29' (ED25519) to the list of known hosts. [ 52.188503][ T5216] cgroup: Unknown subsys name 'net' [ 52.323708][ T5216] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.678189][ T5216] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.899747][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.908030][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.917954][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.926512][ T5242] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.934839][ T5242] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.943633][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.952535][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.960242][ T5242] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.967984][ T5242] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.975884][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.984939][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.992425][ T5242] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.996393][ T5245] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.000370][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.012399][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.014069][ T5242] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.024443][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.028802][ T5242] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.034648][ T5240] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.041360][ T5247] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.057467][ T5242] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.083664][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.104176][ T5246] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.111735][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.111975][ T5246] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.119727][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.127263][ T5246] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.133916][ T5242] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.140828][ T5246] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.164727][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.651440][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 56.699529][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 56.761864][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 56.864851][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 56.922698][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.931036][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.939781][ T5226] bridge_slave_0: entered allmulticast mode [ 56.947302][ T5226] bridge_slave_0: entered promiscuous mode [ 56.962542][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.969696][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.976915][ T5226] bridge_slave_1: entered allmulticast mode [ 56.984120][ T5226] bridge_slave_1: entered promiscuous mode [ 57.009942][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 57.070529][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.077910][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.085122][ T5229] bridge_slave_0: entered allmulticast mode [ 57.092161][ T5229] bridge_slave_0: entered promiscuous mode [ 57.113647][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.126102][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.135623][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.143506][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.150860][ T5227] bridge_slave_0: entered allmulticast mode [ 57.157574][ T5227] bridge_slave_0: entered promiscuous mode [ 57.164889][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.172248][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.179470][ T5227] bridge_slave_1: entered allmulticast mode [ 57.186383][ T5227] bridge_slave_1: entered promiscuous mode [ 57.192881][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.200191][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.207427][ T5229] bridge_slave_1: entered allmulticast mode [ 57.214027][ T5229] bridge_slave_1: entered promiscuous mode [ 57.320520][ T5226] team0: Port device team_slave_0 added [ 57.330038][ T5226] team0: Port device team_slave_1 added [ 57.345151][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.357772][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.368965][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.417939][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.447209][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.454440][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.462164][ T5235] bridge_slave_0: entered allmulticast mode [ 57.468973][ T5235] bridge_slave_0: entered promiscuous mode [ 57.477783][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.484922][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.492187][ T5235] bridge_slave_1: entered allmulticast mode [ 57.499488][ T5235] bridge_slave_1: entered promiscuous mode [ 57.508162][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.515099][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.541861][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.567050][ T5227] team0: Port device team_slave_0 added [ 57.586312][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.593876][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.601611][ T5243] bridge_slave_0: entered allmulticast mode [ 57.608988][ T5243] bridge_slave_0: entered promiscuous mode [ 57.640404][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.648316][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.675036][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.704133][ T5227] team0: Port device team_slave_1 added [ 57.726730][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.733838][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.741102][ T5243] bridge_slave_1: entered allmulticast mode [ 57.748662][ T5243] bridge_slave_1: entered promiscuous mode [ 57.765731][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.778855][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.792310][ T5229] team0: Port device team_slave_0 added [ 57.799739][ T5229] team0: Port device team_slave_1 added [ 57.819651][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.826704][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.853052][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.909625][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.916928][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.943058][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.956867][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.992594][ T5226] hsr_slave_0: entered promiscuous mode [ 57.999134][ T5226] hsr_slave_1: entered promiscuous mode [ 58.024855][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.045368][ T5235] team0: Port device team_slave_0 added [ 58.053954][ T5235] team0: Port device team_slave_1 added [ 58.060480][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.067518][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.093883][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.107432][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.114378][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.140676][ T5232] Bluetooth: hci3: command tx timeout [ 58.145517][ T5246] Bluetooth: hci2: command tx timeout [ 58.146688][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.205680][ T5243] team0: Port device team_slave_0 added [ 58.211814][ T5246] Bluetooth: hci0: command tx timeout [ 58.211858][ T5232] Bluetooth: hci1: command tx timeout [ 58.218093][ T5246] Bluetooth: hci4: command tx timeout [ 58.250852][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.258097][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.284585][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.309684][ T5243] team0: Port device team_slave_1 added [ 58.344540][ T5227] hsr_slave_0: entered promiscuous mode [ 58.350894][ T5227] hsr_slave_1: entered promiscuous mode [ 58.358867][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.367323][ T5227] Cannot create hsr debugfs directory [ 58.373465][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.380543][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.407073][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.442678][ T5229] hsr_slave_0: entered promiscuous mode [ 58.449525][ T5229] hsr_slave_1: entered promiscuous mode [ 58.455569][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.463604][ T5229] Cannot create hsr debugfs directory [ 58.507047][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.514012][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.540468][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.556165][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.563271][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.589237][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.647041][ T5235] hsr_slave_0: entered promiscuous mode [ 58.653334][ T5235] hsr_slave_1: entered promiscuous mode [ 58.660372][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.668048][ T5235] Cannot create hsr debugfs directory [ 58.775389][ T5243] hsr_slave_0: entered promiscuous mode [ 58.782318][ T5243] hsr_slave_1: entered promiscuous mode [ 58.788856][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.796531][ T5243] Cannot create hsr debugfs directory [ 59.125290][ T5226] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.152693][ T5226] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.170725][ T5226] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.180293][ T5226] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.231463][ T5227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.258390][ T5227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.267874][ T5227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.312755][ T5227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.333705][ T5229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.361827][ T5229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.382059][ T5229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.402371][ T5229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.447270][ T5235] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.471954][ T5235] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.482492][ T5235] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.493472][ T5235] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.605069][ T5243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.632381][ T5243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.645813][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.667704][ T5243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.679621][ T5243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.754630][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.782304][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.790150][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.835187][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.842305][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.883233][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.914730][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.959008][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.972903][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.994622][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.010524][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.017689][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.054319][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.061451][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.076000][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.083174][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.099222][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.135586][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.142750][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.154352][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.161441][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.172892][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.179982][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.206584][ T5246] Bluetooth: hci2: command tx timeout [ 60.212015][ T5246] Bluetooth: hci3: command tx timeout [ 60.286619][ T5236] Bluetooth: hci1: command tx timeout [ 60.292066][ T5236] Bluetooth: hci0: command tx timeout [ 60.297693][ T5246] Bluetooth: hci4: command tx timeout [ 60.331707][ T5227] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.342669][ T5227] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.465960][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.588851][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.605357][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.660783][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.667963][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.712307][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.719506][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.840760][ T5226] veth0_vlan: entered promiscuous