last executing test programs: 1m20.629570094s ago: executing program 3 (id=1323): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000080)={0x0, 0x0, 0xffefffffffffffff, 0xeffe}) 1m11.111886038s ago: executing program 3 (id=1323): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000080)={0x0, 0x0, 0xffefffffffffffff, 0xeffe}) 57.709124201s ago: executing program 3 (id=1323): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000080)={0x0, 0x0, 0xffefffffffffffff, 0xeffe}) 43.681694901s ago: executing program 3 (id=1323): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000080)={0x0, 0x0, 0xffefffffffffffff, 0xeffe}) 30.18224742s ago: executing program 3 (id=1323): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000080)={0x0, 0x0, 0xffefffffffffffff, 0xeffe}) 21.927342675s ago: executing program 1 (id=1939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x960, 0x8, 0x3be, 0x345, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0xd, 0x4}, 0x8e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140)=r0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100)={'#! ', './file0'}, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r2, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x10e, 0x9, 0x0, 0x20000000) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r7}, 0x9) setsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000340)={@empty, @broadcast}, 0x8) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000200)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r9, 0x0) 21.820253099s ago: executing program 1 (id=1940): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0xf000000, 0x700, 0x0, 0x0) 21.696645278s ago: executing program 1 (id=1941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xf0000000}, 0x4c810) sendto$ax25(r3, &(0x7f0000000200)="16", 0x1, 0x0, 0x0, 0x0) shutdown(r3, 0x1) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x3a}]}}}}}}}}, 0x0) 18.405175365s ago: executing program 2 (id=1957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0}, 0x50) 18.347674308s ago: executing program 2 (id=1958): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r3}, 0x10) write$cgroup_pid(r0, &(0x7f0000000000), 0x2a979d) (async) ioctl$SIOCSIFHWADDR(r0, 0x401c5820, &(0x7f0000000080)={'macvlan1\x00', @broadcast}) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) r6 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x27, &(0x7f0000000880)=ANY=[@ANYBLOB="18181100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000184700000400000000000000000000001855000007000000000000000000000005f50000050000001837000005000000000000000000000018320000020000000000000000000000dd28f8ff1b0000008520000001000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b702000001000000850000008a059554b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x19d, 0x6a, &(0x7f00000009c0)=""/106, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x4, 0x0, 0x3, 0xfffffff7}, 0x10, 0x0, r4, 0x5, 0x0, &(0x7f0000000b00)=[{0x3, 0x2, 0xd, 0x3}, {0x4, 0x5, 0x8}, {0x5, 0x4, 0xa, 0xb}, {0x5, 0x2, 0xa, 0x1}, {0x2, 0x0, 0xa, 0x1}], 0x10, 0x20000000}, 0x90) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000c40)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003001d02b25bda7c141290ca162846b09e1000000200000000001b83f8f341a4724e1c010e000000000000090000000000000034faf2690c27"], &(0x7f0000000440)=""/248, 0x37, 0xf8, 0x1, 0x502}, 0x20) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xab, &(0x7f0000000680)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x67, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) (async, rerun: 64) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={0x1, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x13, 0x38, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000182c0000", @ANYRES32, @ANYBLOB="000000007f0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000060000003594e0ff100000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000b7080000000000007b8af8ff00000000b7080000cec800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x3e, &(0x7f00000000c0)=""/62, 0x40f00, 0x68, '\x00', 0x0, 0x8, r7, 0x8, &(0x7f0000000580)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x4, &(0x7f00000009c0)=[r9, r10, r11], &(0x7f0000000a00)=[{0x3, 0x2, 0x2, 0x8}, {0x4, 0x2, 0x0, 0x4}, {0x4, 0x5, 0x8, 0x2}, {0x1, 0x4, 0x4, 0x2}], 0x10, 0xf0}, 0x90) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000c000000005f5f612e5f61c9615f610002d9c078be0135481f6243ac723561372dcb82d3f8accbd06bd60a45ec078fa747406dcde590673f5c8cf4070ea07d7f63a30eb80230ff5b630fb1871af3e84b17c8e872e2da0d2e1cb585e21993962f57240e6901f8bc7c18"], &(0x7f0000000e80)=""/78, 0x24, 0x4e, 0x4, 0x4ceff6ba}, 0x20) (rerun: 32) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r12, r12]}, 0x90) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000400)={0x4, &(0x7f0000000180)=[{0x8, 0x7, 0x0, 0xb0}, {0x800, 0x6, 0x1, 0xffffffff}, {0x3, 0x80, 0x20, 0x6}, {0x1, 0x0, 0x81, 0x4}]}, 0x10) (rerun: 32) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2}, 0x27) 18.163287032s ago: executing program 2 (id=1959): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d640500000000006504040001000101240400000d000000b7030000010000006a0a00fe000000008500000032000000b70000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000004000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, &(0x7f00000007c0)) 17.761133096s ago: executing program 2 (id=1964): unshare(0x24020400) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$kcm(0x29, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001400)={0xffffffffffffffff, 0xe0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001140), &(0x7f00000011c0)=[0x0], 0x0, 0x25, &(0x7f0000001d00)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000001240), &(0x7f0000001280), 0x8, 0x8b, 0x8, 0x8, &(0x7f00000012c0)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001640)={&(0x7f0000001440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x7, [@typedef={0x9, 0x0, 0x0, 0x8, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x80}}, @union={0x4, 0x5, 0x0, 0x5, 0x1, 0x4, [{0x6, 0x1, 0x1}, {0x3, 0x5, 0x1}, {0x9, 0x2}, {0x9, 0x5}, {0x4, 0x1, 0x4}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x68, 0x0, 0x62}, @union={0xe, 0x3, 0x0, 0x5, 0x1, 0x401, [{0x2}, {0x1, 0x4, 0x4}, {0x3, 0x1, 0x15c}]}, @restrict={0x1, 0x0, 0x0, 0xb, 0x2}, @fwd={0x7}]}, {0x0, [0x51, 0x61, 0x0, 0x61, 0x0]}}, &(0x7f0000001540)=""/199, 0xe3, 0xc7, 0x0, 0x9}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000000000000000000d0a000000000000000100020604000000020000000000000000005f00"], &(0x7f0000000f40)=""/4089, 0x3c, 0xff9, 0x8}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a00)={0x6, 0x1c, &(0x7f0000001f40)=ANY=[@ANYBLOB="180000003f000000000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014a479588e2ecf9d16866d8f000000b7030000000000008500000083000000bf090000000000005509010000000000950000000085100000f8ffffff85000000470000008520000003000000185500000d0000000000000000000000181200007ce8fdb0020e7c573954aa74447bc1546abd7361a3641d227b1263c0fa8fabf6d4ee277f4db9c7120da63a68a671719d13fadea41522054fa07b8257735310b4fc4761414f", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000600000000000000ffff00009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001800)='GPL\x00', 0x3, 0x8a, &(0x7f0000001840)=""/138, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001940)={0x2, 0x3, 0x401, 0x8000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001980)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000200)=[{0x5, 0x1}], 0x10, 0x39}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@bloom_filter={0x1e, 0x5, 0x1, 0x8, 0x2800, 0x1, 0x8000, '\x00', r0, r1, 0x5, 0x4, 0x5, 0x4}, 0xfffffffffffffead) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001bc0)={{}, &(0x7f0000001b40), &(0x7f0000001b80)='%pi6 \x00'}, 0x20) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003080)=@bpf_lsm={0x5, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000e61d76ff3a3b9fa9f4e10c00"], &(0x7f0000002ec0)='syzkaller\x00'}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r3, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f40)={{r4}, &(0x7f0000000ec0), &(0x7f0000000f00)=r2}, 0x20) r5 = socket(0x11, 0x800000003, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89fd, &(0x7f0000000980)={'ipvlan1\x00', 0x1}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r7) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r8, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffc0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendto$unix(r10, &(0x7f0000000000)="2effb9f9f333f80da6875f82cbfecd836bf06c34a02ec9200c561d06d75663db10533f55c2d37a07fd200d01dee0a3636ad9999fdeb09cb7667c9fd3e39946ae399d8923997a76450935b236228b86ccb0eb3625e7158229f874f72a9233fad75f5640e0e7f4ce0ba9fa7fb235d6ce07e44b04a2db34d78e", 0x78, 0x0, 0x0, 0x0) 17.621443914s ago: executing program 2 (id=1966): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) 16.781439483s ago: executing program 0 (id=1970): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, r2}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x0, r2}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)={@remote, @rand_addr=0x64010100, 0x0, 0x1, [@private=0xa010101]}, 0x14) 16.773629272s ago: executing program 2 (id=1971): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @multicast1}}}) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000905000000002900000008004300ff030000a90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004000000000000bf852c8986626691b01b5f44e4ce28712d2828"], 0xe0}], 0x1}, 0x0) 16.531741654s ago: executing program 0 (id=1973): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffda6}, 0x1a) socketpair(0x15, 0x6, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) close(r0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00'}, 0x90) 16.314308589s ago: executing program 0 (id=1976): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x3c, 0x0, 0x2000000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0xb00, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0xf0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 15.929583278s ago: executing program 0 (id=1978): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8f0ff00190081084e81f783db4cb9040a07290006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 15.855299473s ago: executing program 0 (id=1979): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000500)="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") r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xe, 0x1, '!+-#.&-%*\x00'}]}, 0x24}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) unshare(0x62040200) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280100000206000000000000000000000000000011000300686173683a69702c706f7274000000000900020073797a320000000011000300686173683a69702c6d61726b00000000740007800800084000000000050014000000000008001340000000000800124000000000180002801400024000000000000000000000ffff7f000001180002801400024000000000000000000000000000000000080008400000000008000840000000000600054000000000080009400000000005000500000000000900020073797a30000000003c000780080006400000000008000a40000000001800018014000240fe800000000000000000000000000000080006400000000008001340000000001c000780050014000000000008000b40ffffff110500140000000000f80f1fff12caf647a974c2a24b418229bd32a8aad3dba81d974f034042834c7165c36a19cc34eb9e6ca3cea3fdc5bb25e6603d4197e17c0c8142d70b371bcbb25ddadcda5c195d025533d11444db3376f884a0cebefccfabe60a095ec9aee5230e5acfe9a03c0e840a461ef28991550e108624a540a122d34ff91979bb20a2518c11ed15085bfa01e755a422f62ebc3ae04b56aa99a49f3c71d02fa8bbbcd3d0b5126d5ec1676e6800a34a6ec30ce7ae09d8e5188298a2b7ad371b63732b9e8e0f8949048c845402d808000000000000059475c89821ae0d9a7e6cc70c742c049bdb1e812514554e773b0478d484f62875301f1ebd26bf7025829f12743b919906faa549e82826abf13b485db615032d5f27eb2c0e6f60215e072bd2cbadadd56c007524fc"], 0x128}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000003a000b00000019000003000d34d8026a2c0000fd79eeacdc481ac4e9343f00000000000000b9a85fe916d814de2d775e96593b03da3995588aca911efab0f53b45339c77e7f00b970a3d45c3c5e65b82d9c89dca024cd58f2c4796be2e1810c105244b4673be04486d499d28c19a1b9bf0bf1eba229d7effa847641dd2ee81356d2ffa197aaf55f3dddc1b31e5312028b70c4e088b8045f8eb5fe5c405e05994d9751f05201afeb4788e336fbb9f4a367d529f77f01fea66a99cf150165078bf9ddc76484e7b092bd57a55e39b301a807dd3983d832e598ece080d0dcb709e177b44e37700"/245], 0x2c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @remote}, 0x2}}, 0x2e) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'macsec0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$unix(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c}}], 0x20}, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x8, 0x0, 0x0, {{@in=@private=0xa010100, @in=@multicast1}, {@in=@private=0xa0100ff, 0x0, 0x32}, @in=@dev, {}, {0x0, 0x41, 0x6}, {0x0, 0x0, 0x40000}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'lrw-serpent-avx\x00'}}}, @encap={0x1c, 0x17, {0x0, 0x4e22, 0x0, @in=@local}}]}, 0x154}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r9, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 13.193200975s ago: executing program 0 (id=1984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r0}, &(0x7f0000000d40), &(0x7f0000000d80)='%pB \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa002c1a8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x24, 0x8, 0x0, 0x0, 0x2000b000}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@dev}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r8, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/25, 0x19}}], 0x1, 0x0, 0x0) setsockopt$inet_int(r8, 0x0, 0x7, &(0x7f0000000180), 0x4) setsockopt$inet_int(r8, 0x0, 0x12, &(0x7f0000000140)=0x30, 0x4) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc2}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) setsockopt$inet_int(r7, 0x0, 0x14, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='jbd2_handle_stats\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x2) 5.989037471s ago: executing program 3 (id=1323): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000080)={0x0, 0x0, 0xffefffffffffffff, 0xeffe}) 3.142830115s ago: executing program 4 (id=2020): setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a10000000000000000000001800160014000100010000000000", @ANYRES32=r0, @ANYBLOB="0600150007"], 0x44}}, 0x0) 1.906143136s ago: executing program 4 (id=2021): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) socket$inet(0xa, 0x0, 0x84) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000000), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r3, 0x1, 0xf000000, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x20}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x24, r5, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4a}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}}, 0x0) 1.67498953s ago: executing program 4 (id=2022): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) socket$inet(0xa, 0x801, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0x8, 0x4}, 0x48) unshare(0x20180) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6268}]}, 0x2c}}, 0x0) 1.473337178s ago: executing program 4 (id=2023): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44b8874fdf8a"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000000609"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x7, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "15b4013a41a0ab29"}}, 0x48}}, 0x0) syz_emit_ethernet(0x19e, &(0x7f0000000280)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x21, 0x4, 0x3, 0x1, 0x190, 0x66, 0x0, 0x3f, 0x11, 0x0, @private=0xa010100, @remote, {[@lsrr={0x83, 0x1b, 0x4e, [@empty, @local, @dev={0xac, 0x14, 0x14, 0x19}, @private=0xa010100, @broadcast, @empty]}, @ssrr={0x89, 0xf, 0xd0, [@private=0xa010100, @remote, @local]}, @timestamp={0x44, 0x8, 0xda, 0x0, 0xa, [0x800]}, @cipso={0x86, 0x1f, 0x1, [{0x5, 0x10, "7d2bce78493a61cdb5897f7d8a32"}, {0x1, 0x9, "f1b42d0a4833e2"}]}, @rr={0x7, 0x1f, 0x67, [@rand_addr=0x64010102, @rand_addr=0x64010102, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, @remote]}]}}, {0x4e20, 0x4e22, 0x10c, 0x0, @gue={{0x2, 0x1, 0x0, 0xf8, 0x0, @val=0x80}, "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"}}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) accept$alg(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x80}, &(0x7f00000001c0)=0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', r2, 0x2f, 0x1, 0x5, 0x5, 0x82, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7800, 0x5, 0x9}}) 1.434874722s ago: executing program 4 (id=2024): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000073119f000000fa6706b3d693d39500009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f00000003c0)}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xffefffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x0, 