last executing test programs: 39.575857773s ago: executing program 4 (id=779): r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f800800024000000b8608000340000047510800034000000003080001"], 0xdc}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}, @in={0x2, 0x4e23, @empty}]}, &(0x7f0000000100)=0x10) (async) sendmmsg$inet(r0, &(0x7f0000000740)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) (async) r3 = socket$kcm(0x10, 0x4, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f00000000c0)=0x28) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=@framed, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098e4554990bc6fdfd4647aad6ed8951ff86c092399a8d11b76c5e", &(0x7f00000008c0)=""/206, 0x0, 0x0, 0x4c, 0x1e, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async, rerun: 64) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 64) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) (async) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={0x0, @null, @bpq0, 0x4, 'syz1\x00', @null, 0xfffffffd, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x1, @null, @bpq0, 0x69c4, 'syz1\x00', @null, 0xfff, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) (async) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="a98835c2b5980000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r8}, 0x10) sendmsg$netlink(r4, 0x0, 0x0) 39.292148558s ago: executing program 4 (id=782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 29.388691975s ago: executing program 4 (id=782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 20.173783605s ago: executing program 4 (id=782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.222451868s ago: executing program 4 (id=782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4.646337679s ago: executing program 4 (id=782): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x7, 0x2, 0xff22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x7, &(0x7f0000000380)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xd3}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xbb}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.928752983s ago: executing program 1 (id=1080): socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001840)={&(0x7f0000000900)=ANY=[@ANYBLOB='H\x00\x00@', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf250f000000080002800400038004000180040001800c0003800800010044030000040007801400078008000200010000000800010008000000"], 0x48}, 0x1, 0x0, 0x0, 0x85}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="ff7f2e46", @ANYRES16=r1, @ANYBLOB="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"], 0x127c}, 0x1, 0x0, 0x0, 0x8080}, 0x40084) unshare(0x10060700) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000008000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000001500)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0xb4, r6, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x3, 0x55}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "0c45e076e5a40f4f593087697c6a2101"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d242d27c13ae2ee3e3a0c61deaad6b44"}, @NL80211_ATTR_PMK={0x14, 0xfe, "cf6bbc8ca1c2ed7b7d430d8d4348171e"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "2aab7eddc5fafb04fe7578f4d5f862d7"}, @NL80211_ATTR_PMK={0x14, 0xfe, "8ef2c050bd9a8bfefa9eaa7c2823d8ff"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "a29467f9e6b98ce9ea90facd6c45051b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "baa72ea775b24a55801b27dacec8896c"}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc734edd75e190e17}, 0x24000000) r8 = socket(0x2, 0x80805, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000980)=0x59) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000140)={r11, 0x1, 0x6}, 0x13) r12 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r12, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2.364077938s ago: executing program 2 (id=1084): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000b000000080000000600000f020000000200000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004977000000000000000f020000001760000000000000000061"], 0x0, 0x87, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x10, 0x3, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x3a}, 0x8007, 0x80, 0x1, 0x1c6}}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r8}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0x5421, 0x110e22ffee) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r11, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r12, &(0x7f0000001140), 0x700, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@RTM_DELMDB={0x98, 0x55, 0x8, 0x70bd29, 0x25dfdbfd, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x3, 0x3, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x1, {@in6_addr=@loopback, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x0, {@in6_addr=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x1, 0x2, {@in6_addr=@local, 0x800}}}]}, 0x98}}, 0x0) 2.068286839s ago: executing program 0 (id=1088): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac14140000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 2.034555367s ago: executing program 2 (id=1089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e000000c6060000000000000800000000c00000", @ANYRES32=0x1, @ANYBLOB="09100000000000000000000000000000000000007c847fdf921621981a2cdb5a2692a36348fa277a8d12528e2d48c44e5c05d45be6a51912dc58a6efaadb52cc39c2cb7e348b74f6a20f9c215eda964d9de79b0de9221308408f8349d59f6114b2ee6332a0ea71c3bdda7de32f290d75cee4a93a8dc2ebfaf21bc052ae0acf1f698644613eecc4ec99c9b005214e969539c03fbe9592531cff0f00000000000002783b1a937e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000004000000000000000a00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8, r0}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r5, 0x1, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="183000000300000000000000000000009500000000000000950000000000000018170000", @ANYRES32=r1, @ANYBLOB="00000000000000001a7ae4d202a99109b3fe23486260ec30751a2f2c9774d56b19e7927f52552a51de69a465965f7e05bd30cfeba12b4a8bcb9447d93457411ff61a4881754f4c8880b01b3386e81361b74838ffaa08db960cbef020cb1eb953"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, r4, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[r3, 0xffffffffffffffff, r4, r5, r6], &(0x7f0000000300)=[{0x2, 0x1, 0x7, 0xb}, {0x2, 0x5, 0x12, 0x3}, {0x5, 0x1, 0x4, 0x4}, {0x0, 0x2, 0x1, 0x8}, {0x1, 0x5, 0x6, 0x5}, {0x4, 0x4, 0x9, 0x3}], 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x166, &(0x7f00000007c0)={@broadcast, @random, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x130, 0x3a, 0x0, @private0, @mcast2, {[@fragment={0x3a, 0x0, 0x8, 0x0, 0x0, 0x7, 0x67}, @hopopts={0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @routing={0x2f, 0x12, 0x1, 0x4, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @remote, @private0]}, @dstopts={0x11, 0x3, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x5, 0xfffd, [0x7, 0x8]}}]}], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "18b088", 0x800, 0x0, 0x1, @empty, @mcast2, [@hopopts={0x11}], "fafb17c133d11e59"}}}}}}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) 1.950762494s ago: executing program 1 (id=1090): mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x73f2c000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @empty}}}, @ip_retopts={{0x10, 0x110, 0xc}}], 0x30}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@alu={0x7, 0x0, 0xb, 0x0, 0x8, 0xffffffffffffffe0, 0xfffffffffffffff0}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) 1.884087541s ago: executing program 0 (id=1091): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bd9000000000000000000000d500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1], 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000280)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000480), 0x8, 0x24, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000300001e0000000059de32e50000950000000000f80010"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000540)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x55, &(0x7f0000000700)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x4f, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xd, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.707136272s ago: executing program 2 (id=1092): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.645673562s ago: executing program 0 (id=1093): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44890}, 0x24001040) setsockopt$inet_int(r4, 0x0, 0x17, &(0x7f0000000040)=0xc0d, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040), 0x0) connect$inet6(r4, &(0x7f0000000680)={0xa, 0x4e22, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31c4bb97}, 0x1c) sendmsg$netlink(r5, &(0x7f0000000140), 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001900)={0x0}, 0x1, 0x0, 0x0, 0x44010}, 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000700)="002b8eee889ab1d40f5325e1be8293fb29a2070000004bc685645fda8c55e33f737201e92b7237e027ea6d23b35775012b7f1cabc062bfc584daa87fe88d10f2b62af310c1d0cf149acb17af82608ddae5d1b896631c4c37dd49154e212c41f59a2111aec58b0e80ca9d659fff3e059fd6c5983cadf034ef2ed6ff10d70c07754e49a272ed9956600400000039eb0959570a0f9ac7d4021ed047e18df2452ae90d62ffd6c1a12d6434a70000000000b0f61c307b92dad0a4e7f497752a7df5d255f70e5bb1fc9d3c948094c2482bfbbb4a7b2be120e8acf34f0a8921581432e53a25ad746421ffaa3b638985d3739451fd7473aa5ed62e12742bf0df7670ee683b804f94debdcca5290d8a45ca2afca7bc2b8a187e975ff7090a04b6a70b4ec76820fd7adbf6f83af8bc4ea2563b69d995aa96", 0x133, 0x88d0, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000500)="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", 0xfed2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x7c}}, 0x0) 1.416154855s ago: executing program 2 (id=1094): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=r2, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) bind$phonet(r1, &(0x7f00000000c0)={0x23, 0x7, 0x1, 0x9}, 0x10) 1.346172574s ago: executing program 2 (id=1095): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x80, 0x7, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x20, 0x14, 0x64, 0x0, 0x4, 0x4, 0x0, @empty, @private=0xa010102}}}}) r1 = socket$inet6(0xa, 0x806, 0xfffffffc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0x9}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x248, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1b0, 0x1f0, 0x1f0, 0x1b0, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xb8, 0xe0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@ttl={{0x28}}, @common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) listen(r1, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r4, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000011401"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc4) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaac200000086dd60f4b90600383a11fe880000000000000000000000000001ff020000000000010000000000000001020090780000000060fd906300003300000000000000000000000000000000010000000000000000aa6a8889fd616cf32b00000000000000"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000040a0500000000003437fc7e0fbab095dceae40ca20100000000000080a27a56cf5e90e0e03872485626a2133115710ad0d8132fdca4cdae368421400756c9c89393f7855a1e45cfa65716aec7"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x804) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14640cf722001f506bd933ff1e2715400413d7d289e5aff4e77fbc389eaeeccec5485e12cdeab09772062f215dc581d12a9b410480c45325f94e560543bb", @ANYRES16=r7, @ANYBLOB="37ef000000000000000005000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x55250c4d2316bf67}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="040025bd7000fedbdf250f00000005000f000100000005000f000000000008000300ee761ccb11ad47c0d8d48a8331e87123aa002a1fa9ffe96d1662927e5b8b2668146d14bd883489274c893a330dc832f28a034ac3d1c0be9e00a9dcdb897f9870851804f514c40374165a002cfca5f16c2526890c9c4ec00ba2d44d844857c229c292ee", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="05000f0004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x48000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200ffff0800010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c720000f5ffffff2fad0a4883cdbba10a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) 992.291767ms ago: executing program 1 (id=1097): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073113600000000008510000002000000850000004100000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x8, 0x0, &(0x7f0000000380)="af5fa441b438b515", 0x0, 0x3}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0xa, 0x1, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002f00)={{r0, 0xffffffffffffffff}, &(0x7f0000002e80), &(0x7f0000002ec0)}, 0x20) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r2, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x2, 0x8c37c2b979564e6e) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000480)={{r1}, &(0x7f0000000380), 0x0}, 0x20) 956.961696ms ago: executing program 3 (id=1098): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x={0x18, 0x1, 0x0, 0x0, 0x25782020, 0x0, 0x0, 0x500}, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 900.4421ms ago: executing program 1 (id=1099): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x2c, r3, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, r4, 0x926fdb2c68a18847, 0x0, 0x0, {0x6}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}}, 0x4090) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x5}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x4}]}}]}, 0x40}}, 0x854) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newnexthop={0x34, 0x68, 0x1, 0x70bd27, 0x80000000, {}, [@NHA_GROUP={0x1c, 0x2, [{0x2, 0x3}, {0x0, 0x1}, {0xffffffff, 0x4}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20010050}, 0x4000000) 692.214618ms ago: executing program 3 (id=1100): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x3, 0x2, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x10, 0x7800, 0x0, 0x400}}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_deladdr={0x28, 0x15, 0x1, 0x70bd25, 0x0, {0xa, 0x8, 0x80, 0x35, r1}, [@IFA_TARGET_NETNSID={0x8, 0xa, 0x4}, @IFA_FLAGS={0x8}]}, 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffc, 0x41000, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 691.934823ms ago: executing program 0 (id=1101): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac14140000000000000000000000000000000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 660.025638ms ago: executing program 1 (id=1102): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x5) read(r1, &(0x7f0000000240)=""/176, 0xb0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xd}, {0x0, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB], 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, 0x2, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4044140}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0xa1, &(0x7f0000000580)=[{&(0x7f0000000380)="5c00000013006bcd9e3fe3dc4e48aa31086b87030f0000001f03000000000000040014000d000a000d0006009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf70e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000133a00090000ddff5934dbfe00fbdbdf21010000008eda4a6c9651ed46a6c8edbe498954a56cde162d3cbdc8b64efa463a961ca0fc4a1004fafd37ed714e070a6c13fca8817a66cb4923edb9a910c37a0220dda062882f56010d92be8800d39206f14c877ec02b0a0d0921b77290fe48d2a97a5c7fcc95997a80bd34787c42c73faa80c0b9d3af99014a55211e831f9e87ce74ce351ec60cb0e61f759c2690fea272272eb074a4f7beecac1fa2"], 0x14}}, 0x0) 637.490739ms ago: executing program 3 (id=1103): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x238, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xb, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x20c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0a1fb0699d46dac48f29d158dbe8cfb1979e12979688dc039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c2f0f85f36aa8867406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459af0ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1"}, @TCA_RED_FLAGS={0x0, 0x4, {0x8, 0xf}}]}}]}, 0x238}}, 0x4000010) 544.064026ms ago: executing program 0 (id=1104): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@delqdisc={0x24, 0x25, 0x800, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0x7}, {0x3, 0x8}, {0xfff1, 0x54ace61ca367eb27}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00da00008004000000000000a10000009d825b2b000000000000000000004000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181100009553e02617cd663d1952a5624e645d631df51a9eacf4aabd2f71911244597f4ec0d329", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000200000085000000860000006ca0f8ff00000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket(0x29, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) (async) socket$netlink(0x10, 0x3, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e877795b0909546d75753ed2cb3a4e28febde82350db8ce130c55b5eb8df3b10f97992d7b23f2d4d30bcb306090903e64ec9b829169c3488b6d555e3b849f8c27fdd15b9180e511b821464b3c00f92d5977e7e1cf90d50ec212a30118e80dfd1760b9dd4ab2477e46698cad53fd729763676258403b5c2ec69615acafbb452b1"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x70}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup, r6, 0x18, 0x0, r4, @void, @value=r4}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8) (async) r8 = accept(r7, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) (async) recvmsg(r8, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) (async) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0x1) 482.162882ms ago: executing program 3 (id=1105): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0x3]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x4]}}}}}}, 0x0) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES16], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) (rerun: 32) 445.825764ms ago: executing program 0 (id=1106): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f0000000a00)="96dde633800b99dfc32083baf6e832c6b83f533376191b567c3a2ad1953a65e12b453db77c7fdffea765696f93c7368a78bde6cee4d21ac6acada3024c5ad280716e0dfea422bf9459d2a44af45d87fedf3a103e2bbb917e90bdbe6c29cecc09afb2c60c6350ca4664b8e3881c0100d85a2c45f8b7402f5ead1c82fd807a2be292eeb1438bd58883fac62371e38d9130a786635d5ed4affd6704d3bc6f8f8de4f1ae60e3a57cf8934778da4280ffa31b57e0c2cb8c8f49e5e15e", 0xba) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000200)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000040), &(0x7f00000003c0)=0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x19, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000a0ec000000000000a0ccc56a711217000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340", 0xa3}, {&(0x7f0000000400)="029993440c7a0c95d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e434ccb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc40206c86df9abc5be93ce0d", 0x70}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a2184", 