mode [ 60.858529][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.888536][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.918198][ T5226] veth1_vlan: entered promiscuous mode [ 60.936078][ T5243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.085273][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.113734][ T5235] veth0_vlan: entered promiscuous mode [ 61.140184][ T5226] veth0_macvtap: entered promiscuous mode [ 61.186075][ T5226] veth1_macvtap: entered promiscuous mode [ 61.218291][ T5235] veth1_vlan: entered promiscuous mode [ 61.288265][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.299797][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.323530][ T5226] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.333009][ T5226] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.342211][ T5226] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.352088][ T5226] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.398069][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.423686][ T5235] veth0_macvtap: entered promiscuous mode [ 61.470196][ T5235] veth1_macvtap: entered promiscuous mode [ 61.513325][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.529372][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.541085][ T5229] veth0_vlan: entered promiscuous mode [ 61.556103][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.570635][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.582191][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.613763][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.625244][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.638368][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.652885][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.662270][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.664191][ T5229] veth1_vlan: entered promiscuous mode [ 61.678233][ T5227] veth0_vlan: entered promiscuous mode [ 61.693786][ T5235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.705959][ T5235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.714991][ T5235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.724335][ T5235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.749297][ T5243] veth0_vlan: entered promiscuous mode [ 61.780212][ T5227] veth1_vlan: entered promiscuous mode [ 61.815517][ T5243] veth1_vlan: entered promiscuous mode [ 61.919894][ T5229] veth0_macvtap: entered promiscuous mode [ 61.959401][ T5311] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.959630][ T5229] veth1_macvtap: entered promiscuous mode [ 62.004540][ T5243] veth0_macvtap: entered promiscuous mode [ 62.034950][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.055076][ T5243] veth1_macvtap: entered promiscuous mode [ 62.063118][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.081388][ T5227] veth0_macvtap: entered promiscuous mode [ 62.103114][ T5227] veth1_macvtap: entered promiscuous mode [ 62.123036][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.134469][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.151723][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.162979][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.173307][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.184116][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.195638][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.208410][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.223349][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.234318][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.245477][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.257473][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.268039][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.282932][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.294951][ T5246] Bluetooth: hci3: command tx timeout [ 62.295011][ T5236] Bluetooth: hci2: command tx timeout [ 62.303403][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.319042][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.329028][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.340641][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.354488][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.366847][ T5236] Bluetooth: hci4: command tx timeout [ 62.366869][ T5246] Bluetooth: hci0: command tx timeout [ 62.372290][ T5232] Bluetooth: hci1: command tx timeout [ 62.389111][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.399646][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.410074][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.421586][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.432896][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.443829][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.460726][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.471663][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.483145][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.494330][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.505180][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.518291][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.530025][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.542996][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.554190][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.569078][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.581355][ T5229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.590680][ T5229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.599677][ T5229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.609298][ T5229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.629142][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.639700][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.667969][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.681676][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.694367][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.705595][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.715624][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.726087][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.738240][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.749900][ T5315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 62.762080][ T5315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 62.787970][ T5243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.807469][ T5243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.850992][ T5243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.881097][ T5243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.902323][ T5227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.914764][ T5227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.924549][ T5227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.944418][ T5227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.967634][ T5319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 62.997401][ T5323] netlink: 'syz.3.8': attribute type 4 has an invalid length. [ 63.188578][ T5327] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'. [ 63.199578][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.224389][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.250907][ T5327] Zero length message leads to an empty skb [ 63.378643][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.404448][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.422860][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.431643][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.505645][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.523747][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.642772][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.663958][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.773541][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.774826][ T5345] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 63.816763][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.141861][ T5357] netlink: 'syz.3.17': attribute type 4 has an invalid length. [ 64.368091][ T5236] Bluetooth: hci2: command tx timeout [ 64.368108][ T5246] Bluetooth: hci3: command tx timeout [ 64.448795][ T5246] Bluetooth: hci4: command tx timeout [ 64.453049][ T5236] Bluetooth: hci1: command tx timeout [ 64.454219][ T5246] Bluetooth: hci0: command tx timeout [ 64.538337][ T5375] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 64.677359][ T5379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.24'. [ 64.840818][ T5385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.26'. [ 65.051520][ T5392] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 65.083889][ T5391] netlink: 'syz.1.28': attribute type 11 has an invalid length. [ 65.118851][ T5391] netlink: 211132 bytes leftover after parsing attributes in process `syz.1.28'. [ 65.123138][ T5393] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 65.167298][ T5393] netlink: 'syz.0.29': attribute type 2 has an invalid length. [ 65.194149][ T5394] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 65.242947][ T5394] netlink: 'syz.0.29': attribute type 2 has an invalid length. [ 65.489131][ T5407] netlink: 'syz.2.32': attribute type 29 has an invalid length. [ 65.770094][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 65.963719][ T5424] ip6gretap0: entered promiscuous mode [ 65.992493][ T5424] ip6gretap0: left promiscuous mode [ 66.031161][ T5426] netlink: 'syz.4.39': attribute type 1 has an invalid length. [ 66.041805][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.39'. [ 66.268463][ T5430] syz.4.40[5430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.268595][ T5430] syz.4.40[5430] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.281446][ T5428] netlink: 176 bytes leftover after parsing attributes in process `syz.2.41'. [ 66.879812][ T5445] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.928351][ T5449] netlink: 'syz.0.47': attribute type 11 has an invalid length. [ 67.625538][ T5470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.756153][ T5470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.923849][ T5480] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.947207][ T5480] __nla_validate_parse: 5 callbacks suppressed [ 67.947225][ T5480] netlink: 72 bytes leftover after parsing attributes in process `syz.3.59'. [ 68.204439][ T5488] syz.0.63 uses obsolete (PF_INET,SOCK_PACKET) [ 68.729406][ T5509] netlink: 'syz.0.71': attribute type 11 has an invalid length. [ 68.738371][ T5509] netlink: 211132 bytes leftover after parsing attributes in process `syz.0.71'. [ 68.848765][ T5506] vlan2: entered promiscuous mode [ 68.853877][ T5506] caif0: entered promiscuous mode [ 68.909523][ T5506] caif0: left promiscuous mode [ 69.002494][ T5513] netlink: 'syz.3.72': attribute type 15 has an invalid length. [ 69.324047][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 69.461742][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 69.733199][ T5542] netlink: 'syz.3.83': attribute type 11 has an invalid length. [ 69.766316][ T5542] netlink: 211132 bytes leftover after parsing attributes in process `syz.3.83'. [ 69.949815][ T5549] netlink: 16 bytes leftover after parsing attributes in process `syz.4.86'. [ 70.069124][ T5552] ip6gretap0: entered promiscuous mode [ 70.129583][ T5552] ip6gretap0: left promiscuous mode [ 70.176502][ T1052] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 70.478250][ T5570] netlink: 900 bytes leftover after parsing attributes in process `syz.1.92'. [ 70.807835][ T5587] netlink: 'syz.1.99': attribute type 1 has an invalid length. [ 70.828007][ T5587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 70.918278][ T5592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.101'. [ 71.109149][ T3033] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 71.113162][ T5596] bond0: entered promiscuous mode [ 71.146497][ T5596] bond_slave_0: entered promiscuous mode [ 71.162575][ T5596] bond_slave_1: entered promiscuous mode [ 71.688375][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.694746][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.997635][ T5627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.114'. [ 72.505576][ T5649] netlink: 'syz.4.120': attribute type 10 has an invalid length. [ 72.580431][ T5649] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.608518][ T5649] bond0: (slave team0): Enslaving as an active interface with an up link [ 72.643222][ T5650] vlan2: entered promiscuous mode [ 72.662729][ T5650] caif0: entered promiscuous mode [ 72.682442][ T5650] caif0: left promiscuous mode [ 72.739726][ T5653] netlink: 'syz.4.120': attribute type 10 has an invalid length. [ 72.758833][ T5653] bond0: (slave team0): Releasing backup interface [ 72.781504][ T5653] bridge0: port 3(team0) entered blocking state [ 72.798583][ T5653] bridge0: port 3(team0) entered disabled state [ 72.816963][ T5653] team0: entered allmulticast mode [ 72.822120][ T5653] team_slave_0: entered allmulticast mode [ 72.856316][ T5653] team_slave_1: entered allmulticast mode [ 72.865183][ T5653] team0: entered promiscuous mode [ 72.876270][ T5653] team_slave_0: entered promiscuous