0x2, 0xc2, 0x0, 0x87}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003500)={0xffffffffffffffff, 0x20, &(0x7f0000001480)={&(0x7f00000014c0)=""/120, 0x78, 0x0, &(0x7f0000001540)=""/235, 0xeb}}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000001cc0)={0x0, r6, "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", "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"}) r8 = openat$cgroup_ro(r2, &(0x7f0000000200)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611) mmap(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0, 0x28011, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0x2f, &(0x7f0000000d00)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x9, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0xe, 0x2, 0x80000000}, 0x10, r5, r8, 0x3, &(0x7f0000000740), &(0x7f0000000780)=[{0x1, 0x5, 0xf, 0x1}, {0x0, 0x1, 0xd, 0x1}, {0x0, 0x1, 0xb, 0xd}], 0x10, 0x808001}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002840)=ANY=[@ANYRES32=r7], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xa, r5, 0xffffffffffffffff, 0x5b, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) accept$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000740)=0x14) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x18, &(0x7f0000000340)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xb, 0x14, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xef35, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@generic={0x66, 0x2, 0x7, 0x6, 0x17}, @ldst={0x3, 0x0, 0x6, 0x5, 0x0, 0x80, 0x4}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000000840)=""/4096, 0x40f00, 0x20, '\x00', 0x0, 0x13, r1, 0x8, &(0x7f0000000140)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x1, 0x4, 0x6}, 0x10, r5, r9, 0x1, &(0x7f0000000500)=[r0, r0, r0, r0], &(0x7f0000000540)=[{0x1, 0x4, 0xd, 0x5}], 0x10, 0xffffff00}, 0x90) 514.438788ms ago: executing program 4 (id=2025): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) socket$packet(0x11, 0x3, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x1b, &(0x7f0000001500)=""/5, &(0x7f0000000240)=0x5) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89fa, &(0x7f0000005540)={'erspan0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000740)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) r5 = socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}]}, 0x1c}}, 0x0) r7 = socket(0xa, 0x6, 0x0) setsockopt$inet_dccp_int(r7, 0x10d, 0xe, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x7}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, 0x0}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000d0000000000080012"], 0x4c}}, 0x0) ioctl(0xffffffffffffffff, 0x8b32, &(0x7f0000000040)) recvmmsg(r6, &(0x7f0000000040)=[{{0x0, 0xfffffffffffffc55, &(0x7f00000008c0)=[{&(0x7f0000000400)=""/277, 0x115}, {&(0x7f0000000340)=""/105, 0x69}, {&(0x7f0000000540)=""/213, 0xd5}, {&(0x7f0000000640)=""/129, 0x81}, {&(0x7f0000000940)=""/212, 0xd4}], 0x5}}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 328.527507ms ago: executing program 1 (id=1942): syz_emit_ethernet(0x7e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @end, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010102}, {@remote, 0x9}, {@multicast1}, {@dev}, {@loopback}, {}, {}]}]}}}}}}}, 0x0) 225.326382ms ago: executing program 1 (id=2026): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r4, &(0x7f0000000000)={0x10}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000002c0)={0x90, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x2, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000008900b7f4000014000000b7030000000000008500000083000000bca9000000000000350901000000007b2683009504000000000000b7080000bdff7f007b9a000180000000b509000000000000c3aaf0fff1000000bf9608000000000007080000f8ffffff00000000000907040000f0ffffffb702000008c2146bbaea5100000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000002000000000000061100001000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800008}, [@printk={@lli, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f00000001c0)='syzkaller\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) r8 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r8, 0x10d, 0x1, 0x0, &(0x7f0000000080)) 0s ago: executing program 1 (id=2027): socket$kcm(0xa, 0x2, 0x88) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000ff070100000008000300", @ANYRES32, @ANYBLOB="24002f800c000380080c110000000000000002000000002b000000000800013f00000000c9edeed72fdefd2e3a663a8f064d81d8d602f714a1a3091204f7b8670705a01d42"], 0x40}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1438}, 0x1, 0x0, 0x0, 0x40051}, 0x4045) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000100)=""/7, &(0x7f0000000140)=0x7) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000670000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000000000008500000039000000b70000000000000095"], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0103000000003f35f2e413"], 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES64=r4, @ANYRESOCT=r8, @ANYBLOB="0200000000008000800012"], 0xa0}, 0x1, 0x0, 0x0, 0x24008084}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r10, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="6800000010000304000000000000530000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003800128009000100766c616e0000000028000280040003800c00020004000000020000000c000200540a000018000000060001000000000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11, @ANYBLOB], 0x68}, 0x1, 0xba01}, 0x810) kernel console output (not intermixed with test programs): h. [ 195.754477][ T9030] batman_adv: batadv0: Adding interface: team0 [ 195.772882][ T9030] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.809776][ T9030] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 195.994421][ T9050] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 196.589932][ T9083] dccp_invalid_packet: P.Data Offset(172) too large [ 196.974558][ T9105] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 197.185094][ T9123] netlink: 'syz.1.1163': attribute type 9 has an invalid length. [ 197.308604][ T9127] sctp: [Deprecated]: syz.2.1161 (pid 9127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.308604][ T9127] Use struct sctp_sack_info instead [ 197.430515][ T9138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 197.510707][ T9140] netlink: 'syz.0.1167': attribute type 2 has an invalid length. [ 197.821960][ T9155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1171'. [ 197.933969][ T9158] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 198.320318][ T9177] netlink: 'syz.0.1179': attribute type 12 has an invalid length. [ 198.369298][ T9180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1180'. [ 198.402243][ T9180] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 198.418725][ T9180] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 198.540702][ T9189] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1183'. [ 198.623788][ T9191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1184'. [ 198.641207][ T9191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1184'. [ 198.666822][ T9191] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 198.677735][ T9193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1184'. [ 198.693433][ T9191] batadv_slave_0: entered promiscuous mode [ 198.981831][ T9205] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1189'. [ 199.155576][ T9208] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 199.498482][ T9222] netlink: 'syz.2.1192': attribute type 1 has an invalid length. [ 199.534223][ T9222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 199.541631][ T9222] IPv6: NLM_F_CREATE should be set when creating new route [ 200.105348][ T29] audit: type=1804 audit(1719739866.215:9): pid=9244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1202" name="/root/syzkaller.ogEDQz/259/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 [ 200.243566][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1205'. [ 200.256595][ T9248] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1205'. [ 200.320104][ T9253] netlink: 'syz.0.1203': attribute type 12 has an invalid length. [ 200.729688][ T9280] x_tables: duplicate underflow at hook 4 [ 201.157016][ T9296] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1214'. [ 201.313417][ T9304] netlink: 'syz.4.1215': attribute type 1 has an invalid length. [ 201.334965][ T9304] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.342296][ T9304] IPv6: NLM_F_CREATE should be set when creating new route [ 201.349626][ T9304] IPv6: NLM_F_CREATE should be set when creating new route [ 201.528439][ T9307] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 202.282297][ T9346] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 202.294266][ T9346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 202.301693][ T9346] IPv6: NLM_F_CREATE should be set when creating new route [ 202.433384][ T9356] x_tables: duplicate underflow at hook 4 [ 202.728846][ T9370] syzkaller1: entered promiscuous mode [ 202.737269][ T9370] syzkaller1: entered allmulticast mode [ 202.976963][ T9381] netlink: 'syz.0.1242': attribute type 9 has an invalid length. [ 203.195291][ T9392] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 203.346087][ T9398] netlink: 'syz.2.1246': attribute type 2 has an invalid length. [ 203.613188][ T9407] __nla_validate_parse: 1 callbacks suppressed [ 203.613211][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 203.824194][ T9422] netlink: 'syz.4.1254': attribute type 1 has an invalid length. [ 203.844183][ T9422] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.992110][ T9430] sctp: [Deprecated]: syz.3.1257 (pid 9430) Use of int in maxseg socket option. [ 203.992110][ T9430] Use struct sctp_assoc_value instead [ 204.331067][ T9449] netlink: 'syz.1.1262': attribute type 2 has an invalid length. [ 204.617071][ T9456] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1264'. [ 205.264815][ T9471] netlink: 'syz.3.1270': attribute type 9 has an invalid length. [ 205.385718][ T4489] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.398761][ T4489] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.424359][ T4489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.434239][ T4489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.461092][ T4489] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 205.473193][ T4489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.485209][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.543643][ T9488] FAULT_INJECTION: forcing a failure. [ 205.543643][ T9488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.557845][ T9488] CPU: 0 PID: 9488 Comm: syz.4.1276 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 205.567966][ T9488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 205.578078][ T9488] Call Trace: [ 205.581406][ T9488] [ 205.584387][ T9488] dump_stack_lvl+0x241/0x360 [ 205.589121][ T9488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.594378][ T9488] ? __pfx__printk+0x10/0x10 [ 205.599034][ T9488] ? __pfx_lock_release+0x10/0x10 [ 205.604122][ T9488] should_fail_ex+0x3b0/0x4e0 [ 205.608876][ T9488] _copy_from_user+0x2f/0xe0 [ 205.613526][ T9488] copy_msghdr_from_user+0xae/0x680 [ 205.618873][ T9488] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 205.624830][ T9488] __sys_sendmsg+0x23d/0x3a0 [ 205.629488][ T9488] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.634652][ T9488] ? vfs_write+0x7c4/0xc90 [ 205.639299][ T9488] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.645682][ T9488] ? do_syscall_64+0x100/0x230 [ 205.650502][ T9488] ? do_syscall_64+0xb6/0x230 [ 205.655260][ T9488] do_syscall_64+0xf3/0x230 [ 205.659815][ T9488] ? clear_bhb_loop+0x35/0x90 [ 205.664544][ T9488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.670481][ T9488] RIP: 0033:0x7fef8c375b99 [ 205.674942][ T9488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.694598][ T9488] RSP: 002b:00007fef8d1cc048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.703062][ T9488] RAX: ffffffffffffffda RBX: 00007fef8c503fa0 RCX: 00007fef8c375b99 [ 205.711082][ T9488] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 205.719097][ T9488] RBP: 00007fef8d1cc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 205.727111][ T9488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.735242][ T9488] R13: 000000000000000b R14: 00007fef8c503fa0 R15: 00007ffdc6268478 [ 205.743359][ T9488] [ 205.883697][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1279'. [ 205.914825][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.084085][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.304375][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.526279][ T29] audit: type=1800 audit(1719739872.645:10): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1282" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 206.624732][ T29] audit: type=1804 audit(1719739872.735:11): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1282" name="/root/syzkaller.PtxpQo/282/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 206.877902][ T51] bridge_slave_1: left allmulticast mode [ 206.889683][ T51] bridge_slave_1: left promiscuous mode [ 206.901132][ T9524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1285'. [ 206.911650][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.932274][ T51] bridge_slave_0: left allmulticast mode [ 206.937984][ T51] bridge_slave_0: left promiscuous mode [ 206.952923][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.245302][ T9540] netlink: 'syz.3.1289': attribute type 2 has an invalid length. [ 207.459494][ T9548] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1292'. [ 207.561367][ T4489] Bluetooth: hci0: command tx timeout [ 207.644359][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.657899][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.670263][ T51] bond0 (unregistering): Released all slaves [ 207.686253][ T51] bond1 (unregistering): Released all slaves [ 207.707027][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1292'. [ 207.771668][ T9478] chnl_net:caif_netlink_parms(): no params data found [ 207.845548][ T9552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1294'. [ 207.922936][ T51] tipc: Left network mode [ 208.322927][ T9478] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.341107][ T9478] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.348499][ T9478] bridge_slave_0: entered allmulticast mode [ 208.378409][ T9478] bridge_slave_0: entered promiscuous mode [ 208.402896][ T9478] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.410112][ T9478] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.452972][ T9586] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 208.461531][ T9478] bridge_slave_1: entered allmulticast mode [ 208.473498][ T9478] bridge_slave_1: entered promiscuous mode [ 208.505918][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1305'. [ 208.610202][ T9589] @ÿ: renamed from veth0_vlan [ 208.675504][ T9478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.783256][ T51] hsr_slave_0: left promiscuous mode [ 208.805929][ T51] hsr_slave_1: left promiscuous mode [ 208.853710][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.872583][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.892222][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.900420][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.992955][ T51] veth1_macvtap: left promiscuous mode [ 209.011789][ T51] veth1_vlan: left promiscuous mode [ 209.033266][ T51] veth0_vlan: left promiscuous mode [ 209.641210][ T4489] Bluetooth: hci0: command tx timeout [ 209.789911][ T51] team0 (unregistering): Port device team_slave_1 removed [ 209.835180][ T51] team0 (unregistering): Port device team_slave_0 removed [ 210.315158][ T9478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.632311][ T9478] team0: Port device team_slave_0 added [ 210.664530][ T9478] team0: Port device team_slave_1 added [ 210.823632][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.830645][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.863302][ T9478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.936210][ T9478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.954510][ T9641] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 210.962321][ T9478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.962660][ T9641] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 210.995147][ T9641] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 210.999769][ T9643] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1327'. [ 211.001645][ T9641] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 211.001867][ T9641] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 211.023741][ T9641] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 211.027153][ T9478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.030399][ T9641] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 211.048585][ T9641] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 211.055273][ T9641] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 211.061840][ T9641] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 211.096500][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 211.207241][ T9478] hsr_slave_0: entered promiscuous mode [ 211.213460][ T51] IPVS: stop unused estimator thread 0... [ 211.236737][ T9478] hsr_slave_1: entered promiscuous mode [ 211.304652][ T9478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.314806][ T9478] Cannot create hsr debugfs directory [ 211.576202][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.592279][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.604646][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.613625][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.622225][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 211.629679][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.702477][ T9660] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1331'. [ 211.727144][ T4489] Bluetooth: hci0: command tx timeout [ 212.039744][ T9678] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 212.054730][ T9670] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1335'. [ 212.317813][ T9478] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 212.373406][ T9478] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 212.396990][ T9657] chnl_net:caif_netlink_parms(): no params data found [ 212.410289][ T9478] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 212.428401][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1339'. [ 212.436484][ T9478] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 212.454299][ T9688] netlink: 'syz.4.1339': attribute type 1 has an invalid length. [ 212.665878][ T9695] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1343'. [ 212.757940][ T9657] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.779920][ T9657] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.795096][ T9657] bridge_slave_0: entered allmulticast mode [ 212.813176][ T9657] bridge_slave_0: entered promiscuous mode [ 212.829605][ T9657] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.837220][ T9657] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.844981][ T9657] bridge_slave_1: entered allmulticast mode [ 212.852979][ T9657] bridge_slave_1: entered promiscuous mode [ 212.922198][ T9657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.949959][ T9657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.048131][ T9657] team0: Port device team_slave_0 added [ 213.075121][ T9657] team0: Port device team_slave_1 added [ 213.175481][ T9657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.195713][ T9657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.231780][ T9657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.253733][ T9657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.274351][ T9657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.307412][ T9657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.344580][ T9720] Bluetooth: MGMT ver 1.22 [ 213.353437][ T9720] netlink: 'syz.0.1348': attribute type 9 has an invalid length. [ 213.378703][ T9478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.489386][ T9478] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.507639][ T9724] netlink: 'syz.2.1350': attribute type 11 has an invalid length. [ 213.510420][ T9657] hsr_slave_0: entered promiscuous mode [ 213.523527][ T9724] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1350'. [ 213.533427][ T9657] hsr_slave_1: entered promiscuous mode [ 213.540064][ T9657] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.548276][ T9657] Cannot create hsr debugfs directory [ 213.586532][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.593815][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.638948][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.646744][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.721671][ T4489] Bluetooth: hci2: command tx timeout [ 213.802354][ T4489] Bluetooth: hci0: command tx timeout [ 213.878155][ T9657] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.025931][ T9657] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.139989][ T9657] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.194341][ T9743] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1358'. [ 214.318263][ T9657] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 214.336291][ T9657] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.429644][ T9750] netlink: 'syz.2.1361': attribute type 3 has an invalid length. [ 214.441229][ T9750] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1361'. [ 214.569101][ T9478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.788775][ T9478] veth0_vlan: entered promiscuous mode [ 214.817957][ T9657] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 214.853625][ T9657] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 214.907474][ T9478] veth1_vlan: entered promiscuous mode [ 214.934655][ T9657] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 214.976331][ T9657] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 215.035578][ T9771] netlink: 'syz.4.1367': attribute type 1 has an invalid length. [ 215.052396][ T9771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.059718][ T9771] IPv6: NLM_F_CREATE should be set when creating new route [ 215.197805][ T9478] veth0_macvtap: entered promiscuous mode [ 215.255809][ T9478] veth1_macvtap: entered promiscuous mode [ 215.486022][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.511307][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.529098][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.541017][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.551906][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.562588][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.572797][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.583443][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.599040][ T9478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.649776][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.670837][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.690914][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.703020][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.713036][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.724476][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.734516][ T9478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.745538][ T9478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.763233][ T9478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.771249][ T9793] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1375'. [ 215.802508][ T4489] Bluetooth: hci2: command tx timeout [ 215.907987][ T9478] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.918539][ T9478] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.930884][ T9478] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.944353][ T9478] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.067579][ T9805] __nla_validate_parse: 1 callbacks suppressed [ 216.067602][ T9805] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1380'. [ 216.231488][ T9657] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.335011][ T9657] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.376997][ T5192] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.384247][ T5192] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.407709][ T9814] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1382'. [ 216.409434][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.454474][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.468786][ T9814] caif0 speed is unknown, defaulting to 1000 [ 216.483428][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.490607][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.539978][ T9814] caif0 speed is unknown, defaulting to 1000 [ 216.548330][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.559756][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.601332][ T9814] caif0 speed is unknown, defaulting to 1000 [ 216.719257][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 216.897321][ T29] audit: type=1804 audit(1719739883.015:12): pid=9826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1387" name="/root/syzkaller.kX7ina/57/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 217.238960][ T9814] infiniband syz1: set down [ 217.246985][ T5149] caif0 speed is unknown, defaulting to 1000 [ 217.271765][ T9814] infiniband syz1: added caif0 [ 217.278993][ T9657] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.283220][ T9814] syz1: rxe_create_cq: returned err = -12 [ 217.316557][ T9814] infiniband syz1: Couldn't create ib_mad CQ [ 217.351283][ T9814] infiniband syz1: Couldn't open port 1 [ 217.451212][ T9657] veth0_vlan: entered promiscuous mode [ 217.481957][ T9814] RDS/IB: syz1: added [ 217.495428][ T9814] smc: adding ib device syz1 with port count 1 [ 217.514072][ T9657] veth1_vlan: entered promiscuous mode [ 217.521513][ T9814] smc: ib device syz1 port 1 has pnetid [ 217.541921][ T5149] caif0 speed is unknown, defaulting to 1000 [ 217.573062][ T9814] caif0 speed is unknown, defaulting to 1000 [ 217.645757][ T9657] veth0_macvtap: entered promiscuous mode [ 217.695253][ T9657] veth1_macvtap: entered promiscuous mode [ 217.739797][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.770898][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.790871][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.811164][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.831436][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.837907][ T9858] netlink: 'syz.4.1397': attribute type 2 has an invalid length. [ 217.855491][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.872073][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.883204][ T4489] Bluetooth: hci2: command tx timeout [ 217.903490][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.930970][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.959893][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.992427][ T9657] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.006285][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.021711][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.042641][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.056590][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.066862][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.077603][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.088004][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.098934][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.110580][ T9657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.123177][ T9657] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.142281][ T9657] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.159086][ T9814] caif0 speed is unknown, defaulting to 1000 [ 218.178871][ T9657] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.224780][ T9657] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.245156][ T9657] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.270920][ T9657] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.321907][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1399'. [ 218.543954][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.566266][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.648045][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.679216][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.736424][ T9814] caif0 speed is unknown, defaulting to 1000 [ 219.066626][ T9814] caif0 speed is unknown, defaulting to 1000 [ 219.521906][ T9895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1410'. [ 219.529997][ T9814] caif0 speed is unknown, defaulting to 1000 [ 219.844364][ T9903] xt_cgroup: invalid path, errno=-2 [ 220.026052][ T9814] caif0 speed is unknown, defaulting to 1000 [ 220.296128][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.518885][ T9921] sctp: [Deprecated]: syz.2.1421 (pid 9921) Use of int in maxseg socket option. [ 220.518885][ T9921] Use struct sctp_assoc_value instead [ 220.700097][ T9927] netlink: 'syz.4.1425': attribute type 1 has an invalid length. [ 220.730949][ T9927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.738236][ T9927] IPv6: NLM_F_CREATE should be set when creating new route [ 220.941026][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.976189][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1424'. [ 220.993189][ T9929] netlink: 'syz.1.1424': attribute type 15 has an invalid length. [ 221.071263][ T9929] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.081298][ T9929] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.090918][ T9929] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.096348][ T9940] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1427'. [ 221.100301][ T9929] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.143697][ T9940] net_ratelimit: 46 callbacks suppressed [ 221.143719][ T9940] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 221.150041][ T9929] vxlan0: entered promiscuous mode [ 221.187747][ T9934] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1427'. [ 221.215018][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.234340][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.244285][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.258597][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.269779][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.278990][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 221.289317][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.444994][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.553002][ T9944] caif0 speed is unknown, defaulting to 1000 [ 221.800360][ T51] bridge_slave_1: left allmulticast mode [ 221.811001][ T51] bridge_slave_1: left promiscuous mode [ 221.831113][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.852637][ T51] bridge_slave_0: left allmulticast mode [ 221.858361][ T51] bridge_slave_0: left promiscuous mode [ 221.882058][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.193863][ T9989] dccp_invalid_packet: P.Data Offset(172) too large [ 222.730752][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.752698][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.766287][ T51] bond0 (unregistering): Released all slaves [ 222.833279][ T9979] dummy0: entered promiscuous mode [ 222.872161][ T9979] dummy0: left promiscuous mode [ 223.135944][T10005] FAULT_INJECTION: forcing a failure. [ 223.135944][T10005] name failslab, interval 1, probability 0, space 0, times 0 [ 223.156484][T10005] CPU: 0 PID: 10005 Comm: syz.4.1450 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 223.166712][T10005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 223.176812][T10005] Call Trace: [ 223.180139][T10005] [ 223.183112][T10005] dump_stack_lvl+0x241/0x360 [ 223.187905][T10005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.193156][T10005] ? __pfx__printk+0x10/0x10 [ 223.197853][T10005] should_fail_ex+0x3b0/0x4e0 [ 223.202601][T10005] ? nf_tables_parse_netdev_hooks+0x1a4/0x790 [ 223.208729][T10005] should_failslab+0x9/0x20 [ 223.213290][T10005] kmalloc_trace_noprof+0x6c/0x2c0 [ 223.218446][T10005] nf_tables_parse_netdev_hooks+0x1a4/0x790 [ 223.224409][T10005] ? __pfx_nf_tables_parse_netdev_hooks+0x10/0x10 [ 223.230883][T10005] ? __nla_parse+0x40/0x60 [ 223.235354][T10005] nft_flowtable_parse_hook+0x52f/0x940 [ 223.240955][T10005] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 223.247013][T10005] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 223.253153][T10005] nf_tables_newflowtable+0x135c/0x23f0 [ 223.258765][T10005] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 223.264711][T10005] ? nfnl_pernet+0x23/0x240 [ 223.269264][T10005] ? __pfx_lock_release+0x10/0x10 [ 223.274353][T10005] ? __nla_parse+0x40/0x60 [ 223.278821][T10005] nfnetlink_rcv+0x1427/0x2a90 [ 223.283673][T10005] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 223.288842][T10005] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 223.294807][T10005] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 223.301505][T10005] ? rcu_read_unlock_special+0x470/0x550 [ 223.307245][T10005] ? skb_clone+0x240/0x390 [ 223.311726][T10005] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 223.317787][T10005] ? __rcu_read_unlock+0xa1/0x110 [ 223.322880][T10005] netlink_unicast+0x7f0/0x990 [ 223.327696][T10005] ? __pfx_netlink_unicast+0x10/0x10 [ 223.333025][T10005] ? __virt_addr_valid+0x183/0x520 [ 223.338244][T10005] ? __check_object_size+0x49c/0x900 [ 223.343591][T10005] ? bpf_lsm_netlink_send+0x9/0x10 [ 