0x81}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374a52305e2ad47d5802e", 0x43}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4", 0x28}, {0x0}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd", 0x46}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)="b5d383823677f0", 0x7}], 0x1}}], 0x3, 0xc0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r5], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x40448c0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}, {&(0x7f0000000240)="be39bb6eb4ef615107ecb4788745ef25f8f9633a976ef712b80d773539d97427b1af2137f20a", 0x26}], 0x2}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 364.169901ms ago: executing program 2 (id=1107): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='contention_end\x00', r2, 0x0, 0x9}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r5) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f00000008c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x12) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="e9000600", @ANYRES16=r6, @ANYBLOB="671d00000000fbdbdf25460000000e0001006e657464657673696d0000000f0002006e657464657673696d300000a7008e00020000000c008f0001000000000000000c009000a700000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000) sendmmsg(r3, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)="086394dcae5281ed025e7fdb2037b9aa85a6043b842394a2e4d6a21f2144abc0404cfe89bf530c6df76d342468c8ae89493ee10b6576aed11da0", 0x3a}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r8 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x200c8015, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1, 0x7f}, 0x1c) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r9 = accept4(r7, 0x0, 0x0, 0x80800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000170100000300000000000000000040005000000000000000170100000200000038006a"], 0x68}], 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%-5lx \x00'}, 0x20) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000002980)=""/4096, 0x116, 0x1000, 0x1, 0xfffffffe, 0x10000, @value}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=r10, @ANYBLOB='\v\x00'/20, @ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="01000000030000b6495a548eeca479d8c368681f5100f90003000000"], 0x50) recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000000)=""/192, 0xc0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001880)=""/189, 0xbd}], 0x5}, 0x8000}], 0x1, 0x40002162, &(0x7f0000002040)={0x0, 0x989680}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r12 = accept(r7, 0x0, &(0x7f0000000880)) ioctl$BTRFS_IOC_SYNC(r12, 0x9408, 0x0) 189.956214ms ago: executing program 3 (id=1108): sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xc4}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x1c, 0x68, 0x601, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=@deltclass={0x48, 0x29, 0x20, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffe0, 0x2}, {0xfff2, 0x5}, {0xffff, 0xe}}, [@tclass_kind_options=@c_prio={0x9}, @TCA_RATE={0x6, 0x5, {0x8f, 0x9}}, @TCA_RATE={0x6, 0x5, {0x8, 0x20}}, @TCA_RATE={0x6, 0x5, {0x4, 0x10}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000010000000900"/19], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000480)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) recvmmsg(r4, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5f}], 0x1, 0x20000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8f700000000bfa100000000000007010000f8ffffffd10200df07000000b70300000000000085000000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r1}, 0x18) 182.450599ms ago: executing program 1 (id=1109): socket$kcm(0xa, 0x3, 0x73) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x30, 0x0, 0x2, 0x2}, {0x80000006}]}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@private1, @private2, [0x0, 0xffffff00], [0xffffffff, 0xff, 0x0, 0xffffff00], 'gre0\x00', 'veth0\x00', {}, {0xff}, 0x87, 0xe, 0x6, 0x9}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x4, 0x0, 0x2001000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x401, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = socket$inet6(0xa, 0x3, 0x3c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x80, @dev={0xfe, 0x80, '\x00', 0x16}, 0x2}, 0x1c) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="10750000", 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x0, 0x0, 0xe, 0x0, "b2d3bbc390f0cae112d2ec5a5cf331ea2f0b755df57a275155dfb7f02a3b20483f8dd2c28867172931591871efea267cb524458d863c0dca51e189077a28b2240acb44695a82d614af380d8d46faded2"}, 0xd8) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)='%-5lx \x00'}, 0x20) r9 = bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r7}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xd40, 0x6, 0xe, 0x10860, r8, 0x81, '\x00', 0x0, r7, 0x3, 0x4, 0x2, 0x0, @void, @value, @value=r9}, 0x50) sendmmsg$inet(r4, &(0x7f0000000940)=[{{&(0x7f0000000480)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f00000005c0), 0x0, &(0x7f0000000800)=[@ip_retopts={{0x30, 0x0, 0x7, {[@cipso={0x86, 0x1a, 0x0, [{0x6, 0x10, "628749cb83255fe25c98adb0c36d"}, {0x1, 0x4, 'id'}]}, @lsrr={0x83, 0x3, 0xe2}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0xb8}}], 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) 0s ago: executing program 3 (id=1110): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x1, @remote, 'batadv_slave_1\x00'}}, 0x80, 0x0, 0x0, 0x0, 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r2, 0x89e2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYRES16=r1], 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r3, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) gettid() r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 00000000246 R12: 0000000000000001 [ 71.419582][ T6206] R13: 0000000000000001 R14: 00007f35ca3a5fa0 R15: 00007fffae225aa8 [ 71.419607][ T6206] [ 71.419788][ T6206] syz.1.86: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 71.607856][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.614411][ T6206] ,cpuset= [ 71.616906][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.626037][ T6206] /,mems_allowed=0-1 [ 71.757463][ T6206] CPU: 0 UID: 0 PID: 6206 Comm: syz.1.86 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 71.757484][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.757493][ T6206] Call Trace: [ 71.757498][ T6206] [ 71.757505][ T6206] dump_stack_lvl+0x241/0x360 [ 71.757530][ T6206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.757547][ T6206] ? __pfx__printk+0x10/0x10 [ 71.757568][ T6206] ? __rcu_read_unlock+0xa1/0x110 [ 71.757592][ T6206] warn_alloc+0x278/0x410 [ 71.757613][ T6206] ? __pfx_warn_alloc+0x10/0x10 [ 71.757626][ T6206] ? __kasan_kmalloc+0x23/0xb0 [ 71.757645][ T6206] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 71.757671][ T6206] ? __get_vm_area_node+0x280/0x2d0 [ 71.757698][ T6206] __vmalloc_node_range_noprof+0x369/0x1380 [ 71.757715][ T6206] ? mark_lock+0x9a/0x360 [ 71.757750][ T6206] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 71.757774][ T6206] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 71.757793][ T6206] __vmalloc_noprof+0x79/0x90 [ 71.757809][ T6206] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 71.757830][ T6206] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 71.757850][ T6206] ? bpf_prog_alloc+0x28/0x1b0 [ 71.757873][ T6206] bpf_prog_alloc+0x3a/0x1b0 [ 71.757895][ T6206] bpf_prog_load+0x7f4/0x20e0 [ 71.757929][ T6206] ? __pfx_bpf_prog_load+0x10/0x10 [ 71.757948][ T6206] ? __pfx___might_resched+0x10/0x10 [ 71.757981][ T6206] ? __might_fault+0xaa/0x120 [ 71.758003][ T6206] __sys_bpf+0x4ea/0x820 [ 71.758025][ T6206] ? __pfx___sys_bpf+0x10/0x10 [ 71.758057][ T6206] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 71.758080][ T6206] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.758101][ T6206] ? do_syscall_64+0x100/0x230 [ 71.758123][ T6206] __x64_sys_bpf+0x7c/0x90 [ 71.758142][ T6206] do_syscall_64+0xf3/0x230 [ 71.758160][ T6206] ? clear_bhb_loop+0x35/0x90 [ 71.758182][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.758209][ T6206] RIP: 0033:0x7f35ca18d169 [ 71.758223][ T6206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.758235][ T6206] RSP: 002b:00007f35cafb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 71.758249][ T6206] RAX: ffffffffffffffda RBX: 00007f35ca3a5fa0 RCX: 00007f35ca18d169 [ 71.758260][ T6206] RDX: 0000000000000094 RSI: 0000400000000440 RDI: 0000000000000005 [ 71.758269][ T6206] RBP: 00007f35cafb8090 R08: 0000000000000000 R09: 0000000000000000 [ 71.758279][ T6206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.758287][ T6206] R13: 0000000000000001 R14: 00007f35ca3a5fa0 R15: 00007fffae225aa8 [ 71.758309][ T6206] [ 71.758315][ T6206] Mem-Info: [ 71.759059][ T6193] syz.4.81 (6193) used greatest stack depth: 17272 bytes left [ 72.004414][ T6206] active_anon:6512 inactive_anon:0 isolated_anon:0 [ 72.004414][ T6206] active_file:1399 inactive_file:38299 isolated_file:0 [ 72.004414][ T6206] unevictable:768 dirty:1593 writeback:0 [ 72.004414][ T6206] slab_reclaimable:9722 slab_unreclaimable:97014 [ 72.004414][ T6206] mapped:28575 shmem:1427 pagetables:956 [ 72.004414][ T6206] sec_pagetables:0 bounce:0 [ 72.004414][ T6206] kernel_misc_reclaimable:0 [ 72.004414][ T6206] free:1340160 free_pcp:233 free_cma:0 [ 72.098773][ T6205] veth3: entered promiscuous mode [ 72.174356][ T6206] Node 0 active_anon:26000kB inactive_anon:0kB active_file:5596kB inactive_file:153120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114084kB dirty:6368kB writeback:0kB shmem:4184kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10960kB pagetables:3348kB sec_pagetables:0kB all_unreclaimable? no [ 72.304443][ T6206] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 72.354183][ T6206] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 72.393489][ T6229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.96'. [ 72.413824][ T6206] lowmem_reserve[]: 0 2489 2490 0 0 [ 72.419181][ T6206] Node 0 DMA32 free:1439476kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:25956kB inactive_anon:0kB active_file:5596kB inactive_file:152800kB unevictable:1536kB writepending:6364kB present:3129332kB managed:2549728kB mlocked:0kB bounce:0kB free_pcp:2268kB local_pcp:816kB free_cma:0kB [ 72.484752][ T6206] lowmem_reserve[]: 0 0 0 0 0 [ 72.489573][ T6206] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 72.564140][ T6206] lowmem_reserve[]: 0 0 0 0 0 [ 72.573712][ T6206] Node 1 Normal free:3904272kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:472kB local_pcp:472kB free_cma:0kB [ 72.644483][ T6206] lowmem_reserve[]: 0 0 0 0 0 [ 72.649377][ T6206] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 72.662261][ T6234] netlink: 'syz.3.98': attribute type 29 has an invalid length. [ 72.684932][ T6206] Node 0 DMA32: 71*4kB (UME) 208*8kB (UME) 288*16kB (UME) 131*32kB (UME) 86*64kB (UME) 44*128kB (UME) 16*256kB (ME) 4*512kB (ME) 2*1024kB (UM) 0*2048kB 342*4096kB (UM) = 1430908kB [ 72.751254][ T6206] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 72.771893][ T6242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.101'. [ 72.797706][ T6206] Node 1 Normal: 178*4kB (UME) 47*8kB (UME) 43*16kB (UME) 225*32kB (UME) 98*64kB (UME) 39*128kB (UME) 18*256kB (UME) 7*512kB (UM) 5*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3904272kB [ 72.859165][ T6206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 72.874935][ T6206] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 72.884613][ T6206] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 72.896246][ T6206] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 72.905851][ T6206] 41128 total pagecache pages [ 72.910625][ T6206] 0 pages in swap cache [ 72.915053][ T6206] Free swap = 124996kB [ 72.919336][ T6206] Total swap = 124996kB [ 72.923562][ T6206] 2097051 pages RAM [ 72.927657][ T6206] 0 pages HighMem/MovableOnly [ 72.932469][ T6206] 427897 pages reserved [ 72.998724][ T6206] 0 pages cma reserved [ 73.137682][ T6254] netlink: 32 bytes leftover after parsing attributes in process `syz.3.105'. [ 73.370551][ T6266] (unnamed net_device) (uninitialized): option lacp_active: invalid value (7) [ 73.433251][ T6266] Bluetooth: MGMT ver 1.23 [ 73.482654][ T6267] netlink: 'syz.3.107': attribute type 1 has an invalid length. [ 73.972915][ T6287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.113'. [ 75.160955][ T6282] netlink: 'syz.4.112': attribute type 29 has an invalid length. [ 75.340705][ T6303] netlink: 32 bytes leftover after parsing attributes in process `syz.4.118'. [ 75.591595][ T6319] netlink: 16 bytes leftover after parsing attributes in process `syz.4.125'. [ 75.692011][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'. [ 75.744569][ T6325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.786307][ T6331] x_tables: duplicate underflow at hook 1 [ 75.873301][ T6325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.054394][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 76.568360][ T6364] sctp: [Deprecated]: syz.2.138 (pid 6364) Use of int in max_burst socket option. [ 76.568360][ T6364] Use struct sctp_assoc_value instead [ 76.592052][ T6364] netlink: 'syz.2.138': attribute type 10 has an invalid length. [ 76.600586][ T6364] veth0_vlan: left promiscuous mode [ 76.608866][ T6364] veth0_vlan: entered promiscuous mode [ 76.670092][ T6364] team0: Device veth0_vlan failed to register rx_handler [ 76.730356][ T8] cfg80211: failed to load regulatory.db [ 77.468842][ T6391] netlink: 70 bytes leftover after parsing attributes in process `syz.0.146'. [ 77.502692][ T6391] netlink: 396 bytes leftover after parsing attributes in process `syz.0.146'. [ 77.535129][ T6391] netlink: 516 bytes leftover after parsing attributes in process `syz.0.146'. [ 77.817111][ T6405] netlink: 508 bytes leftover after parsing attributes in process `syz.2.154'. [ 77.877967][ T6409] netlink: 16 bytes leftover after parsing attributes in process `syz.4.155'. [ 78.037819][ T6415] netlink: 32 bytes leftover after parsing attributes in process `syz.3.157'. [ 78.345815][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.354644][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.604825][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.629245][ T6414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.699912][ T6414] macvlan0: left promiscuous mode [ 78.757414][ T6414] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.772642][ T6414] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.781589][ T6414] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.790500][ T6414] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.850102][ T6428] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 78.876932][ T6428] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 79.081848][ T6452] xt_CT: No such helper "snmp" [ 80.001616][ T6503] netlink: 'syz.0.183': attribute type 5 has an invalid length. [ 80.185990][ T6511] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 80.218662][ T6513] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.227975][ T6513] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.236772][ T6513] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.245530][ T6513] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.256725][ T6513] Zero length message leads to an empty skb [ 80.269625][ T6513] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 80.553429][ T6523] ip6tnl1: entered promiscuous mode [ 80.595906][ T6523] ip6tnl1: entered allmulticast mode [ 80.896410][ T6547] xt_bpf: check failed: parse error [ 80.949170][ T6544] tipc: Started in network mode [ 80.967454][ T6544] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 80.979719][ T6544] tipc: Enabled bearer , priority 18 [ 81.306149][ T6566] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 81.858949][ T6588] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.095240][ T8] tipc: Node number set to 10005162 [ 82.251767][ T6601] xt_CT: No such helper "syz0" [ 82.295421][ T6603] __nla_validate_parse: 9 callbacks suppressed [ 82.295437][ T6603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.209'. [ 82.371388][ T6573] syzkaller1: entered promiscuous mode [ 82.377479][ T6573] syzkaller1: entered allmulticast mode [ 82.406942][ T6602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.209'. [ 83.312634][ T6654] lo speed is unknown, defaulting to 1000 [ 83.319150][ T6649] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 83.321401][ T6649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.221'. [ 83.422517][ T6654] lo speed is unknown, defaulting to 1000 [ 83.553913][ T6654] lo speed is unknown, defaulting to 1000 [ 83.565501][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 83.604689][ T6654] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 83.650947][ T6654] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 83.679350][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'. [ 83.773327][ T6675] sctp: [Deprecated]: syz.2.226 (pid 6675) Use of int in max_burst socket option. [ 83.773327][ T6675] Use struct sctp_assoc_value instead [ 83.800231][ T6675] netlink: 'syz.2.226': attribute type 10 has an invalid length. [ 83.866697][ T6675] veth0_vlan: left promiscuous mode [ 83.873312][ T6675] veth0_vlan: entered promiscuous mode [ 83.881886][ T6675] team0: Device veth0_vlan failed to register rx_handler [ 83.920962][ T6654] lo speed is unknown, defaulting to 1000 [ 83.956130][ T6654] lo speed is unknown, defaulting to 1000 [ 83.991736][ T6654] lo speed is unknown, defaulting to 1000 [ 84.062319][ T6654] lo speed is unknown, defaulting to 1000 [ 84.120641][ T6654] lo speed is unknown, defaulting to 1000 [ 84.184857][ T6654] lo speed is unknown, defaulting to 1000 [ 84.474763][ T6698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 84.542752][ T6702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.234'. [ 84.632369][ T6709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.236'. [ 85.052731][ T6706] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.060544][ T6706] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.309082][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.359298][ T6706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.493121][ T6706] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.513975][ T6706] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.523700][ T6706] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.537633][ T6706] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.598183][ T6706] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.607952][ T6706] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.617453][ T6706] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.626423][ T6746] sctp: [Deprecated]: syz.3.248 (pid 6746) Use of int in max_burst socket option. [ 85.626423][ T6746] Use struct sctp_assoc_value instead [ 85.629456][ T6746] netlink: 'syz.3.248': attribute type 10 has an invalid length. [ 85.642091][ T6706] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.767056][ T6746] veth0_vlan: left promiscuous mode [ 85.784618][ T6746] veth0_vlan: entered promiscuous mode [ 85.792544][ T6746] team0: Device veth0_vlan failed to register rx_handler [ 85.842843][ T6734] lo speed is unknown, defaulting to 1000 [ 86.120297][ T6764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.253'. [ 86.588924][ T6784] netlink: 16 bytes leftover after parsing attributes in process `syz.0.260'. [ 86.678716][ T6786] netlink: 'syz.4.261': attribute type 29 has an invalid length. [ 87.041104][ T6814] FAULT_INJECTION: forcing a failure. [ 87.041104][ T6814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.080503][ T6814] CPU: 1 UID: 0 PID: 6814 Comm: syz.0.271 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 87.080529][ T6814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.080539][ T6814] Call Trace: [ 87.080545][ T6814] [ 87.080552][ T6814] dump_stack_lvl+0x241/0x360 [ 87.080578][ T6814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.080596][ T6814] ? __pfx__printk+0x10/0x10 [ 87.080614][ T6814] ? __pfx_lock_release+0x10/0x10 [ 87.080645][ T6814] should_fail_ex+0x40a/0x550 [ 87.080672][ T6814] _copy_from_user+0x2d/0xb0 [ 87.080693][ T6814] __sys_bpf+0x1be/0x820 [ 87.080717][ T6814] ? __pfx___sys_bpf+0x10/0x10 [ 87.080750][ T6814] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 87.080774][ T6814] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.080798][ T6814] ? do_syscall_64+0x100/0x230 [ 87.080822][ T6814] __x64_sys_bpf+0x7c/0x90 [ 87.080841][ T6814] do_syscall_64+0xf3/0x230 [ 87.080859][ T6814] ? clear_bhb_loop+0x35/0x90 [ 87.080883][ T6814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.080902][ T6814] RIP: 0033:0x7f4644b8d169 [ 87.080917][ T6814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.080930][ T6814] RSP: 002b:00007f4645a90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 87.080947][ T6814] RAX: ffffffffffffffda RBX: 00007f4644da5fa0 RCX: 00007f4644b8d169 [ 87.080959][ T6814] RDX: 0000000000000050 RSI: 0000400000000240 RDI: 000000000000000a [ 87.080970][ T6814] RBP: 00007f4645a90090 R08: 0000000000000000 R09: 0000000000000000 [ 87.080980][ T6814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.080989][ T6814] R13: 0000000000000000 R14: 00007f4644da5fa0 R15: 00007fffb6330408 [ 87.081015][ T6814] [ 87.292762][ T6816] sctp: [Deprecated]: syz.2.269 (pid 6816) Use of int in max_burst socket option. [ 87.292762][ T6816] Use struct sctp_assoc_value instead [ 87.311382][ T6816] netlink: 'syz.2.269': attribute type 10 has an invalid length. [ 87.321340][ T6816] veth0_vlan: left promiscuous mode [ 87.328327][ T6816] veth0_vlan: entered promiscuous mode [ 87.336947][ T6816] team0: Device veth0_vlan failed to register rx_handler [ 87.662043][ T6831] __nla_validate_parse: 1 callbacks suppressed [ 87.662060][ T6831] netlink: 156 bytes leftover after parsing attributes in process `syz.0.276'. [ 87.697744][ T6831] netlink: 'syz.0.276': attribute type 3 has an invalid length. [ 87.774504][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.276'. [ 88.295405][ T6840] netlink: 'syz.0.279': attribute type 29 has an invalid length. [ 88.331593][ T6848] netlink: 16 bytes leftover after parsing attributes in process `syz.4.282'. [ 88.480754][ T6854] FAULT_INJECTION: forcing a failure. [ 88.480754][ T6854] name failslab, interval 1, probability 0, space 0, times 0 [ 88.509728][ T6854] CPU: 1 UID: 0 PID: 6854 Comm: syz.1.284 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 88.509752][ T6854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.509761][ T6854] Call Trace: [ 88.509767][ T6854] [ 88.509773][ T6854] dump_stack_lvl+0x241/0x360 [ 88.509799][ T6854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.509816][ T6854] ? __pfx__printk+0x10/0x10 [ 88.509833][ T6854] ? __kmalloc_noprof+0xb5/0x4c0 [ 88.509853][ T6854] ? __pfx___might_resched+0x10/0x10 [ 88.509877][ T6854] should_fail_ex+0x40a/0x550 [ 88.509903][ T6854] should_failslab+0xac/0x100 [ 88.509925][ T6854] __kmalloc_noprof+0xdd/0x4c0 [ 88.509944][ T6854] ? bpf_test_init+0xc3/0x160 [ 88.509968][ T6854] bpf_test_init+0xc3/0x160 [ 88.509990][ T6854] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 88.510015][ T6854] ? __pfx_lock_release+0x10/0x10 [ 88.510045][ T6854] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.510067][ T6854] ? __fget_files+0x2a/0x410 [ 88.510090][ T6854] ? __fget_files+0x2a/0x410 [ 88.510113][ T6854] ? fput+0x21b/0x290 [ 88.510131][ T6854] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 88.510152][ T6854] bpf_prog_test_run+0x2e4/0x360 [ 88.510186][ T6854] __sys_bpf+0x487/0x820 [ 88.510209][ T6854] ? __pfx___sys_bpf+0x10/0x10 [ 88.510240][ T6854] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 88.510264][ T6854] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.510287][ T6854] ? do_syscall_64+0x100/0x230 [ 88.510309][ T6854] __x64_sys_bpf+0x7c/0x90 [ 88.510328][ T6854] do_syscall_64+0xf3/0x230 [ 88.510346][ T6854] ? clear_bhb_loop+0x35/0x90 [ 88.510368][ T6854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.510386][ T6854] RIP: 0033:0x7f35ca18d169 [ 88.510401][ T6854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.510413][ T6854] RSP: 002b:00007f35cafb8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 88.510431][ T6854] RAX: ffffffffffffffda RBX: 00007f35ca3a5fa0 RCX: 00007f35ca18d169 [ 88.510442][ T6854] RDX: 0000000000000050 RSI: 0000400000000240 RDI: 000000000000000a [ 88.510451][ T6854] RBP: 00007f35cafb8090 R08: 0000000000000000 R09: 0000000000000000 [ 88.510461][ T6854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.510474][ T6854] R13: 0000000000000000 R14: 00007f35ca3a5fa0 R15: 00007fffae225aa8 [ 88.510500][ T6854] [ 88.797689][ T6853] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 88.824709][ T5915] IPVS: starting estimator thread 0... [ 88.914534][ T6859] IPVS: using max 20 ests per chain, 48000 per kthread [ 89.010485][ T6869] sctp: [Deprecated]: syz.0.287 (pid 6869) Use of int in max_burst socket option. [ 89.010485][ T6869] Use struct sctp_assoc_value instead [ 89.051286][ T6869] netlink: 'syz.0.287': attribute type 10 has an invalid length. [ 89.233287][ T6876] netlink: 'syz.4.294': attribute type 29 has an invalid length. [ 89.521449][ T6890] netlink: 16 bytes leftover after parsing attributes in process `syz.4.297'. [ 89.658424][ T6892] lo speed is unknown, defaulting to 1000 [ 89.681507][ T6894] FAULT_INJECTION: forcing a failure. [ 89.681507][ T6894] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 89.719812][ T6894] CPU: 1 UID: 0 PID: 6894 Comm: syz.4.299 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 89.719838][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.719848][ T6894] Call Trace: [ 89.719853][ T6894] [ 89.719861][ T6894] dump_stack_lvl+0x241/0x360 [ 89.719886][ T6894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.719904][ T6894] ? __pfx__printk+0x10/0x10 [ 89.719922][ T6894] ? __pfx_lock_release+0x10/0x10 [ 89.719952][ T6894] should_fail_ex+0x40a/0x550 [ 89.719979][ T6894] _copy_from_user+0x2d/0xb0 [ 89.720000][ T6894] bpf_test_init+0xfc/0x160 [ 89.720024][ T6894] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 89.720051][ T6894] ? __pfx_lock_release+0x10/0x10 [ 89.720079][ T6894] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.720101][ T6894] ? __fget_files+0x2a/0x410 [ 89.720124][ T6894] ? __fget_files+0x2a/0x410 [ 89.720146][ T6894] ? fput+0x21b/0x290 [ 89.720165][ T6894] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 89.720186][ T6894] bpf_prog_test_run+0x2e4/0x360 [ 89.720212][ T6894] __sys_bpf+0x487/0x820 [ 89.720235][ T6894] ? __pfx___sys_bpf+0x10/0x10 [ 89.720267][ T6894] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 89.720292][ T6894] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.720321][ T6894] ? do_syscall_64+0x100/0x230 [ 89.720344][ T6894] __x64_sys_bpf+0x7c/0x90 [ 89.720364][ T6894] do_syscall_64+0xf3/0x230 [ 89.720382][ T6894] ? clear_bhb_loop+0x35/0x90 [ 89.720406][ T6894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.720425][ T6894] RIP: 0033:0x7f7fbb78d169 [ 89.720440][ T6894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.720453][ T6894] RSP: 002b:00007f7fbc64a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.720471][ T6894] RAX: ffffffffffffffda RBX: 00007f7fbb9a5fa0 RCX: 00007f7fbb78d169 [ 89.720482][ T6894] RDX: 0000000000000050 RSI: 0000400000000240 RDI: 000000000000000a [ 89.720492][ T6894] RBP: 00007f7fbc64a090 R08: 0000000000000000 R09: 0000000000000000 [ 89.720502][ T6894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.720511][ T6894] R13: 0000000000000000 R14: 00007f7fbb9a5fa0 R15: 00007ffd06552e28 [ 89.720537][ T6894] [ 90.247715][ T6905] netlink: 'syz.0.303': attribute type 1 has an invalid length. [ 90.289894][ T6911] netlink: 'syz.3.306': attribute type 29 has an invalid length. [ 90.529535][ T6923] netlink: 24 bytes leftover after parsing attributes in process `syz.0.309'. [ 90.555819][ T6923] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 90.692593][ T6931] Bluetooth: MGMT ver 1.23 [ 90.755837][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 91.244383][ T6917] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 91.340624][ T6940] Cannot find add_set index 0 as target [ 91.584901][ T6947] ip6tnl2: entered promiscuous mode [ 91.590154][ T6947] ip6tnl2: entered allmulticast mode [ 91.625868][ T6950] netlink: 'syz.1.319': attribute type 29 has an invalid length. [ 91.659068][ T6947] veth3: entered promiscuous mode [ 91.683909][ T6955] netlink: 16 bytes leftover after parsing attributes in process `syz.3.320'. [ 91.845637][ T6957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.322'. [ 91.886586][ T6957] lo speed is unknown, defaulting to 1000 [ 92.294720][ T6959] Illegal XDP return value 4294967274 on prog (id 180) dev N/A, expect packet loss! [ 92.637309][ T6966] lo speed is unknown, defaulting to 1000 [ 93.191811][ T6999] sctp: [Deprecated]: syz.3.331 (pid 6999) Use of int in max_burst socket option. [ 93.191811][ T6999] Use struct sctp_assoc_value instead [ 93.234604][ T7002] FAULT_INJECTION: forcing a failure. [ 93.234604][ T7002] name failslab, interval 1, probability 0, space 0, times 0 [ 93.241217][ T6999] netlink: 'syz.3.331': attribute type 10 has an invalid length. [ 93.261132][ T7002] CPU: 0 UID: 0 PID: 7002 Comm: syz.4.333 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 93.261153][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 93.261161][ T7002] Call Trace: [ 93.261166][ T7002] [ 93.261172][ T7002] dump_stack_lvl+0x241/0x360 [ 93.261195][ T7002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.261211][ T7002] ? __pfx__printk+0x10/0x10 [ 93.261228][ T7002] ? __kmalloc_noprof+0xb5/0x4c0 [ 93.261248][ T7002] ? __pfx___might_resched+0x10/0x10 [ 93.261272][ T7002] should_fail_ex+0x40a/0x550 [ 93.261296][ T7002] should_failslab+0xac/0x100 [ 93.261317][ T7002] __kmalloc_noprof+0xdd/0x4c0 [ 93.261334][ T7002] ? bpf_test_init+0xc3/0x160 [ 93.261357][ T7002] bpf_test_init+0xc3/0x160 [ 93.261379][ T7002] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 93.261404][ T7002] ? __pfx_lock_release+0x10/0x10 [ 93.261434][ T7002] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.261454][ T7002] ? __fget_files+0x2a/0x410 [ 93.261479][ T7002] ? __fget_files+0x2a/0x410 [ 93.261502][ T7002] ? fput+0x21b/0x290 [ 93.261519][ T7002] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.261539][ T7002] bpf_prog_test_run+0x2e4/0x360 [ 93.261562][ T7002] __sys_bpf+0x487/0x820 [ 93.261584][ T7002] ? __pfx___sys_bpf+0x10/0x10 [ 93.261613][ T7002] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 93.261636][ T7002] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.261658][ T7002] ? do_syscall_64+0x100/0x230 [ 93.261680][ T7002] __x64_sys_bpf+0x7c/0x90 [ 93.261706][ T7002] do_syscall_64+0xf3/0x230 [ 93.261722][ T7002] ? clear_bhb_loop+0x35/0x90 [ 93.261745][ T7002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.261764][ T7002] RIP: 0033:0x7f7fbb78d169 [ 93.261778][ T7002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.261789][ T7002] RSP: 002b:00007f7fbc64a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.261806][ T7002] RAX: ffffffffffffffda RBX: 00007f7fbb9a5fa0 RCX: 00007f7fbb78d169 [ 93.261816][ T7002] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 93.261825][ T7002] RBP: 00007f7fbc64a090 R08: 0000000000000000 R09: 0000000000000000 [ 93.261834][ T7002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.261843][ T7002] R13: 0000000000000000 R14: 00007f7fbb9a5fa0 R15: 00007ffd06552e28 [ 93.261867][ T7002] [ 93.262199][ T6998] netlink: zone id is out of range [ 93.396412][ T7001] netlink: 52 bytes leftover after parsing attributes in process `syz.1.324'. [ 93.409993][ T6999] veth0_vlan: left promiscuous mode [ 93.538109][ T6998] netlink: zone id is out of range [ 93.543827][ T6998] netlink: zone id is out of range [ 93.549132][ T6998] netlink: zone id is out of range [ 93.562628][ T6999] veth0_vlan: entered promiscuous mode [ 93.587306][ T6999] team0: Device veth0_vlan failed to register rx_handler [ 93.606286][ T6998] netlink: zone id is out of range [ 93.611430][ T6998] netlink: zone id is out of range [ 93.627748][ T6998] netlink: zone id is out of range [ 93.634422][ T6998] netlink: zone id is out of range [ 93.639804][ T6998] netlink: zone id is out of range [ 94.111298][ T7028] macsec0: entered promiscuous mode [ 94.182951][ T7028] veth1_macvtap: left promiscuous mode [ 94.219996][ T7031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.338'. [ 94.271228][ T7028] macsec0 (unregistering): left promiscuous mode [ 94.307077][ T7031] netlink: 'syz.2.338': attribute type 3 has an invalid length. [ 94.482983][ T7047] FAULT_INJECTION: forcing a failure. [ 94.482983][ T7047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.516813][ T7047] CPU: 0 UID: 0 PID: 7047 Comm: syz.4.344 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 94.516838][ T7047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 94.516847][ T7047] Call Trace: [ 94.516853][ T7047] [ 94.516860][ T7047] dump_stack_lvl+0x241/0x360 [ 94.516884][ T7047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.516900][ T7047] ? __pfx__printk+0x10/0x10 [ 94.516917][ T7047] ? __pfx_lock_release+0x10/0x10 [ 94.516946][ T7047] should_fail_ex+0x40a/0x550 [ 94.516971][ T7047] _copy_from_user+0x2d/0xb0 [ 94.516991][ T7047] bpf_test_init+0xfc/0x160 [ 94.517015][ T7047] bpf_prog_test_run_xdp+0x48e/0x11e0 [ 94.517040][ T7047] ? __pfx_lock_release+0x10/0x10 [ 94.517068][ T7047] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.517088][ T7047] ? __fget_files+0x2a/0x410 [ 94.517112][ T7047] ? __fget_files+0x2a/0x410 [ 94.517134][ T7047] ? fput+0x21b/0x290 [ 94.517152][ T7047] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 94.517174][ T7047] bpf_prog_test_run+0x2e4/0x360 [ 94.517198][ T7047] __sys_bpf+0x487/0x820 [ 94.517219][ T7047] ? __pfx___sys_bpf+0x10/0x10 [ 94.517249][ T7047] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 94.517272][ T7047] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.517295][ T7047] ? do_syscall_64+0x100/0x230 [ 94.517316][ T7047] __x64_sys_bpf+0x7c/0x90 [ 94.517333][ T7047] do_syscall_64+0xf3/0x230 [ 94.517352][ T7047] ? clear_bhb_loop+0x35/0x90 [ 94.517374][ T7047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.517393][ T7047] RIP: 0033:0x7f7fbb78d169 [ 94.517407][ T7047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.517420][ T7047] RSP: 002b:00007f7fbc64a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 94.517437][ T7047] RAX: ffffffffffffffda RBX: 00007f7fbb9a5fa0 RCX: 00007f7fbb78d169 [ 94.517448][ T7047] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 94.517457][ T7047] RBP: 00007f7fbc64a090 R08: 0000000000000000 R09: 0000000000000000 [ 94.517466][ T7047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.517474][ T7047] R13: 0000000000000000 R14: 00007f7fbb9a5fa0 R15: 00007ffd06552e28 [ 94.517499][ T7047] [ 94.749050][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.346'. [ 94.865134][ T7064] sctp: [Deprecated]: syz.2.345 (pid 7064) Use of int in max_burst socket option. [ 94.865134][ T7064] Use struct sctp_assoc_value instead [ 94.910359][ T7064] netlink: 'syz.2.345': attribute type 10 has an invalid length. [ 94.990629][ T7064] veth0_vlan: left promiscuous mode [ 94.997493][ T7064] veth0_vlan: entered promiscuous mode [ 95.005359][ T7064] team0: Device veth0_vlan failed to register rx_handler [ 95.029322][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 95.039489][ T7071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 95.189733][ T7084] netlink: 68 bytes leftover after parsing attributes in process `syz.1.357'. [ 95.213833][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'. [ 95.474344][ T7095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.360'. [ 95.519042][ T7097] xt_hashlimit: size too large, truncated to 1048576 [ 96.024825][ T7109] team0: Device ip6tnl1 is of different type [ 96.125256][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 96.211873][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.219451][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.266171][ T7121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.367'. [ 96.358491][ T7115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.369720][ T7134] net_ratelimit: 2 callbacks suppressed [ 96.369735][ T7134] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 96.390098][ T7115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.443520][ T7115] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.459871][ T7115] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.469129][ T7115] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.478415][ T7115] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.531880][ T5839] lo speed is unknown, defaulting to 1000 [ 96.662305][ T7143] lo speed is unknown, defaulting to 1000 [ 97.069596][ T7161] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 97.154903][ T7161] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 97.182871][ T7161] gretap1: entered promiscuous mode [ 97.189051][ T7161] gretap1: entered allmulticast mode [ 97.219103][ T7170] lo speed is unknown, defaulting to 1000 [ 97.355005][ T7184] sctp: [Deprecated]: syz.1.384 (pid 7184) Use of int in max_burst socket option. [ 97.355005][ T7184] Use struct sctp_assoc_value instead [ 97.432377][ T7186] netlink: 'syz.0.385': attribute type 29 has an invalid length. [ 97.447878][ T7184] netlink: 'syz.1.384': attribute type 10 has an invalid length. [ 97.456721][ T7184] veth0_vlan: left promiscuous mode [ 97.464484][ T7184] veth0_vlan: entered promiscuous mode [ 97.476405][ T7184] team0: Device veth0_vlan failed to register rx_handler [ 97.525576][ T7188] netlink: 'syz.4.386': attribute type 29 has an invalid length. [ 98.079618][ T7211] lo speed is unknown, defaulting to 1000 [ 98.186892][ T7213] lo speed is unknown, defaulting to 1000 [ 98.626436][ T7170] __nla_validate_parse: 5 callbacks suppressed [ 98.626453][ T7170] netlink: 28 bytes leftover after parsing attributes in process `syz.2.382'. [ 98.753445][ T7242] xt_cgroup: xt_cgroup: no path or classid specified [ 98.803080][ T7242] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 98.911539][ T7255] sctp: [Deprecated]: syz.0.397 (pid 7255) Use of int in maxseg socket option. [ 98.911539][ T7255] Use struct sctp_assoc_value instead [ 98.945121][ T7242] bond1: entered promiscuous mode [ 98.965427][ T7242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.058135][ T7247] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.067297][ T7247] bond1: (slave bond2): making interface the new active one [ 99.077733][ T7247] bond2: entered promiscuous mode [ 99.092190][ T7247] bond1: (slave bond2): Enslaving as an active interface with an up link [ 99.101241][ T7253] vlan1: entered allmulticast mode [ 99.139343][ T7261] netlink: 'syz.2.399': attribute type 29 has an invalid length. [ 99.229343][ T7264] FAULT_INJECTION: forcing a failure. [ 99.229343][ T7264] name failslab, interval 1, probability 0, space 0, times 0 [ 99.252319][ T7264] CPU: 1 UID: 0 PID: 7264 Comm: syz.0.400 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 99.252343][ T7264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 99.252352][ T7264] Call Trace: [ 99.252358][ T7264] [ 99.252365][ T7264] dump_stack_lvl+0x241/0x360 [ 99.252395][ T7264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.252412][ T7264] ? __pfx__printk+0x10/0x10 [ 99.252431][ T7264] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 99.252453][ T7264] ? __pfx___might_resched+0x10/0x10 [ 99.252476][ T7264] should_fail_ex+0x40a/0x550 [ 99.252502][ T7264] should_failslab+0xac/0x100 [ 99.252524][ T7264] ? page_pool_create_percpu+0x77/0xb70 [ 99.252539][ T7264] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 99.252561][ T7264] ? rcu_is_watching+0x15/0xb0 [ 99.252582][ T7264] page_pool_create_percpu+0x77/0xb70 [ 99.252606][ T7264] bpf_test_run_xdp_live+0x2e6/0x2220 [ 99.252627][ T7264] ? __pfx_lock_release+0x10/0x10 [ 99.252654][ T7264] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 99.252672][ T7264] ? __pfx___might_resched+0x10/0x10 [ 99.252695][ T7264] ? __mutex_unlock_slowpath+0x227/0x800 [ 99.252723][ T7264] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 99.252741][ T7264] ? synchronize_rcu+0x11b/0x360 [ 99.252759][ T7264] ? __pfx_synchronize_rcu+0x10/0x10 [ 99.252797][ T7264] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 99.252818][ T7264] ? 