mode [ 72.888759][ T5653] team_slave_1: entered promiscuous mode [ 72.915009][ T5658] unsupported nlmsg_type 40 [ 73.353039][ T5667] __nla_validate_parse: 1 callbacks suppressed [ 73.353058][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.127'. [ 73.611644][ T5679] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 73.625819][ T5679] netlink: 76 bytes leftover after parsing attributes in process `syz.1.133'. [ 73.665545][ T5679] Êü: entered promiscuous mode [ 73.783425][ T5682] netlink: 'syz.3.134': attribute type 10 has an invalid length. [ 73.870088][ T5682] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.901552][ T5682] bond0: (slave team0): Enslaving as an active interface with an up link [ 73.924622][ T5691] netlink: 'syz.3.134': attribute type 10 has an invalid length. [ 73.942424][ T5688] dccp_invalid_packet: P.Data Offset(0) too small [ 73.977614][ T5691] bond0: (slave team0): Releasing backup interface [ 74.009882][ T5691] bridge0: port 3(team0) entered blocking state [ 74.031118][ T5691] bridge0: port 3(team0) entered disabled state [ 74.041318][ T5691] team0: entered allmulticast mode [ 74.050876][ T5691] team_slave_0: entered allmulticast mode [ 74.068878][ T5691] team_slave_1: entered allmulticast mode [ 74.097762][ T5691] team0: entered promiscuous mode [ 74.110886][ T5691] team_slave_0: entered promiscuous mode [ 74.121554][ T5691] team_slave_1: entered promiscuous mode [ 74.359310][ T5710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 74.487353][ T5712] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.511520][ T5715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.572825][ T5718] ip6gretap0: entered promiscuous mode [ 74.591291][ T5718] ip6gretap0: left promiscuous mode [ 75.092597][ T5740] netlink: 'syz.1.154': attribute type 10 has an invalid length. [ 75.181215][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.211554][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.157'. [ 75.223743][ T5740] bond0: (slave team0): Enslaving as an active interface with an up link [ 75.250988][ T5748] netlink: 'syz.1.154': attribute type 10 has an invalid length. [ 75.282657][ T5748] bond0: (slave team0): Releasing backup interface [ 75.302066][ T5748] bridge0: port 3(team0) entered blocking state [ 75.308783][ T5748] bridge0: port 3(team0) entered disabled state [ 75.315133][ T5748] team0: entered allmulticast mode [ 75.320306][ T5748] team_slave_0: entered allmulticast mode [ 75.326033][ T5748] team_slave_1: entered allmulticast mode [ 75.334110][ T5748] team0: entered promiscuous mode [ 75.341261][ T5748] team_slave_0: entered promiscuous mode [ 75.348163][ T5748] team_slave_1: entered promiscuous mode [ 75.496082][ T5760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.160'. [ 75.510211][ T5762] netlink: 'syz.2.161': attribute type 11 has an invalid length. [ 75.525958][ T5762] netlink: 211132 bytes leftover after parsing attributes in process `syz.2.161'. [ 75.744689][ T5769] netlink: 184 bytes leftover after parsing attributes in process `syz.3.164'. [ 75.825586][ T5773] bridge0: entered promiscuous mode [ 76.044381][ T5780] Illegal XDP return value 4294967274 on prog (id 28) dev N/A, expect packet loss! [ 76.060352][ T5786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 76.101252][ T1052] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 76.355580][ T5792] netlink: 'syz.2.172': attribute type 10 has an invalid length. [ 76.388705][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.398957][ T5792] bond0: (slave team0): Enslaving as an active interface with an up link [ 76.407696][ T5796] netlink: 24 bytes leftover after parsing attributes in process `syz.0.174'. [ 76.425789][ T5797] netlink: 'syz.2.172': attribute type 10 has an invalid length. [ 76.452880][ T5797] bond0: (slave team0): Releasing backup interface [ 76.464092][ T5797] bridge0: port 3(team0) entered blocking state [ 76.484425][ T5797] bridge0: port 3(team0) entered disabled state [ 76.501508][ T5797] team0: entered allmulticast mode [ 76.516502][ T5797] team_slave_0: entered allmulticast mode [ 76.532463][ T5797] team_slave_1: entered allmulticast mode [ 76.564526][ T5797] team0: entered promiscuous mode [ 76.577779][ T5797] team_slave_0: entered promiscuous mode [ 76.598222][ T5797] team_slave_1: entered promiscuous mode [ 76.609614][ T5801] FAULT_INJECTION: forcing a failure. [ 76.609614][ T5801] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.639461][ T5801] CPU: 1 UID: 0 PID: 5801 Comm: syz.4.175 Not tainted 6.11.0-rc4-syzkaller-00681-ge5899b60f52a #0 [ 76.650096][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 76.660172][ T5801] Call Trace: [ 76.663463][ T5801] [ 76.666406][ T5801] dump_stack_lvl+0x241/0x360 [ 76.671126][ T5801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.676343][ T5801] ? __pfx__printk+0x10/0x10 [ 76.680965][ T5801] should_fail_ex+0x3b0/0x4e0 [ 76.685669][ T5801] _copy_from_user+0x2f/0xe0 [ 76.690288][ T5801] sctp_setsockopt+0xcc/0x11c0 [ 76.695078][ T5801] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 76.700986][ T5801] do_sock_setsockopt+0x3af/0x720 [ 76.706040][ T5801] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 76.711608][ T5801] ? __fget_files+0x29/0x470 [ 76.716232][ T5801] ? __fget_files+0x3f6/0x470 [ 76.720940][ T5801] __sys_setsockopt+0x1ae/0x250 [ 76.725815][ T5801] __x64_sys_setsockopt+0xb5/0xd0 [ 76.730869][ T5801] do_syscall_64+0xf3/0x230 [ 76.735392][ T5801] ? clear_bhb_loop+0x35/0x90 [ 76.740090][ T5801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.746015][ T5801] RIP: 0033:0x7ffbf7979ef9 [ 76.750453][ T5801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.770172][ T5801] RSP: 002b:00007ffbf86e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 76.778607][ T5801] RAX: ffffffffffffffda RBX: 00007ffbf7b15f80 RCX: 00007ffbf7979ef9 [ 76.786592][ T5801] RDX: 0000000000000001 RSI: 0000000000000084 RDI: 0000000000000003 [ 76.794570][ T5801] RBP: 00007ffbf86e3090 R08: 0000000000000014 R09: 0000000000000000 [ 76.802558][ T5801] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000001 [ 76.810543][ T5801] R13: 0000000000000000 R14: 00007ffbf7b15f80 R15: 00007ffcdcf7d418 [ 76.818544][ T5801] [ 76.847733][ T58] cfg80211: failed to load regulatory.db [ 76.909900][ T5810] syzkaller0: renamed from bridge_slave_1 (while UP) [ 76.978706][ T5803] netlink: 'syz.1.176': attribute type 9 has an invalid length. [ 77.036822][ T5803] netlink: 91020 bytes leftover after parsing attributes in process `syz.1.176'. [ 77.083512][ T5810] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 77.136622][ T5810] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 77.452560][ T5823] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 77.476332][ T5810] syz.0.178 (5810) used greatest stack depth: 18608 bytes left [ 78.372639][ T5855] netlink: 'syz.1.190': attribute type 10 has an invalid length. [ 78.429010][ T5855] team0: left allmulticast mode [ 78.433925][ T5855] team_slave_0: left allmulticast mode [ 78.456407][ T5855] team_slave_1: left allmulticast mode [ 78.493301][ T5855] team0: left promiscuous mode [ 78.498080][ T5861] __nla_validate_parse: 1 callbacks suppressed [ 78.498094][ T5861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 78.542087][ T5855] team_slave_0: left promiscuous mode [ 78.560883][ T5855] team_slave_1: left promiscuous mode [ 78.573909][ T5855] bridge0: port 3(team0) entered disabled state [ 78.600782][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.628929][ T5855] bond0: (slave team0): Enslaving as an active interface with an up link [ 78.660363][ T5862] netlink: 'syz.1.190': attribute type 10 has an invalid length. [ 78.672321][ T5862] bond0: (slave team0): Releasing backup interface [ 78.693281][ T5862] bridge0: port 3(team0) entered blocking state [ 78.699807][ T5862] bridge0: port 3(team0) entered disabled state [ 78.706159][ T5862] team0: entered allmulticast mode [ 78.713139][ T5862] team_slave_0: entered allmulticast mode [ 78.719437][ T5862] team_slave_1: entered allmulticast mode [ 78.726182][ T5862] team0: entered promiscuous mode [ 78.731297][ T5862] team_slave_0: entered promiscuous mode [ 78.739372][ T5862] team_slave_1: entered promiscuous mode [ 78.829127][ T5864] netlink: 44 bytes leftover after parsing attributes in process `syz.4.194'. [ 78.918947][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 78.948478][ T5877] vlan2: entered promiscuous mode [ 78.953564][ T5877] caif0: entered promiscuous mode [ 79.022944][ T5877] caif0: left promiscuous mode [ 79.083431][ T5880] netlink: 'syz.1.198': attribute type 4 has an invalid length. [ 79.094318][ T5880] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.198'. [ 79.097294][ T5883] warning: `syz.3.200' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.367807][ T5896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.204'. [ 79.396022][ T5898] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 79.552298][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.206'. [ 79.613241][ T5908] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 79.649540][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 79.768530][ T5909] syzkaller0: entered promiscuous mode [ 79.774212][ T5909] syzkaller0: entered allmulticast mode [ 79.797455][ T5906] workqueue: name exceeds WQ_NAME_LEN. Truncating to: òÏÒÇlg#åîxÕ”}IãÑ#)MÔÀL&‘ÅІ90G [ 79.819504][ T5911] bridge0: entered promiscuous mode [ 79.920108][ T5921] netlink: 68 bytes leftover after parsing attributes in process `syz.2.212'. [ 80.081404][ T5924] vlan2: entered promiscuous mode [ 80.102178][ T5924] caif0: entered promiscuous mode [ 80.140162][ T5924] caif0: left promiscuous mode [ 80.179164][ T5926] validate_nla: 1 callbacks suppressed [ 80.179181][ T5926] netlink: 'syz.2.214': attribute type 2 has an invalid length. [ 80.221096][ T5926] netlink: 'syz.2.214': attribute type 1 has an invalid length. [ 80.273586][ T5926] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.214'. [ 80.378181][ T5929] Bluetooth: MGMT ver 1.23 [ 80.389934][ T5929] Bluetooth: hci3: unsupported parameter 64512 [ 80.405046][ T5929] Bluetooth: hci3: invalid length 0, exp 2 for type 26 [ 80.500611][ T5942] syz.2.218[5942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 80.500755][ T5942] syz.2.218[5942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.466937][ T5953] netlink: 'syz.0.221': attribute type 1 has an invalid length. [ 81.516571][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 81.591998][ T5955] netlink: 'syz.2.222': attribute type 4 has an invalid length. [ 81.617091][ T5962] FAULT_INJECTION: forcing a failure. [ 81.617091][ T5962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.695433][ T5962] CPU: 0 UID: 0 PID: 5962 Comm: syz.1.223 Not tainted 6.11.0-rc4-syzkaller-00681-ge5899b60f52a #0 [ 81.706074][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 81.716149][ T5962] Call Trace: [ 81.719443][ T5962] [ 81.722384][ T5962] dump_stack_lvl+0x241/0x360 [ 81.727087][ T5962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.732302][ T5962] ? __pfx__printk+0x10/0x10 [ 81.736917][ T5962] ? snprintf+0xda/0x120 [ 81.741184][ T5962] should_fail_ex+0x3b0/0x4e0 [ 81.745879][ T5962] _copy_to_user+0x2f/0xb0 [ 81.750300][ T5962] simple_read_from_buffer+0xca/0x150 [ 81.755673][ T5962] proc_fail_nth_read+0x1ec/0x260 [ 81.760699][ T5962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.766245][ T5962] ? rw_verify_area+0x520/0x6b0 [ 81.771089][ T5962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.776629][ T5962] vfs_read+0x204/0xbc0 [ 81.780776][ T5962] ? __pfx_lock_release+0x10/0x10 [ 81.785799][ T5962] ? __pfx_vfs_read+0x10/0x10 [ 81.790472][ T5962] ? __fget_files+0x29/0x470 [ 81.795058][ T5962] ? __fget_files+0x3f6/0x470 [ 81.799740][ T5962] ksys_read+0x1a0/0x2c0 [ 81.803979][ T5962] ? __pfx_ksys_read+0x10/0x10 [ 81.808735][ T5962] ? do_syscall_64+0x100/0x230 [ 81.813490][ T5962] ? do_syscall_64+0xb6/0x230 [ 81.818161][ T5962] do_syscall_64+0xf3/0x230 [ 81.822657][ T5962] ? clear_bhb_loop+0x35/0x90 [ 81.827333][ T5962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.833216][ T5962] RIP: 0033:0x7ff87db7893c [ 81.837622][ T5962] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 81.857215][ T5962] RSP: 002b:00007ff87e89f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.865621][ T5962] RAX: ffffffffffffffda RBX: 00007ff87dd15f80 RCX: 00007ff87db7893c [ 81.873591][ T5962] RDX: 000000000000000f RSI: 00007ff87e89f0a0 RDI: 0000000000000005 [ 81.881549][ T5962] RBP: 00007ff87e89f090 R08: 0000000000000000 R09: 0000000000000000 [ 81.889508][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.897470][ T5962] R13: 0000000000000000 R14: 00007ff87dd15f80 R15: 00007fff27a4bc88 [ 81.905530][ T5962] [ 81.984799][ T5971] vlan2: entered promiscuous mode [ 82.008502][ T5971] caif0: entered promiscuous mode [ 82.036788][ T5971] caif0: left promiscuous mode [ 82.256981][ T5983] syz.4.232[5983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.257129][ T5983] syz.4.232[5983] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 82.275796][ T5981] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 82.547665][ T5991] bridge0: port 