223.348852][T10005] netlink_sendmsg+0x8e4/0xcb0 [ 223.353680][T10005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.359035][T10005] ? __import_iovec+0x536/0x820 [ 223.363932][T10005] ? aa_sock_msg_perm+0x91/0x160 [ 223.368926][T10005] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 223.374255][T10005] ? security_socket_sendmsg+0x87/0xb0 [ 223.379774][T10005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.385102][T10005] __sock_sendmsg+0x221/0x270 [ 223.389831][T10005] ____sys_sendmsg+0x525/0x7d0 [ 223.394666][T10005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.400117][T10005] __sys_sendmsg+0x2b0/0x3a0 [ 223.404773][T10005] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.409938][T10005] ? vfs_write+0x7c4/0xc90 [ 223.414464][T10005] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.420842][T10005] ? do_syscall_64+0x100/0x230 [ 223.425659][T10005] ? do_syscall_64+0xb6/0x230 [ 223.430390][T10005] do_syscall_64+0xf3/0x230 [ 223.434951][T10005] ? clear_bhb_loop+0x35/0x90 [ 223.439673][T10005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.445611][T10005] RIP: 0033:0x7fef8c375b99 [ 223.450074][T10005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.469726][T10005] RSP: 002b:00007fef8d1cc048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.478191][T10005] RAX: ffffffffffffffda RBX: 00007fef8c503fa0 RCX: 00007fef8c375b99 [ 223.486214][T10005] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 223.494230][T10005] RBP: 00007fef8d1cc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 223.502249][T10005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.510263][T10005] R13: 000000000000000b R14: 00007fef8c503fa0 R15: 00007ffdc6268478 [ 223.518310][T10005] [ 223.538250][ T5110] Bluetooth: hci2: command tx timeout [ 223.703686][T10025] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 224.028613][ T9944] chnl_net:caif_netlink_parms(): no params data found [ 224.053974][T10038] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.060543][T10038] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 224.067186][T10038] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.073842][T10038] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 224.080715][T10038] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.088341][T10038] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 224.094977][T10038] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.263236][ T51] hsr_slave_0: left promiscuous mode [ 224.286282][ T51] hsr_slave_1: left promiscuous mode [ 224.302115][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.320872][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.339457][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.351086][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.412592][ T51] veth1_macvtap: left promiscuous mode [ 224.418226][ T51] veth0_macvtap: left promiscuous mode [ 224.435558][ T51] veth1_vlan: left promiscuous mode [ 224.460081][ T51] veth0_vlan: left promiscuous mode [ 225.216097][ T51] team0 (unregistering): Port device team_slave_1 removed [ 225.260411][ T51] team0 (unregistering): Port device team_slave_0 removed [ 225.562565][ T5110] Bluetooth: hci2: command tx timeout [ 225.732756][T10047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1465'. [ 225.775462][T10058] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1464'. [ 226.085092][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.111775][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.139655][ T9944] bridge_slave_0: entered allmulticast mode [ 226.163388][ T9944] bridge_slave_0: entered promiscuous mode [ 226.194551][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.228087][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.244557][ T9944] bridge_slave_1: entered allmulticast mode [ 226.266518][ T9944] bridge_slave_1: entered promiscuous mode [ 226.421530][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.442863][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.510555][T10097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.522221][T10093] net_ratelimit: 49 callbacks suppressed [ 226.522243][T10093] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 226.562972][ T9944] team0: Port device team_slave_0 added [ 226.616711][ T9944] team0: Port device team_slave_1 added [ 226.766986][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.781514][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.856839][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.879387][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.888752][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.941132][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.980089][T10105] netlink: 'syz.4.1479': attribute type 1 has an invalid length. [ 227.063187][T10122] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1485'. [ 227.185376][ T9944] hsr_slave_0: entered promiscuous mode [ 227.220232][ T9944] hsr_slave_1: entered promiscuous mode [ 227.240054][ T9944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.251519][ T9944] Cannot create hsr debugfs directory [ 227.454439][T10138] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 227.599134][T10140] xt_ipvs: protocol family 7 not supported [ 227.642511][ T5110] Bluetooth: hci2: command tx timeout [ 228.289205][ T9944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 228.330364][ T9944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 228.334547][T10169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1504'. [ 228.357048][ T9944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 228.386984][ T9944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 228.409782][T10175] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 228.570112][ T9944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.586453][T10177] x_tables: ip_tables: osf match: only valid for protocol 6 [ 228.684783][ T9944] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.841254][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.848543][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.879949][T10198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1512'. [ 228.895870][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.903315][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.107246][T10210] team0: entered promiscuous mode [ 229.122396][T10210] team_slave_0: entered promiscuous mode [ 229.138580][T10210] team_slave_1: entered promiscuous mode [ 229.171316][T10204] team0: left promiscuous mode [ 229.180743][T10204] team_slave_0: left promiscuous mode [ 229.200255][T10204] team_slave_1: left promiscuous mode [ 229.441810][T10221] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 229.558329][ T9944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.718704][ T9944] veth0_vlan: entered promiscuous mode [ 229.724622][ T5110] Bluetooth: hci2: command tx timeout [ 229.766342][T10237] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1525'. [ 229.792677][ T9944] veth1_vlan: entered promiscuous mode [ 229.854153][ T9944] veth0_macvtap: entered promiscuous mode [ 229.876994][ T9944] veth1_macvtap: entered promiscuous mode [ 229.953970][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.975656][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.987745][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.998885][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.010397][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.041391][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.054108][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.075846][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.090324][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.102712][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.115268][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.159102][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.193180][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.221391][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.248511][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.270708][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.282540][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.293651][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.304779][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.308621][T10257] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 230.315438][ T9944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.334914][ T9944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.347633][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.381134][ T9944] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.389900][ T9944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.409102][ T9944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.419169][ T9944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.438465][T10257] netlink: 'syz.4.1530': attribute type 12 has an invalid length. [ 230.625605][T10263] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 230.675531][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.699142][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.775774][ T2479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.788744][ T2479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.158596][T10289] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1540'. [ 231.183855][T10289] netlink: 'syz.4.1540': attribute type 29 has an invalid length. [ 231.216796][T10289] netlink: 'syz.4.1540': attribute type 29 has an invalid length. [ 231.393712][T10298] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1545'. [ 231.412500][T10300] netlink: 'syz.0.1544': attribute type 15 has an invalid length. [ 231.982205][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1555'. [ 231.993266][T10332] caif0 speed is unknown, defaulting to 1000 [ 232.083375][T10336] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1556'. [ 232.099555][T10336] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1556'. [ 232.109176][T10336] netlink: 'syz.1.1556': attribute type 5 has an invalid length. [ 232.129548][T10336] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1556'. [ 232.455181][T10346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1560'. [ 232.480372][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1560'. [ 232.491552][T10346] ipvlan0: entered allmulticast mode [ 232.521771][T10346] veth0_vlan: entered allmulticast mode [ 232.680436][T10358] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 57250 (only 8 groups) [ 232.941917][T10367] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1568'. [ 233.639978][ T1107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.812801][T10391] netlink: 'syz.4.1576': attribute type 21 has an invalid length. [ 233.911106][T10394] netlink: 'syz.1.1578': attribute type 2 has an invalid length. [ 234.154367][T10402] xt_ecn: cannot match TCP bits for non-tcp packets [ 234.158813][T10404] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1582'. [ 234.299850][T10407] sit0: entered promiscuous mode [ 234.337460][T10407] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 234.371405][T10407] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1583'. [ 234.513962][ T4489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.526209][ T4489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.536010][ T4489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.571050][ T4489] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.588981][ T4489] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 234.598172][ T4489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.697190][T10416] caif0 speed is unknown, defaulting to 1000 [ 234.875928][T10429] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1588'. [ 234.945386][ T1107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.095309][ T1107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.253940][ T1107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.703198][T10461] netlink: 'syz.2.1594': attribute type 2 has an invalid length. [ 235.743859][ T1107] bridge_slave_1: left allmulticast mode [ 235.749661][ T1107] bridge_slave_1: left promiscuous mode [ 235.771941][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.834366][ T1107] bridge_slave_0: left allmulticast mode [ 235.860547][ T1107] bridge_slave_0: left promiscuous mode [ 235.872091][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.049673][T10474] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 236.250531][T10484] x_tables: duplicate underflow at hook 1 [ 236.523721][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.540605][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.554130][ T1107] bond0 (unregistering): Released all slaves [ 236.639689][T10477] bond0: entered promiscuous mode [ 236.678839][T10477] bond_slave_0: entered promiscuous mode [ 236.681917][ T5110] Bluetooth: hci2: command tx timeout [ 236.697575][T10477] bond_slave_1: entered promiscuous mode [ 236.753639][T10484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1601'. [ 236.917448][T10416] chnl_net:caif_netlink_parms(): no params data found [ 237.290274][T10510] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1608'. [ 237.423817][T10516] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1610'. [ 237.608336][T10521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1612'. [ 237.650839][ T1107] hsr_slave_0: left promiscuous mode [ 237.658122][ T1107] hsr_slave_1: left promiscuous mode [ 237.678036][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.689660][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.732377][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.774734][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.845331][ T1107] veth1_macvtap: left promiscuous mode [ 237.863653][ T1107] veth0_macvtap: left promiscuous mode [ 237.878331][ T1107] veth1_vlan: left promiscuous mode [ 237.884328][ T1107] veth0_vlan: left promiscuous mode [ 238.512356][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 238.560321][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 238.763198][ T5110] Bluetooth: hci2: command tx timeout [ 239.071072][T10525] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1614'. [ 239.112036][T10416] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.119249][T10416] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.142050][T10416] bridge_slave_0: entered allmulticast mode [ 239.161434][T10416] bridge_slave_0: entered promiscuous mode [ 239.181285][T10416] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.188580][T10416] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.215963][T10416] bridge_slave_1: entered allmulticast mode [ 239.236048][T10416] bridge_slave_1: entered promiscuous mode [ 239.317943][T10546] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 239.364145][T10416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.406977][T10416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.574886][T10553] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1623'. [ 239.610145][T10416] team0: Port device team_slave_0 added [ 239.627000][T10416] team0: Port device team_slave_1 added [ 239.663009][T10557] xt_ecn: cannot match TCP bits for non-tcp packets [ 239.749895][T10416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.762981][T10416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.766992][T10557] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1622'. [ 239.830391][T10416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.889002][T10416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.903277][T10570] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1629'. [ 239.941822][T10416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.028639][T10416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.277965][T10416] hsr_slave_0: entered promiscuous mode [ 240.298451][T10416] hsr_slave_1: entered promiscuous mode [ 240.310117][T10416] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.325521][T10416] Cannot create hsr debugfs directory [ 240.346386][T10588] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 240.562094][T10598] netlink: 'syz.0.1638': attribute type 1 has an invalid length. [ 240.757578][T10611] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1643'. [ 240.791546][T10612] sctp: [Deprecated]: syz.4.1642 (pid 10612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.791546][T10612] Use struct sctp_sack_info instead [ 240.840982][ T5110] Bluetooth: hci2: command tx timeout [ 241.154852][T10618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1646'. [ 241.269271][T10624] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1648'. [ 241.334087][T10624] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 241.378617][T10624] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 241.518591][T10627] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 