last executing test programs: 1m13.566066191s ago: executing program 2 (id=436): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x0, 0x9, 0x1000, 0x1000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x6, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0x1, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000008c0)={0xffffffffffffffff, 0xc, 0x10}, 0xc) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={&(0x7f0000000900)='./file0\x00', 0x0, 0x8}, 0x18) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000009c0)=@generic={&(0x7f0000000980)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xb, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r11, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r13, 0x10e, 0xa, &(0x7f0000000340)=""/227, &(0x7f0000000240)=0xe3) r14 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x20, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xae2, 0x0, 0x0, 0x0, 0xc8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5}, @exit, @jmp={0x5, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0xffffffffffffffff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x800, 0x2c, &(0x7f00000003c0)=""/44, 0x40f00, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000780)={0x1, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0xc, 0x5, 0x69f, 0x2}, 0x10, 0x1cd2d, 0xffffffffffffffff, 0x2, &(0x7f0000000ac0)=[r5, r6, r7, r8, r9, r10, 0x1, 0xffffffffffffffff, r12], &(0x7f0000000b00)=[{0x6, 0x2, 0x5, 0xb}, {0x2, 0x5, 0x1, 0xb}], 0x10, 0x401, @void, @value}, 0x94) r15 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r14}, 0x8) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) r16 = socket$nl_route(0x10, 0x3, 0x0) r17 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r17, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x1c, 0x36, 0x61b, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x8d, 0x0, 0x0, @u32=0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1004}, 0x40884) r18 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r16, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r18}, @IFLA_GTP_FD1={0x8, 0x2, @udp=r18}]}}}]}, 0x40}}, 0x0) r19 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r19, 0x84, 0x23, &(0x7f0000000040)="020000000980ffff", 0x8) connect$inet(r18, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) openat$cgroup_type(r15, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX=r16], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m13.384379253s ago: executing program 2 (id=439): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x18}}, 0x40) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x6}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d8", 0xe}], 0x2, 0x8) r4 = socket$inet(0x2, 0x3, 0x7f) shutdown(r4, 0x1) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) setsockopt$inet_buf(r3, 0x0, 0x4, &(0x7f0000001140)="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", 0x1000) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) splice(r2, 0x0, r4, 0x0, 0x8000, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="02"], 0x10) close(r6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="02"], 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x2f9, 0xfffffffffffffe6f, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000e80)="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", &(0x7f0000000680)="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", 0x3}, 0x28) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@dev, @broadcast, 0x0}, &(0x7f00000002c0)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x4c, &(0x7f0000000200), 0x4) recvmsg$unix(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCNRDECOBS(r11, 0xff03) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xf, '\x00', r9, r11, 0x3, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) 1m12.434893178s ago: executing program 2 (id=444): r0 = socket$inet6(0xa, 0x80000, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none, 0x6, 0x2}, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x140, 0x140, 0x140, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000280), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, [0x0, 0x0, 0xff000000], [0xffffffff, 0xff000000, 0xff, 0xff000000], 'bond0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x5c, 0x4, 0x2, 0x8}, 0x0, 0x100, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x3}}, @common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x5, 0x6, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4b, 0x8}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xff, 0xffffff00, 0xff000000, 0xff], [0xffffffff, 0x0, 0xff000000, 0xffffff00], 'ip6gretap0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x87, 0x4, 0x3, 0x2}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0xf326, 0x1, 0x0, [0x58af, 0xfff, 0x7, 0x1, 0x9, 0x7, 0x10, 0x7, 0x1e2c, 0x7, 0x7, 0x2, 0x9326, 0x1ff, 0xffff, 0x1], 0x7}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x3, 0x1}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0xffffffff, 0xff000000, 0xffffffff], [0xffffff00, 0xff, 0xffffff00, 0xff], 'dvmrp0\x00', '\x00', {}, {}, 0x32, 0x1b, 0x0, 