4(vlan3) entered blocking state [ 82.555315][ T5991] bridge0: port 4(vlan3) entered disabled state [ 82.586370][ T5996] netlink: 'syz.0.237': attribute type 1 has an invalid length. [ 82.626911][ T5991] vlan3: entered allmulticast mode [ 82.657275][ T5991] vlan3: left allmulticast mode [ 82.665237][ T6003] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 82.714133][ T5998] netlink: 'syz.3.238': attribute type 3 has an invalid length. [ 82.808981][ T6007] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 82.990165][ T6013] netlink: 'syz.4.241': attribute type 10 has an invalid length. [ 83.056754][ T6013] team0: left allmulticast mode [ 83.077482][ T6015] NCSI netlink: No device for ifindex 0 [ 83.085112][ T6013] team_slave_0: left allmulticast mode [ 83.106451][ T6013] team_slave_1: left allmulticast mode [ 83.111953][ T6013] team0: left promiscuous mode [ 83.120639][ T6013] team_slave_0: left promiscuous mode [ 83.144304][ T6013] team_slave_1: left promiscuous mode [ 83.151307][ T6013] bridge0: port 3(team0) entered disabled state [ 83.163415][ T6013] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.173634][ T6013] bond0: (slave team0): Enslaving as an active interface with an up link [ 83.194213][ T6022] netlink: 'syz.4.241': attribute type 10 has an invalid length. [ 83.205992][ T6022] bond0: (slave team0): Releasing backup interface [ 83.215909][ T6022] bridge0: port 3(team0) entered blocking state [ 83.222397][ T6022] bridge0: port 3(team0) entered disabled state [ 83.231248][ T6022] team0: entered allmulticast mode [ 83.238505][ T6022] team_slave_0: entered allmulticast mode [ 83.254051][ T6022] team_slave_1: entered allmulticast mode [ 83.264575][ T6022] team0: entered promiscuous mode [ 83.276479][ T6022] team_slave_0: entered promiscuous mode [ 83.282308][ T6022] team_slave_1: entered promiscuous mode [ 83.637780][ T6037] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 83.659155][ T6037] __nla_validate_parse: 7 callbacks suppressed [ 83.659171][ T6037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 84.007512][ T6053] syz.1.258[6053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.007653][ T6053] syz.1.258[6053] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.040016][ T6052] syz.3.257[6052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.069018][ T6052] syz.3.257[6052] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 84.112633][ T6056] netlink: 'syz.4.259': attribute type 10 has an invalid length. [ 84.166603][ T6056] team0: left allmulticast mode [ 84.175833][ T6056] team_slave_0: left allmulticast mode [ 84.185610][ T6056] team_slave_1: left allmulticast mode [ 84.193694][ T6056] team0: left promiscuous mode [ 84.202254][ T6056] team_slave_0: left promiscuous mode [ 84.248840][ T6056] team_slave_1: left promiscuous mode [ 84.254870][ T6056] bridge0: port 3(team0) entered disabled state [ 84.270152][ T6056] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.281699][ T6056] bond0: (slave team0): Enslaving as an active interface with an up link [ 84.320943][ T6065] bond0: (slave team0): Releasing backup interface [ 84.377946][ T6065] bridge0: port 3(team0) entered blocking state [ 84.399179][ T6071] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 84.406428][ T6065] bridge0: port 3(team0) entered disabled state [ 84.413155][ T6065] team0: entered allmulticast mode [ 84.436252][ T6065] team_slave_0: entered allmulticast mode [ 84.451052][ T6065] team_slave_1: entered allmulticast mode [ 84.474808][ T6065] team0: entered promiscuous mode [ 84.486680][ T6065] team_slave_0: entered promiscuous mode [ 84.506481][ T6065] team_slave_1: entered promiscuous mode [ 85.004903][ T6106] netlink: 132 bytes leftover after parsing attributes in process `syz.1.272'. [ 85.095228][ T6105] team0: left allmulticast mode [ 85.100684][ T6105] team_slave_0: left allmulticast mode [ 85.107847][ T6105] team_slave_1: left allmulticast mode [ 85.119256][ T6105] team0: left promiscuous mode [ 85.136901][ T6105] team_slave_0: left promiscuous mode [ 85.142500][ T6105] team_slave_1: left promiscuous mode [ 85.155035][ T6105] bridge0: port 3(team0) entered disabled state [ 85.208369][ T6105] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.234041][ T6105] bond0: (slave team0): Enslaving as an active interface with an up link [ 85.253251][ T6111] validate_nla: 3 callbacks suppressed [ 85.253267][ T6111] netlink: 'syz.3.273': attribute type 10 has an invalid length. [ 85.342009][ T6111] bond0: (slave team0): Releasing backup interface [ 85.357638][ T6111] bridge0: port 3(team0) entered blocking state [ 85.372495][ T6111] bridge0: port 3(team0) entered disabled state [ 85.379023][ T6111] team0: entered allmulticast mode [ 85.384179][ T6111] team_slave_0: entered allmulticast mode [ 85.392788][ T6111] team_slave_1: entered allmulticast mode [ 85.400443][ T6111] team0: entered promiscuous mode [ 85.405605][ T6111] team_slave_0: entered promiscuous mode [ 85.412504][ T6111] team_slave_1: entered promiscuous mode [ 85.420146][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 85.458740][ T6124] netlink: 'syz.4.278': attribute type 10 has an invalid length. [ 85.479407][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.277'. [ 85.489115][ T6124] team0: left allmulticast mode [ 85.496172][ T6124] team_slave_0: left allmulticast mode [ 85.507060][ T6124] team_slave_1: left allmulticast mode [ 85.512987][ T6124] team0: left promiscuous mode [ 85.523111][ T6124] team_slave_0: left promiscuous mode [ 85.532403][ T6124] team_slave_1: left promiscuous mode [ 85.543728][ T6124] bridge0: port 3(team0) entered disabled state [ 85.564465][ T6124] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.573424][ T6124] bond0: (slave team0): Enslaving as an active interface with an up link [ 85.611545][ T6127] netlink: 'syz.4.278': attribute type 10 has an invalid length. [ 85.647553][ T6127] bond0: (slave team0): Releasing backup interface [ 85.673132][ T6127] bridge0: port 3(team0) entered blocking state [ 85.684510][ T6127] bridge0: port 3(team0) entered disabled state [ 85.716529][ T6127] team0: entered allmulticast mode [ 85.728721][ T6127] team_slave_0: entered allmulticast mode [ 85.737182][ T6127] team_slave_1: entered allmulticast mode [ 85.744927][ T6127] team0: entered promiscuous mode [ 85.750752][ T6127] team_slave_0: entered promiscuous mode [ 85.758577][ T6127] team_slave_1: entered promiscuous mode [ 85.791823][ T6138] FAULT_INJECTION: forcing a failure. [ 85.791823][ T6138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.798009][ T6137] syz.2.283[6137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.816639][ T6137] syz.2.283[6137] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.830158][ T6138] CPU: 0 UID: 0 PID: 6138 Comm: syz.0.282 Not tainted 6.11.0-rc4-syzkaller-00681-ge5899b60f52a #0 [ 85.852118][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 85.862166][ T6138] Call Trace: [ 85.865437][ T6138] [ 85.868360][ T6138] dump_stack_lvl+0x241/0x360 [ 85.873034][ T6138] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.878224][ T6138] ? __pfx__printk+0x10/0x10 [ 85.883242][ T6138] ? __pfx_lock_release+0x10/0x10 [ 85.888268][ T6138] should_fail_ex+0x3b0/0x4e0 [ 85.892942][ T6138] _copy_from_user+0x2f/0xe0 [ 85.897531][ T6138] copy_msghdr_from_user+0xae/0x680 [ 85.902728][ T6138] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 85.908539][ T6138] __sys_sendmsg+0x23d/0x3a0 [ 85.913129][ T6138] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.918231][ T6138] ? vfs_write+0x7c4/0xc90 [ 85.922672][ T6138] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.928996][ T6138] ? do_syscall_64+0x100/0x230 [ 85.933754][ T6138] ? do_syscall_64+0xb6/0x230 [ 85.938424][ T6138] do_syscall_64+0xf3/0x230 [ 85.942917][ T6138] ? clear_bhb_loop+0x35/0x90 [ 85.947593][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.953479][ T6138] RIP: 0033:0x7f1d08979ef9 [ 85.957885][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.977528][ T6138] RSP: 002b:00007f1d09761038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.985944][ T6138] RAX: ffffffffffffffda RBX: 00007f1d08b15f80 RCX: 00007f1d08979ef9 [ 85.993916][ T6138] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 86.001878][ T6138] RBP: 00007f1d09761090 R08: 0000000000000000 R09: 0000000000000000 [ 86.009931][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.017895][ T6138] R13: 0000000000000000 R14: 00007f1d08b15f80 R15: 00007ffd776821a8 [ 86.025873][ T6138] [ 86.322378][ T6154] Cannot find add_set index 0 as target [ 86.343547][ T6154] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.289'. [ 86.372351][ T6154] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 86.400188][ T6158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.290'. [ 86.425893][ T6154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.289'. [ 86.671704][ T6172] netlink: 'syz.2.293': attribute type 10 has an invalid length. [ 86.683852][ T6173] netlink: 'syz.0.294': attribute type 11 has an invalid length. [ 86.701342][ T6173] netlink: 211132 bytes leftover after parsing attributes in process `syz.0.294'. [ 86.710526][ T6172] team0: left allmulticast mode [ 86.729330][ T6172] team_slave_0: left allmulticast mode [ 86.734834][ T6172] team_slave_1: left allmulticast mode [ 86.794820][ T6172] team0: left promiscuous mode [ 86.806857][ T6172] team_slave_0: left promiscuous mode [ 86.812451][ T6172] team_slave_1: left promiscuous mode [ 86.880678][ T6172] bridge0: port 3(team0) entered disabled state [ 86.967892][ T6172] batman_adv: batadv0: Adding interface: team0 [ 87.026619][ T6172] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.049399][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 87.099104][ T6172] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 87.158518][ T6176] netlink: 'syz.2.293': attribute type 10 has an invalid length. [ 87.201100][ T6176] netlink: 2 bytes leftover after parsing attributes in process `syz.2.293'. [ 87.228125][ T6176] team0: entered promiscuous mode [ 87.259135][ T6176] team_slave_0: entered promiscuous mode [ 87.275382][ T6176] team_slave_1: entered promiscuous mode [ 87.301963][ T6176] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.320380][ T6176] batman_adv: batadv0: Interface activated: team0 [ 87.342199][ T6176] batman_adv: batadv0: Interface deactivated: team0 [ 87.356594][ T6176] batman_adv: batadv0: Removing interface: team0 [ 87.372288][ T6176] bridge0: port 3(team0) entered blocking state [ 87.381146][ T6176] bridge0: port 3(team0) entered disabled state [ 87.388168][ T6176] team0: entered allmulticast mode [ 87.393486][ T6176] team_slave_0: entered allmulticast mode [ 87.402833][ T6176] team_slave_1: entered allmulticast mode [ 87.421919][ T6176] bridge0: port 3(team0) entered blocking state [ 87.428344][ T6176] bridge0: port 3(team0) entered forwarding state [ 87.885425][ T6212] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 88.039768][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.092296][ T6218] netlink: 'syz.0.309': attribute type 10 has an invalid length. [ 88.138007][ T6218] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 88.150839][ T6218] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 88.197917][ T6226] netlink: 'syz.1.313': attribute type 11 has an invalid length. [ 88.483819][ T6244] sctp: [Deprecated]: syz.1.318 (pid 6244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 88.483819][ T6244] Use struct sctp_sack_info instead [ 88.903885][ T6257] syz.3.323[6257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.904059][ T6257] syz.3.323[6257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.954782][ T6261] raw_sendmsg: syz.1.324 forgot to set AF_INET. Fix it! [ 88.973683][ T6263] netlink: 'syz.4.325': attribute type 11 has an invalid length. [ 89.009146][ T6263] __nla_validate_parse: 4 callbacks suppressed [ 89.009165][ T6263] netlink: 211132 bytes leftover after parsing attributes in process `syz.4.325'. [ 89.182194][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'. [ 89.201008][ T6270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.328'. [ 89.497769][ T6280] netlink: 'syz.4.332': attribute type 2 has an invalid length. [ 90.086411][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.340'. [ 90.127666][ T6303] vlan2: entered promiscuous mode [ 90.134939][ T6307] netlink: 'syz.0.341': attribute type 1 has an invalid length. [ 90.146666][ T6303] caif0: entered promiscuous mode [ 90.158321][ T6307] netlink: 9188 bytes leftover after parsing attributes in process `syz.0.341'. [ 90.216701][ T6303] caif0: left promiscuous mode [ 90.645504][ T6324] netlink: 68 bytes leftover after parsing attributes in process `syz.3.347'. [ 90.734538][ T6320] netlink: 68 bytes leftover after parsing attributes in process `syz.2.348'. [ 91.320134][ T6350] FAULT_INJECTION: forcing a failure. [ 91.320134][ T6350] name failslab, interval 1, probability 0, space 0, times 1 [ 91.364962][ T6350] CPU: 1 UID: 0 PID: 6350 Comm: syz.4.360 Not tainted 6.11.0-rc4-syzkaller-00681-ge5899b60f52a #0 [ 91.375604][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 91.385673][ T6350] Call Trace: [ 91.388959][ T6350] [ 