0xffffffffa0000950 [ 99.252851][ T7264] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 99.252883][ T7264] ? rep_movs_alternative+0x4a/0x70 [ 99.252906][ T7264] ? _copy_from_user+0x95/0xb0 [ 99.252926][ T7264] ? bpf_test_init+0x137/0x160 [ 99.252944][ T7264] ? xdp_convert_md_to_buff+0x5b/0x330 [ 99.252966][ T7264] bpf_prog_test_run_xdp+0x805/0x11e0 [ 99.252992][ T7264] ? __pfx_lock_release+0x10/0x10 [ 99.253022][ T7264] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.253052][ T7264] ? __fget_files+0x2a/0x410 [ 99.253076][ T7264] ? __fget_files+0x2a/0x410 [ 99.253099][ T7264] ? fput+0x21b/0x290 [ 99.253118][ T7264] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 99.253141][ T7264] bpf_prog_test_run+0x2e4/0x360 [ 99.253165][ T7264] __sys_bpf+0x487/0x820 [ 99.253188][ T7264] ? __pfx___sys_bpf+0x10/0x10 [ 99.253220][ T7264] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 99.253244][ T7264] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 99.253267][ T7264] ? do_syscall_64+0x100/0x230 [ 99.253289][ T7264] __x64_sys_bpf+0x7c/0x90 [ 99.253308][ T7264] do_syscall_64+0xf3/0x230 [ 99.253327][ T7264] ? clear_bhb_loop+0x35/0x90 [ 99.253349][ T7264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.253369][ T7264] RIP: 0033:0x7f4644b8d169 [ 99.253382][ T7264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.253395][ T7264] RSP: 002b:00007f4645a90038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 99.253413][ T7264] RAX: ffffffffffffffda RBX: 00007f4644da5fa0 RCX: 00007f4644b8d169 [ 99.253423][ T7264] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 99.253434][ T7264] RBP: 00007f4645a90090 R08: 0000000000000000 R09: 0000000000000000 [ 99.253443][ T7264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.253453][ T7264] R13: 0000000000000000 R14: 00007f4644da5fa0 R15: 00007fffb6330408 [ 99.253476][ T7264] [ 99.603310][ T7266] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.401'. [ 99.615465][ T7266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 99.627111][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.401'. [ 99.634840][ T7269] netlink: 64 bytes leftover after parsing attributes in process `syz.3.403'. [ 100.053181][ T7289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.408'. [ 100.111933][ T7289] netlink: 16 bytes leftover after parsing attributes in process `syz.3.408'. [ 100.122367][ T7292] netlink: 16 bytes leftover after parsing attributes in process `syz.1.411'. [ 100.226273][ T7299] netlink: 'syz.1.411': attribute type 1 has an invalid length. [ 100.274063][ T7299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.316639][ T7303] netlink: 16 bytes leftover after parsing attributes in process `syz.3.414'. [ 100.411771][ T7304] netlink: 40 bytes leftover after parsing attributes in process `syz.1.411'. [ 100.548862][ T7305] lo speed is unknown, defaulting to 1000 [ 101.560237][ T7339] netlink: 'syz.3.422': attribute type 29 has an invalid length. [ 101.762129][ T7346] netlink: 'syz.2.424': attribute type 1 has an invalid length. [ 101.771471][ T7346] netlink: 'syz.2.424': attribute type 2 has an invalid length. [ 101.780404][ T7345] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 101.911972][ T7354] netlink: 'syz.4.427': attribute type 4 has an invalid length. [ 102.359437][ T7356] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 102.401452][ T7377] lo speed is unknown, defaulting to 1000 [ 102.424557][ T7356] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 102.930272][ T7392] sctp: [Deprecated]: syz.4.437 (pid 7392) Use of int in max_burst socket option. [ 102.930272][ T7392] Use struct sctp_assoc_value instead [ 102.948712][ T7392] validate_nla: 1 callbacks suppressed [ 102.948727][ T7392] netlink: 'syz.4.437': attribute type 10 has an invalid length. [ 102.962867][ T7392] veth0_vlan: left promiscuous mode [ 102.970041][ T7392] veth0_vlan: entered promiscuous mode [ 102.978634][ T7392] team0: Device veth0_vlan failed to register rx_handler [ 103.004960][ T7392] tipc: Resetting bearer [ 103.159490][ T7400] sctp: [Deprecated]: syz.2.438 (pid 7400) Use of int in max_burst socket option. [ 103.159490][ T7400] Use struct sctp_assoc_value instead [ 103.180533][ T7400] netlink: 'syz.2.438': attribute type 10 has an invalid length. [ 103.188631][ T7400] veth0_vlan: left promiscuous mode [ 103.195346][ T7400] veth0_vlan: entered promiscuous mode [ 103.204511][ T7400] team0: Device veth0_vlan failed to register rx_handler [ 103.360780][ T7402] netlink: 'syz.3.440': attribute type 10 has an invalid length. [ 103.417695][ T7402] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 103.768907][ T7411] __nla_validate_parse: 8 callbacks suppressed [ 103.768925][ T7411] netlink: 64 bytes leftover after parsing attributes in process `syz.4.443'. [ 104.092953][ T7418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 104.195065][ T7422] netlink: 'syz.2.448': attribute type 29 has an invalid length. [ 104.386625][ T7428] lo speed is unknown, defaulting to 1000 [ 104.559229][ T7440] sctp: [Deprecated]: syz.0.453 (pid 7440) Use of int in max_burst socket option. [ 104.559229][ T7440] Use struct sctp_assoc_value instead [ 104.565974][ T7432] lo speed is unknown, defaulting to 1000 [ 104.661028][ T7440] netlink: 'syz.0.453': attribute type 10 has an invalid length. [ 105.339178][ T7465] netlink: 'syz.3.460': attribute type 29 has an invalid length. [ 105.404988][ T7428] netlink: 312 bytes leftover after parsing attributes in process `syz.4.451'. [ 105.422364][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 105.433330][ T7467] netlink: 1347 bytes leftover after parsing attributes in process `syz.0.461'. [ 105.541137][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.463'. [ 105.756574][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 105.857749][ T7489] Cannot find del_set index 1 as target [ 105.931143][ T7493] pim6reg: entered allmulticast mode [ 105.990062][ T7496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 106.095521][ T7504] netlink: 56 bytes leftover after parsing attributes in process `syz.0.469'. [ 106.117692][ T7504] netlink: 576 bytes leftover after parsing attributes in process `syz.0.469'. [ 106.567560][ T7520] FAULT_INJECTION: forcing a failure. [ 106.567560][ T7520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.614629][ T7520] CPU: 0 UID: 0 PID: 7520 Comm: syz.4.473 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 106.614654][ T7520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.614664][ T7520] Call Trace: [ 106.614670][ T7520] [ 106.614678][ T7520] dump_stack_lvl+0x241/0x360 [ 106.614703][ T7520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.614720][ T7520] ? __pfx__printk+0x10/0x10 [ 106.614748][ T7520] should_fail_ex+0x40a/0x550 [ 106.614774][ T7520] _copy_to_user+0x31/0xb0 [ 106.614795][ T7520] bpf_test_finish+0x2e6/0x890 [ 106.614823][ T7520] ? __pfx_bpf_test_finish+0x10/0x10 [ 106.614841][ T7520] ? rep_movs_alternative+0x4a/0x70 [ 106.614868][ T7520] ? bpf_test_init+0x137/0x160 [ 106.614888][ T7520] bpf_prog_test_run_xdp+0x8f4/0x11e0 [ 106.614913][ T7520] ? __pfx_lock_release+0x10/0x10 [ 106.614940][ T7520] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 106.614959][ T7520] ? __fget_files+0x2a/0x410 [ 106.614983][ T7520] ? __fget_files+0x2a/0x410 [ 106.615006][ T7520] ? fput+0x21b/0x290 [ 106.615024][ T7520] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 106.615044][ T7520] bpf_prog_test_run+0x2e4/0x360 [ 106.615068][ T7520] __sys_bpf+0x487/0x820 [ 106.615090][ T7520] ? __pfx___sys_bpf+0x10/0x10 [ 106.615119][ T7520] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.615144][ T7520] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.615167][ T7520] ? do_syscall_64+0x100/0x230 [ 106.615189][ T7520] __x64_sys_bpf+0x7c/0x90 [ 106.615208][ T7520] do_syscall_64+0xf3/0x230 [ 106.615225][ T7520] ? clear_bhb_loop+0x35/0x90 [ 106.615247][ T7520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.615277][ T7520] RIP: 0033:0x7f7fbb78d169 [ 106.615292][ T7520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.615305][ T7520] RSP: 002b:00007f7fbc64a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.615322][ T7520] RAX: ffffffffffffffda RBX: 00007f7fbb9a5fa0 RCX: 00007f7fbb78d169 [ 106.615334][ T7520] RDX: 0000000000000050 RSI: 0000400000000600 RDI: 000000000000000a [ 106.615344][ T7520] RBP: 00007f7fbc64a090 R08: 0000000000000000 R09: 0000000000000000 [ 106.615353][ T7520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.615362][ T7520] R13: 0000000000000000 R14: 00007f7fbb9a5fa0 R15: 00007ffd06552e28 [ 106.615386][ T7520] [ 107.022178][ T7528] lo speed is unknown, defaulting to 1000 [ 107.064951][ T7492] pim6reg: left allmulticast mode [ 107.669985][ T5834] Bluetooth: hci4: link tx timeout [ 107.681637][ T5834] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.226712][ T5848] Bluetooth: hci4: link tx timeout [ 108.232493][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.331677][ T7595] sctp: [Deprecated]: syz.4.495 (pid 7595) Use of int in max_burst socket option. [ 108.331677][ T7595] Use struct sctp_assoc_value instead [ 108.368033][ T5848] Bluetooth: hci4: link tx timeout [ 108.373194][ T5848] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.382575][ T7595] netlink: 'syz.4.495': attribute type 10 has an invalid length. [ 108.423039][ T7595] veth0_vlan: left promiscuous mode [ 108.440557][ T7595] veth0_vlan: entered promiscuous mode [ 108.453446][ T7595] team0: Device veth0_vlan failed to register rx_handler [ 108.473395][ T7595] tipc: Resetting bearer [ 108.482126][ T7604] siw: device registration error -23 [ 109.107214][ T7616] lo speed is unknown, defaulting to 1000 [ 109.525266][ T7635] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.722663][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 110.057861][ T7652] sctp: [Deprecated]: syz.1.515 (pid 7652) Use of int in max_burst socket option. [ 110.057861][ T7652] Use struct sctp_assoc_value instead [ 110.085902][ T7652] netlink: 'syz.1.515': attribute type 10 has an invalid length. [ 110.094063][ T7652] veth0_vlan: left promiscuous mode [ 110.103422][ T7652] veth0_vlan: entered promiscuous mode [ 110.110205][ T7652] veth0_vlan: entered allmulticast mode [ 110.116677][ T7652] team0: Device veth0_vlan failed to register rx_handler [ 110.148090][ T7652] veth0_vlan: left allmulticast mode [ 110.732761][ T7692] __nla_validate_parse: 11 callbacks suppressed [ 110.732780][ T7692] netlink: 256 bytes leftover after parsing attributes in process `syz.1.524'. [ 110.756229][ T7690] 8021q: VLANs not supported on vcan0 [ 110.804401][ T7693] siw: device registration error -23 [ 110.886580][ T7701] dvmrp1: entered allmulticast mode [ 110.976624][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'. [ 111.180753][ T7719] lo speed is unknown, defaulting to 1000 [ 111.371046][ T7731] netlink: 'syz.0.537': attribute type 3 has an invalid length. [ 111.383915][ T7731] netlink: 132 bytes leftover after parsing attributes in process `syz.0.537'. [ 111.468627][ T7733] veth1_to_bridge: entered promiscuous mode [ 111.475100][ T7733] veth1_to_bridge: entered allmulticast mode [ 111.625865][ T7740] xt_hashlimit: size too large, truncated to 1048576 [ 111.740218][ T7747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.542'. [ 111.785532][ T7747] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 111.865370][ T7743] netlink: 16 bytes leftover after parsing attributes in process `syz.3.541'. [ 111.874523][ T7743] netlink: 16 bytes leftover after parsing attributes in process `syz.3.541'. [ 112.098497][ T7771] sctp: [Deprecated]: syz.1.545 (pid 7771) Use of int in max_burst socket option. [ 112.098497][ T7771] Use struct sctp_assoc_value instead [ 112.119291][ T7771] netlink: 'syz.1.545': attribute type 10 has an invalid length. [ 112.127353][ T7771] veth0_vlan: left promiscuous mode [ 112.138034][ T7771] veth0_vlan: entered promiscuous mode [ 112.148118][ T7771] veth0_vlan: entered allmulticast mode [ 112.192796][ T7771] team0: Device veth0_vlan failed to register rx_handler [ 112.235298][ T7771] veth0_vlan: left allmulticast mode [ 112.291740][ T7779] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20002 [ 112.504649][ T7785] macsec1: entered promiscuous mode [ 112.509908][ T7785] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 112.544683][ T7785] macsec1: entered allmulticast mode [ 112.570357][ T7785] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 112.596569][ T7791] netlink: 'syz.2.554': attribute type 29 has an invalid length. [ 112.800711][ T7796] netlink: 'syz.3.556': attribute type 10 has an invalid length. [ 112.831426][ T7796] team0: Port device wlan1 added [ 112.880086][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 112.901201][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 112.984175][ T7802] sctp: [Deprecated]: syz.2.555 (pid 7802) Use of int in max_burst socket option. [ 112.984175][ T7802] Use struct sctp_assoc_value instead [ 113.009261][ T7801] xt_nfacct: accounting object `syz1' does not exists [ 113.021167][ T7802] netlink: 'syz.2.555': attribute type 10 has an invalid length. [ 113.046504][ T7802] veth0_vlan: left promiscuous mode [ 113.062924][ T7802] veth0_vlan: entered promiscuous mode [ 113.081549][ T7802] team0: Device veth0_vlan failed to register rx_handler [ 113.130127][ T7808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.559'. [ 113.246192][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.4.560'. [ 113.428240][ T7819] lo speed is unknown, defaulting to 1000 [ 113.516663][ T7829] Cannot find del_set index 1 as target [ 113.617147][ T7833] netlink: 'syz.3.566': attribute type 29 has an invalid length. [ 113.732282][ T7836] xt_hashlimit: max too large, truncated to 1048576 [ 113.747348][ T7836] No such timeout policy "syz1" [ 113.816049][ T7836] x_tables: duplicate underflow at hook 2 [ 113.821731][ T7840] sctp: [Deprecated]: syz.0.569 (pid 7840) Use of int in max_burst socket option. [ 113.821731][ T7840] Use struct sctp_assoc_value instead [ 113.945019][ T7847] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 114.035822][ T1133] wlan1: Trigger new scan to find an IBSS to join [ 114.792432][ T7871] netlink: 'syz.1.578': attribute type 29 has an invalid length. [ 114.810891][ T7872] netlink: 'syz.4.579': attribute type 1 has an invalid length. [ 114.853208][ T7872] ipvlan0: entered allmulticast mode [ 114.858678][ T7872] veth0_vlan: entered allmulticast mode [ 114.868537][ T7877] netlink: 'syz.4.579': attribute type 8 has an invalid length. [ 115.001443][ T7881] lo speed is unknown, defaulting to 1000 [ 115.127928][ T7893] lo speed is unknown, defaulting to 1000 [ 115.209542][ T7906] netlink: 'syz.1.587': attribute type 1 has an invalid length. [ 115.251650][ T7910] sctp: [Deprecated]: syz.2.586 (pid 7910) Use of int in max_burst socket option. [ 115.251650][ T7910] Use struct sctp_assoc_value instead [ 115.271368][ T7910] netlink: 'syz.2.586': attribute type 10 has an invalid length. [ 115.341565][ T7906] bond3: entered promiscuous mode [ 115.347298][ T7906] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.458758][ T7910] veth0_vlan: left promiscuous mode [ 115.466660][ T7910] veth0_vlan: entered promiscuous mode [ 115.476380][ T7910] team0: Device veth0_vlan failed to register rx_handler [ 115.507732][ T7911] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.536875][ T7911] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 115.579233][ T7911] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 115.606324][ T7911] bond3: (slave ip6gre2): making interface the new active one [ 115.618907][ T7911] ip6gre2: entered promiscuous mode [ 115.635221][ T7911] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 116.227731][ T7940] netlink: 'syz.0.594': attribute type 29 has an invalid length. [ 116.292843][ T7942] xt_hashlimit: max too large, truncated to 1048576 [ 116.300530][ T7942] xt_hashlimit: max too large, truncated to 1048576 [ 116.327623][ T7942] xt_hashlimit: max too large, truncated to 1048576 [ 116.371316][ T7945] __nla_validate_parse: 3 callbacks suppressed [ 116.371332][ T7945] netlink: 60 bytes leftover after parsing attributes in process `syz.2.596'. [ 116.417659][ T7949] netlink: 'syz.1.597': attribute type 3 has an invalid length. [ 116.640180][ T7957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.600'. [ 116.697020][ T7955] lo speed is unknown, defaulting to 1000 [ 116.810360][ T7963] netlink: 44 bytes leftover after parsing attributes in process `syz.2.603'. [ 116.854793][ T7965] ip6gre1: entered promiscuous mode [ 116.963501][ T7969] netlink: 'syz.4.605': attribute type 1 has an invalid length. [ 116.971659][ T7969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.073859][ T62] wlan1: Trigger new scan to find an IBSS to join [ 117.234467][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.611'. [ 117.668827][ T8017] lo speed is unknown, defaulting to 1000 [ 117.746921][ T8027] netlink: 32 bytes leftover after parsing attributes in process `syz.4.625'. [ 117.882789][ T8035] pimreg: entered allmulticast mode [ 118.024920][ T8035] pimreg: left allmulticast mode [ 118.091392][ T8043] openvswitch: netlink: nsh attribute has 65504 unknown bytes. [ 118.114060][ T8043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.944089][ T8082] wireguard0: entered promiscuous mode [ 118.981003][ T8082] wireguard0: entered allmulticast mode [ 119.070915][ T8094] netlink: 16 bytes leftover after parsing attributes in process `syz.0.647'. [ 119.595643][ T8110] bridge_slave_0: left allmulticast mode [ 119.607462][ T8110] bridge_slave_0: left promiscuous mode [ 119.613411][ T8110] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.623447][ T8110] bridge_slave_1: left allmulticast mode [ 119.632670][ T8110] bridge_slave_1: left promiscuous mode [ 119.648917][ T8110] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.667057][ T8110] bond0: (slave bond_slave_0): Releasing backup interface [ 119.703685][ T8110] bond0: (slave bond_slave_1): Releasing backup interface [ 119.741039][ T8110] team0: Port device team_slave_0 removed [ 119.755451][ T8110] team0: Port device team_slave_1 removed [ 119.761615][ T8110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.785840][ T8110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.832222][ T8110] bond3: (slave ip6gre2): Releasing backup interface [ 119.858561][ T8110] ip6gre2: left promiscuous mode [ 119.910578][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.653'. [ 119.995941][ T8117] vlan2: entered allmulticast mode [ 120.035041][ T1133] wlan1: Trigger new scan to find an IBSS to join [ 120.270001][ T8144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.659'. [ 120.284088][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'. [ 120.326171][ T8147] netlink: 'syz.1.661': attribute type 10 has an invalid length. [ 120.338149][ T8147] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 120.354627][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.661'. [ 120.452455][ T8147] bond0: (slave bridge0): Releasing backup interface [ 120.909305][ T8176] netlink: 'syz.2.672': attribute type 22 has an invalid length. [ 120.927217][ T8178] lo speed is unknown, defaulting to 1000 [ 120.934485][ T1133] wlan1: Creating new IBSS network, BSSID 72:13:94:68:07:d7 [ 120.945718][ T8179] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 121.381621][ T8199] raw_sendmsg: syz.0.681 forgot to set AF_INET. Fix it! [ 121.437852][ T8201] netlink: 'syz.1.682': attribute type 1 has an invalid length. [ 121.445805][ T8201] __nla_validate_parse: 1 callbacks suppressed [ 121.445818][ T8201] netlink: 104 bytes leftover after parsing attributes in process `syz.1.682'. [ 121.467941][ T8201] netlink: 'syz.1.682': attribute type 1 has an invalid length. [ 122.863618][ T8222] lo speed is unknown, defaulting to 1000 [ 123.376755][ T8222] syzkaller1: entered promiscuous mode [ 123.382346][ T8222] syzkaller1: entered allmulticast mode [ 123.403322][ T8222] syzkaller1: left promiscuous mode [ 123.408975][ T8222] syzkaller1: left allmulticast mode [ 123.415057][ T8222] 8021q: VLANs not supported on syzkaller1 [ 123.429370][ T8247] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 123.477187][ T8254] netlink: 48 bytes leftover after parsing attributes in process `syz.0.694'. [ 123.503599][ T8252] can: request_module (can-proto-3) failed. [ 124.018730][ T8269] netlink: 148 bytes leftover after parsing attributes in process `syz.3.701'. [ 124.039874][ T8269] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 124.190695][ T8274] lo speed is unknown, defaulting to 1000 [ 124.191126][ T8278] xt_TCPMSS: Only works on TCP SYN packets [ 124.206542][ T8279] sctp: [Deprecated]: syz.2.703 (pid 8279) Use of int in max_burst socket option. [ 124.206542][ T8279] Use struct sctp_assoc_value instead [ 124.207030][ T8276] netlink: 124 bytes leftover after parsing attributes in process `syz.4.704'. [ 124.226633][ T8279] netlink: 'syz.2.703': attribute type 10 has an invalid length. [ 124.265581][ T8279] veth0_vlan: left promiscuous mode [ 124.271860][ T8279] veth0_vlan: entered promiscuous mode [ 124.287946][ T8279] team0: Device veth0_vlan failed to register rx_handler [ 124.337431][ T8283] veth0_to_bond: entered promiscuous mode [ 124.344917][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 124.389332][ T8283] veth0_to_bond (unregistering): left promiscuous mode [ 124.558067][ T8283] bond0: (slave bond_slave_0): Releasing backup interface [ 124.735509][ T8276] lo speed is unknown, defaulting to 1000 [ 125.039315][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 125.125298][ T8306] netlink: 'syz.1.710': attribute type 1 has an invalid length. [ 125.393848][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 125.652930][ T8318] lo speed is unknown, defaulting to 1000 [ 125.661618][ T8313] pim6reg1: entered promiscuous mode [ 125.673804][ T8313] pim6reg1: entered allmulticast mode [ 126.350564][ T8352] sctp: [Deprecated]: syz.3.718 (pid 8352) Use of int in max_burst socket option. [ 126.350564][ T8352] Use struct sctp_assoc_value instead [ 126.390441][ T8352] netlink: 'syz.3.718': attribute type 10 has an invalid length. [ 126.401118][ T8352] veth0_vlan: left promiscuous mode [ 126.424852][ T8352] veth0_vlan: entered promiscuous mode [ 126.443517][ T8352] team0: Device veth0_vlan failed to register rx_handler [ 126.734502][ T8318] lo speed is unknown, defaulting to 1000 [ 126.875660][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.726'. [ 126.875909][ T8321] netlink: 'syz.4.713': attribute type 1 has an invalid length. [ 126.898069][ T8373] lo speed is unknown, defaulting to 1000 [ 126.910008][ T8321] netlink: 228 bytes leftover after parsing attributes in process `syz.4.713'. [ 127.242100][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 127.251547][ T8390] netlink: 'syz.0.729': attribute type 5 has an invalid length. [ 127.289031][ T8389] ªªªªªªo]Uü.ž: renamed from lo [ 127.328521][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 127.703410][ T8411] sctp: [Deprecated]: syz.4.733 (pid 8411) Use of int in max_burst socket option. [ 127.703410][ T8411] Use struct sctp_assoc_value instead [ 127.768389][ T8411] netlink: 'syz.4.733': attribute type 10 has an invalid length. [ 127.824924][ T8411] veth0_vlan: left promiscuous mode [ 127.831665][ T8411] veth0_vlan: entered promiscuous mode [ 127.847615][ T8411] team0: Device veth0_vlan failed to register rx_handler [ 127.864584][ T8411] tipc: Resetting bearer [ 128.463873][ T8440] Cannot find set identified by id 0 to match [ 128.495475][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 128.662862][ T8449] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 128.714434][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.748'. [ 128.774023][ T8454] netlink: 20 bytes leftover after parsing attributes in process `syz.0.748'. [ 128.808548][ T8454] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 128.944376][ T8473] syz.4.754: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 128.948400][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 128.985905][ T8473] CPU: 0 UID: 0 PID: 8473 Comm: syz.4.754 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 128.985930][ T8473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.985941][ T8473] Call Trace: [ 128.985947][ T8473] [ 128.985954][ T8473] dump_stack_lvl+0x241/0x360 [ 128.985981][ T8473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.985999][ T8473] ? __pfx__printk+0x10/0x10 [ 128.986021][ T8473] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 128.986044][ T8473] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 128.986067][ T8473] warn_alloc+0x278/0x410 [ 128.986086][ T8473] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 128.986105][ T8473] ? __pfx_warn_alloc+0x10/0x10 [ 128.986123][ T8473] ? kasan_save_track+0x3f/0x80 [ 128.986145][ T8473] ? __kasan_kmalloc+0x98/0xb0 [ 128.986165][ T8473] ? xsk_setsockopt+0x4aa/0x810 [ 128.986187][ T8473] ? do_sock_setsockopt+0x3af/0x720 [ 128.986202][ T8473] ? __x64_sys_setsockopt+0x1ee/0x280 [ 128.986227][ T8473] ? do_syscall_64+0xf3/0x230 [ 128.986245][ T8473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.986271][ T8473] __vmalloc_node_range_noprof+0x126/0x1380 [ 128.986311][ T8473] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 128.986333][ T8473] ? __kasan_kmalloc+0x98/0xb0 [ 128.986356][ T8473] vmalloc_user_noprof+0x74/0x80 [ 128.986373][ T8473] ? xskq_create+0xb6/0x170 [ 128.986393][ T8473] xskq_create+0xb6/0x170 [ 128.986416][ T8473] xsk_init_queue+0xa1/0x100 [ 128.986440][ T8473] xsk_setsockopt+0x4aa/0x810 [ 128.986463][ T8473] ? __pfx_xsk_setsockopt+0x10/0x10 [ 128.986483][ T8473] ? __pfx_aa_sk_perm+0x10/0x10 [ 128.986506][ T8473] ? aa_sock_opt_perm+0x79/0x120 [ 128.986534][ T8473] ? __pfx_xsk_setsockopt+0x10/0x10 [ 128.986554][ T8473] do_sock_setsockopt+0x3af/0x720 [ 128.986574][ T8473] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 128.986595][ T8473] ? __fget_files+0x395/0x410 [ 128.986616][ T8473] ? __fget_files+0x2a/0x410 [ 128.986643][ T8473] __x64_sys_setsockopt+0x1ee/0x280 [ 128.986666][ T8473] do_syscall_64+0xf3/0x230 [ 128.986685][ T8473] ? clear_bhb_loop+0x35/0x90 [ 128.986709][ T8473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.986728][ T8473] RIP: 0033:0x7f7fbb78d169 [ 128.986744][ T8473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.986757][ T8473] RSP: 002b:00007f7fbc64a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 128.986774][ T8473] RAX: ffffffffffffffda RBX: 00007f7fbb9a5fa0 RCX: 00007f7fbb78d169 [ 128.986786][ T8473] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 128.986795][ T8473] RBP: 00007f7fbb80e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 128.986805][ T8473] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.986814][ T8473] R13: 0000000000000000 R14: 00007f7fbb9a5fa0 R15: 00007ffd06552e28 [ 128.986838][ T8473] [ 128.986845][ T8473] Mem-Info: [ 128.997656][ T8475] netlink: 27 bytes leftover after parsing attributes in process `syz.1.756'. [ 129.120321][ T8487] sctp: [Deprecated]: syz.0.755 (pid 8487) Use of int in max_burst socket option. [ 129.120321][ T8487] Use struct sctp_assoc_value instead [ 129.125100][ T8487] netlink: 'syz.0.755': attribute type 10 has an invalid length. [ 129.134382][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 129.137902][ T8478] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 129.228284][ T8473] active_anon:5719 inactive_anon:0 isolated_anon:0 [ 129.228284][ T8473] active_file:1962 inactive_file:38328 isolated_file:0 [ 129.228284][ T8473] unevictable:768 dirty:226 writeback:0 [ 129.228284][ T8473] slab_reclaimable:10618 slab_unreclaimable:98536 [ 129.228284][ T8473] mapped:29972 shmem:1438 pagetables:811 [ 129.228284][ T8473] sec_pagetables:0 bounce:0 [ 129.228284][ T8473] kernel_misc_reclaimable:0 [ 129.228284][ T8473] free:1339060 free_pcp:582 free_cma:0 [ 129.403898][ T8473] Node 0 active_anon:23076kB inactive_anon:0kB active_file:7848kB inactive_file:153236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124188kB dirty:904kB writeback:0kB shmem:4216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11432kB pagetables:3144kB sec_pagetables:0kB all_unreclaimable? no [ 129.442306][ T8473] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 129.477536][ T8473] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.600218][ T8473] lowmem_reserve[]: 0 2489 2490 0 0 [ 129.632312][ T8473] Node 0 DMA32 free:1437344kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:22732kB inactive_anon:0kB active_file:7848kB inactive_file:152916kB unevictable:1536kB writepending:904kB present:3129332kB managed:2549728kB mlocked:0kB bounce:0kB free_pcp:1932kB local_pcp:1060kB free_cma:0kB [ 129.697855][ T8473] lowmem_reserve[]: 0 0 0 0 0 [ 129.717521][ T1088] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 129.718904][ T8473] Node 0 [ 129.741393][ T8503] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.755783][ T8473] Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.820277][ T8473] lowmem_reserve[]: 0 0 0 0 0 [ 129.835778][ T8473] Node 1 Normal free:3904960kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 129.923869][ T8473] lowmem_reserve[]: 0 0 0 0 0 [ 129.928662][ T8473] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 129.949300][ T8473] Node 0 DMA32: 154*4kB (UME) 551*8kB (UME) 215*16kB (UME) 398*32kB (UME) 301*64kB (UME) 136*128kB (UME) 43*256kB (UM) 25*512kB (UME) 17*1024kB (UME) 10*2048kB (UM) 322*4096kB (UM) = 1438480kB [ 129.981074][ T8473] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 129.995476][ T8473] Node 1 Normal: 242*4kB (UME) 47*8kB (UME) 44*16kB (UME) 220*32kB (UME) 97*64kB (UME) 38*128kB (UME) 17*256kB (UME) 9*512kB (UM) 5*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3904960kB [ 130.014378][ T8473] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.043840][ T8473] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.053494][ T8473] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 130.067858][ T8473] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 130.081311][ T8473] 41779 total pagecache pages [ 130.091282][ T8473] 0 pages in swap cache [ 130.099043][ T8473] Free swap = 124996kB [ 130.103409][ T8473] Total swap = 124996kB [ 130.111128][ T8473] 2097051 pages RAM [ 130.118762][ T8473] 0 pages HighMem/MovableOnly [ 130.123561][ T8473] 427897 pages reserved [ 130.128819][ T8473] 0 pages cma reserved [ 130.156682][ T8515] lo speed is unknown, defaulting to 1000 [ 130.355356][ T8528] netlink: 'syz.3.765': attribute type 3 has an invalid length. [ 130.476808][ T8530] lo speed is unknown, defaulting to 1000 [ 130.746932][ T8551] netlink: 'syz.1.772': attribute type 1 has an invalid length. [ 130.922180][ T8549] lo speed is unknown, defaulting to 1000 [ 131.457011][ T8575] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 131.744973][ T1088] bridge_slave_1: left allmulticast mode [ 131.763148][ T1088] bridge_slave_1: left promiscuous mode [ 131.773771][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.796932][ T1088] bridge_slave_0: left allmulticast mode [ 131.812826][ T1088] bridge_slave_0: left promiscuous mode [ 131.831858][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.849628][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.860554][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.868674][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.883354][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.900262][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 131.909601][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.191493][ T8608] __nla_validate_parse: 7 callbacks suppressed [ 132.191511][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 132.570386][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.582958][ T1088] bond0 (unregistering): Released all slaves [ 132.593253][ T1088] bond1 (unregistering): Released all slaves [ 132.603464][ T8592] netlink: 148 bytes leftover after parsing attributes in process `syz.3.788'. [ 132.612959][ T8592] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 132.868980][ T8608] 8021q: adding VLAN 0 to HW filter on device bond5 [ 132.898322][ T8608] bond0: (slave bond5): Enslaving as an active interface with an up link [ 132.937519][ T1088] tipc: Disabling bearer [ 132.956246][ T1088] tipc: Left network mode [ 132.996621][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.003042][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.113292][ T8588] lo speed is unknown, defaulting to 1000 [ 133.264254][ T8641] ip6tnl1: entered promiscuous mode [ 133.269512][ T8641] ip6tnl1: entered allmulticast mode [ 133.300707][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 133.357064][ T8651] netlink: 52 bytes leftover after parsing attributes in process `syz.2.794'. [ 133.368574][ T1088] hsr_slave_0: left promiscuous mode [ 133.417734][ T1088] hsr_slave_1: left promiscuous mode [ 133.432577][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.485512][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.589816][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'. [ 133.964096][ T5834] Bluetooth: hci2: command tx timeout [ 134.254028][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 134.294398][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 134.495568][ T8710] netlink: 104 bytes leftover after parsing attributes in process `syz.2.804'. [ 134.712230][ T8709] lo speed is unknown, defaulting to 1000 [ 134.869108][ T8588] chnl_net:caif_netlink_parms(): no params data found [ 134.928718][ T8718] lo speed is unknown, defaulting to 1000 [ 135.248307][ T8721] netlink: 'syz.3.807': attribute type 1 has an invalid length. [ 135.326871][ T8588] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.361553][ T8588] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.368981][ T8588] bridge_slave_0: entered allmulticast mode [ 135.376395][ T8588] bridge_slave_0: entered promiscuous mode [ 135.385749][ T8588] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.387708][ T8726] lo speed is unknown, defaulting to 1000 [ 135.397664][ T8588] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.408285][ T8588] bridge_slave_1: entered allmulticast mode [ 135.417463][ T8588] bridge_slave_1: entered promiscuous mode [ 135.442161][ T8733] lo speed is unknown, defaulting to 1000 [ 135.464287][ T8726] lo speed is unknown, defaulting to 1000 [ 135.507898][ T8726] lo speed is unknown, defaulting to 1000 [ 135.553306][ T8588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.646922][ T8726] infiniband syz0: set active [ 135.651956][ T8726] infiniband syz0: added lo [ 135.719864][ T8726] RDS/IB: syz0: added [ 135.739232][ T8726] smc: adding ib device syz0 with port count 1 [ 135.745837][ T8726] smc: ib device syz0 port 1 has pnetid [ 135.750784][ T8588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.789597][ T5914] lo speed is unknown, defaulting to 1000 [ 135.804465][ T5886] lo speed is unknown, defaulting to 1000 [ 135.880710][ T8726] lo speed is unknown, defaulting to 1000 [ 135.921206][ T8588] team0: Port device team_slave_0 added [ 135.958884][ T8588] team0: Port device team_slave_1 added [ 136.012755][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.032548][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.063455][ T5834] Bluetooth: hci2: command tx timeout [ 136.090212][ T8748] netlink: 