0xa}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x67, 0x0, "7d72fdeb9cbb1e666fad298b66b25d85c3b01ea0229a3f034584d0d0ba8f"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b40000009078fffc0a0400050200000000280000000038068b91000000000000"], 0x4e) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000040)=0x3, 0x4) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, 0x0, 0x0) r5 = getgid() r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) r8 = getpid() write$cgroup_pid(r7, &(0x7f0000000380)=r8, 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000240)=r8, 0x12) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0}, &(0x7f00000009c0)=0xc) r12 = getgid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000a00)=0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1, &(0x7f0000000a40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r8, r11, r12}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, 0xee01}}}, @rights={{0x28, 0x1, 0x1, [r0, r3, r1, r3, r1, r2]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0xa0, 0x24040040}}], 0x1, 0x20000000) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000000c0)={'HL\x00'}, &(0x7f0000000100)=0x1e) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) 1m10.304734947s ago: executing program 2 (id=475): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x1055}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 49.625228091s ago: executing program 0 (id=716): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a00", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) socket(0x1, 0x803, 0x0) 43.401326697s ago: executing program 0 (id=716): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a00", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) socket(0x1, 0x803, 0x0) 34.758520514s ago: executing program 0 (id=716): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a00", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) socket(0x1, 0x803, 0x0) 26.424348768s ago: executing program 0 (id=716): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a00", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) socket(0x1, 0x803, 0x0) 22.073175556s ago: executing program 2 (id=475): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x1055}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 14.529689905s ago: executing program 0 (id=716): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a00", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) socket(0x1, 0x803, 0x0) 13.623163519s ago: executing program 2 (id=475): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x1055}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 6.428620024s ago: executing program 1 (id=1034): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000014000306000000000000edff10000d000100bc0a5a"], 0x24}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b0900ec2700000000000000660000000f0000f495"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000005c0)='initcall_level\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/26, 0x2000, 0x1000, 0x1, 0x7}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, 0x0, 0x0) r7 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r9, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r7, &(0x7f0000000380)={0xa0000001}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB='/\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="3f20ad32"], 0x20) ppoll(&(0x7f0000000200)=[{r10, 0x1}], 0x1, 0x0, 0x0, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) 5.475439012s ago: executing program 1 (id=1037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfc}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x2c}}, 0x0) (fail_nth: 7) 4.339839012s ago: executing program 1 (id=1040): r0 = socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000580)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) close(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200000024000480200001800700010063740000140002800800024000000003080001401870d04a0900010073797a30000000000900020073f97a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x6, 0x4, 0x4, 0x7f}}}}]}, 0x48}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x4, 0x1, 0x0, {0xa, 0x4e20, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}, 0x32) socket(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r6, 0x10e, 0xb, 0x0, 0x0) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f00000001c0)={0x1, 'rose0\x00', {}, 0x1ff}) listen(r8, 0x3) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r10 = accept4(r8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r10) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00', @ANYBLOB], 0x54}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x56, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 4.088682572s ago: executing program 4 (id=1041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) 4.009860332s ago: executing program 4 (id=1042): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1b, 0x8, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x58, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0x18, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, {0xa}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) 