91.391891][ T6350] dump_stack_lvl+0x241/0x360 [ 91.396589][ T6350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.401789][ T6350] ? __pfx__printk+0x10/0x10 [ 91.406375][ T6350] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 91.412354][ T6350] ? __pfx___might_resched+0x10/0x10 [ 91.417638][ T6350] should_fail_ex+0x3b0/0x4e0 [ 91.422311][ T6350] should_failslab+0xac/0x100 [ 91.426983][ T6350] ? __alloc_skb+0x1c3/0x440 [ 91.431568][ T6350] kmem_cache_alloc_node_noprof+0x71/0x320 [ 91.437379][ T6350] __alloc_skb+0x1c3/0x440 [ 91.441796][ T6350] ? __pfx___alloc_skb+0x10/0x10 [ 91.446730][ T6350] ? netlink_autobind+0xd6/0x2f0 [ 91.451660][ T6350] ? netlink_autobind+0x2b0/0x2f0 [ 91.456678][ T6350] netlink_sendmsg+0x638/0xcb0 [ 91.461442][ T6350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.466899][ T6350] ? __import_iovec+0x536/0x820 [ 91.471748][ T6350] ? aa_sock_msg_perm+0x91/0x160 [ 91.476681][ T6350] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 91.481959][ T6350] ? security_socket_sendmsg+0x87/0xb0 [ 91.487428][ T6350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.492712][ T6350] __sock_sendmsg+0x221/0x270 [ 91.497385][ T6350] ____sys_sendmsg+0x525/0x7d0 [ 91.502151][ T6350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.507444][ T6350] __sys_sendmsg+0x2b0/0x3a0 [ 91.512027][ T6350] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.517130][ T6350] ? vfs_write+0x7c4/0xc90 [ 91.521578][ T6350] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 91.527906][ T6350] ? do_syscall_64+0x100/0x230 [ 91.532663][ T6350] ? do_syscall_64+0xb6/0x230 [ 91.537339][ T6350] do_syscall_64+0xf3/0x230 [ 91.541840][ T6350] ? clear_bhb_loop+0x35/0x90 [ 91.546515][ T6350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.552403][ T6350] RIP: 0033:0x7ffbf7979ef9 [ 91.556820][ T6350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.576417][ T6350] RSP: 002b:00007ffbf86e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.584823][ T6350] RAX: ffffffffffffffda RBX: 00007ffbf7b15f80 RCX: 00007ffbf7979ef9 [ 91.592786][ T6350] RDX: 0000000000004010 RSI: 0000000020000640 RDI: 0000000000000005 [ 91.600748][ T6350] RBP: 00007ffbf86e3090 R08: 0000000000000000 R09: 0000000000000000 [ 91.608708][ T6350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.616670][ T6350] R13: 0000000000000000 R14: 00007ffbf7b15f80 R15: 00007ffcdcf7d418 [ 91.624670][ T6350] [ 91.699497][ T6357] netlink: 68 bytes leftover after parsing attributes in process `syz.4.360'. [ 91.832435][ T6361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.363'. [ 91.937158][ T6365] netlink: 'syz.4.365': attribute type 11 has an invalid length. [ 91.962243][ T6365] netlink: 211132 bytes leftover after parsing attributes in process `syz.4.365'. [ 92.048218][ T6370] netlink: 'syz.3.366': attribute type 1 has an invalid length. [ 92.129270][ T6368] netlink: 'syz.0.364': attribute type 10 has an invalid length. [ 92.220037][ T6368] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.243869][ T6368] team0: entered promiscuous mode [ 92.266983][ T6368] team_slave_0: entered promiscuous mode [ 92.275114][ T6368] team_slave_1: entered promiscuous mode [ 92.298015][ T6368] bond0: (slave team0): Enslaving as an active interface with an up link [ 92.315705][ T6377] netlink: 'syz.0.364': attribute type 10 has an invalid length. [ 92.358660][ T6377] bond0: (slave team0): Releasing backup interface [ 92.366719][ T6377] team0: left promiscuous mode [ 92.371852][ T6377] team_slave_0: left promiscuous mode [ 92.377961][ T6377] team_slave_1: left promiscuous mode [ 92.387323][ T6377] bridge0: port 3(team0) entered blocking state [ 92.394068][ T6377] bridge0: port 3(team0) entered disabled state [ 92.401796][ T6377] team0: entered allmulticast mode [ 92.407641][ T6377] team_slave_0: entered allmulticast mode [ 92.413478][ T6377] team_slave_1: entered allmulticast mode [ 92.421271][ T6377] team0: entered promiscuous mode [ 92.426774][ T6377] team_slave_0: entered promiscuous mode [ 92.432684][ T6377] team_slave_1: entered promiscuous mode [ 92.644503][ T6390] syz.3.373[6390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.644654][ T6390] syz.3.373[6390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.828255][ T6396] netlink: 'syz.2.377': attribute type 10 has an invalid length. [ 92.948328][ T6404] netlink: 'syz.3.378': attribute type 11 has an invalid length. [ 93.203291][ T35] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 93.286278][ T6392] infiniband syz0: set down [ 93.342430][ T6419] IPVS: Error connecting to the multicast addr [ 93.360979][ T6392] infiniband syz0: added ipvlan0 [ 93.548603][ T6392] RDS/IB: syz0: added [ 93.553590][ T6392] smc: adding ib device syz0 with port count 1 [ 93.581267][ T6392] smc: ib device syz0 port 1 has pnetid [ 93.660416][ T6435] FAULT_INJECTION: forcing a failure. [ 93.660416][ T6435] name failslab, interval 1, probability 0, space 0, times 0 [ 93.692147][ T6435] CPU: 0 UID: 0 PID: 6435 Comm: syz.0.389 Not tainted 6.11.0-rc4-syzkaller-00681-ge5899b60f52a #0 [ 93.702786][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 93.712858][ T6435] Call Trace: [ 93.716149][ T6435] [ 93.719104][ T6435] dump_stack_lvl+0x241/0x360 [ 93.723792][ T6435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.728980][ T6435] ? __pfx__printk+0x10/0x10 [ 93.733567][ T6435] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 93.739541][ T6435] ? __pfx___might_resched+0x10/0x10 [ 93.744826][ T6435] should_fail_ex+0x3b0/0x4e0 [ 93.749513][ T6435] should_failslab+0xac/0x100 [ 93.754203][ T6435] ? __alloc_skb+0x1c3/0x440 [ 93.758785][ T6435] kmem_cache_alloc_node_noprof+0x71/0x320 [ 93.764598][ T6435] __alloc_skb+0x1c3/0x440 [ 93.769040][ T6435] ? __pfx___alloc_skb+0x10/0x10 [ 93.774004][ T6435] ? netlink_ack_tlv_len+0x6e/0x200 [ 93.779213][ T6435] netlink_ack+0x13f/0xa30 [ 93.783620][ T6435] ? __pfx_lock_acquire+0x10/0x10 [ 93.788666][ T6435] ? __pfx_nl80211_join_mesh+0x10/0x10 [ 93.794123][ T6435] ? __pfx_nl80211_post_doit+0x10/0x10 [ 93.799599][ T6435] netlink_rcv_skb+0x262/0x430 [ 93.804356][ T6435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 93.809371][ T6435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 93.814650][ T6435] ? __netlink_deliver_tap+0x77e/0x7c0 [ 93.820103][ T6435] genl_rcv+0x28/0x40 [ 93.824074][ T6435] netlink_unicast+0x7f6/0x990 [ 93.828848][ T6435] ? __pfx_netlink_unicast+0x10/0x10 [ 93.834137][ T6435] ? __virt_addr_valid+0x183/0x530 [ 93.839247][ T6435] ? __check_object_size+0x49c/0x900 [ 93.844534][ T6435] ? bpf_lsm_netlink_send+0x9/0x10 [ 93.849649][ T6435] netlink_sendmsg+0x8e4/0xcb0 [ 93.854429][ T6435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.859709][ T6435] ? __import_iovec+0x536/0x820 [ 93.864550][ T6435] ? aa_sock_msg_perm+0x91/0x160 [ 93.869486][ T6435] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 93.874776][ T6435] ? security_socket_sendmsg+0x87/0xb0 [ 93.880227][ T6435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.885504][ T6435] __sock_sendmsg+0x221/0x270 [ 93.890195][ T6435] ____sys_sendmsg+0x525/0x7d0 [ 93.894985][ T6435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 93.900304][ T6435] __sys_sendmsg+0x2b0/0x3a0 [ 93.904914][ T6435] ? __pfx___sys_sendmsg+0x10/0x10 [ 93.910041][ T6435] ? vfs_write+0x7c4/0xc90 [ 93.914513][ T6435] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.920860][ T6435] ? do_syscall_64+0x100/0x230 [ 93.925646][ T6435] ? do_syscall_64+0xb6/0x230 [ 93.930344][ T6435] do_syscall_64+0xf3/0x230 [ 93.934865][ T6435] ? clear_bhb_loop+0x35/0x90 [ 93.939562][ T6435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.945474][ T6435] RIP: 0033:0x7f1d08979ef9 [ 93.949902][ T6435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.969519][ T6435] RSP: 002b:00007f1d09761038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.977948][ T6435] RAX: ffffffffffffffda RBX: 00007f1d08b15f80 RCX: 00007f1d08979ef9 [ 93.985930][ T6435] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 93.993911][ T6435] RBP: 00007f1d09761090 R08: 0000000000000000 R09: 0000000000000000 [ 94.001889][ T6435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.009871][ T6435] R13: 0000000000000000 R14: 00007f1d08b15f80 R15: 00007ffd776821a8 [ 94.017873][ T6435] [ 94.407263][ T12] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 94.409482][ T6455] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 94.494271][ T6455] __nla_validate_parse: 6 callbacks suppressed [ 94.494291][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 94.571402][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 95.137808][ T6492] sctp: [Deprecated]: syz.2.406 (pid 6492) Use of int in maxseg socket option. [ 95.137808][ T6492] Use struct sctp_assoc_value instead [ 95.206570][ T6486] netlink: 184472 bytes leftover after parsing attributes in process `syz.2.406'. [ 95.333611][ T1113] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 95.546239][ T6500] netlink: 'syz.2.411': attribute type 8 has an invalid length. [ 95.691165][ T6500] wg2: entered promiscuous mode [ 95.709816][ T6500] wg2: entered allmulticast mode [ 95.875310][ T6510] netlink: 68 bytes leftover after parsing attributes in process `syz.0.415'. [ 95.898035][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 95.926708][ T6512] netlink: 'syz.3.416': attribute type 4 has an invalid length. [ 95.956963][ T6512] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.416'. [ 96.582870][ T1113] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 96.664620][ T6539] netlink: 'syz.0.425': attribute type 11 has an invalid length. [ 96.677633][ T6535] syz.1.423[6535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.706625][ T6539] netlink: 211132 bytes leftover after parsing attributes in process `syz.0.425'. [ 96.716371][ T6535] syz.1.423[6535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.957613][ T6550] netlink: 'syz.1.429': attribute type 1 has an invalid length. [ 96.981763][ T6552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.430'. [ 96.987606][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.429'. [ 97.028957][ T6551] netlink: 'syz.4.428': attribute type 15 has an invalid length. [ 97.078164][ T6555] netlink: 92 bytes leftover after parsing attributes in process `syz.3.431'. [ 97.386456][ T6571] netlink: 'syz.3.435': attribute type 1 has an invalid length. [ 97.513502][ T35] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 97.524250][ T6579] netlink: 'syz.3.435': attribute type 9 has an invalid length. [ 97.553261][ T6579] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 97.637641][ T6584] netlink: 'syz.0.439': attribute type 1 has an invalid length. [ 97.746026][ T6586] netlink: 'syz.4.440': attribute type 4 has an invalid length. [ 98.410984][ T2977] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 99.228316][ T6646] netlink: 'syz.3.459': attribute type 6 has an invalid length. [ 99.305813][ T6648] tipc: Can't bind to reserved service type 0 [ 99.605193][ T6665] netlink: 'syz.1.466': attribute type 11 has an invalid length. [ 99.613677][ T6664] __nla_validate_parse: 10 callbacks suppressed [ 99.613695][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.465'. [ 99.761014][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.468'. [ 99.783807][ T6669] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 99.811572][ T6669] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 100.118096][ T6680] netlink: 'syz.1.472': attribute type 4 has an invalid length. [ 100.163089][ T6680] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.472'. [ 100.295378][ T2977] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 100.343884][ T6689] 8021q: VLANs not supported on ipvlan1 [ 100.839148][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.372135][ T6725] netlink: 'syz.2.485': attribute type 4 has an invalid length. [ 101.440944][ T6725] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.485'. [ 101.584192][ T35] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 101.738970][ T6738] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.489'. [ 102.181641][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.493'. [ 102.373601][ T6766] netlink: 76 bytes leftover after parsing attributes in process `syz.4.497'. [ 102.383976][ T6763] netlink: 76 bytes leftover after parsing attributes in process `syz.4.497'. [ 102.391700][ T6764] netlink: 'syz.3.498': attribute type 4 has an invalid length. [ 102.419911][ T6764] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.498'. [ 102.575269][ T6774] netlink: 'syz.4.501': attribute type 4 has an invalid length. [ 102.758375][ T6784] netlink: 68 bytes leftover after parsing attributes in process `syz.0.505'. [ 103.017106][ T6798] FAULT_INJECTION: forcing a failure. [ 103.017106][ T6798] name failslab, interval 1, probability 0, space 0, times 0 [ 103.064910][ T6798] CPU: 0 UID: 0 PID: 6798 Comm: syz.2.510 Not tainted 6.11.0-rc4-syzkaller-00681-ge5899b60f52a #0 [ 103.075557][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 103.085633][ T6798] Call Trace: [ 103.088930][ T6798] [ 103.091880][ T6798] dump_stack_lvl+0x241/0x360 [ 103.096584][ T6798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.101814][ T6798] ? __pfx__printk+0x10/0x10 [ 103.106428][ T6798] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 103.112430][ T6798] ? __pfx___might_resched+0x10/0x10 [ 103.117743][ T6798] should_fail_ex+0x3b0/0x4e0 [ 103.122448][ T6798] should_failslab+0xac/0x100 [ 103.127151][ T6798] ? __alloc_skb+0x1c3/0x440 [ 103.131766][ T6798] kmem_cache_alloc_node_noprof+0x71/0x320 [ 103.137603][ T6798] __alloc_skb+0x1c3/0x440 [ 103.142039][ T6798] ? __pfx___alloc_skb+0x10/0x10 [ 103.146995][ T6798] ? netlink_autobind+0xd6/0x2f0 [ 103.151949][ T6798] ? netlink_autobind+0x2b0/0x2f0 [ 103.156993][ T6798] netlink_sendmsg+0x638/0xcb0 [ 103.161804][ T6798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.167112][ T6798] ? __import_iovec+0x536/0x820 [ 103.171982][ T6798] ? aa_sock_msg_perm+0x91/0x160 [ 103.176948][ T6798] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 103.182245][ T6798] ? security_socket_sendmsg+0x87/0xb0 [ 103.187707][ T6798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.192985][ T6798] __sock_sendmsg+0x221/0x270 [ 103.197661][ T6798] ____sys_sendmsg+0x525/0x7d0 [ 103.202445][ T6798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.207748][ T6798] __sys_sendmsg+0x2b0/0x3a0 [ 103.212341][ T6798] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.217451][ T6798] ? vfs_write+0x7c4/0xc90 [ 103.221900][ T6798] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.228225][ T6798] ? do_syscall_64+0x100/0x230 [ 103.232984][ T6798] ? do_syscall_64+0xb6/0x230 [ 103.237661][ T6798] do_syscall_64+0xf3/0x230 [ 103.242165][ T6798] ? clear_bhb_loop+0x35/0x90 [ 103.246841][ T6798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.252730][ T6798] RIP: 0033:0x7f4e13b79ef9 [ 103.257139][ T6798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.276764][ T6798] RSP: 002b:00007f4e1495a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.285441][ T6798] RAX: ffffffffffffffda RBX: 00007f4e13d15f80 RCX: 00007f4e13b79ef9 [ 103.293413][ T6798] RDX: 0000000000000040 RSI: 0000000020000080 RDI: 0000000000000004 [ 103.301377][ T6798] RBP: 00007f4e1495a090 R08: 0000000000000000 R09: 0000000000000000 [ 103.309339][ T6798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.317311][ T6798] R13: 0000000000000000 R14: 00007f4e13d15f80 R15: 00007ffca59eb0b8 [ 103.325292][ T6798] [ 103.419561][ T6806] vlan3: entered promiscuous mode [ 103.453850][ T6806] caif0: entered promiscuous mode [ 103.524657][ T6806] caif0: left promiscuous mode [ 103.629833][ T6815] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 103.688946][ T6815] batman_adv: batadv0: Adding interface: ip6gretap1 [ 103.695602][ T6815] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.752934][ T6819] FAULT_INJECTION: forcing a failure. [ 103.752934][ T6819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.792686][ T6815] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 103.809850][ T6819] CPU: 1 UID: 0 PID: 6819 Comm: syz.2.519 Not tainted 6.11.0-rc4-syzkaller-00681-ge5899b60f52a #0 [ 103.815748][ T6812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.820474][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 103.820492][ T6819] Call Trace: [ 103.820500][ T6819] [ 103.820509][ T6819] dump_stack_lvl+0x241/0x360 [ 103.820539][ T6819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.820558][ T6819] ? __pfx__printk+0x10/0x10 [ 103.820579][ T6819] ? __pfx_lock_release+0x10/0x10 [ 103.820610][ T6819] should_fail_ex+0x3b0/0x4e0 [ 103.820635][ T6819] _copy_from_user+0x2f/0xe0 [ 103.820661][ T6819] copy_msghdr_from_user+0xae/0x680 [ 103.820685][ T6819] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 103.820714][ T6819] __sys_sendmsg+0x23d/0x3a0 [ 103.888375][ T6819] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.893485][ T6819] ? vfs_write+0x7c4/0xc90 [ 103.897927][ T6819] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.904250][ T6819] ? do_syscall_64+0x100/0x230 [ 103.909007][ T6819] ? do_syscall_64+0xb6/0x230 [ 103.913677][ T6819] do_syscall_64+0xf3/0x230 [ 103.918172][ T6819] ? clear_bhb_loop+0x35/0x90 [ 103.922846][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.928738][ T6819] RIP: 0033:0x7f4e13b79ef9 [ 103.933238][ T6819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.952835][ T6819] RSP: 002b:00007f4e1495a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.961247][ T6819] RAX: ffffffffffffffda RBX: 00007f4e13d15f80 RCX: 00007f4e13b79ef9 [ 103.969213][ T6819] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 103.977173][ T6819] RBP: 00007f4e1495a090 R08: 0000000000000000 R09: 0000000000000000 [ 103.985133][ T6819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.993096][ T6819] R13: 0000000000000000 R14: 00007f4e13d15f80 R15: 00007ffca59eb0b8 [ 104.001073][ T6819] [ 104.019505][ T6812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.040442][ T6812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.054122][ T6812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.142114][ T6812] batman_adv: batadv0: Removing interface: ip6gretap1 [ 104.649712][ T6857] vlan3: entered promiscuous mode [ 104.669913][ T6857] caif0: entered promiscuous mode [ 104.702758][ T6857] caif0: left promiscuous mode [ 104.969787][ T6873] netlink: 'syz.1.534': attribute type 10 has an invalid length. [ 104.978389][ T6873] team0: left allmulticast mode [ 104.983365][ T6873] team_slave_0: left allmulticast mode [ 104.990192][ T6873] team_slave_1: left allmulticast mode [ 104.995806][ T6873] team0: left promiscuous mode [ 105.011077][ T6873] team_slave_0: left promiscuous mode [ 105.021596][ T6876] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 105.042325][ T6873] team_slave_1: left promiscuous mode [ 105.054041][ T6873] bridge0: port 3(team0) entered disabled state [ 105.066600][ T6873] batman_adv: batadv0: Adding interface: team0 [ 105.072862][ T6873] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.115567][ T6873] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 105.145667][ T6879] netlink: 'syz.1.534': attribute type 10 has an invalid length. [ 105.154909][ T6879] __nla_validate_parse: 1 callbacks suppressed [ 105.154925][ T6879] netlink: 2 bytes leftover after parsing attributes in process `syz.1.534'. [ 105.180955][ T6879] team0: entered promiscuous mode [ 105.186078][ T6879] team_slave_0: entered promiscuous mode [ 105.195390][ T6879] team_slave_1: entered promiscuous mode [ 105.205579][ T6879] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.205578][ T6883] netlink: 'syz.3.537': attribute type 4 has an invalid length. [ 105.212581][ T6879] batman_adv: batadv0: Interface activated: team0 [ 105.223609][ T6883] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.537'. [ 105.233005][ T6879] batman_adv: batadv0: Interface deactivated: team0 [ 105.253720][ T6879] batman_adv: batadv0: Removing interface: team0 [ 105.264597][ T6879] bridge0: port 3(team0) entered blocking state [ 105.275688][ T6879] bridge0: port 3(team0) entered disabled state [ 105.283087][ T6879] team0: entered allmulticast mode [ 105.292981][ T6879] team_slave_0: entered allmulticast mode [ 105.301613][ T6879] team_slave_1: entered allmulticast mode [ 105.314836][ T6879] bridge0: port 3(team0) entered blocking state [ 105.321256][ T6879] bridge0: port 3(team0) entered forwarding state [ 105.520834][ T6890] netlink: 'syz.3.540': attribute type 142 has an invalid length. [ 105.740865][ T6895] netlink: 'syz.3.544': attribute type 28 has an invalid length. [ 105.747490][ T6897] netlink: 68 bytes leftover after parsing attributes in process `syz.1.543'. [ 105.756691][ T6895] netlink: 132 bytes leftover after parsing attributes in process `syz.3.544'. [ 105.858269][ T6903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.547'. [ 105.915226][ T6904] af_packet: tpacket_rcv: packet too big, clamped from 57 to 4294967272. macoff=96 [ 105.999396][ T6910] netlink: 'syz.2.549': attribute type 1 has an invalid length. [ 106.035697][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.549'. [ 106.641066][ T6937] tipc: Started in network mode [ 106.662682][ T6937] tipc: Node identity ffffffff, cluster identity 4711 [ 106.706342][ T6937] tipc: Node number set to 4294967295 [ 106.727174][ T6937] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 106.737652][ T6942] bridge0: port 4(vlan2) entered blocking state [ 106.769575][ T6942] bridge0: port 4(vlan2) entered disabled state [ 106.812033][ T6942] vlan2: entered allmulticast mode [ 106.839422][ T6942] vlan2: left allmulticast mode [ 107.005178][ T6950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.561'. [ 107.024847][ T6965] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 107.066739][ T6959] wg2: entered promiscuous mode [ 107.086519][ T6959] wg2: entered allmulticast mode [ 107.186981][ T6969] FAULT_INJECTION: forcing a failure. [ 107.186981][ T6969] name failslab, interval 1, probability 0, space 0, times 0 [ 107.228353][ T6969] CPU: 1 UID: 0 PID: 6969 Comm: syz.0.567 Not tainted 6.11.0-rc4-syzkaller-00681-ge5899b60f52a #0 [ 107.238997][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 107.249075][ T6969] Call Trace: [ 107.252372][ T6969] [ 107.255322][ T6969] dump_stack_lvl+0x241/0x360 [ 107.260027][ T6969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.265252][ T6969] ? __pfx__printk+0x10/0x10 [ 107.269865][ T6969] ? __kmalloc_node_noprof+0xb7/0x440 [ 107.275259][ T6969] ? __pfx___might_resched+0x10/0x10 [ 107.280575][ T6969] should_fail_ex+0x3b0/0x4e0 [ 107.285279][ T6969] should_failslab+0xac/0x100 [ 107.289986][ T6969] __kmalloc_node_noprof+0xdf/0x440 [ 107.295202][ T6969] ? __kvmalloc_node_noprof+0x72/0x190 [ 107.300693][ T6969] __kvmalloc_node_noprof+0x72/0x190 [ 107.306009][ T6969] xt_alloc_table_info+0x3d/0xa0 [ 107.310976][ T6969] do_ip6t_set_ctl+0xba0/0x1270 [ 107.315861][ T6969] ? __pfx___might_resched+0x10/0x10 [ 107.321171][ T6969] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 107.326491][ T6969] ? __pfx_lock_release+0x10/0x10 [ 107.331560][ T6969] ? __mutex_unlock_slowpath+0x21d/0x750 [ 107.337224][ T6969] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.343233][ T6969] ? __pfx_aa_sk_perm+0x10/0x10 [ 107.348112][ T6969] nf_setsockopt+0x295/0x2c0 [ 107.352724][ T6969] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 107.358641][ T6969] do_sock_setsockopt+0x3af/0x720 [ 107.363698][ T6969] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 107.369266][ T6969] ? __fget_files+0x29/0x470 [ 107.373884][ T6969] ? __fget_files+0x3f6/0x470 [ 107.378595][ T6969] __sys_setsockopt+0x1ae/0x250 [ 107.383482][ T6969] __x64_sys_setsockopt+0xb5/0xd0 [ 107.388538][ T6969] do_syscall_64+0xf3/0x230 [ 107.393057][ T6969] ? clear_bhb_loop+0x35/0x90 [ 107.397756][ T6969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.403670][ T6969] RIP: 0033:0x7f1d08979ef9 [ 107.408101][ T6969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.427734][ T6969] RSP: 002b:00007f1d09761038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.436268][ T6969] RAX: ffffffffffffffda RBX: 00007f1d08b15f80 RCX: 00007f1d08979ef9 [ 107.444260][ T6969] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 107.452250][ T6969] RBP: 00007f1d09761090 R08: 0000000000000560 R09: 0000000000000000 [ 107.460252][ T6969] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.468242][ T6969] R13: 0000000000000000 R14: 00007f1d08b15f80 R15: 00007ffd776821a8 [ 107.476249][ T6969] [ 107.711641][ T6988] netlink: 68 bytes leftover after parsing attributes in process `syz.3.573'. [ 108.023552][ T7005] netlink: 'syz.2.578': attribute type 1 has an invalid length. [ 108.047435][ T7003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.577'. [ 108.059493][ T7007] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 108.069898][ T7007] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.579'. [ 108.083669][ T7007] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 108.194472][ T7009] xt_connbytes: Forcing CT accounting to be enabled [ 108.206731][ T7009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.274677][ T7012] x_tables: duplicate underflow at hook 1 [ 108.297441][ T7009] (unnamed net_device) (uninitialized): option ad_select: invalid value (7) [ 108.464762][ T7024] FAULT_INJECTION: forcing a failure. [ 108.464762][ T7024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.493294][ T7024] CPU: 1 UID: 0 PID: 7024 Comm: syz.4.585 Not tainted 6.11.0-rc4-syzkaller-00681-ge5899b60f52a #0 [ 108.503945][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 108.514025][ T7024] Call Trace: [ 108.517320][ T7024] [ 108.520268][ T7024] dump_stack_lvl+0x241/0x360 [ 108.524975][ T7024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.530188][ T7024] ? __pfx__printk+0x10/0x10 [ 108.534780][ T7024] ? __pfx_lock_release+0x10/0x10 [ 108.539815][ T7024] should_fail_ex+0x3b0/0x4e0 [ 108.544499][ T7024] _copy_from_user+0x2f/0xe0 [ 108.549088][ T7024] copy_from_sockptr_offset+0x6b/0xb0 [ 108.554459][ T7024] do_ip6t_set_ctl+0xbe6/0x1270 [ 108.559311][ T7024] ? __pfx_bpf_trace_run2+0x10/0x10 [ 108.564507][ T7024] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 108.569787][ T7024] ? __pfx_lock_release+0x10/0x10 [ 108.574820][ T7024] ? __mutex_unlock_slowpath+0x21d/0x750 [ 108.580450][ T7024] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 108.586430][ T7024] ? __pfx_aa_sk_perm+0x10/0x10 [ 108.591278][ T7024] nf_setsockopt+0x295/0x2c0 [ 108.595869][ T7024] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 108.601755][ T7024] do_sock_setsockopt+0x3af/0x720 [ 108.606783][ T7024] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 108.612321][ T7024] ? __fget_files+0x29/0x470 [ 108.616908][ T7024] ? __fget_files+0x3f6/0x470 [ 108.621586][ T7024] __sys_setsockopt+0x1ae/0x250 [ 108.626433][ T7024] __x64_sys_setsockopt+0xb5/0xd0 [ 108.631449][ T7024] do_syscall_64+0xf3/0x230 [ 108.635945][ T7024] ? clear_bhb_loop+0x35/0x90 [ 108.640638][ T7024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.646542][ T7024] RIP: 0033:0x7ffbf7979ef9 [ 108.650954][ T7024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.670562][ T7024] RSP: 002b:00007ffbf86e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 108.678975][ T7024] RAX: ffffffffffffffda RBX: 00007ffbf7b15f80 RCX: 00007ffbf7979ef9 [ 108.686939][ T7024] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 108.694899][ T7024] RBP: 00007ffbf86e3090 R08: 0000000000000560 R09: 0000000000000000 [ 108.702860][ T7024] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.710821][ T7024] R13: 0000000000000000 R14: 00007ffbf7b15f80 R15: 00007ffcdcf7d418 [ 108.718797][ T7024] [ 109.049831][ T7043] sctp: [Deprecated]: syz.3.591 (pid 7043) Use of int in max_burst socket option deprecated. [ 109.049831][ T7043] Use struct sctp_assoc_value instead [ 109.189429][ T7047] openvswitch: netlink: Unknown nsh attribute 0 [ 109.218415][ T7047] netlink: 'syz.0.594': attribute type 38 has an invalid length. [ 109.449305][ T7061] vlan2: entered promiscuous mode [ 109.457692][ T7061] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 109.644475][ T7066] FAULT_INJECTION: forcing a failure. [ 109.644475][ T7066] name failslab, interval 1, probability 0, space 0, times 0 [ 109.675525][ T7066] CPU: 1 UID: 0 PID: 7066 Comm: syz.0.598 Not tainted 6.11.0-rc4-syzkaller-00681-ge5899b60f52a #0 [ 109.686173][ T7066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 109.696241][ T7066] Call Trace: [ 109.699515][ T7066] [ 109.702438][ T7066] dump_stack_lvl+0x241/0x360 [ 109.707115][ T7066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.712305][ T7066] ? __pfx__printk+0x10/0x10 [ 109.716889][ T7066] ? __kmalloc_node_noprof+0xb7/0x440 [ 109.722253][ T7066] ? __pfx___might_resched+0x10/0x10 [ 109.727529][ T7066] ? stack_trace_save+0x118/0x1d0 [ 109.732810][ T7066] should_fail_ex+0x3b0/0x4e0 [ 109.737484][ T7066] should_failslab+0xac/0x100 [ 109.742158][ T7066] __kmalloc_node_noprof+0xdf/0x440 [ 109.747346][ T7066] ? __kvmalloc_node_noprof+0x72/0x190 [ 109.752806][ T7066] __kvmalloc_node_noprof+0x72/0x190 [ 109.758090][ T7066] translate_table+0x174/0x2330 [ 109.762960][ T7066] ? __pfx_translate_table+0x10/0x10 [ 109.768247][ T7066] ? __might_fault+0xaa/0x120 [ 109.772924][ T7066] ? __pfx_lock_release+0x10/0x10 [ 109.777951][ T7066] ? __might_fault+0xaa/0x120 [ 109.782621][ T7066] ? __might_fault+0xc6/0x120 [ 109.787295][ T7066] ? _copy_from_user+0xa6/0xe0 [ 109.792054][ T7066] ? copy_from_sockptr_offset+0x6b/0xb0 [ 109.797600][ T7066] do_ip6t_set_ctl+0xe4c/0x1270 [ 109.802453][ T7066] ? __pfx___might_resched+0x10/0x10 [ 109.807734][ T7066] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 109.813011][ T7066] ? __pfx_lock_release+0x10/0x10 [ 109.818042][ T7066] ? __mutex_unlock_slowpath+0x21d/0x750 [ 109.823674][ T7066] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 109.829647][ T7066] ? __pfx_aa_sk_perm+0x10/0x10 [ 109.834495][ T7066] nf_setsockopt+0x295/0x2c0 [ 109.839082][ T7066] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 109.844966][ T7066] do_sock_setsockopt+0x3af/0x720 [ 109.849989][ T7066] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 109.855523][ T7066] ? __fget_files+0x29/0x470 [ 109.860109][ T7066] ? __fget_files+0x3f6/0x470 [ 109.864790][ T7066] __sys_setsockopt+0x1ae/0x250 [ 109.869645][ T7066] __x64_sys_setsockopt+0xb5/0xd0 [ 109.874668][ T7066] do_syscall_64+0xf3/0x230 [ 109.879164][ T7066] ? clear_bhb_loop+0x35/0x90 [ 109.883836][ T7066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.889722][ T7066] RIP: 0033:0x7f1d08979ef9 [ 109.894126][ T7066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.913746][ T7066] RSP: 002b:00007f1d09761038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.922157][ T7066] RAX: ffffffffffffffda RBX: 00007f1d08b15f80 RCX: 00007f1d08979ef9 [ 109.930120][ T7066] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 109.938081][ T7066] RBP: 00007f1d09761090 R08: 0000000000000560 R09: 0000000000000000 [ 109.946040][ T7066] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.954000][ T7066] R13: 0000000000000000 R14: 00007f1d08b15f80 R15: 00007ffd776821a8 [ 109.961977][ T7066] [ 110.115807][ T7072] FAULT_INJECTION: forcing a failure. [ 110.115807][ T7072] name failslab, interval 1, probability 0, space 0, times 0 [ 110.149142][ T7076] netlink: 'syz.0.602': attribute type 4 has an invalid length. [ 110.151051][ T7072] CPU: 1 UID: 0 PID: 7072 Comm: syz.3.600 Not tainted 6.11.0-rc4-syzkaller-00681-ge5899b60f52a #0 [ 110.167440][ T7072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 110.177515][ T7072] Call Trace: [ 110.180813][ T7072] [ 110.183759][ T7072] dump_stack_lvl+0x241/0x360 [ 110.188464][ T7072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.193686][ T7072] ? __pfx__printk+0x10/0x10 [ 110.198302][ T7072] ? __kmalloc_noprof+0xb0/0x400 [ 110.203267][ T7072] ? __pfx___might_resched+0x10/0x10 [ 110.208582][ T7072] should_fail_ex+0x3b0/0x4e0 [ 110.213283][ T7072] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 110.219550][ T7072] should_failslab+0xac/0x100 [ 110.224268][ T7072] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 110.230534][ T7072] __kmalloc_noprof+0xd8/0x400 [ 110.235329][ T7072] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 110.241443][ T7072] genl_rcv_msg+0x802/0xec0 [ 110.245967][ T7072] ? mark_lock+0x9a/0x350 [ 110.250329][ T7072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.255413][ T7072] ? __pfx_lock_acquire+0x10/0x10 [ 110.260463][ T7072] ? __pfx_taskstats_user_cmd+0x10/0x10 [ 110.266040][ T7072] ? __pfx___might_resched+0x10/0x10 [ 110.271365][ T7072] netlink_rcv_skb+0x1e3/0x430 [ 110.276157][ T7072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.281215][ T7072] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.286540][ T7072] ? __netlink_deliver_tap+0x77e/0x7c0 [ 110.292038][ T7072] genl_rcv+0x28/0x40 [ 110.296042][ T7072] netlink_unicast+0x7f6/0x990 [ 110.300838][ T7072] ? __pfx_netlink_unicast+0x10/0x10 [ 110.306139][ T7072] ? __virt_addr_valid+0x183/0x530 [ 110.311273][ T7072] ? __check_object_size+0x49c/0x900 [ 110.316577][ T7072] ? bpf_lsm_netlink_send+0x9/0x10 [ 110.321712][ T7072] netlink_sendmsg+0x8e4/0xcb0 [ 110.326506][ T7072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.331812][ T7072] ? __import_iovec+0x536/0x820 [ 110.336949][ T7072] ? aa_sock_msg_perm+0x91/0x160 [ 110.341907][ T7072] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 110.347213][ T7072] ? security_socket_sendmsg+0x87/0xb0 [ 110.352697][ T7072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.357997][ T7072] __sock_sendmsg+0x221/0x270 [ 110.362693][ T7072] ____sys_sendmsg+0x525/0x7d0 [ 110.367487][ T7072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.372820][ T7072] __sys_sendmsg+0x2b0/0x3a0 [ 110.377446][ T7072] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.382581][ T7072] ? vfs_write+0x7c4/0xc90 [ 110.387071][ T7072] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.393427][ T7072] ? do_syscall_64+0x100/0x230 [ 110.398220][ T7072] ? do_syscall_64+0xb6/0x230 [ 110.402925][ T7072] do_syscall_64+0xf3/0x230 [ 110.407455][ T7072] ? clear_bhb_loop+0x35/0x90 [ 110.412163][ T7072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.418079][ T7072] RIP: 0033:0x7f7c8e579ef9 [ 110.422509][ T7072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.442141][ T7072] RSP: 002b:00007f7c8f281038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.450586][ T7072] RAX: ffffffffffffffda RBX: 00007f7c8e715f80 RCX: 00007f7c8e579ef9 [ 110.458587][ T7072] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 110.466585][ T7072] RBP: 00007f7c8f281090 R08: 0000000000000000 R09: 0000000000000000 [ 110.474581][ T7072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.482576][ T7072] R13: 0000000000000000 R14: 00007f7c8e715f80 R15: 00007ffc5a857af8 [ 110.490592][ T7072] [ 110.515394][ T7082] __nla_validate_parse: 5 callbacks suppressed [ 110.515412][ T7082] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.605'. [ 110.540462][ T7082] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 111.087887][ T7077] syz.4.603: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 111.129853][ T7077] CPU: 0 UID: 0 PID: 7077 Comm: syz.4.603 Not tainted 6.11.0-rc4-syzkaller-00681-ge5899b60f52a #0 [ 111.140505][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 111.150581][ T7077] Call Trace: [ 111.153864][ T7077] [ 111.156795][ T7077] dump_stack_lvl+0x241/0x360 [ 111.161481][ T7077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.166672][ T7077] ? __pfx__printk+0x10/0x10 [ 111.171255][ T7077] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 111.177663][ T7077] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 111.184158][ T7077] warn_alloc+0x278/0x410 [ 111.188491][ T7077] ? __pfx_warn_alloc+0x10/0x10 [ 111.193341][ T7077] ? translate_table+0x174/0x2330 [ 111.198375][ T7077] ? __get_vm_area_node+0x23d/0x270 [ 111.203580][ T7077] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 111.209470][ T7077] ? arch_stack_walk+0x16d/0x1b0 [ 111.214421][ T7077] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 111.220742][ T7077] ? rcu_is_watching+0x15/0xb0 [ 111.225501][ T7077] ? trace_kmalloc+0x1f/0xd0 [ 111.230093][ T7077] ? __kmalloc_node_noprof+0x247/0x440 [ 111.235541][ T7077] ? __kvmalloc_node_noprof+0x72/0x190 [ 111.240998][ T7077] __kvmalloc_node_noprof+0x142/0x190 [ 111.246367][ T7077] ? translate_table+0x174/0x2330 [ 111.251389][ T7077] translate_table+0x174/0x2330 [ 111.256258][ T7077] ? __pfx_translate_table+0x10/0x10 [ 111.261536][ T7077] ? __might_fault+0xaa/0x120 [ 111.266212][ T7077] ? __pfx_lock_release+0x10/0x10 [ 111.271239][ T7077] ? __might_fault+0xaa/0x120 [ 111.275912][ T7077] ? __might_fault+0xc6/0x120 [ 111.280587][ T7077] ? _copy_from_user+0xa6/0xe0 [ 111.285349][ T7077] ? copy_from_sockptr_offset+0x6b/0xb0 [ 111.290895][ T7077] do_ip6t_set_ctl+0xe4c/0x1270 [ 111.295750][ T7077] ? __pfx___might_resched+0x10/0x10 [ 111.301033][ T7077] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 111.306326][ T7077] ? __pfx_lock_release+0x10/0x10 [ 111.311361][ T7077] ? __mutex_unlock_slowpath+0x21d/0x750 [ 111.316991][ T7077] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.322968][ T7077] ? __pfx_aa_sk_perm+0x10/0x10 [ 111.327816][ T7077] nf_setsockopt+0x295/0x2c0 [ 111.332432][ T7077] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 111.338322][ T7077] do_sock_setsockopt+0x3af/0x720 [ 111.343370][ T7077] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 111.348908][ T7077] ? __fget_files+0x29/0x470 [ 111.353495][ T7077] ? __fget_files+0x3f6/0x470 [ 111.358176][ T7077] __sys_setsockopt+0x1ae/0x250 [ 111.363024][ T7077] __x64_sys_setsockopt+0xb5/0xd0 [ 111.368043][ T7077] do_syscall_64+0xf3/0x230 [ 111.372540][ T7077] ? clear_bhb_loop+0x35/0x90 [ 111.377216][ T7077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.383103][ T7077] RIP: 0033:0x7ffbf7979ef9 [ 111.387510][ T7077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.407116][ T7077] RSP: 002b:00007ffbf86e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.415535][ T7077] RAX: ffffffffffffffda RBX: 00007ffbf7b15f80 RCX: 00007ffbf7979ef9 [ 111.423496][ T7077] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 111.431460][ T7077] RBP: 00007ffbf79e793e R08: 0000000000000560 R09: 0000000000000000 [ 111.439423][ T7077] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.447388][ T7077] R13: 0000000000000000 R14: 00007ffbf7b15f80 R15: 00007ffcdcf7d418 [ 111.455363][ T7077] [ 111.479323][ T7077] Mem-Info: [ 111.482498][ T7077] active_anon:4227 inactive_anon:0 isolated_anon:0 [ 111.482498][ T7077] active_file:1590 inactive_file:38170 isolated_file:0 [ 111.482498][ T7077] unevictable:768 dirty:518 writeback:0 [ 111.482498][ T7077] slab_reclaimable:8861 slab_unreclaimable:98648 [ 111.482498][ T7077] mapped:21666 shmem:1272 pagetables:780 [ 111.482498][ T7077] sec_pagetables:0 bounce:0 [ 111.482498][ T7077] kernel_misc_reclaimable:0 [ 111.482498][ T7077] free:1363738 free_pcp:2239 free_cma:0 [ 111.561650][ T7121] netlink: 'syz.0.614': attribute type 11 has an invalid length. [ 111.572954][ T7121] netlink: 211132 bytes leftover after parsing attributes in process `syz.0.614'. [ 111.578967][ T7077] Node 0 active_anon:16708kB inactive_anon:0kB active_file:6360kB inactive_file:152616kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86664kB dirty:2072kB writeback:0kB