'syz.3.814': attribute type 10 has an invalid length. [ 136.103355][ T8588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.122188][ T8726] lo speed is unknown, defaulting to 1000 [ 136.129302][ T8748] batman_adv: batadv0: Adding interface: team0 [ 136.154239][ T8749] netlink: 'syz.3.814': attribute type 10 has an invalid length. [ 136.156560][ T8748] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.186468][ T8749] netlink: 2 bytes leftover after parsing attributes in process `syz.3.814'. [ 136.213973][ T8754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.816'. [ 136.222951][ T8748] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 136.281459][ T8588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.291151][ T8588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.328898][ T8588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.347445][ T8749] team0: entered promiscuous mode [ 136.352625][ T8749] team_slave_0: entered promiscuous mode [ 136.363403][ T8749] team_slave_1: entered promiscuous mode [ 136.371679][ T8749] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 136.389923][ T8749] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.400472][ T8757] netlink: 'syz.2.817': attribute type 39 has an invalid length. [ 136.403425][ T8758] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.814'. [ 136.417979][ T8749] batman_adv: batadv0: Interface activated: team0 [ 136.424541][ T8749] batman_adv: batadv0: Interface deactivated: team0 [ 136.431274][ T8749] batman_adv: batadv0: Removing interface: team0 [ 136.440986][ T8749] bridge0: port 3(team0) entered blocking state [ 136.447627][ T8749] bridge0: port 3(team0) entered disabled state [ 136.454400][ T8749] team0: entered allmulticast mode [ 136.459539][ T8749] team_slave_0: entered allmulticast mode [ 136.465475][ T8749] team_slave_1: entered allmulticast mode [ 136.471216][ T8749] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 136.483292][ T8726] lo speed is unknown, defaulting to 1000 [ 136.603212][ T8588] hsr_slave_0: entered promiscuous mode [ 136.622330][ T8588] hsr_slave_1: entered promiscuous mode [ 136.635634][ T8588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.645678][ T8588] Cannot create hsr debugfs directory [ 136.657238][ T8763] lo speed is unknown, defaulting to 1000 [ 136.762063][ T8763] lo speed is unknown, defaulting to 1000 [ 136.933574][ T8726] lo speed is unknown, defaulting to 1000 [ 137.093143][ T8775] xt_recent: Unsupported userspace flags (00000042) [ 137.161424][ T8781] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 137.339270][ T8726] lo speed is unknown, defaulting to 1000 [ 137.350086][ T8588] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 137.370697][ T8588] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 137.397208][ T8588] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 137.444576][ T8588] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 137.499081][ T8794] netlink: 16 bytes leftover after parsing attributes in process `syz.3.828'. [ 137.667441][ T8588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.690578][ T8726] lo speed is unknown, defaulting to 1000 [ 137.708887][ T8588] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.759333][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.766519][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.811727][ T8803] netlink: 148 bytes leftover after parsing attributes in process `syz.2.830'. [ 137.831964][ T8803] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 137.898335][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.906422][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.086365][ T8726] lo speed is unknown, defaulting to 1000 [ 138.114021][ T5834] Bluetooth: hci2: command tx timeout [ 138.476919][ T8588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.624482][ T8726] lo speed is unknown, defaulting to 1000 [ 138.986629][ T8831] lo speed is unknown, defaulting to 1000 [ 138.993709][ T8726] lo speed is unknown, defaulting to 1000 [ 139.101072][ T8588] veth0_vlan: entered promiscuous mode [ 139.147514][ T8588] veth1_vlan: entered promiscuous mode [ 139.224683][ T8588] veth0_macvtap: entered promiscuous mode [ 139.259279][ T8588] veth1_macvtap: entered promiscuous mode [ 139.296155][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.328270][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.356403][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.376399][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.398233][ T8845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.841'. [ 139.402308][ T8588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.490914][ T8588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.518280][ T8588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.535036][ T8588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.593563][ T8588] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.602495][ T8588] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.615116][ T8588] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.626605][ T8588] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.751048][ T8856] netlink: 'syz.1.845': attribute type 10 has an invalid length. [ 139.770548][ T8856] team0: Port device netdevsim0 added [ 139.815601][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.823454][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.912062][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.928220][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.120727][ T29] audit: type=1804 audit(1741374529.883:2): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.847" name="/newroot/178/cgroup.controllers" dev="tmpfs" ino=921 res=1 errno=0 [ 140.199272][ T29] audit: type=1800 audit(1741374529.903:3): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.847" name="cgroup.controllers" dev="tmpfs" ino=921 res=0 errno=0 [ 140.379920][ T8876] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 140.382663][ T8874] lo speed is unknown, defaulting to 1000 [ 140.400319][ T8874] lo speed is unknown, defaulting to 1000 [ 140.442987][ T8877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.859'. [ 140.762686][ T8889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.853'. [ 140.887534][ T8893] lo speed is unknown, defaulting to 1000 [ 140.905319][ T8893] lo speed is unknown, defaulting to 1000 [ 141.005241][ T8895] lo speed is unknown, defaulting to 1000 [ 141.034413][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.860'. [ 141.201562][ T8907] netlink: 68 bytes leftover after parsing attributes in process `syz.2.862'. [ 141.212238][ T8895] lo speed is unknown, defaulting to 1000 [ 141.280900][ T8910] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 141.365844][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.862'. [ 141.388383][ T8910] netlink: 112 bytes leftover after parsing attributes in process `syz.2.862'. [ 141.436262][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.862'. [ 141.779838][ T5839] IPVS: starting estimator thread 0... [ 141.891220][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.894627][ T8933] IPVS: using max 23 ests per chain, 55200 per kthread [ 141.907158][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.917328][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.935615][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.949134][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 141.957952][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 142.072921][ T8936] lo speed is unknown, defaulting to 1000 [ 142.120026][ T8936] lo speed is unknown, defaulting to 1000 [ 142.409324][ T8958] lo speed is unknown, defaulting to 1000 [ 142.456833][ T8958] lo speed is unknown, defaulting to 1000 [ 142.541772][ T8970] sctp: [Deprecated]: syz.0.874 (pid 8970) Use of int in max_burst socket option. [ 142.541772][ T8970] Use struct sctp_assoc_value instead [ 142.630889][ T8936] chnl_net:caif_netlink_parms(): no params data found [ 142.637908][ T8972] sctp: [Deprecated]: syz.3.875 (pid 8972) Use of int in max_burst socket option. [ 142.637908][ T8972] Use struct sctp_assoc_value instead [ 142.650540][ T8970] netlink: 'syz.0.874': attribute type 10 has an invalid length. [ 142.676409][ T8972] netlink: 'syz.3.875': attribute type 10 has an invalid length. [ 142.703211][ T8972] veth0_vlan: left promiscuous mode [ 142.711426][ T8972] veth0_vlan: entered promiscuous mode [ 142.722289][ T8972] team0: Device veth0_vlan failed to register rx_handler [ 142.900333][ T8936] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.912351][ T8936] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.928584][ T8936] bridge_slave_0: entered allmulticast mode [ 142.949955][ T8936] bridge_slave_0: entered promiscuous mode [ 142.984160][ T8981] lo speed is unknown, defaulting to 1000 [ 142.990932][ T8981] lo speed is unknown, defaulting to 1000 [ 142.991618][ T8979] lo speed is unknown, defaulting to 1000 [ 143.003564][ T8936] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.020634][ T8936] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.038008][ T8936] bridge_slave_1: entered allmulticast mode [ 143.055106][ T8936] bridge_slave_1: entered promiscuous mode [ 143.131354][ T8936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.176261][ T8936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.379027][ T8979] lo speed is unknown, defaulting to 1000 [ 143.416124][ T8936] team0: Port device team_slave_0 added [ 143.456072][ T8936] team0: Port device team_slave_1 added [ 143.502093][ T8987] lo speed is unknown, defaulting to 1000 [ 143.519673][ T8990] TCP: TCP_TX_DELAY enabled [ 143.571623][ T8936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.592776][ T8936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.626356][ T8936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.652265][ T8936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.669862][ T8936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.721698][ T8998] netlink: 'syz.1.880': attribute type 8 has an invalid length. [ 143.723802][ T8936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.790799][ T8987] lo speed is unknown, defaulting to 1000 [ 143.907299][ T8936] hsr_slave_0: entered promiscuous mode [ 143.934124][ T8936] hsr_slave_1: entered promiscuous mode [ 143.940221][ T8936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.973834][ T8936] Cannot create hsr debugfs directory [ 144.034145][ T1173] wlan0: Trigger new scan to find an IBSS to join [ 144.034398][ T5834] Bluetooth: hci2: command tx timeout [ 144.051720][ T9010] netlink: 'syz.0.882': attribute type 1 has an invalid length. [ 144.064046][ T9010] __nla_validate_parse: 1 callbacks suppressed [ 144.064062][ T9010] netlink: 224 bytes leftover after parsing attributes in process `syz.0.882'. [ 144.307625][ T9014] netlink: 16 bytes leftover after parsing attributes in process `syz.1.886'. [ 144.630187][ T9025] sctp: [Deprecated]: syz.0.889 (pid 9025) Use of int in max_burst socket option. [ 144.630187][ T9025] Use struct sctp_assoc_value instead [ 144.632429][ T8936] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.691411][ T9025] netlink: 'syz.0.889': attribute type 10 has an invalid length. [ 144.780233][ T8936] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.808017][ T9026] lo speed is unknown, defaulting to 1000 [ 144.834930][ T9026] lo speed is unknown, defaulting to 1000 [ 144.869444][ T8936] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.967313][ T9029] pim6reg1: entered promiscuous mode [ 144.972651][ T9029] pim6reg1: entered allmulticast mode [ 145.042102][ T8936] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.184674][ T9035] netlink: 'syz.2.894': attribute type 11 has an invalid length. [ 145.196940][ T9036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'. [ 145.214209][ T9035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'. [ 145.265210][ T8936] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 145.301982][ T8936] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 145.371875][ T8936] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 145.385249][ T8936] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 145.438686][ T9039] 8021q: VLANs not supported on vcan0 [ 145.566056][ T8936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.592489][ T9046] netlink: 16 bytes leftover after parsing attributes in process `syz.2.900'. [ 145.619118][ T8936] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.641748][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.648944][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.716736][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.723916][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.864319][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.905'. [ 146.113382][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 146.114752][ T5834] Bluetooth: hci2: command tx timeout [ 146.212473][ T9094] sctp: [Deprecated]: syz.3.911 (pid 9094) Use of int in max_burst socket option. [ 146.212473][ T9094] Use struct sctp_assoc_value instead [ 146.218485][ T8936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.265455][ T9094] netlink: 'syz.3.911': attribute type 10 has an invalid length. [ 146.273387][ T9094] veth0_vlan: left promiscuous mode [ 146.357561][ T9094] veth0_vlan: entered promiscuous mode [ 146.409667][ T9104] openvswitch: netlink: Actions may not be safe on all matching packets [ 146.415285][ T9094] team0: Device veth0_vlan failed to register rx_handler [ 146.422672][ T9104] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 146.541765][ T9103] rdma_rxe: rxe_newlink: failed to add lo [ 146.839766][ T9112] lo speed is unknown, defaulting to 1000 [ 146.897760][ T9112] lo speed is unknown, defaulting to 1000 [ 146.949011][ T8936] veth0_vlan: entered promiscuous mode [ 146.980413][ T8936] veth1_vlan: entered promiscuous mode [ 147.064949][ T12] wlan0: Trigger new scan to find an IBSS to join [ 147.142846][ T8936] veth0_macvtap: entered promiscuous mode [ 147.224963][ T8936] veth1_macvtap: entered promiscuous mode [ 147.306494][ T8936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.343413][ T8936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.382019][ T8936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.393566][ T9123] netlink: 'syz.1.919': attribute type 2 has an invalid length. [ 147.424487][ T8936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.454634][ T8936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.502946][ T8936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.524341][ T8936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.596154][ T8936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.616210][ T8936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.629130][ T8936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.644027][ T8936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.667982][ T8936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.681234][ T9123] lo speed is unknown, defaulting to 1000 [ 147.724708][ T9123] lo speed is unknown, defaulting to 1000 [ 147.857400][ T8936] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.867409][ T8936] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.890053][ T8936] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.901562][ T8936] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.950257][ T9111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.915'. [ 148.046368][ T9132] lo speed is unknown, defaulting to 1000 [ 148.072253][ T9111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 148.198453][ T5834] Bluetooth: hci2: command tx timeout [ 149.443830][ T5886] lo speed is unknown, defaulting to 1000 [ 149.458725][ T9132] lo speed is unknown, defaulting to 1000 [ 149.587516][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.623936][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.680807][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.723891][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.033995][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.237573][ T9155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.925'. [ 150.725051][ T9160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.926'. [ 150.764850][ T9163] bond0: entered promiscuous mode [ 150.782064][ T9163] bond_slave_0: entered promiscuous mode [ 150.796925][ T9163] bond_slave_1: entered promiscuous mode [ 150.802719][ T9163] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 150.875159][ T9163] vlan3: entered promiscuous mode [ 151.081383][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.933'. [ 151.268004][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 151.292809][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 151.304855][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 151.312842][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 151.322083][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 151.330683][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 151.336935][ T9187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.937'. [ 151.403023][ T9195] sctp: [Deprecated]: syz.0.935 (pid 9195) Use of int in max_burst socket option. [ 151.403023][ T9195] Use struct sctp_assoc_value instead [ 151.432326][ T9182] lo speed is unknown, defaulting to 1000 [ 151.462893][ T9195] netlink: 'syz.0.935': attribute type 10 has an invalid length. [ 151.489742][ T9182] lo speed is unknown, defaulting to 1000 [ 151.911227][ T9182] chnl_net:caif_netlink_parms(): no params data found [ 152.041423][ T9219] netlink: 16 bytes leftover after parsing attributes in process `syz.2.941'. [ 152.102723][ T9182] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.113703][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.177000][ T9182] bridge_slave_0: entered allmulticast mode [ 152.196049][ T9182] bridge_slave_0: entered promiscuous mode [ 152.225568][ T9182] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.232680][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.248977][ T9182] bridge_slave_1: entered allmulticast mode [ 152.260779][ T9182] bridge_slave_1: entered promiscuous mode [ 152.316016][ T9232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.945'. [ 152.358789][ T9182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.383004][ T9182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.407437][ T9223] lo speed is unknown, defaulting to 1000 [ 152.430892][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.945'. [ 152.469959][ T9223] lo speed is unknown, defaulting to 1000 [ 152.476634][ T9182] team0: Port device team_slave_0 added [ 152.498470][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.944'. [ 152.530879][ T9239] netlink: 56 bytes leftover after parsing attributes in process `syz.0.947'. [ 152.595943][ T9182] team0: Port device team_slave_1 added [ 152.754617][ T9182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.794330][ T9182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.853839][ T9182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.883118][ T9182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.900368][ T9182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.926585][ T9182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.018908][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.953'. [ 153.322677][ T9182] hsr_slave_0: entered promiscuous mode [ 153.332796][ T9182] hsr_slave_1: entered promiscuous mode [ 153.340364][ T9182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.353891][ T9182] Cannot create hsr debugfs directory [ 153.393926][ T5834] Bluetooth: hci2: command tx timeout [ 153.476369][ T1173] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 153.583066][ T9275] openvswitch: netlink: Message has 8 unknown bytes. [ 153.596894][ T9271] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 153.633584][ T9182] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.637205][ T9271] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 153.755547][ T9182] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.788341][ T9283] tipc: Started in network mode [ 153.799415][ T9283] tipc: Node identity ac14142f, cluster identity 4711 [ 153.807597][ T9283] tipc: New replicast peer: 0.0.0.0 [ 153.816736][ T9283] tipc: Enabled bearer , priority 10 [ 153.888620][ T9182] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.930649][ T9293] openvswitch: netlink: Actions may not be safe on all matching packets [ 153.973528][ T9286] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 153.982310][ T9271] lo speed is unknown, defaulting to 1000 [ 154.042126][ T9182] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.086744][ T9271] lo speed is unknown, defaulting to 1000 [ 154.294943][ T9275] bond0: (slave netdevsim0): Releasing backup interface [ 154.314603][ T9275] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 154.436418][ T9182] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.468055][ T9182] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 154.507409][ T9182] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 154.530509][ T9182] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 154.565717][ T9312] ax25_connect(): syz.2.968 uses autobind, please contact jreuter@yaina.de [ 154.727906][ T9182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.765789][ T9182] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.777333][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.784482][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.802199][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.809361][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.936117][ T5842] tipc: Node number set to 2886997039 [ 155.120070][ T9182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.240757][ T9329] lo speed is unknown, defaulting to 1000 [ 155.250631][ T9329] lo speed is unknown, defaulting to 1000 [ 155.348208][ T9332] lo speed is unknown, defaulting to 1000 [ 155.483891][ T5848] Bluetooth: hci2: command tx timeout [ 155.656164][ T9182] veth0_vlan: entered promiscuous mode [ 155.716668][ T9332] lo speed is unknown, defaulting to 1000 [ 155.757089][ T9182] veth1_vlan: entered promiscuous mode [ 155.898094][ T9353] Cannot find del_set index 1 as target [ 156.001243][ T9349] lo speed is unknown, defaulting to 1000 [ 156.052169][ T9182] veth0_macvtap: entered promiscuous mode [ 156.095222][ T9182] veth1_macvtap: entered promiscuous mode [ 156.128763][ T9362] tipc: Started in network mode [ 156.140326][ T9362] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 156.164534][ T9362] tipc: Enabled bearer , priority 10 [ 156.174945][ T9362] __nla_validate_parse: 5 callbacks suppressed [ 156.174962][ T9362] netlink: 14 bytes leftover after parsing attributes in process `syz.0.980'. [ 156.217211][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.239137][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.265121][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.265687][ T9364] xt_cluster: node mask cannot exceed total number of nodes [ 156.283380][ T5842] page_pool_release_retry() stalled pool shutdown: id 29, 2 inflight 60 sec [ 156.283810][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.293780][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.974'. [ 156.333935][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.371605][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.383361][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.394059][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.405374][ T9182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.413425][ T9362] tipc: Resetting bearer [ 156.447961][ T9362] tipc: Disabling bearer [ 156.466620][ T9349] lo speed is unknown, defaulting to 1000 [ 156.508563][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.533987][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.544056][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.573893][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.591231][ T9182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.602423][ T9182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.613359][ T9373] sctp: [Deprecated]: syz.3.983 (pid 9373) Use of int in max_burst socket option. [ 156.613359][ T9373] Use struct sctp_assoc_value instead [ 156.622117][ T9182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.632943][ T9373] netlink: 'syz.3.983': attribute type 10 has an invalid length. [ 156.672392][ T9373] veth0_vlan: left promiscuous mode [ 156.683978][ T9373] veth0_vlan: entered promiscuous mode [ 156.691177][ T9373] team0: Device veth0_vlan failed to register rx_handler [ 156.735189][ T9182] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.751255][ T9182] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.762607][ T9182] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.772079][ T9182] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.963719][ T9378] sctp: [Deprecated]: syz.0.984 (pid 9378) Use of int in max_burst socket option. [ 156.963719][ T9378] Use struct sctp_assoc_value instead [ 157.068166][ T9378] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 157.178449][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.200933][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.280442][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.294024][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.554039][ T5848] Bluetooth: hci2: command 0x040f tx timeout [ 157.655177][ T9395] netlink: 'syz.1.988': attribute type 3 has an invalid length. [ 157.712775][ T9397] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 157.906863][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.994'. [ 157.916034][ T9414] netlink: 'syz.1.994': attribute type 1 has an invalid length. [ 157.983249][ T9421] netlink: 'syz.2.995': attribute type 4 has an invalid length. [ 157.994167][ T9421] netlink: 'syz.2.995': attribute type 8 has an invalid length. [ 158.005758][ T9421] netlink: 236 bytes leftover after parsing attributes in process `syz.2.995'. [ 158.293981][ T9439] bridge_slave_0: invalid flags given to default FDB implementation [ 158.324978][ T9439] bridge_slave_0: invalid flags given to default FDB implementation [ 159.048538][ T9452] netlink: 'syz.2.1004': attribute type 10 has an invalid length. [ 159.071780][ T9452] syzkaller1: entered promiscuous mode [ 159.088231][ T9452] syzkaller1: entered allmulticast mode [ 159.201218][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 159.213140][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 159.233293][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 159.242718][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 159.252858][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 159.260691][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 159.295118][ T9455] lo speed is unknown, defaulting to 1000 [ 159.301853][ T9455] lo speed is unknown, defaulting to 1000 [ 159.372926][ T9458] lo speed is unknown, defaulting to 1000 [ 159.451585][ T9458] lo speed is unknown, defaulting to 1000 [ 159.601328][ T9471] bpq0: entered allmulticast mode [ 159.614530][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'. [ 159.655494][ T9455] chnl_net:caif_netlink_parms(): no params data found [ 159.903613][ T9455] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.922843][ T9455] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.932380][ T9455] bridge_slave_0: entered allmulticast mode [ 159.939920][ T9455] bridge_slave_0: entered promiscuous mode [ 159.958200][ T9455] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.965458][ T9455] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.972675][ T9455] bridge_slave_1: entered allmulticast mode [ 159.979742][ T9455] bridge_slave_1: entered promiscuous mode [ 160.043108][ T9455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.051059][ T9493] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1013'. [ 160.105765][ T9455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.123597][ T9493] lo speed is unknown, defaulting to 1000 [ 160.158128][ T9493] lo speed is unknown, defaulting to 1000 [ 160.158141][ T9492] lo speed is unknown, defaulting to 1000 [ 160.170445][ T9455] team0: Port device team_slave_0 added [ 160.194708][ T9455] team0: Port device team_slave_1 added [ 160.246212][ T9455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.255296][ T9455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.284439][ T9455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.296641][ T9498] netlink: 'syz.1.1015': attribute type 34 has an invalid length. [ 160.400218][ T9492] lo speed is unknown, defaulting to 1000 [ 160.439140][ T9455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.452709][ T9455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.488248][ T9455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.597026][ T9455] hsr_slave_0: entered promiscuous mode [ 160.604243][ T9455] hsr_slave_1: entered promiscuous mode [ 160.610344][ T9455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.618364][ T9455] Cannot create hsr debugfs directory [ 161.237329][ T9521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1023'. [ 161.314128][ T5834] Bluetooth: hci2: command tx timeout [ 161.385611][ T9455] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.421890][ T9521] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1023'. [ 161.548695][ T9455] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.604745][ T9534] ªªªªªªo]Uü.ž: entered allmulticast mode [ 161.655996][ T9455] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.780734][ T9455] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.827891][ T9540] lo speed is unknown, defaulting to 1000 [ 161.838273][ T9540] lo speed is unknown, defaulting to 1000 [ 161.946007][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1030'. [ 162.106669][ T9455] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 162.110788][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1032'. [ 162.135726][ T9546] netlink: 'syz.1.1031': attribute type 2 has an invalid length. [ 162.153977][ T9546] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1031'. [ 162.175159][ T9455] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 162.195623][ T9455] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 162.252741][ T9455] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 162.367764][ T9534] ªªªªªªo]Uü.ž: left allmulticast mode [ 162.585460][ T9455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.669140][ T9455] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.735596][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.742748][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.798801][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.805989][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.857722][ T9581] SET target dimension over the limit! [ 162.885178][ T9575] lo speed is unknown, defaulting to 1000 [ 162.915477][ T9575] lo speed is unknown, defaulting to 1000 [ 163.040191][ T9587] unknown channel width for channel at 909000KHz? [ 163.200980][ T9455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.399786][ T5834] Bluetooth: hci2: command tx timeout [ 163.594137][ T9455] veth0_vlan: entered promiscuous mode [ 163.608972][ T9455] veth1_vlan: entered promiscuous mode [ 163.694298][ T9600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1042'. [ 163.705793][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'. [ 163.717997][ T9455] veth0_macvtap: entered promiscuous mode [ 163.821922][ T9455] veth1_macvtap: entered promiscuous mode [ 163.862168][ T9455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.873513][ T9455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.885298][ T9455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.895911][ T9455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.925003][ T9455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.937500][ T9455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.947587][ T9455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.958183][ T9455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.970257][ T9455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.980998][ T9455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.015126][ T9455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.036473][ T9612] sctp: [Deprecated]: syz.0.1044 (pid 9612) Use of int in max_burst socket option. [ 164.036473][ T9612] Use struct sctp_assoc_value instead [ 164.049024][ T9455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.072942][ T9455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.089042][ T9612] netlink: 'syz.0.1044': attribute type 10 has an invalid length. [ 164.092254][ T9455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.117014][ T9455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.148148][ T9455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.163498][ T9455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.182032][ T9455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.192672][ T9455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.209794][ T9455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.240654][ T9455] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.256145][ T9455] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.265106][ T9455] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.273958][ T9455] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.456851][ T9622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1048'. [ 164.472458][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.488609][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.597620][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.616899][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.842584][ T9639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1051'. [ 165.005256][ T9644] lo speed is unknown, defaulting to 1000 [ 165.012214][ T9644] lo speed is unknown, defaulting to 1000 [ 165.122510][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'. [ 165.283014][ T9656] sctp: [Deprecated]: syz.0.1056 (pid 9656) Use of int in max_burst socket option. [ 165.283014][ T9656] Use struct sctp_assoc_value instead [ 165.349998][ T9656] netlink: 'syz.0.1056': attribute type 10 has an invalid length. [ 165.792332][ T9669] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 165.930764][ T9676] xt_l2tp: v2 sid > 0xffff: 262144 [ 166.744770][ T9682] __nla_validate_parse: 5 callbacks suppressed [ 166.744788][ T9682] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1069'. [ 166.868191][ T9682] Bluetooth: MGMT ver 1.23 [ 167.170024][ T9711] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1072'. [ 167.175752][ T9712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1075'. [ 167.194056][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1072'. [ 167.210363][ T9711] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1072'. [ 167.232144][ T9711] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1072'. [ 167.259310][ T9714] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1074'. [ 167.281291][ T9714] netlink: 'syz.3.1074': attribute type 1 has an invalid length. [ 167.340669][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.354892][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.360654][ T9721] netlink: 'syz.1.1077': attribute type 3 has an invalid length. [ 167.386201][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.388787][ T9721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1077'. [ 167.434644][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.442316][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.455022][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 167.496361][ T9729] sctp: [Deprecated]: syz.3.1078 (pid 9729) Use of int in max_burst socket option deprecated. [ 167.496361][ T9729] Use struct sctp_assoc_value instead [ 167.546036][ T9718] lo speed is unknown, defaulting to 1000 [ 167.553130][ T9718] lo speed is unknown, defaulting to 1000 [ 167.620060][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1078'. [ 167.649510][ T9732] lo speed is unknown, defaulting to 1000 [ 167.662246][ T9734] netlink: 'syz.2.1081': attribute type 2 has an invalid length. [ 167.747214][ T9732] lo speed is unknown, defaulting to 1000 [ 167.752966][ T9740] netlink: 'syz.0.1082': attribute type 61 has an invalid length. [ 167.752986][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 168.325402][ T9718] chnl_net:caif_netlink_parms(): no params data found [ 168.557782][ T9770] sctp: [Deprecated]: syz.3.1087 (pid 9770) Use of int in max_burst socket option. [ 168.557782][ T9770] Use struct sctp_assoc_value instead [ 168.577736][ T9770] netlink: 'syz.3.1087': attribute type 10 has an invalid length. [ 168.597167][ T9770] veth0_vlan: left promiscuous mode [ 168.614060][ T9770] veth0_vlan: entered promiscuous mode [ 168.621515][ T9770] team0: Device veth0_vlan failed to register rx_handler [ 168.684719][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.708037][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.729275][ T9718] bridge_slave_0: entered allmulticast mode [ 168.754668][ T9718] bridge_slave_0: entered promiscuous mode [ 168.778807][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.813155][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.837954][ T9718] bridge_slave_1: entered allmulticast mode [ 168.864456][ T9718] bridge_slave_1: entered promiscuous mode [ 168.968096][ T9718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.012034][ T9718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.099878][ T9718] team0: Port device team_slave_0 added [ 169.119015][ T9718] team0: Port device team_slave_1 added [ 169.188767][ T9787] xt_TCPMSS: Only works on TCP SYN packets [ 169.190232][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.202988][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.231886][ T9718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.287836][ T9718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.295031][ T9718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.321194][ T9718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.396659][ T9718] hsr_slave_0: entered promiscuous mode [ 169.410218][ T9718] hsr_slave_1: entered promiscuous mode [ 169.417393][ T9718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.425134][ T9718] Cannot create hsr debugfs directory [ 169.433227][ T9792] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 169.553951][ T5848] Bluetooth: hci2: command tx timeout [ 169.671617][ T9718] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.774784][ T9718] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.908883][ T9718] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.937379][ T9809] tipc: Started in network mode [ 169.951000][ T9809] tipc: Node identity 92d9a554b775, cluster identity 4711 [ 169.984092][ T9809] tipc: Enabled bearer , priority 10 [ 169.994868][ T9809] netlink: 'syz.1.1102': attribute type 10 has an invalid length. [ 170.026372][ T9718] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.072166][ T9809] bond0: entered promiscuous mode [ 170.081335][ T9809] bond5: entered promiscuous mode [ 170.098631][ T9809] bond0: entered allmulticast mode [ 170.111272][ T9809] bond5: entered allmulticast mode [ 170.126737][ T9809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.135050][ T9809] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 170.227712][ T9830] sctp: [Deprecated]: syz.0.1106 (pid 9830) Use of int in max_burst socket option. [ 170.227712][ T9830] Use struct sctp_assoc_value instead [ 170.309337][ T9830] netlink: 'syz.0.1106': attribute type 10 has an invalid length. [ 170.386919][ T9835] netlink: 'syz.1.1109': attribute type 10 has an invalid length. [ 170.393479][ T9718] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.422720][ T9835] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.448456][ T9835] team0: entered promiscuous mode [ 170.460234][ T9835] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 170.473266][ T9835] team0: entered allmulticast mode [ 170.490973][ T9835] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:562 [ 170.512225][ T9835] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 9835, name: syz.1.1109 [ 170.535820][ T9835] preempt_count: 0, expected: 0 [ 170.540821][ T9835] RCU nest depth: 1, expected: 0 [ 170.557414][ T9835] 2 locks held by syz.1.1109/9835: [ 170.563134][ T9835] #0: ffffffff8fed6848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 170.572713][ T9835] #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 170.583936][ T9835] CPU: 1 UID: 0 PID: 9835 Comm: syz.1.1109 Not tainted 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 170.583960][ T9835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.583971][ T9835] Call Trace: [ 170.583978][ T9835] [ 170.583986][ T9835] dump_stack_lvl+0x241/0x360 [ 170.584013][ T9835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.584032][ T9835] ? __pfx__printk+0x10/0x10 [ 170.584062][ T9835] __might_resched+0x5d4/0x780 [ 170.584081][ T9835] ? __wake_up_klogd+0xd5/0x110 [ 170.584110][ T9835] ? __wake_up_klogd+0x1c/0x110 [ 170.584131][ T9835] ? __pfx___might_resched+0x10/0x10 [ 170.584155][ T9835] ? __lock_acquire+0x1397/0x2100 [ 170.584185][ T9835] __mutex_lock+0x126/0x1010 [ 170.584215][ T9835] ? dev_set_allmulti+0x11c/0x270 [ 170.584241][ T9835] ? __pfx___mutex_lock+0x10/0x10 [ 170.584261][ T9835] ? __pfx_lock_acquire+0x10/0x10 [ 170.584286][ T9835] ? netdev_info+0x122/0x170 [ 170.584307][ T9835] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 170.584330][ T9835] ? netif_set_allmulti+0x1a2/0x380 [ 170.584353][ T9835] dev_set_allmulti+0x11c/0x270 [ 170.584375][ T9835] team_change_rx_flags+0x1a8/0x330 [ 170.584394][ T9835] ? team_change_rx_flags+0x29/0x330 [ 170.584415][ T9835] ? __pfx_team_change_rx_flags+0x10/0x10 [ 170.584435][ T9835] netif_set_allmulti+0x20e/0x380 [ 170.584468][ T9835] dev_set_allmulti+0x143/0x270 [ 170.584498][ T9835] bond_enslave+0x2ace/0x3910 [ 170.584564][ T9835] ? __pfx_bond_enslave+0x10/0x10 [ 170.584604][ T9835] ? __pfx___dev_change_flags+0x10/0x10 [ 170.584617][ T9835] ? validate_linkmsg+0x828/0xa40 [ 170.584639][ T9835] ? mutex_is_locked+0x17/0x50 [ 170.584658][ T9835] do_set_master+0x579/0x730 [ 170.584689][ T9835] do_setlink+0xfee/0x40f0 [ 170.584729][ T9835] ? mark_lock+0x9a/0x360 [ 170.584749][ T9835] ? __pfx_do_setlink+0x10/0x10 [ 170.584771][ T9835] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 170.584796][ T9835] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.584822][ T9835] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 170.584837][ T9835] ? lockdep_hardirqs_on+0x99/0x150 [ 170.584856][ T9835] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 170.584873][ T9835] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 170.584895][ T9835] ? rcu_is_watching+0x15/0xb0 [ 170.584917][ T9835] ? __mutex_lock+0xba3/0x1010 [ 170.584937][ T9835] ? __mutex_lock+0x602/0x1010 [ 170.584961][ T9835] ? rtnl_newlink+0xc4c/0x1d90 [ 170.584983][ T9835] ? __pfx___mutex_lock+0x10/0x10 [ 170.585010][ T9835] ? ns_capable+0x8a/0xf0 [ 170.585028][ T9835] ? rtnl_link_get_net_capable+0x168/0x340 [ 170.585053][ T9835] rtnl_newlink+0x15a6/0x1d90 [ 170.585088][ T9835] ? __pfx_rtnl_newlink+0x10/0x10 [ 170.585110][ T9835] ? __pfx_validate_chain+0x10/0x10 [ 170.585147][ T9835] ? validate_chain+0x11e/0x5920 [ 170.585164][ T9835] ? __pfx_lock_acquire+0x10/0x10 [ 170.585186][ T9835] ? __pfx_lock_release+0x10/0x10 [ 170.585211][ T9835] ? __pfx_validate_chain+0x10/0x10 [ 170.585227][ T9835] ? mark_lock+0x9a/0x360 [ 170.585245][ T9835] ? __lock_acquire+0x1397/0x2100 [ 170.585291][ T9835] ? __pfx_lock_release+0x10/0x10 [ 170.585327][ T9835] ? __pfx_rtnl_newlink+0x10/0x10 [ 170.585349][ T9835] rtnetlink_rcv_msg+0x791/0xcf0 [ 170.585368][ T9835] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 170.585390][ T9835] ? __lock_acquire+0x1397/0x2100 [ 170.585414][ T9835] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.585450][ T9835] netlink_rcv_skb+0x206/0x480 [ 170.585472][ T9835] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.585494][ T9835] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.585545][ T9835] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.585569][ T9835] netlink_unicast+0x7f6/0x990 [ 170.585597][ T9835] ? __pfx_netlink_unicast+0x10/0x10 [ 170.585614][ T9835] ? __virt_addr_valid+0x45f/0x530 [ 170.585630][ T9835] ? __phys_addr_symbol+0x2f/0x70 [ 170.585645][ T9835] ? __check_object_size+0x47a/0x730 [ 170.585671][ T9835] netlink_sendmsg+0x8de/0xcb0 [ 170.585702][ T9835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.585727][ T9835] ? aa_sock_msg_perm+0x91/0x160 [ 170.585754][ T9835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.585772][ T9835] __sock_sendmsg+0x221/0x270 [ 170.585794][ T9835] ____sys_sendmsg+0x53a/0x860 [ 170.585819][ T9835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.585835][ T9835] ? __fget_files+0x2a/0x410 [ 170.585860][ T9835] ? __fget_files+0x2a/0x410 [ 170.585890][ T9835] __sys_sendmsg+0x269/0x350 [ 170.585907][ T9835] ? __pfx_futex_wake+0x10/0x10 [ 170.585932][ T9835] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.585990][ T9835] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.586014][ T9835] ? do_syscall_64+0x100/0x230 [ 170.586036][ T9835] ? do_syscall_64+0xb6/0x230 [ 170.586056][ T9835] do_syscall_64+0xf3/0x230 [ 170.586074][ T9835] ? clear_bhb_loop+0x35/0x90 [ 170.586097][ T9835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.586116][ T9835] RIP: 0033:0x7f35ca18d169 [ 170.586131][ T9835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.586145][ T9835] RSP: 002b:00007f35cafb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.586161][ T9835] RAX: ffffffffffffffda RBX: 00007f35ca3a5fa0 RCX: 00007f35ca18d169 [ 170.586173][ T9835] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 0000000000000006 [ 170.586183][ T9835] RBP: 00007f35ca20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 170.586193][ T9835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.586203][ T9835] R13: 0000000000000000 R14: 00007f35ca3a5fa0 R15: 00007fffae225aa8 [ 170.586231][ T9835] [ 170.586311][ T9835] [ 171.117908][ T9835] ============================= [ 171.122739][ T9835] [ BUG: Invalid wait context ] [ 171.127573][ T9835] 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 Tainted: G W [ 171.136137][ T9835] ----------------------------- [ 171.140962][ T9835] syz.1.1109/9835 is trying to lock: [ 171.146228][ T9835] ffff88805a9a8d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_allmulti+0x11c/0x270 [ 171.155101][ T9835] other info that might help us debug this: [ 171.160968][ T9835] context-{5:5} [ 171.164408][ T9835] 2 locks held by syz.1.1109/9835: [ 171.169498][ T9835] #0: ffffffff8fed6848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 171.178540][ T9835] #1: ffffffff8eb392e0 (rcu_read_lock){....}-{1:3}, at: team_change_rx_flags+0x29/0x330 [ 171.188364][ T9835] stack backtrace: [ 171.192065][ T9835] CPU: 1 UID: 0 PID: 9835 Comm: syz.1.1109 Tainted: G W 6.14.0-rc5-syzkaller-01096-g865eddcf0afb #0 [ 171.192084][ T9835] Tainted: [W]=WARN [ 171.192088][ T9835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.192097][ T9835] Call Trace: [ 171.192102][ T9835] [ 171.192108][ T9835] dump_stack_lvl+0x241/0x360 [ 171.192126][ T9835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.192139][ T9835] ? __pfx__printk+0x10/0x10 [ 171.192155][ T9835] __lock_acquire+0x15a8/0x2100 [ 171.192178][ T9835] lock_acquire+0x1ed/0x550 [ 171.192194][ T9835] ? dev_set_allmulti+0x11c/0x270 [ 171.192215][ T9835] ? __pfx_lock_acquire+0x10/0x10 [ 171.192231][ T9835] ? __wake_up_klogd+0x1c/0x110 [ 171.192247][ T9835] ? __pfx___might_resched+0x10/0x10 [ 171.192264][ T9835] ? __lock_acquire+0x1397/0x2100 [ 171.192283][ T9835] __mutex_lock+0x19c/0x1010 [ 171.192299][ T9835] ? dev_set_allmulti+0x11c/0x270 [ 171.192319][ T9835] ? dev_set_allmulti+0x11c/0x270 [ 171.192337][ T9835] ? __pfx___mutex_lock+0x10/0x10 [ 171.192351][ T9835] ? __pfx_lock_acquire+0x10/0x10 [ 171.192368][ T9835] ? netdev_info+0x122/0x170 [ 171.192380][ T9835] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 171.192397][ T9835] ? netif_set_allmulti+0x1a2/0x380 [ 171.192417][ T9835] dev_set_allmulti+0x11c/0x270 [ 171.192437][ T9835] team_change_rx_flags+0x1a8/0x330 [ 171.192457][ T9835] ? team_change_rx_flags+0x29/0x330 [ 171.192471][ T9835] ? __pfx_team_change_rx_flags+0x10/0x10 [ 171.192486][ T9835] netif_set_allmulti+0x20e/0x380 [ 171.192505][ T9835] dev_set_allmulti+0x143/0x270 [ 171.192524][ T9835] bond_enslave+0x2ace/0x3910 [ 171.192552][ T9835] ? __pfx_bond_enslave+0x10/0x10 [ 171.192576][ T9835] ? __pfx___dev_change_flags+0x10/0x10 [ 171.192587][ T9835] ? validate_linkmsg+0x828/0xa40 [ 171.192603][ T9835] ? mutex_is_locked+0x17/0x50 [ 171.192616][ T9835] do_set_master+0x579/0x730 [ 171.192637][ T9835] do_setlink+0xfee/0x40f0 [ 171.192659][ T9835] ? mark_lock+0x9a/0x360 [ 171.192672][ T9835] ? __pfx_do_setlink+0x10/0x10 [ 171.192693][ T9835] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 171.192711][ T9835] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.192729][ T9835] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 171.192742][ T9835] ? lockdep_hardirqs_on+0x99/0x150 [ 171.192756][ T9835] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 171.192768][ T9835] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 171.192782][ T9835] ? rcu_is_watching+0x15/0xb0 [ 171.192797][ T9835] ? __mutex_lock+0xba3/0x1010 [ 171.192811][ T9835] ? __mutex_lock+0x602/0x1010 [ 171.192826][ T9835] ? rtnl_newlink+0xc4c/0x1d90 [ 171.192842][ T9835] ? __pfx___mutex_lock+0x10/0x10 [ 171.192859][ T9835] ? ns_capable+0x8a/0xf0 [ 171.192873][ T9835] ? rtnl_link_get_net_capable+0x168/0x340 [ 171.192892][ T9835] rtnl_newlink+0x15a6/0x1d90 [ 171.192913][ T9835] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.192929][ T9835] ? __pfx_validate_chain+0x10/0x10 [ 171.192948][ T9835] ? validate_chain+0x11e/0x5920 [ 171.192961][ T9835] ? __pfx_lock_acquire+0x10/0x10 [ 171.192978][ T9835] ? __pfx_lock_release+0x10/0x10 [ 171.192996][ T9835] ? __pfx_validate_chain+0x10/0x10 [ 171.193009][ T9835] ? mark_lock+0x9a/0x360 [ 171.193022][ T9835] ? __lock_acquire+0x1397/0x2100 [ 171.193048][ T9835] ? __pfx_lock_release+0x10/0x10 [ 171.193069][ T9835] ? __pfx_rtnl_newlink+0x10/0x10 [ 171.193085][ T9835] rtnetlink_rcv_msg+0x791/0xcf0 [ 171.193101][ T9835] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 171.193117][ T9835] ? __lock_acquire+0x1397/0x2100 [ 171.193134][ T9835] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.193155][ T9835] netlink_rcv_skb+0x206/0x480 [ 171.193172][ T9835] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.193188][ T9835] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.193210][ T9835] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.193227][ T9835] netlink_unicast+0x7f6/0x990 [ 171.193244][ T9835] ? __pfx_netlink_unicast+0x10/0x10 [ 171.193257][ T9835] ? __virt_addr_valid+0x45f/0x530 [ 171.193270][ T9835] ? __phys_addr_symbol+0x2f/0x70 [ 171.193281][ T9835] ? __check_object_size+0x47a/0x730 [ 171.193299][ T9835] netlink_sendmsg+0x8de/0xcb0 [ 171.193319][ T9835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.193336][ T9835] ? aa_sock_msg_perm+0x91/0x160 [ 171.193356][ T9835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.193371][ T9835] __sock_sendmsg+0x221/0x270 [ 171.193389][ T9835] ____sys_sendmsg+0x53a/0x860 [ 171.193404][ T9835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.193416][ T9835] ? __fget_files+0x2a/0x410 [ 171.193434][ T9835] ? __fget_files+0x2a/0x410 [ 171.193453][ T9835] __sys_sendmsg+0x269/0x350 [ 171.193465][ T9835] ? __pfx_futex_wake+0x10/0x10 [ 171.193484][ T9835] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.193511][ T9835] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.193528][ T9835] ? do_syscall_64+0x100/0x230 [ 171.193543][ T9835] ? do_syscall_64+0xb6/0x230 [ 171.193558][ T9835] do_syscall_64+0xf3/0x230 [ 171.193572][ T9835] ? clear_bhb_loop+0x35/0x90 [ 171.193589][ T9835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.193606][ T9835] RIP: 0033:0x7f35ca18d169 [ 171.193619][ T9835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.193631][ T9835] RSP: 002b:00007f35cafb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.193644][ T9835] RAX: ffffffffffffffda RBX: 00007f35ca3a5fa0 RCX: 00007f35ca18d169 [ 171.193653][ T9835] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 0000000000000006 [ 171.193662][ T9835] RBP: 00007f35ca20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.193670][ T9835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.193683][ T9835] R13: 0000000000000000 R14: 00007f35ca3a5fa0 R15: 00007fffae225aa8 [ 171.193698][ T9835] [ 171.196437][ T5886] tipc: Node number set to 632071508 [ 171.243249][ T9835] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 171.643877][ T5848] Bluetooth: hci2: command tx timeout [ 171.651916][ T9835] bond0: (slave team0): Enslaving as an active interface with an up link [ 171.778673][ T9718] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.787280][ T9718] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.802105][ T9718] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.810620][ T9842] syzkaller1: entered promiscuous mode [ 171.819379][ T9842] syzkaller1: entered allmulticast mode [ 171.889869][ T9718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.905772][ T9718] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.926369][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.933448][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.956382][ T9838] infiniband syz1: set down [ 171.960942][ T9838] infiniband syz1: added team_slave_0 [ 171.967690][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.974784][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.982679][ T9838] syz1: rxe_create_cq: returned err = -12 [ 171.988776][ T9838] infiniband syz1: Couldn't create ib_mad CQ [ 171.997897][ T9838] infiniband syz1: Couldn't open port 1 [ 172.018620][ T9838] RDS/IB: syz1: added [ 172.022993][ T9838] smc: adding ib device syz1 with port count 1 [ 172.031793][ T9838] smc: ib device syz1 port 1 has pnetid [ 172.110195][ T9718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.260881][ T9718] veth0_vlan: entered promiscuous mode [ 172.277683][ T9718] veth1_vlan: entered promiscuous mode [ 172.300788][ T9718] veth0_macvtap: entered promiscuous mode [ 172.309998][ T9718] veth1_macvtap: entered promiscuous mode [ 172.330408][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.341411][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.351337][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.362519][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.372393][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.382907][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.392841][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.403273][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.413290][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.423747][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.436566][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.447249][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.458211][ T9718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.470328][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.484470][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.497547][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.508559][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.521208][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.532468][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.542417][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.553468][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.563601][ T9718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.574238][ T9718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.585499][ T9718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.598375][ T9718] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.607167][ T9718] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.617423][ T9718] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.626349][ T9718] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.671715][ T9718] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 172.697960][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.707774][ T9718] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 172.715704][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.743406][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.751658][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.077122][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)