3.905279093s ago: executing program 3 (id=1043): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000002700010000000000000000000a010100000000000000000000000000ac95010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x0) 3.796041484s ago: executing program 4 (id=1044): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0x913e0000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@type_tag={0x3, 0x0, 0x0, 0x12, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4}}]}, {0x0, [0x0, 0x0, 0x61, 0x30, 0x2e]}}, &(0x7f00000002c0)=""/95, 0x43, 0x5f, 0x1, 0x8, 0x10000, @value=r0}, 0x28) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x5f}], 0x1, 0x20000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x3000002, 0x11, r4, 0x1000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100010002cbd7000ffdbdf2518000000776ed662d208ad592457378b0daafbdde3da99e884c4deb47e0a6bd170a6d85f29f885dfe9ef9373be840636b5c5f122eb32d9e299ddb3b681a2c0004b1cedd1623215874b800dbf5b3d1486c2c84d3eb640b9feb2553f3302568d33efe4e63022c4bae12c39c39a99347689fd6c9e458c5213664412deca40caa71c89a57cb3caf1c9aa34fb7d4bbc6ca2"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r6, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@abs={0x1}, 0x4f) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000000100)="29000000140005b7ff000000040860eb0101b6ff021596db2d6d6974b5d728aa4b5d02c26ed638eeb7", 0x29) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 3.769194908s ago: executing program 3 (id=1045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="740000000008010100000000000000000a000000440004800800034000000000080002400000000d0800014000000800080001400000c19c080004400000000908000140000002000800014000000000081002400000000406000240000000000900010073797a31000000000500030021"], 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b400000000000000731132000000000016640000000001009500740000000000ba56e23690a87d00935e6c02bdc1aa666714e5893645da93e92b81970ec7"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) 3.625207361s ago: executing program 4 (id=1046): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x4000}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000"], 0xffe) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{0x0}], 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f00000000c0)=ANY=[@ANYRES32=r5]) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000200)='lp\x00', 0x3) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f00000001c0)='\x00', 0x1}], 0x2}, 0xb00) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000009000000cf0000", @ANYRES32=0x0, @ANYRES16=r6], 0x40}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, 0x0, 0x20000007) 3.614693551s ago: executing program 3 (id=1047): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$inet(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="29b5c4b8a397c3b700b85954863b9864a3c7d31ab958e0e685b3f93731800c9f21c4d7f2d15093013200"/55, 0x37}, {&(0x7f00000026c0)="56106b1d642bed243274c68e2fc4488d07dcdb409c5f8ba52924b81e50a6ca2b4afea85b3fe568af8a3ce8448be94f775df90ac8160c369e37d6aa8dfbaa6a575b8277ed60e8d0e052fd1bc8fa623af933bb2c2bc8c6e1f117093db32ca692d9f73b64c68efab7d46c839e69f058614a583078f63d5b1867fa069a8d893f7ee6485bc0ec8ef94a12caae7a8671b88b502eeef8afeefed18c2bce4951b69b3011afc561a0dcab6248c808139b0d5239acadfeb83b167fe5352c54992dca1d7d8e0977c9240a184983b9ed8ee0fdba71a12e05d5", 0xd3}, {&(0x7f0000000340)="8635fe769ae013524dcdecfd6d57f7990870f6aa54274518e010fb11e0837799698a74dea650aa003895486acf063fbc3081a2f5427d1e715cb5c14c155d5ffa6838952635e819b704", 0x49}, {&(0x7f0000000400)="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", 0x14e}], 0x4}}], 0x2, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfc}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x2c}}, 0x0) 3.506173512s ago: executing program 3 (id=1048): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1453f46ba8afd9d75630e1acd1fcc0a6b7e75619a3dafff4959c1160e035fa49bf889a4d5638327c9b9bd6602825f9e4acbb78dd1d8673bd45c1", 0x3a}], 0x1}], 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x82, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e0460000000000000000110000ac1414aa00000000830300072815443c0003e0000029000000000000000000000000ac1414aa00000000ac1414bb00000000009f9fa924000000000014000000000000000000000000000000030000000dcd16a769f09135549767fb31840f5cfd69d5ea560604ad493166d5ed76ca85f938938068f996700d3fc626e27a92793a0eb4"], 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) pipe(0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r4, &(0x7f0000000380)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f8864f06712", 0x15}, {&(0x7f0000000100)='\x00\x00', 0x2}, {&(0x7f0000000280)="0b6fd020637d0e5b3b45106a5e", 0xd}], 0x3) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x3f5, 0x4, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x400c020) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x339) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) 3.32913145s ago: executing program 1 (id=1049): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x20000000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x17, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x810, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='signal_deliver\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x100}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x30000003}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r7}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async, rerun: 32) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r5) (rerun: 32) 227.234258ms ago: executing program 3 (id=1050): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x852, 0x4) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x9}, 0x8) 219.117845ms ago: executing program 4 (id=1051): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x3f, 0xe8d0, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @mcast1, 0x3, 0x4}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000008000000060000000100000f020000000506190005000000060000003d770e0000000000000f02000000759f00000000000030"], &(0x7f0000000700)=""/164, 0x48, 0xa4, 0xa, 0x0, 0x0, @void, @value}, 0x28) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000), &(0x7f00000000c0)=@udp=r3}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0xc, 0x4, 0x2, 0x10, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000004c0)={'broute\x00', 0x0, 0x3, 0xb1, [0x7ff, 0x80, 0x7, 0x1, 0x4, 0xdc6], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000400)=""/177}, &(0x7f0000000080)=0x78) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4, &(0x7f0000000100)}, 0x20) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000940), &(0x7f0000000240)=@udp6=r5}, 0x20) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48) 169.176922ms ago: executing program 1 (id=1052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 128.455498ms ago: executing program 3 (id=1053): unshare(0x20000400) (async) r0 = socket(0x40000000015, 0x5, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x5, 0x0, 0x1, 0x76, 0x6, @local}, 0x14) unshare(0x20000400) (async) r1 = socket(0x2, 0x80805, 0x0) (async) unshare(0x48060600) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="c31a1c085df8130465ded1b9206412940246351d2bbe4c8197cdbaeacc1d208c554e49a040f24fc0d35da69df92cb010f7018a6e1dd5e46b8d57b0b03064d8ff2bacabdb5c54ea1782b558caf8808215f5961bab46734baa01337c0936368f9f0ed4a415139ca023d8529b22186afc4fedb8355c1cb79343a351ba2fcd43c1064269b8cae90eed7be92b6f148045c0e71bcc5a7ed47739c8c36f532f7e883ad689de1ea60509050858b7f86acb", 0xad, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x240000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) 71.580482ms ago: executing program 4 (id=1054): socket(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000002c0)={0x0, {{0x2, 0x4e21, @multicast1}}}, 0x88) connect$bt_sco(r7, &(0x7f0000001ac0), 0x8) unshare(0x8000400) connect$bt_sco(r7, &(0x7f0000001b00), 0x8) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253afff20008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x24040884) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8400000c", @ANYRES16=r5, @ANYBLOB="000429bd7000fbdbdf258100000008000300", @ANYRES32, @ANYBLOB="0c009900ffffffff480000000a00060008021100000100000a00060008021100000000000a000600080211000001000006006600f7880000060066000102000006006600010200001e003300a034fa00ffffffffffff080211000000080211000001860038000000"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r8, &(0x7f0000000240)=[{&(0x7f00000001c0)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f00000005c0)="dad1f86796fd80b4aca25cb0cd288cfd293d9bebbdb9d650f54099", 0x1b}], 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0x9}]}}) 39.570559ms ago: executing program 1 (id=1055): r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000320002ffffe6000000000000000010003300000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) (async) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x294}}, 0x4048010) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x10, 0x14, 0x2}, [@FRA_SRC={0x14, 0x2, @remote}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c00000010003904000000000000000000000020", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) 0s ago: executing program 0 (id=716): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$rxrpc(0x21, 0x2, 0x2) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a00", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) socket(0x1, 0x803, 0x0) kernel console output (not intermixed with test programs): ode 1 Normal: 147*4kB (UM) 62*8kB (UME) 39*16kB (UME) 176*32kB (UME) 84*64kB (UME) 32*128kB (UME) 15*256kB (UME) 11*512kB (UME) 5*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3906220kB [ 99.470992][ T7178] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.497156][ T7178] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.501273][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.345'. [ 99.514183][ T7178] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.529505][ T7178] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.541070][ T7178] 41263 total pagecache pages [ 99.545806][ T7178] 0 pages in swap cache [ 99.550093][ T7178] Free swap = 124996kB [ 99.565585][ T7178] Total swap = 124996kB [ 