241.550472][T10629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.573470][T10629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.192041][T10629] bond3: entered promiscuous mode [ 242.507482][T10416] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 242.529767][T10658] netlink: 'syz.4.1657': attribute type 1 has an invalid length. [ 242.545645][T10416] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 242.565289][T10416] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 242.575117][T10658] __nla_validate_parse: 4 callbacks suppressed [ 242.575138][T10658] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1657'. [ 242.597676][T10416] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 242.599423][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1657'. [ 242.626494][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1659'. [ 242.913812][T10416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.923183][ T5110] Bluetooth: hci2: command tx timeout [ 242.998861][T10676] dummy0: entered promiscuous mode [ 243.014628][T10676] macsec1: entered allmulticast mode [ 243.019989][T10676] dummy0: entered allmulticast mode [ 243.034883][T10676] dummy0: left allmulticast mode [ 243.046112][T10676] dummy0: left promiscuous mode [ 243.143726][T10683] netlink: 'syz.1.1667': attribute type 3 has an invalid length. [ 243.146273][T10416] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.151857][T10683] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1667'. [ 243.188462][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.195751][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.259404][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.266881][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.602615][T10703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 243.632342][T10703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1674'. [ 243.710579][T10708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1675'. [ 243.794206][T10416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.971742][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1679'. [ 243.985357][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1679'. [ 243.985362][T10416] veth0_vlan: entered promiscuous mode [ 244.047406][T10416] veth1_vlan: entered promiscuous mode [ 244.170671][T10416] veth0_macvtap: entered promiscuous mode [ 244.235801][T10416] veth1_macvtap: entered promiscuous mode [ 244.261370][T10727] macsec0: entered allmulticast mode [ 244.272914][T10727] veth1_macvtap: entered allmulticast mode [ 244.337514][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.362093][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.372706][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.383703][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.394327][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.405380][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.416462][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.430477][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.452231][T10416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.460168][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1684'. [ 244.488906][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.512315][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.538401][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.550327][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.561564][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.574827][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.586663][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.597810][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.614008][T10416] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.625146][T10416] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.639585][T10416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.665978][T10416] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.686538][T10416] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.706050][T10416] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.730530][T10416] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.023656][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.073176][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.159680][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.160942][T10761] netlink: 'syz.0.1691': attribute type 9 has an invalid length. [ 245.193961][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.210543][T10761] bond0: entered promiscuous mode [ 245.235916][T10761] bond_slave_0: entered promiscuous mode [ 245.256942][T10761] bond_slave_1: entered promiscuous mode [ 245.281798][T10761] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 245.297348][T10761] bond0: left promiscuous mode [ 245.305257][T10761] bond_slave_0: left promiscuous mode [ 245.318899][T10761] bond_slave_1: left promiscuous mode [ 245.937201][T10777] sit0: entered promiscuous mode [ 245.954310][T10777] netlink: 'syz.2.1695': attribute type 1 has an invalid length. [ 246.622541][T10830] xt_hashlimit: max too large, truncated to 1048576 [ 246.758173][T10840] netlink: 'syz.1.1715': attribute type 9 has an invalid length. [ 246.804572][T10840] bond0: entered promiscuous mode [ 246.821324][T10840] bond_slave_0: entered promiscuous mode [ 246.827375][T10840] bond_slave_1: entered promiscuous mode [ 246.852285][T10840] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 246.877877][T10840] bond0: left promiscuous mode [ 246.889300][T10840] bond_slave_0: left promiscuous mode [ 246.905796][T10840] bond_slave_1: left promiscuous mode [ 246.917823][T10841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.649545][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.193663][T10882] __nla_validate_parse: 2 callbacks suppressed [ 248.193693][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1732'. [ 248.327053][T10883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1733'. [ 248.369295][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1732'. [ 248.401967][T10882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1732'. [ 248.523847][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1733'. [ 248.627658][ T4489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 248.641560][ T4489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 248.651166][ T4489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 248.661910][ T4489] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 248.672299][ T4489] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 248.679901][ T4489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 248.732215][T10889] caif0 speed is unknown, defaulting to 1000 [ 248.807434][T10898] netlink: 'syz.2.1737': attribute type 5 has an invalid length. [ 248.846380][T10897] can: request_module (can-proto-0) failed. [ 249.027491][T10907] netlink: 'syz.4.1743': attribute type 1 has an invalid length. [ 249.029489][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.053042][T10907] netlink: 'syz.4.1743': attribute type 3 has an invalid length. [ 249.082378][T10907] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1743'. [ 249.133747][T10907] NCSI netlink: No device for ifindex 0 [ 249.179214][T10914] netlink: 'syz.0.1742': attribute type 9 has an invalid length. [ 249.209904][T10913] netlink: 'syz.2.1744': attribute type 3 has an invalid length. [ 249.226093][T10914] bond0: entered promiscuous mode [ 249.301224][T10914] bond_slave_0: entered promiscuous mode [ 249.307238][T10914] bond_slave_1: entered promiscuous mode [ 249.322341][T10914] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 249.332308][T10914] bond0: left promiscuous mode [ 249.348836][T10914] bond_slave_0: left promiscuous mode [ 249.355876][T10914] bond_slave_1: left promiscuous mode [ 249.452252][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.469121][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1746'. [ 249.590634][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.618068][T10933] sit0: left promiscuous mode [ 249.661978][T10936] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1749'. [ 249.982845][ T12] bridge_slave_1: left allmulticast mode [ 249.994268][ T12] bridge_slave_1: left promiscuous mode [ 250.011178][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.039323][ T12] bridge_slave_0: left allmulticast mode [ 250.048188][ T12] bridge_slave_0: left promiscuous mode [ 250.054967][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.631859][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.644601][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.655996][ T12] bond0 (unregistering): Released all slaves [ 250.677402][T10889] chnl_net:caif_netlink_parms(): no params data found [ 250.694597][T10954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1752'. [ 250.763926][ T5110] Bluetooth: hci2: command tx timeout [ 250.838696][T10972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1757'. [ 250.950955][T10974] xt_CT: You must specify a L4 protocol and not use inversions on it [ 251.149375][T10889] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.163154][T10889] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.172730][T10889] bridge_slave_0: entered allmulticast mode [ 251.202926][T10889] bridge_slave_0: entered promiscuous mode [ 251.257442][T10889] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.281046][T10889] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.298322][T10889] bridge_slave_1: entered allmulticast mode [ 251.343754][T10889] bridge_slave_1: entered promiscuous mode [ 251.492859][T10889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.520740][ T29] audit: type=1800 audit(1719739917.635:13): pid=10999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1765" name="memory.events" dev="sda1" ino=1975 res=0 errno=0 [ 251.574092][T10889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.826955][ T12] hsr_slave_0: left promiscuous mode [ 251.842999][ T12] hsr_slave_1: left promiscuous mode [ 251.860000][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.877625][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.888325][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.917639][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.966092][ T12] veth1_macvtap: left promiscuous mode [ 251.971896][ T12] veth0_macvtap: left promiscuous mode [ 251.977881][ T12] veth1_vlan: left promiscuous mode [ 251.984793][ T12] veth0_vlan: left promiscuous mode [ 252.618801][ T12] team0 (unregistering): Port device team_slave_1 removed [ 252.666157][ T12] team0 (unregistering): Port device team_slave_0 removed [ 252.841249][ T5110] Bluetooth: hci2: command tx timeout [ 253.176936][T10889] team0: Port device team_slave_0 added [ 253.185265][T11003] netlink: 'syz.2.1767': attribute type 9 has an invalid length. [ 253.200278][T11003] bond0: entered promiscuous mode [ 253.205677][T11003] bond_slave_0: entered promiscuous mode [ 253.212300][T11003] bond_slave_1: entered promiscuous mode [ 253.218436][T11003] bridge0: entered promiscuous mode [ 253.224650][T11003] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 253.235367][T11003] bond0: left promiscuous mode [ 253.240191][T11003] bond_slave_0: left promiscuous mode [ 253.246461][T11003] bond_slave_1: left promiscuous mode [ 253.252534][T11003] bridge0: left promiscuous mode [ 253.315686][T10889] team0: Port device team_slave_1 added [ 253.455300][T10889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.478148][T10889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.540956][T10889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.577400][T10889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.597468][T10889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.667255][T10889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.874253][T10889] hsr_slave_0: entered promiscuous mode [ 253.907710][T10889] hsr_slave_1: entered promiscuous mode [ 253.935302][T11057] __nla_validate_parse: 1 callbacks suppressed [ 253.935324][T11057] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1783'. [ 253.958418][T10889] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.972133][T10889] Cannot create hsr debugfs directory [ 253.983566][T11054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1781'. [ 254.028035][T11064] netlink: 'syz.0.1781': attribute type 1 has an invalid length. [ 254.046058][T11064] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1781'. [ 254.205317][T11069] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1786'. [ 254.237012][T11075] tipc: Failed to remove unknown binding: 66,1,1/0:4156016376/4156016378 [ 254.265153][T11075] tipc: Failed to remove unknown binding: 66,1,1/0:4156016376/4156016378 [ 254.336030][T11071] netlink: 'syz.2.1787': attribute type 9 has an invalid length. [ 254.375162][T11071] bond0: entered promiscuous mode [ 254.380550][T11071] bond_slave_0: entered promiscuous mode [ 254.387152][T11071] bond_slave_1: entered promiscuous mode [ 254.394319][T11071] bridge0: entered promiscuous mode [ 254.400280][T11071] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 254.414204][T11071] bond0: left promiscuous mode [ 254.419053][T11071] bond_slave_0: left promiscuous mode [ 254.425179][T11071] bond_slave_1: left promiscuous mode [ 254.436881][T11071] bridge0: left promiscuous mode [ 254.527641][T11087] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 254.921473][ T5110] Bluetooth: hci2: command tx timeout [ 254.984706][T11100] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 254.996917][T11098] No such timeout policy "syz0" [ 255.010070][T10889] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 255.044713][T10889] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 255.057274][T10889] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 255.079686][T10889] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 255.334339][T10889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.429609][T11113] netlink: 'syz.4.1798': attribute type 1 has an invalid length. [ 255.435051][T10889] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.447103][T11113] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.1798'. [ 255.465830][T11113] nbd: couldn't find a device at index 32 [ 255.491015][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.498342][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.542300][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.549564][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.912627][T11137] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 256.058970][T10889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.123918][ T1251] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.230279][T10889] veth0_vlan: entered promiscuous mode [ 256.249781][T11151] netlink: 'syz.0.1810': attribute type 9 has an invalid length. [ 256.280736][T11151] bond0: entered promiscuous mode [ 256.286912][T11151] bond_slave_0: entered promiscuous mode [ 256.294758][T11151] bond_slave_1: entered promiscuous mode [ 256.302616][T11151] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 256.326297][T11151] bond0: left promiscuous mode [ 256.334966][T11157] netlink: 'syz.2.1812': attribute type 1 has an invalid length. [ 256.336363][T11151] bond_slave_0: left promiscuous mode [ 256.346697][T11157] netlink: 'syz.2.1812': attribute type 1 has an invalid length. [ 256.349371][T11151] bond_slave_1: left promiscuous mode [ 256.397912][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1812'. [ 256.782970][T11166] syz.1.1815: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 256.790372][T10889] veth1_vlan: entered promiscuous mode [ 256.805344][T11166] CPU: 0 PID: 11166 Comm: syz.1.1815 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 256.815653][T11166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 256.825767][T11166] Call Trace: [ 256.829075][T11166] [ 256.832023][T11166] dump_stack_lvl+0x241/0x360 [ 256.836725][T11166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.842026][T11166] ? __pfx__printk+0x10/0x10 [ 256.846643][T11166] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 256.853090][T11166] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 256.859635][T11166] warn_alloc+0x278/0x410 [ 256.864018][T11166] ? stack_depot_save_flags+0x29/0x830 [ 256.869507][T11166] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 256.875588][T11166] ? __pfx_warn_alloc+0x10/0x10 [ 256.880463][T11166] ? kasan_save_track+0x3f/0x80 [ 256.885432][T11166] ? __kasan_kmalloc+0x98/0xb0 [ 256.890214][T11166] ? xsk_setsockopt+0x598/0x950 [ 256.895169][T11166] ? do_sock_setsockopt+0x3af/0x720 [ 256.900474][T11166] ? __sys_setsockopt+0x1ae/0x250 [ 256.905515][T11166] ? __x64_sys_setsockopt+0xb5/0xd0 [ 256.910727][T11166] ? do_syscall_64+0xf3/0x230 [ 