shmem:3352kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10552kB pagetables:3220kB sec_pagetables:0kB all_unreclaimable? no [ 111.620162][ T7077] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 111.644205][ T7121] netlink: 32 bytes leftover after parsing attributes in process `syz.0.614'. [ 111.651104][ T7077] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.690131][ T7077] lowmem_reserve[]: 0 2561 2562 0 0 [ 111.695465][ T7077] Node 0 DMA32 free:1489696kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:16860kB inactive_anon:0kB active_file:6360kB inactive_file:151300kB unevictable:1536kB writepending:2072kB present:3129332kB managed:2651248kB mlocked:0kB bounce:0kB free_pcp:6392kB local_pcp:5704kB free_cma:0kB [ 111.738973][ T7077] lowmem_reserve[]: 0 0 1 0 0 [ 111.743847][ T7077] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 111.771303][ T7077] lowmem_reserve[]: 0 0 0 0 0 [ 111.776143][ T7077] Node 1 Normal free:3949804kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:2088kB local_pcp:2088kB free_cma:0kB [ 111.811992][ T7077] lowmem_reserve[]: 0 0 0 0 0 [ 111.816943][ T7077] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 111.829808][ T7077] Node 0 DMA32: 27*4kB (UME) 9*8kB (ME) 4*16kB (UM) 93*32kB (UME) 55*64kB (ME) 33*128kB (UME) 22*256kB (UME) 8*512kB (UME) 1*1024kB (M) 3*2048kB (UM) 357*4096kB (M) = 1490132kB [ 111.847734][ T7077] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 111.861957][ T7077] Node 1 Normal: 1*4kB (M) 5*8kB (UM) 8*16kB (UM) 8*32kB (UM) 3*64kB (U) 1*128kB (U) 2*256kB (UM) 4*512kB (UM) 2*1024kB (U) 2*2048kB (U) 962*4096kB (M) = 3949804kB [ 111.879451][ T7077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.889803][ T7077] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.899702][ T7077] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.909939][ T7077] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.924713][ T7077] 40982 total pagecache pages [ 111.929904][ T7077] 0 pages in swap cache [ 111.934698][ T7077] Free swap = 124996kB [ 111.941669][ T7077] Total swap = 124996kB [ 111.946063][ T7077] 2097051 pages RAM [ 111.954062][ T7077] 0 pages HighMem/MovableOnly [ 111.961625][ T7077] 402773 pages reserved [ 111.965952][ T7077] 0 pages cma reserved [ 111.975098][ T7132] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.618'. [ 112.122096][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 112.856888][ T7156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 113.357926][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.634'. [ 113.472853][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 113.563569][ T5246] block nbd0: Receive control failed (result -107) [ 113.592798][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 113.626766][ T7177] nbd0: detected capacity change from 0 to 256 [ 113.636144][ T7183] netlink: 16 bytes leftover after parsing attributes in process `syz.0.638'. [ 113.640083][ T5238] block nbd0: Dead connection, failed to find a fallback [ 113.669848][ T5238] block nbd0: shutting down sockets [ 113.683633][ T5238] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.695255][ T7186] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 113.708608][ T5238] Buffer I/O error on dev nbd0, logical block 0, async page read [ 113.733126][ T5238] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.796427][ T5238] Buffer I/O error on dev nbd0, logical block 0, async page read [ 113.804317][ T5238] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.858841][ T5238] Buffer I/O error on dev nbd0, logical block 0, async page read [ 113.895838][ T5238] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 113.921067][ T5238] Buffer I/O error on dev nbd0, logical block 0, async page read [ 113.937264][ T5238] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.000677][ T5238] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.038288][ T5238] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.080428][ T5238] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.108589][ T5238] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.136301][ T5238] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.146773][ T5238] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.226354][ T5238] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.253007][ T5238] ldm_validate_partition_table(): Disk read failed. [ 114.290722][ T5238] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.315290][ T5238] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.329197][ T5238] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.348602][ T5238] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.366683][ T5238] Dev nbd0: unable to read RDB block 0 [ 114.386838][ T5238] nbd0: unable to read partition table [ 114.414625][ T5238] ldm_validate_partition_table(): Disk read failed. [ 114.446718][ T5238] Dev nbd0: unable to read RDB block 0 [ 114.460623][ T5238] nbd0: unable to read partition table [ 114.701448][ T7222] pimreg: entered allmulticast mode [ 114.744798][ T7221] pimreg: left allmulticast mode [ 114.896724][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.658'. [ 114.965348][ T7228] bond_slave_0: entered promiscuous mode [ 114.971556][ T7228] bond_slave_1: entered promiscuous mode [ 114.981586][ T7228] macvtap1: entered promiscuous mode [ 114.988971][ T7228] bond0: entered promiscuous mode [ 114.994906][ T7228] macvtap1: entered allmulticast mode [ 115.000780][ T7228] bond0: entered allmulticast mode [ 115.016845][ T7228] bond_slave_0: entered allmulticast mode [ 115.029358][ T7228] bond_slave_1: entered allmulticast mode [ 115.045265][ T7228] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 115.061959][ T7230] bond0: left allmulticast mode [ 115.076714][ T7230] bond_slave_0: left allmulticast mode [ 115.093698][ T7230] bond_slave_1: left allmulticast mode [ 115.107638][ T7230] bond0: left promiscuous mode [ 115.121343][ T7230] bond_slave_0: left promiscuous mode [ 115.126946][ T7230] bond_slave_1: left promiscuous mode [ 115.160681][ T7230] macvtap1: left promiscuous mode [ 115.177314][ T7230] macvtap1: left allmulticast mode [ 115.265583][ T7231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.323598][ T7245] pimreg: entered allmulticast mode [ 115.357916][ T7235] vlan2: entered promiscuous mode [ 115.363127][ T7235] bond1: entered promiscuous mode [ 115.374749][ T7235] vlan2: entered allmulticast mode [ 115.380341][ T7235] bond1: entered allmulticast mode [ 115.395668][ T7248] pimreg: left allmulticast mode [ 115.609498][ T7255] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 115.923757][ T7270] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000f8: 0000 [#1] PREEMPT SMP KASAN PTI [ 115.936390][ T7270] KASAN: null-ptr-deref in range [0x00000000000007c0-0x00000000000007c7] [ 115.944809][ T7270] CPU: 1 UID: 0 PID: 7270 Comm: syz.2.674 Not tainted 6.11.0-rc4-syzkaller-00681-ge5899b60f52a #0 [ 115.955411][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 115.965483][ T7270] RIP: 0010:phy_start_cable_test_tdr+0x3a/0x5c0 [ 115.971751][ T7270] Code: ec 38 48 89 54 24 18 49 89 f6 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 74 26 2b fb 48 8d bb c0 07 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 2a 68 92 fb 48 8b 83 c0 07 00 00 48 89 44 [ 115.991378][ T7270] RSP: 0018:ffffc9000307f230 EFLAGS: 00010202 [ 115.997462][ T7270] RAX: 00000000000000f8 RBX: 0000000000000000 RCX: 0000000000040000 [ 116.005453][ T7270] RDX: ffffc90004fd1000 RSI: 0000000000000ac3 RDI: 00000000000007c0 [ 116.013443][ T7270] RBP: ffffc9000307f470 R08: ffffffff89cb171d R09: 1ffff1100d0eb015 [ 116.021432][ T7270] R10: dffffc0000000000 R11: ffffffff866864a0 R12: ffffc9000307f3f0 [ 116.029423][ T7270] R13: dffffc0000000000 R14: ffffc9000307f740 R15: 0000000000000000 [ 116.037411][ T7270] FS: 00007f4e1495a6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 116.046357][ T7270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.052953][ T7270] CR2: 00007ff87e89ef98 CR3: 00000000242e0000 CR4: 00000000003506f0 [ 116.060933][ T7270] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.068896][ T7270] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.076864][ T7270] Call Trace: [ 116.080153][ T7270] [ 116.083092][ T7270] ? __die_body+0x88/0xe0 [ 116.087434][ T7270] ? die_addr+0x108/0x140 [ 116.091772][ T7270] ? exc_general_protection+0x3dd/0x5d0 [ 116.097322][ T7270] ? netdev_get_by_name+0x7c/0xb0 [ 116.102336][ T7270] ? asm_exc_general_protection+0x26/0x30 [ 116.108045][ T7270] ? __pfx_phy_start_cable_test_tdr+0x10/0x10 [ 116.114114][ T7270] ? ethnl_act_cable_test_tdr+0x5ad/0x10d0 [ 116.119925][ T7270] ? phy_start_cable_test_tdr+0x3a/0x5c0 [ 116.125547][ T7270] ? ethnl_ops_begin+0x1ae/0x1f0 [ 116.130469][ T7270] ? __pfx_phy_start_cable_test_tdr+0x10/0x10 [ 116.136534][ T7270] ethnl_act_cable_test_tdr+0x607/0x10d0 [ 116.142173][ T7270] ? __pfx_ethnl_act_cable_test_tdr+0x10/0x10 [ 116.148228][ T7270] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 116.154461][ T7270] ? __nla_parse+0x40/0x60 [ 116.158872][ T7270] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 116.165190][ T7270] genl_rcv_msg+0xb14/0xec0 [ 116.169681][ T7270] ? mark_lock+0x9a/0x350 [ 116.174002][ T7270] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.179038][ T7270] ? __pfx_lock_acquire+0x10/0x10 [ 116.184072][ T7270] ? __pfx_ethnl_act_cable_test_tdr+0x10/0x10 [ 116.190156][ T7270] ? __pfx___might_resched+0x10/0x10 [ 116.195433][ T7270] netlink_rcv_skb+0x1e3/0x430 [ 116.200184][ T7270] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.205195][ T7270] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.210481][ T7270] ? __netlink_deliver_tap+0x77e/0x7c0 [ 116.215949][ T7270] genl_rcv+0x28/0x40 [ 116.219929][ T7270] netlink_unicast+0x7f6/0x990 [ 116.224684][ T7270] ? __pfx_netlink_unicast+0x10/0x10 [ 116.229956][ T7270] ? __virt_addr_valid+0x183/0x530 [ 116.235053][ T7270] ? __check_object_size+0x49c/0x900 [ 116.240321][ T7270] ? bpf_lsm_netlink_send+0x9/0x10 [ 116.245450][ T7270] netlink_sendmsg+0x8e4/0xcb0 [ 116.250205][ T7270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.255478][ T7270] ? __import_iovec+0x536/0x820 [ 116.260334][ T7270] ? aa_sock_msg_perm+0x91/0x160 [ 116.265258][ T7270] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 116.270530][ T7270] ? security_socket_sendmsg+0x87/0xb0 [ 116.275979][ T7270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.281251][ T7270] __sock_sendmsg+0x221/0x270 [ 116.285914][ T7270] ____sys_sendmsg+0x525/0x7d0 [ 116.290673][ T7270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.295953][ T7270] __sys_sendmsg+0x2b0/0x3a0 [ 116.300545][ T7270] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.305650][ T7270] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 116.311564][ T7270] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 116.317888][ T7270] ? do_syscall_64+0x100/0x230 [ 116.322639][ T7270] ? do_syscall_64+0xb6/0x230 [ 116.327304][ T7270] do_syscall_64+0xf3/0x230 [ 116.331793][ T7270] ? clear_bhb_loop+0x35/0x90 [ 116.336470][ T7270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.342378][ T7270] RIP: 0033:0x7f4e13b79ef9 [ 116.346802][ T7270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.366420][ T7270] RSP: 002b:00007f4e1495a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.374839][ T7270] RAX: ffffffffffffffda RBX: 00007f4e13d15f80 RCX: 00007f4e13b79ef9 [ 116.382807][ T7270] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 116.390859][ T7270] RBP: 00007f4e13be793e R08: 0000000000000000 R09: 0000000000000000 [ 116.398818][ T7270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.406790][ T7270] R13: 0000000000000000 R14: 00007f4e13d15f80 R15: 00007ffca59eb0b8 [ 116.414768][ T7270] [ 116.417785][ T7270] Modules linked in: [ 116.428775][ T7270] ---[ end trace 0000000000000000 ]--- [ 116.434257][ T7270] RIP: 0010:phy_start_cable_test_tdr+0x3a/0x5c0 [ 116.441973][ T7270] Code: ec 38 48 89 54 24 18 49 89 f6 48 89 fb 49 bd 00 00 00 00 00 fc ff df e8 74 26 2b fb 48 8d bb c0 07 00 00 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 2a 68 92 fb 48 8b 83 c0 07 00 00 48 89 44 [ 116.465752][ T7270] RSP: 0018:ffffc9000307f230 EFLAGS: 00010202 [ 116.472222][ T7270] RAX: 00000000000000f8 RBX: 0000000000000000 RCX: 0000000000040000 [ 116.482117][ T7270] RDX: ffffc90004fd1000 RSI: 0000000000000ac3 RDI: 00000000000007c0 [ 116.491802][ T7270] RBP: ffffc9000307f470 R08: ffffffff89cb171d R09: 1ffff1100d0eb015 [ 116.500588][ T7270] R10: dffffc0000000000 R11: ffffffff866864a0 R12: ffffc9000307f3f0 [ 116.508649][ T7270] R13: dffffc0000000000 R14: ffffc9000307f740 R15: 0000000000000000 [ 116.516804][ T7270] FS: 00007f4e1495a6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 116.526715][ T7270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.533469][ T7270] CR2: 0000001b3271eff8 CR3: 00000000242e0000 CR4: 00000000003506f0 [ 116.542681][ T7270] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.550696][ T7270] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.558747][ T7270] Kernel panic - not syncing: Fatal exception [ 116.565037][ T7270] Kernel Offset: disabled [ 116.569346][ T7270] Rebooting in 86400 seconds..