256.915421][T11166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.921518][T11166] __vmalloc_node_range_noprof+0x130/0x1460 [ 256.927453][T11166] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 256.933832][T11166] ? __kasan_kmalloc+0x98/0xb0 [ 256.938619][T11166] ? xskq_create+0x54/0x170 [ 256.943150][T11166] vmalloc_user_noprof+0x74/0x80 [ 256.948115][T11166] ? xskq_create+0xb6/0x170 [ 256.952639][T11166] xskq_create+0xb6/0x170 [ 256.956993][T11166] xsk_init_queue+0xa1/0x100 [ 256.961607][T11166] xsk_setsockopt+0x598/0x950 [ 256.966308][T11166] ? __pfx_xsk_setsockopt+0x10/0x10 [ 256.971532][T11166] ? __pfx_lock_acquire+0x10/0x10 [ 256.976573][T11166] ? aa_sock_opt_perm+0x79/0x120 [ 256.981543][T11166] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 256.987132][T11166] ? security_socket_setsockopt+0x87/0xb0 [ 256.992899][T11166] ? __pfx_xsk_setsockopt+0x10/0x10 [ 256.998177][T11166] do_sock_setsockopt+0x3af/0x720 [ 257.003258][T11166] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 257.008838][T11166] ? __fget_files+0x29/0x470 [ 257.013484][T11166] ? __fget_files+0x3f6/0x470 [ 257.018299][T11166] __sys_setsockopt+0x1ae/0x250 [ 257.023253][T11166] __x64_sys_setsockopt+0xb5/0xd0 [ 257.028371][T11166] do_syscall_64+0xf3/0x230 [ 257.032935][T11166] ? clear_bhb_loop+0x35/0x90 [ 257.037656][T11166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.043575][T11166] RIP: 0033:0x7f1276775b99 [ 257.048013][T11166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.067652][T11166] RSP: 002b:00007f12774fd048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 257.076137][T11166] RAX: ffffffffffffffda RBX: 00007f1276903fa0 RCX: 00007f1276775b99 [ 257.084141][T11166] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 257.092129][T11166] RBP: 00007f12767f677e R08: 000000000000001c R09: 0000000000000000 [ 257.100141][T11166] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 257.108141][T11166] R13: 000000000000000b R14: 00007f1276903fa0 R15: 00007ffd2ea6a2f8 [ 257.116150][T11166] [ 257.128974][T11166] Mem-Info: [ 257.132371][T11166] active_anon:2660 inactive_anon:0 isolated_anon:0 [ 257.132371][T11166] active_file:1574 inactive_file:38558 isolated_file:0 [ 257.132371][T11166] unevictable:768 dirty:247 writeback:0 [ 257.132371][T11166] slab_reclaimable:10372 slab_unreclaimable:104804 [ 257.132371][T11166] mapped:13627 shmem:1270 pagetables:597 [ 257.132371][T11166] sec_pagetables:0 bounce:0 [ 257.132371][T11166] kernel_misc_reclaimable:0 [ 257.132371][T11166] free:1393371 free_pcp:479 free_cma:0 [ 257.142068][ T5110] Bluetooth: hci2: command tx timeout [ 257.234996][T11166] Node 0 active_anon:10640kB inactive_anon:0kB active_file:6296kB inactive_file:154168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52608kB dirty:984kB writeback:0kB shmem:3544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9952kB pagetables:2388kB sec_pagetables:0kB all_unreclaimable? no [ 257.270302][T11166] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 257.303344][T11166] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.340662][T10889] veth0_macvtap: entered promiscuous mode [ 257.372657][T10889] veth1_macvtap: entered promiscuous mode [ 257.383398][T11166] lowmem_reserve[]: 0 2571 2571 0 0 [ 257.388832][T11166] Node 0 DMA32 free:1612276kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:10400kB inactive_anon:0kB active_file:6296kB inactive_file:153864kB unevictable:1536kB writepending:988kB present:3129332kB managed:2659864kB mlocked:0kB bounce:0kB free_pcp:1720kB local_pcp:1208kB free_cma:0kB [ 257.436679][T11166] lowmem_reserve[]: 0 0 0 0 0 [ 257.453705][T11166] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 257.489162][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.500983][T11166] lowmem_reserve[]: 0 0 0 0 0 [ 257.510833][T11166] Node 1 Normal free:3947808kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.525327][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.570959][T11166] lowmem_reserve[]: 0 0 0 0 0 [ 257.575889][T11166] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 257.597674][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.614970][T11166] Node 0 DMA32: 918*4kB (UE) 246*8kB (UME) 310*16kB (UME) 97*32kB (UME) 27*64kB (UME) 22*128kB (UM) 18*256kB (UME) 14*512kB (UME) 13*1024kB (UM) 6*2048kB (UME) 380*4096kB (UM) = 1612104kB [ 257.637820][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.650149][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.663004][T11166] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 257.675515][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.685955][T11166] Node 1 Normal: 2*4kB (U) 5*8kB (U) 9*16kB (U) 11*32kB (U) 8*64kB (UM) 4*128kB (U) 9*256kB (UM) 5*512kB (UM) 1*1024kB (U) 2*2048kB (U) 961*4096kB (M) = 3947808kB [ 257.703859][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.711793][T11166] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.719851][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.728734][T11166] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.749212][T11166] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.759989][T11166] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.765500][T10889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.770568][T11166] 41404 total pagecache pages [ 257.782718][T11166] 0 pages in swap cache [ 257.787066][T11166] Free swap = 124996kB [ 257.794195][T11166] Total swap = 124996kB [ 257.798507][T11166] 2097051 pages RAM [ 257.804993][T11166] 0 pages HighMem/MovableOnly [ 257.809832][T11166] 400875 pages reserved [ 257.835405][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.859402][T11166] 0 pages cma reserved [ 257.871665][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.904155][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.922298][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.928384][T11184] netlink: 'syz.0.1823': attribute type 2 has an invalid length. [ 257.943476][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.974577][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.999431][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.025118][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.036201][T10889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.051514][T10889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.067612][T10889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.082427][T10889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.096666][T10889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.107410][T10889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.118410][T10889] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.335547][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.355356][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.440239][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.469230][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.486615][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1830'. [ 258.615909][T11211] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1831'. [ 258.668122][T11211] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 258.684677][T11214] netlink: 'syz.1.1833': attribute type 2 has an invalid length. [ 258.730059][T11215] vlan0: entered allmulticast mode [ 258.747495][T11215] bond0: entered allmulticast mode [ 258.753827][T11215] bond_slave_0: entered allmulticast mode [ 258.761656][T11215] bond_slave_1: entered allmulticast mode [ 258.767652][T11215] bridge0: entered allmulticast mode [ 258.775944][T11215] bond0: left allmulticast mode [ 258.782044][T11215] bond_slave_0: left allmulticast mode [ 258.787819][T11215] bond_slave_1: left allmulticast mode [ 258.794680][T11215] bridge0: left allmulticast mode [ 259.227396][T11237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1841'. [ 259.257300][T11237] team0: entered promiscuous mode [ 259.271350][T11237] team_slave_0: entered promiscuous mode [ 259.277250][T11237] team_slave_1: entered promiscuous mode [ 259.289826][T11234] team0: left promiscuous mode [ 259.295699][T11234] team_slave_0: left promiscuous mode [ 259.308002][T11234] team_slave_1: left promiscuous mode [ 259.402515][T11241] geneve2: entered promiscuous mode [ 259.407811][T11241] geneve2: entered allmulticast mode [ 259.630122][T11254] netlink: 'syz.4.1848': attribute type 1 has an invalid length. [ 259.663594][T11256] netlink: 'syz.1.1849': attribute type 10 has an invalid length. [ 260.059903][T11278] netlink: 'syz.4.1855': attribute type 9 has an invalid length. [ 260.108646][T11278] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 260.208270][T11282] netlink: 'syz.1.1856': attribute type 3 has an invalid length. [ 260.218482][T11282] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1856'. [ 260.307158][T11286] netlink: 'syz.1.1859': attribute type 1 has an invalid length. [ 260.522778][T11300] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 260.538421][T11299] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1864'. [ 260.548518][T11299] openvswitch: netlink: Flow key attribute not present in set flow. [ 260.590385][T11304] tipc: Started in network mode [ 260.596578][T11304] tipc: Node identity 00000000000000000000ffffac1414, cluster identity 4711 [ 260.607885][T11304] tipc: Enabling of bearer rejected, failed to enable media [ 260.906363][T11325] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 261.109946][ T1102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.736148][ T1102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.855511][T11338] netlink: 'syz.1.1874': attribute type 2 has an invalid length. [ 261.898485][ T1102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.024060][T11347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1878'. [ 262.222052][ T1102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.442765][T11368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1883'. [ 262.516936][T11368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1883'. [ 262.527044][ T4489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.552478][ T4489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.573023][ T1102] bridge_slave_1: left allmulticast mode [ 262.579002][ T4489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.579149][ T1102] bridge_slave_1: left promiscuous mode [ 262.635158][ T4489] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.641058][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.662163][ T4489] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 262.663063][T11380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1883'. [ 262.682115][ T4489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 262.711740][ T1102] bridge_slave_0: left allmulticast mode [ 262.725357][ T1102] bridge_slave_0: left promiscuous mode [ 262.734432][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.535253][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.551115][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.573844][ T1102] bond0 (unregistering): Released all slaves [ 263.677022][T11395] netlink: 'syz.1.1888': attribute type 1 has an invalid length. [ 263.710533][T11371] caif0 speed is unknown, defaulting to 1000 [ 263.863565][T11406] nbd: must specify a size in bytes for the device [ 264.190851][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1892'. [ 264.220179][T11415] netlink: 'syz.1.1892': attribute type 7 has an invalid length. [ 264.518380][T11432] FAULT_INJECTION: forcing a failure. [ 264.518380][T11432] name failslab, interval 1, probability 0, space 0, times 0 [ 264.541201][T11432] CPU: 0 PID: 11432 Comm: syz.2.1897 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 264.551440][T11432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 264.561538][T11432] Call Trace: [ 264.564855][T11432] [ 264.567817][T11432] dump_stack_lvl+0x241/0x360 [ 264.572889][T11432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.578126][T11432] ? __pfx__printk+0x10/0x10 [ 264.582797][T11432] should_fail_ex+0x3b0/0x4e0 [ 264.587536][T11432] ? sctp_add_bind_addr+0x89/0x3a0 [ 264.592695][T11432] should_failslab+0x9/0x20 [ 264.597331][T11432] kmalloc_trace_noprof+0x6c/0x2c0 [ 264.602499][T11432] sctp_add_bind_addr+0x89/0x3a0 [ 264.607517][T11432] sctp_copy_local_addr_list+0x311/0x500 [ 264.613289][T11432] ? sctp_copy_local_addr_list+0xab/0x500 [ 264.619230][T11432] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 264.625431][T11432] ? sctp_v4_is_any+0x35/0x60 [ 264.630138][T11432] sctp_bind_addr_copy+0xad/0x3b0 [ 264.635185][T11432] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 264.641533][T11432] sctp_connect_new_asoc+0x2f3/0x6c0 [ 264.646844][T11432] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 264.652661][T11432] ? sctp_sendmsg+0xbb9/0x3520 [ 264.657451][T11432] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 264.663011][T11432] ? security_sctp_bind_connect+0x90/0xb0 [ 264.668843][T11432] sctp_sendmsg+0x219a/0x3520 [ 264.673567][T11432] ? __pfx_sctp_sendmsg+0x10/0x10 [ 264.678703][T11432] ? __pfx_aa_sk_perm+0x10/0x10 [ 264.683577][T11432] ? iovec_from_user+0x1b0/0x240 [ 264.688636][T11432] ? inet_sendmsg+0x330/0x390 [ 264.693431][T11432] __sock_sendmsg+0x1a6/0x270 [ 264.698135][T11432] ____sys_sendmsg+0x525/0x7d0 [ 264.702935][T11432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.708260][T11432] __sys_sendmmsg+0x3b2/0x740 [ 264.712970][T11432] ? __pfx___sys_sendmmsg+0x10/0x10 [ 264.718224][T11432] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 264.724141][T11432] ? ksys_write+0x23e/0x2c0 [ 264.728660][T11432] ? __pfx_lock_release+0x10/0x10 [ 264.733731][T11432] ? vfs_write+0x7c4/0xc90 [ 264.738171][T11432] ? __mutex_unlock_slowpath+0x21d/0x750 [ 264.743852][T11432] ? __pfx_vfs_write+0x10/0x10 [ 264.748758][T11432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 264.754755][T11432] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 264.761130][T11432] ? do_syscall_64+0x100/0x230 [ 264.765998][T11432] __x64_sys_sendmmsg+0xa0/0xb0 [ 264.770872][T11432] do_syscall_64+0xf3/0x230 [ 264.775421][T11432] ? clear_bhb_loop+0x35/0x90 [ 264.780136][T11432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.786151][T11432] RIP: 0033:0x7fcb6a575b99 [ 264.790579][T11432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.810311][T11432] RSP: 002b:00007fcb6b2f6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 264.818749][T11432] RAX: ffffffffffffffda RBX: 00007fcb6a703fa0 RCX: 00007fcb6a575b99 [ 264.826736][T11432] RDX: 0000000000000002 RSI: 0000000020000a80 RDI: 0000000000000003 [ 264.834718][T11432] RBP: 00007fcb6b2f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 264.842707][T11432] R10: 0000000000004810 R11: 0000000000000246 R12: 0000000000000002 [ 264.850687][T11432] R13: 000000000000000b R14: 00007fcb6a703fa0 R15: 00007ffda36ec228 [ 264.858687][T11432] [ 264.874492][ T4489] Bluetooth: hci2: command tx timeout [ 265.073736][T11438] netlink: 6204 bytes leftover after parsing attributes in process `syz.1.1899'. [ 265.123023][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1899'. [ 265.142343][T11435] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 265.152443][T11438] netlink: 6204 bytes leftover after parsing attributes in process `syz.1.1899'. [ 265.170867][T11434] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 265.297119][ T1102] hsr_slave_0: left promiscuous mode [ 265.311313][ T1102] hsr_slave_1: left promiscuous mode [ 265.371049][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.378790][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.388113][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.398360][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.410435][T11448] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1904'. [ 265.446960][T11448] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1904'. [ 265.457753][ T1102] veth1_macvtap: left promiscuous mode [ 265.464954][ T1102] veth0_macvtap: left promiscuous mode [ 265.471332][ T1102] veth1_vlan: left promiscuous mode [ 265.477826][ T1102] veth0_vlan: left promiscuous mode [ 265.646173][T11459] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1906'. [ 265.658297][T11459] netlink: 'syz.1.1906': attribute type 1 has an invalid length. [ 266.162971][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 266.218108][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 266.931431][ T4489] Bluetooth: hci2: command tx timeout [ 266.977079][T11444] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.984853][T11444] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.993975][T11444] bridge0: entered allmulticast mode [ 267.495221][T11371] chnl_net:caif_netlink_parms(): no params data found [ 267.731948][T11371] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.746940][T11371] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.757358][T11371] bridge_slave_0: entered allmulticast mode [ 267.772087][T11371] bridge_slave_0: entered promiscuous mode [ 267.787074][T11371] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.794666][T11371] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.802615][T11371] bridge_slave_1: entered allmulticast mode [ 267.810248][T11371] bridge_slave_1: entered promiscuous mode [ 267.878488][T11371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.914820][T11371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.927601][T11499] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1919'. [ 268.055613][T11371] team0: Port device team_slave_0 added [ 268.095547][T11371] team0: Port device team_slave_1 added [ 268.217694][T11371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.230126][T11371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.256928][T11371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.285581][T11371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.303400][T11371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.345614][T11371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.396398][T11517] netlink: 'syz.0.1924': attribute type 10 has an invalid length. [ 268.456245][T11517] team0: Port device netdevsim0 added [ 268.496603][T11516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1923'. [ 268.570897][T11371] hsr_slave_0: entered promiscuous mode [ 268.577114][T11523] netlink: 'syz.2.1926': attribute type 1 has an invalid length. [ 268.587796][T11371] hsr_slave_1: entered promiscuous mode [ 268.594279][T11523] netlink: 9344 bytes leftover after parsing attributes in process `syz.2.1926'. [ 268.605523][T11523] netlink: 'syz.2.1926': attribute type 1 has an invalid length. [ 268.614604][T11371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.622408][T11371] Cannot create hsr debugfs directory [ 269.001012][ T4489] Bluetooth: hci2: command tx timeout [ 269.188904][T11543] syzkaller0: entered promiscuous mode [ 269.201004][T11543] syzkaller0: entered allmulticast mode [ 269.566856][T11560] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 270.277914][ T5110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.293300][ T5110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.312735][ T5110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.336185][ T5110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.353047][ T5110] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.361073][ T5110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 271.091309][ T4489] Bluetooth: hci2: command tx timeout [ 272.136153][T11578] caif0 speed is unknown, defaulting to 1000 [ 272.170543][T11593] netlink: 'syz.2.1948': attribute type 4 has an invalid length. [ 272.305304][T11597] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1950'. [ 272.441313][ T5110] Bluetooth: hci0: command tx timeout [ 272.458175][ T1102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.490513][ T1102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.578231][T11371] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.631824][ T1102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.643233][ T1102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.692543][T11371] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.708944][T11610] delete_channel: no stack [ 272.722257][T11371] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.745202][T11371] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.826068][ T1102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.837079][ T1102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.937231][ T1102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.954128][ T1102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.192564][T11625] x_tables: duplicate underflow at hook 3 [ 273.419744][T11371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.473383][ T1102] bridge_slave_1: left allmulticast mode [ 273.483361][ T1102] bridge_slave_1: left promiscuous mode [ 273.489137][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.518670][ T1102] bridge_slave_0: left allmulticast mode [ 273.531024][ T1102] bridge_slave_0: left promiscuous mode [ 273.536872][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.561206][ T5110] Bluetooth: hci4: command 0x0406 tx timeout [ 273.620658][T11644] netlink: 'syz.2.1966': attribute type 9 has an invalid length. [ 273.628993][T11644] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1966'. [ 274.096941][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.110126][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.123854][ T1102] bond0 (unregistering): Released all slaves [ 274.136349][T11578] chnl_net:caif_netlink_parms(): no params data found [ 274.236014][T11645] netlink: 'syz.2.1966': attribute type 9 has an invalid length. [ 274.259428][T11645] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1966'. [ 274.306311][T11371] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.483793][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.491040][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.521062][ T4489] Bluetooth: hci0: command tx timeout [ 274.530393][T11656] vcan0: entered allmulticast mode [ 274.646162][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.653461][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.761115][ T29] audit: type=1107 audit(1719739940.875:14): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='{§4·Táöiõ %Ñ<×&¡‰ãjÓ.ä°Þ/)ОgÏe4!ëAÖ]hßX¥:[œ}3] !€›ÐzôØÔžïšžêKý7µ ¶W‚ .®âÚ‰t.—Ÿ¯-¾ çÿì;Êaˆ]ø]ï´À0 [ 274.761115][ T29] ÞÌáh'X‡K#»q•Ùì½’óQb•K•h?ó3£5^â.[ãPÇ·I3ßÇ_ [ 274.761115][ T29] fÿ1xÉô· 1 [ 275.604697][ T5110] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.616759][ T5110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.630477][ T1102] hsr_slave_0: left promiscuous mode [ 275.641380][ T5110] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.655065][ T5110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.677861][ T5110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.681058][ T5099] syz-executor (5099) used greatest stack depth: 18128 bytes left [ 275.703414][ T1102] hsr_slave_1: left promiscuous mode [ 275.716664][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.729328][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.748560][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.758443][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.812635][ T1102] veth1_macvtap: left promiscuous mode [ 275.818540][ T1102] veth0_macvtap: left promiscuous mode [ 275.832337][ T1102] veth1_vlan: left promiscuous mode [ 275.839642][ T1102] veth0_vlan: left promiscuous mode [ 276.569154][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 276.616051][ T4489] Bluetooth: hci0: command tx timeout [ 276.637155][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 277.096279][T11578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.156595][T11578] team0: Port device team_slave_0 added [ 277.225053][T11578] team0: Port device team_slave_1 added [ 277.353868][T11685] caif0 speed is unknown, defaulting to 1000 [ 277.396304][T11578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.411726][T11578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.457934][T11578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.493362][T11578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.511423][T11578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.544700][T11578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.721356][ T4489] Bluetooth: hci3: command tx timeout [ 277.768199][T11578] hsr_slave_0: entered promiscuous mode [ 277.787654][T11578] hsr_slave_1: entered promiscuous mode [ 277.810344][T11578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.819299][T11578] Cannot create hsr debugfs directory [ 277.881969][T11711] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 278.489291][ T1102] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.550345][ T5110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 278.562535][ T5110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 278.577616][ T5110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 278.611813][ T5110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 278.632802][ T5110] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 278.643810][ T5110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 278.682074][ T4489] Bluetooth: hci0: command tx timeout [ 278.704238][T11371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.739353][ T1102] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.744251][T11724] netlink: 'syz.4.1987': attribute type 3 has an invalid length. [ 278.819566][ T1102] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.905527][T11726] geneve2: entered promiscuous mode [ 278.914322][T11726] geneve2: entered allmulticast mode [ 278.936888][ T1102] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.975018][T11685] chnl_net:caif_netlink_parms(): no params data found [ 279.098715][T11719] caif0 speed is unknown, defaulting to 1000 [ 279.103574][T11733] netlink: 'syz.4.1990': attribute type 1 has an invalid length. [ 279.122211][T11733] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1990'. [ 279.131880][T11733] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1990'. [ 279.323111][T11685] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.342841][T11685] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.350164][T11685] bridge_slave_0: entered allmulticast mode [ 279.390002][T11685] bridge_slave_0: entered promiscuous mode [ 279.419698][T11371] veth0_vlan: entered promiscuous mode [ 279.446309][T11371] veth1_vlan: entered promiscuous mode [ 279.460016][T11685] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.468688][T11685] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.476840][T11685] bridge_slave_1: entered allmulticast mode [ 279.485065][T11685] bridge_slave_1: entered promiscuous mode [ 279.602878][ T1102] geneve1: left allmulticast mode [ 279.607979][ T1102] geneve1: left promiscuous mode [ 279.615456][ T1102] bridge0: port 3(geneve1) entered disabled state [ 279.629766][ T1102] bridge_slave_1: left allmulticast mode [ 279.639962][ T1102] bridge_slave_1: left promiscuous mode [ 279.656341][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.670264][ T1102] bridge_slave_0: left allmulticast mode [ 279.677375][ T1102] bridge_slave_0: left promiscuous mode [ 279.683498][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.708576][T11744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1994'. [ 279.720451][T11744] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1994'. [ 279.747080][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1994'. [ 279.801803][ T5110] Bluetooth: hci3: command tx timeout [ 279.890214][T11748] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1996'. [ 280.603227][ T1102] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 280.660110][ T1102] dvmrp5 (unregistering): left allmulticast mode [ 280.729759][ T1102] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 280.761143][ T5110] Bluetooth: hci5: command tx timeout [ 281.094604][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.106785][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.119537][ T1102] bond0 (unregistering): Released all slaves [ 281.136229][ T1102] bond1 (unregistering): Released all slaves [ 281.149266][ T1102] bond2 (unregistering): Released all slaves [ 281.163396][ T1102] bond3 (unregistering): Released all slaves [ 281.216607][T11685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.274575][T11685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.332964][T11578] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 281.356965][T11578] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 281.378717][ T1102] tipc: Left network mode [ 281.406451][T11578] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 281.419065][T11578] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 281.466444][T11685] team0: Port device team_slave_0 added [ 281.508716][T11685] team0: Port device team_slave_1 added [ 281.558710][T11685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.574182][T11685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.610106][T11685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.663696][T11685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.670679][T11685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.700222][T11685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.766859][T11371] veth0_macvtap: entered promiscuous mode [ 281.803171][T11685] hsr_slave_0: entered promiscuous mode [ 281.811939][T11685] hsr_slave_1: entered promiscuous mode [ 281.818597][T11685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.827239][T11685] Cannot create hsr debugfs directory [ 281.891898][ T5110] Bluetooth: hci3: command tx timeout [ 281.903866][T11371] veth1_macvtap: entered promiscuous mode [ 282.006258][T11719] chnl_net:caif_netlink_parms(): no params data found [ 282.118658][T11371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.138826][T11371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.149558][T11371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.160574][T11371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.171338][T11371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.182680][T11371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.196094][T11371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.393340][ T1102] hsr_slave_0: left promiscuous mode [ 282.399953][ T1102] hsr_slave_1: left promiscuous mode [ 282.408444][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.428058][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.448174][ T1102] dummy0: left promiscuous mode [ 282.453685][ T1102] veth1_macvtap: left promiscuous mode [ 282.666969][ T1102] pimreg (unregistering): left allmulticast mode [ 282.843342][ T5110] Bluetooth: hci5: command tx timeout [ 283.057847][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 283.108157][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 283.711475][T11371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.732129][T11371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.742674][T11371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.754169][T11371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.765624][T11371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.776767][T11371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.805694][T11371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.843371][T11719] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.852581][T11719] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.859898][T11719] bridge_slave_0: entered allmulticast mode [ 283.867593][T11719] bridge_slave_0: entered promiscuous mode [ 283.882215][T11719] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.889487][T11719] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.897272][T11719] bridge_slave_1: entered allmulticast mode [ 283.905392][T11719] bridge_slave_1: entered promiscuous mode [ 283.977906][ T5110] Bluetooth: hci3: command tx timeout [ 284.019994][T11371] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.049403][T11371] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.072498][T11371] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.083350][T11371] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.116067][T11719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.168732][T11719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.257618][T11719] team0: Port device team_slave_0 added [ 284.276440][T11719] team0: Port device team_slave_1 added [ 284.434696][T11578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.470557][T11719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.479068][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.508545][T11719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.522172][T11719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.529256][T11719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.557107][T11719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.584624][ T1102] IPVS: stop unused estimator thread 0... [ 284.630160][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.644085][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.654936][T11719] hsr_slave_0: entered promiscuous mode [ 284.663447][T11719] hsr_slave_1: entered promiscuous mode [ 284.672493][T11719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.680285][T11719] Cannot create hsr debugfs directory [ 284.748662][T11578] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.830702][ T2479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.852727][ T2479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.896250][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.903498][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.928022][T11685] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 284.934623][ T4489] Bluetooth: hci5: command tx timeout [ 285.028234][T11685] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 285.039588][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.046936][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.088281][T11685] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 285.100104][T11685] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 285.200617][T11719] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.337064][ T2479] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.435459][T11719] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.475444][ T2479] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.540660][T11719] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.580283][ T2479] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.675912][T11719] team0: Port device netdevsim0 removed [ 285.694445][T11719] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.739539][ T2479] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.880454][T11685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.994840][T11719] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 286.006226][T11719] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 286.029691][T11719] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 286.064283][T11719] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 286.098699][T11578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.136810][T11685] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.171634][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.178843][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.207966][ T2479] bridge_slave_1: left allmulticast mode [ 286.228406][ T2479] bridge_slave_1: left promiscuous mode [ 286.237840][ T2479] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.274983][ T2479] bridge_slave_0: left allmulticast mode [ 286.280702][ T2479] bridge_slave_0: left promiscuous mode [ 286.303027][ T2479] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.431886][ T4489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 286.444737][ T4489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 286.453706][ T4489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 286.476288][ T4489] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 286.484609][ T4489] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 286.502383][ T4489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.823122][ T2479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.847189][ T2479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.858688][ T2479] bond0 (unregistering): Released all slaves [ 286.889214][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.896483][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.001139][ T5110] Bluetooth: hci5: command tx timeout [ 287.208871][T11800] caif0 speed is unknown, defaulting to 1000 [ 287.361785][T11578] veth0_vlan: entered promiscuous mode [ 287.458129][T11578] veth1_vlan: entered promiscuous mode [ 287.716297][T11578] veth0_macvtap: entered promiscuous mode [ 287.759897][T11719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.833819][T11578] veth1_macvtap: entered promiscuous mode [ 287.872251][T11719] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.903844][T11820] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 287.952776][ T2479] hsr_slave_0: left promiscuous mode [ 287.959215][ T2479] hsr_slave_1: left promiscuous mode [ 287.980306][ T2479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.990095][ T2479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.999042][ T2479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.007897][ T2479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.037248][ T2479] veth1_macvtap: left promiscuous mode [ 288.049680][ T2479] veth0_macvtap: left promiscuous mode [ 288.056255][ T2479] veth1_vlan: left promiscuous mode [ 288.062542][ T2479] veth0_vlan: left promiscuous mode [ 288.604036][ T5110] Bluetooth: hci2: command tx timeout [ 288.669580][ T2479] team0 (unregistering): Port device team_slave_1 removed [ 288.719869][ T2479] team0 (unregistering): Port device team_slave_0 removed [ 289.257081][T11824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2020'. [ 289.282684][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.289898][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.325818][T11578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.338613][T11578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.349142][T11578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.360333][T11578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.379526][T11578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.391450][T11578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.414884][T11578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.439839][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.447123][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.488134][T11685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.504261][T11578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.518582][T11578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.536115][T11578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.550266][T11578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.561804][T11578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.572388][T11578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.595069][T11578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.689748][T11578] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.706291][T11578] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.717277][T11578] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.727462][T11578] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.089596][T11685] veth0_vlan: entered promiscuous mode [ 290.118613][T11800] chnl_net:caif_netlink_parms(): no params data found [ 290.213489][T11685] veth1_vlan: entered promiscuous mode [ 290.345101][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.422343][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.490668][T11800] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.504912][T11800] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.518192][T11800] bridge_slave_0: entered allmulticast mode [ 290.536914][T11800] bridge_slave_0: entered promiscuous mode [ 290.585266][T11800] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.595694][T11800] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.608634][T11800] bridge_slave_1: entered allmulticast mode [ 290.619584][T11800] bridge_slave_1: entered promiscuous mode [ 290.683733][ T5110] Bluetooth: hci2: command tx timeout [ 290.708651][T11800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.719037][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.729252][T11685] veth0_macvtap: entered promiscuous mode [ 290.744892][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.786652][T11800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.817699][T11685] veth1_macvtap: entered promiscuous mode [ 290.964311][T11800] team0: Port device team_slave_0 added [ 291.015795][T11685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.041565][T11685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.060591][T11685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.079639][T11685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.082125][T11857] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 291.102530][T11685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.124266][T11685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.139926][T11685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.152234][T11685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.167726][T11685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.178258][T11800] team0: Port device team_slave_1 added [ 291.264954][T11860] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000194: 0000 [#1] PREEMPT SMP KASAN PTI [ 291.277772][T11860] KASAN: null-ptr-deref in range [0x0000000000000ca0-0x0000000000000ca7] [ 291.284665][T11685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.286254][T11860] CPU: 1 PID: 11860 Comm: syz.1.2027 Not tainted 6.10.0-rc5-syzkaller-01115-g30972a4ea092 #0 [ 291.297058][T11685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.307151][T11860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 291.307172][T11860] RIP: 0010:coalesce_fill_reply+0xcc/0x1b70 [ 291.317056][T11685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.327063][T11860] Code: e8 59 cf f8 f7 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 63 9d 5e f8 bb a0 0c 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 45 9d 5e f8 48 8b 03 48 89 44 24 [ 291.327089][T11860] RSP: 0018:ffffc90004116ee0 EFLAGS: 00010202 [ 291.327111][T11860] RAX: 0000000000000194 RBX: 0000000000000ca0 RCX: 0000000000040000 [ 291.327126][T11860] RDX: ffffc900131eb000 RSI: 000000000000149d RDI: 000000000000149e [ 291.327142][T11860] RBP: ffffc90004117118 R08: ffffffff899c0ee7 R09: 006e75745f7a7973 [ 291.327159][T11860] R10: dffffc0000000000 R11: ffffffff899d5700 R12: ffffffff899d5700 [ 291.327181][T11860] R13: dffffc0000000000 R14: ffff888079c2dd40 R15: ffff88807e07e780 [ 291.327199][T11860] FS: 00007f98e09bb6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 291.327220][T11860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 291.327236][T11860] CR2: 0000000020002000 CR3: 00000000670f0000 CR4: 00000000003506f0 [ 291.327255][T11860] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 291.327270][T11860] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 291.327285][T11860] Call Trace: [ 291.327295][T11860] [ 291.327305][T11860] ? __die_body+0x88/0xe0 [ 291.327342][T11860] ? die_addr+0x108/0x140 [ 291.327378][T11860] ? exc_general_protection+0x3dd/0x5d0 [ 291.327425][T11860] ? asm_exc_general_protection+0x26/0x30 [ 291.327451][T11860] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 291.327488][T11860] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 291.327523][T11860] ? ethnl_default_dumpit+0x517/0xb30 [ 291.327552][T11860] ? coalesce_fill_reply+0xcc/0x1b70 [ 291.327591][T11860] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 291.327626][T11860] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 291.327664][T11860] ? rcu_is_watching+0x15/0xb0 [ 291.327691][T11860] ? trace_contention_end+0x3c/0x120 [ 291.327722][T11860] ? nla_put+0x131/0x1e0 [ 291.327748][T11860] ? __asan_memcpy+0x40/0x70 [ 291.327773][T11860] ? nla_put+0x131/0x1e0 [ 291.327800][T11860] ? ethnl_fill_reply_header+0x295/0x3c0 [ 291.327825][T11860] ? __pfx_netdev_run_todo+0x10/0x10 [ 291.327860][T11860] ? __pfx_ethnl_fill_reply_header+0x10/0x10 [ 291.327888][T11860] ? ethnl_ops_complete+0xba/0xd0 [ 291.327912][T11860] ? coalesce_prepare_data+0x175/0x1e0 [ 291.327947][T11860] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 291.327980][T11860] ? ethnl_default_dumpit+0x83/0xb30 [ 291.328007][T11860] ethnl_default_dumpit+0x5ac/0xb30 [ 291.328036][T11860] ? ethnl_default_dumpit+0x83/0xb30 [ 291.328093][T11860] genl_dumpit+0x107/0x1a0 [ 291.328129][T11860] netlink_dump+0x647/0xd80 [ 291.328160][T11860] ? __pfx_netlink_dump+0x10/0x10 [ 291.328202][T11860] ? genl_start+0x597/0x6d0 [ 291.328239][T11860] __netlink_dump_start+0x59f/0x780 [ 291.328270][T11860] genl_rcv_msg+0x88c/0xec0 [ 291.328302][T11860] ? mark_lock+0x9a/0x350 [ 291.328333][T11860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.328371][T11860] ? __pfx_genl_start+0x10/0x10 [ 291.328401][T11860] ? __pfx_genl_dumpit+0x10/0x10 [ 291.328432][T11860] ? __pfx_genl_done+0x10/0x10 [ 291.328473][T11860] ? __pfx_lock_acquire+0x10/0x10 [ 291.328497][T11860] ? __pfx_ethnl_default_start+0x10/0x10 [ 291.328522][T11860] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 291.328548][T11860] ? __pfx_ethnl_default_done+0x10/0x10 [ 291.328575][T11860] ? __pfx___might_resched+0x10/0x10 [ 291.328611][T11860] netlink_rcv_skb+0x1e3/0x430 [ 291.328636][T11860] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.328667][T11860] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.328701][T11860] ? __netlink_deliver_tap+0x77e/0x7c0 [ 291.328736][T11860] genl_rcv+0x28/0x40 [ 291.328766][T11860] netlink_unicast+0x7f0/0x990 [ 291.328794][T11860] ? __pfx_netlink_unicast+0x10/0x10 [ 291.328816][T11860] ? __virt_addr_valid+0x183/0x520 [ 291.328851][T11860] ? __check_object_size+0x49c/0x900 [ 291.328888][T11860] ? bpf_lsm_netlink_send+0x9/0x10 [ 291.328926][T11860] netlink_sendmsg+0x8e4/0xcb0 [ 291.328961][T11860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.328990][T11860] ? __import_iovec+0x536/0x820 [ 291.329015][T11860] ? aa_sock_msg_perm+0x91/0x160 [ 291.342286][T11685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.345311][T11860] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 291.365042][T11685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.371053][T11860] ? security_socket_sendmsg+0x87/0xb0 [ 291.371090][T11860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.379033][T11685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.386990][T11860] __sock_sendmsg+0x221/0x270 [ 291.387023][T11860] ____sys_sendmsg+0x525/0x7d0 [ 291.387060][T11860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.387102][T11860] __sys_sendmsg+0x2b0/0x3a0 [ 291.387138][T11860] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.387175][T11860] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 291.387233][T11860] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.387261][T11860] ? do_syscall_64+0x100/0x230 [ 291.387285][T11860] ? do_syscall_64+0xb6/0x230 [ 291.387309][T11860] do_syscall_64+0xf3/0x230 [ 291.387332][T11860] ? clear_bhb_loop+0x35/0x90 [ 291.387362][T11860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.387388][T11860] RIP: 0033:0x7f98dfb75b99 [ 291.387408][T11860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.387428][T11860] RSP: 002b:00007f98e09bb048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.872390][T11860] RAX: ffffffffffffffda RBX: 00007f98dfd03fa0 RCX: 00007f98dfb75b99 [ 291.880378][T11860] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000007 [ 291.888356][T11860] RBP: 00007f98dfbf677e R08: 0000000000000000 R09: 0000000000000000 [ 291.896339][T11860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.904319][T11860] R13: 000000000000000b R14: 00007f98dfd03fa0 R15: 00007ffe326a3bd8 [ 291.912347][T11860] [ 291.915377][T11860] Modules linked in: [ 291.925783][T11685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.939273][T11685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.953959][T11685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.968158][T11685] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.980033][T11685] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.989669][T11685] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.000977][T11860] ---[ end trace 0000000000000000 ]--- [ 292.001553][T11685] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.008457][T11860] RIP: 0010:coalesce_fill_reply+0xcc/0x1b70 [ 292.023112][T11860] Code: e8 59 cf f8 f7 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 63 9d 5e f8 bb a0 0c 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 45 9d 5e f8 48 8b 03 48 89 44 24 [ 292.049393][T11860] RSP: 0018:ffffc90004116ee0 EFLAGS: 00010202 [ 292.055676][T11860] RAX: 0000000000000194 RBX: 0000000000000ca0 RCX: 0000000000040000 [ 292.057830][T11800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.063922][T11860] RDX: ffffc900131eb000 RSI: 000000000000149d RDI: 000000000000149e [ 292.078891][T11860] RBP: ffffc90004117118 R08: ffffffff899c0ee7 R09: 006e75745f7a7973 [ 292.081890][T11800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.087117][T11860] R10: dffffc0000000000 R11: ffffffff899d5700 R12: ffffffff899d5700 [ 292.121656][T11800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.125849][T11719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.136549][T11860] R13: dffffc0000000000 R14: ffff888079c2dd40 R15: ffff88807e07e780 [ 292.149680][T11860] FS: 00007f98e09bb6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 292.162382][T11800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.169360][T11800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.171757][T11860] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 292.200375][T11800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.206632][T11860] CR2: 0000000000000000 CR3: 00000000670f0000 CR4: 00000000003506f0 [ 292.221555][T11860] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 292.229998][T11860] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 292.238399][T11860] Kernel panic - not syncing: Fatal exception [ 292.244781][T11860] Kernel Offset: disabled [ 292.249117][T11860] Rebooting in 86400 seconds..