99.572000][ T7178] 2097051 pages RAM [ 99.575852][ T7178] 0 pages HighMem/MovableOnly [ 99.585713][ T7178] 427864 pages reserved [ 99.590022][ T7178] 0 pages cma reserved [ 100.776339][ T7249] netlink: 44 bytes leftover after parsing attributes in process `syz.0.346'. [ 101.686317][ T7234] batadv0: left allmulticast mode [ 101.696743][ T7234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.704072][ T7234] batadv0: entered allmulticast mode [ 101.713577][ T7234] team0: Port device batadv0 added [ 101.965814][ T7265] dccp_invalid_packet: P.Data Offset(155) too large [ 102.686041][ T7302] Cannot find del_set index 2 as target [ 102.732222][ T7304] netlink: 56 bytes leftover after parsing attributes in process `syz.2.364'. [ 103.235946][ T7325] netlink: 68 bytes leftover after parsing attributes in process `syz.3.371'. [ 103.255320][ T7325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'. [ 103.575116][ T5921] hid-generic 0005:0458:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 103.944630][ T7348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.378'. [ 103.959848][ T7350] IPv6: Can't replace route, no match found [ 104.193624][ T7362] netlink: 240 bytes leftover after parsing attributes in process `syz.0.378'. [ 104.298028][ T7370] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 104.582038][ T7385] netlink: 32 bytes leftover after parsing attributes in process `syz.3.387'. [ 104.619235][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.386'. [ 104.704502][ T7394] vlan3: entered allmulticast mode [ 104.717351][ T7394] vlan0: entered allmulticast mode [ 104.737302][ T7394] veth0_vlan: entered allmulticast mode [ 104.756695][ T7394] bridge0: port 3(vlan3) entered blocking state [ 104.774323][ T7394] bridge0: port 3(vlan3) entered disabled state [ 104.795440][ T7394] vlan3: entered promiscuous mode [ 104.814778][ T7394] vlan0: entered promiscuous mode [ 104.822494][ T7394] bridge0: port 3(vlan3) entered blocking state [ 104.829151][ T7394] bridge0: port 3(vlan3) entered forwarding state [ 104.871480][ T7396] : renamed from bond_slave_0 (while UP) [ 105.015697][ T7400] Bluetooth: MGMT ver 1.23 [ 105.036749][ T7399] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 105.610215][ T7417] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode broadcast(3) [ 105.640750][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 105.663645][ T7421] netlink: 830 bytes leftover after parsing attributes in process `syz.1.399'. [ 105.821512][ T7428] FAULT_INJECTION: forcing a failure. [ 105.821512][ T7428] name failslab, interval 1, probability 0, space 0, times 0 [ 105.859038][ T7428] CPU: 0 UID: 0 PID: 7428 Comm: syz.0.401 Not tainted 6.14.0-rc2-syzkaller-00576-gde7a88b639d4 #0 [ 105.859062][ T7428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 105.859071][ T7428] Call Trace: [ 105.859077][ T7428] [ 105.859084][ T7428] dump_stack_lvl+0x241/0x360 [ 105.859109][ T7428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.859126][ T7428] ? __pfx__printk+0x10/0x10 [ 105.859146][ T7428] ? ref_tracker_alloc+0x332/0x490 [ 105.859171][ T7428] should_fail_ex+0x40a/0x550 [ 105.859196][ T7428] should_failslab+0xac/0x100 [ 105.859217][ T7428] ? skb_clone+0x20c/0x390 [ 105.859237][ T7428] kmem_cache_alloc_noprof+0x70/0x380 [ 105.859264][ T7428] skb_clone+0x20c/0x390 [ 105.859289][ T7428] __netlink_deliver_tap+0x3c4/0x7f0 [ 105.859321][ T7428] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.859342][ T7428] netlink_deliver_tap+0x19d/0x1b0 [ 105.859364][ T7428] netlink_sendskb+0x68/0x140 [ 105.859384][ T7428] netlink_unicast+0x39d/0x990 [ 105.859401][ T7428] ? __asan_memcpy+0x40/0x70 [ 105.859429][ T7428] ? __pfx_netlink_unicast+0x10/0x10 [ 105.859459][ T7428] netlink_rcv_skb+0x294/0x480 [ 105.859482][ T7428] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.859500][ T7428] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.859534][ T7428] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 105.859569][ T7428] genl_rcv+0x28/0x40 [ 105.859585][ T7428] netlink_unicast+0x7f6/0x990 [ 105.859613][ T7428] ? __pfx_netlink_unicast+0x10/0x10 [ 105.859630][ T7428] ? __virt_addr_valid+0x45f/0x530 [ 105.859653][ T7428] ? __phys_addr_symbol+0x2f/0x70 [ 105.859673][ T7428] ? __check_object_size+0x47a/0x730 [ 105.859696][ T7428] netlink_sendmsg+0x8de/0xcb0 [ 105.859721][ T7428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.859739][ T7428] ? aa_sock_msg_perm+0x91/0x160 [ 105.859766][ T7428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.859779][ T7428] __sock_sendmsg+0x221/0x270 [ 105.859796][ T7428] ____sys_sendmsg+0x53a/0x860 [ 105.859825][ T7428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.859843][ T7428] ? __fget_files+0x2a/0x410 [ 105.859866][ T7428] ? __fget_files+0x2a/0x410 [ 105.859894][ T7428] __sys_sendmsg+0x269/0x350 [ 105.859917][ T7428] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.859949][ T7428] ? do_sys_openat2+0x17a/0x1d0 [ 105.860005][ T7428] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.860028][ T7428] ? do_syscall_64+0x100/0x230 [ 105.860050][ T7428] ? do_syscall_64+0xb6/0x230 [ 105.860071][ T7428] do_syscall_64+0xf3/0x230 [ 105.860089][ T7428] ? clear_bhb_loop+0x35/0x90 [ 105.860110][ T7428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.860126][ T7428] RIP: 0033:0x7efe2fb8cde9 [ 105.860141][ T7428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.860153][ T7428] RSP: 002b:00007efe309ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.860170][ T7428] RAX: ffffffffffffffda RBX: 00007efe2fda5fa0 RCX: 00007efe2fb8cde9 [ 105.860182][ T7428] RDX: 0000000020000000 RSI: 0000400000000240 RDI: 0000000000000004 [ 105.860192][ T7428] RBP: 00007efe309ea090 R08: 0000000000000000 R09: 0000000000000000 [ 105.860200][ T7428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.860209][ T7428] R13: 0000000000000000 R14: 00007efe2fda5fa0 R15: 00007ffd396359e8 [ 105.860233][ T7428] [ 105.862803][ T7432] openvswitch: netlink: Key type 29 is not supported [ 106.355871][ T7447] veth1_macvtap: left promiscuous mode [ 106.361590][ T7447] macsec0: entered promiscuous mode [ 106.366897][ T7447] macsec0: entered allmulticast mode [ 106.376545][ T7447] veth1_macvtap: entered promiscuous mode [ 106.382463][ T7447] veth1_macvtap: entered allmulticast mode [ 106.388813][ T7447] macsec0: left promiscuous mode [ 106.394362][ T7447] macsec0: left allmulticast mode [ 106.396997][ T7444] netlink: 'syz.0.405': attribute type 10 has an invalid length. [ 106.399531][ T7447] veth1_macvtap: left allmulticast mode [ 106.460083][ T7444] netlink: 40 bytes leftover after parsing attributes in process `syz.0.405'. [ 106.506193][ T7444] bridge0: port 4(veth0_vlan) entered blocking state [ 106.543171][ T7450] netlink: 'syz.4.409': attribute type 9 has an invalid length. [ 106.552863][ T7444] bridge0: port 4(veth0_vlan) entered disabled state [ 106.562542][ T7450] netlink: 'syz.4.409': attribute type 7 has an invalid length. [ 106.580015][ T7444] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 106.630547][ T7450] netlink: 'syz.4.409': attribute type 8 has an invalid length. [ 106.630822][ T7452] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 106.997304][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.413'. [ 107.062664][ T7467] ip6tnl2: entered promiscuous mode [ 107.077153][ T7467] ip6tnl2: entered allmulticast mode [ 107.078548][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 107.188636][ T7471] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 107.388337][ T7484] wg1 speed is unknown, defaulting to 1000 [ 107.397506][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 107.414376][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.419'. [ 107.425147][ T7487] netlink: 'syz.4.419': attribute type 5 has an invalid length. [ 107.569839][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 107.595456][ T7494] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 107.621235][ T7497] netlink: 'syz.2.422': attribute type 10 has an invalid length. [ 107.932381][ T7511] vlan2: entered allmulticast mode [ 108.294791][ T7524] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.303758][ T7524] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.312350][ T7524] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.320640][ T7524] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.475061][ T7523] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 108.615474][ T7534] netlink: 'syz.1.432': attribute type 1 has an invalid length. [ 108.774799][ T7541] wg1 speed is unknown, defaulting to 1000 [ 108.829302][ T7545] bridge0: entered promiscuous mode [ 108.836029][ T7545] erspan0: entered promiscuous mode [ 109.677905][ T7570] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 109.797023][ T7569] __nla_validate_parse: 59 callbacks suppressed [ 109.797042][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 109.871742][ T7570] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.902825][ T7567] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 109.995694][ T7567] bond1: (slave batadv1): making interface the new active one [ 110.036518][ T7567] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 110.080919][ T7569] vlan4: entered promiscuous mode [ 110.086147][ T7569] bond1: entered promiscuous mode [ 110.102077][ T7569] batadv1: entered promiscuous mode [ 110.114843][ T7569] bond1: left promiscuous mode [ 110.124647][ T7569] batadv1: left promiscuous mode [ 110.259469][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.446'. [ 110.317446][ T7585] netlink: 'syz.1.447': attribute type 1 has an invalid length. [ 110.395967][ T7582] syzkaller1: entered promiscuous mode [ 110.410450][ T7582] syzkaller1: entered allmulticast mode [ 110.525650][ T7595] netlink: 'syz.0.449': attribute type 6 has an invalid length. [ 110.638773][ T7599] netlink: 20 bytes leftover after parsing attributes in process `syz.4.451'. [ 110.652835][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.452'. [ 110.679158][ T7599] netlink: 48 bytes leftover after parsing attributes in process `syz.4.451'. [ 110.703490][ T7601] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 110.709342][ T7593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.727897][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.451'. [ 110.741528][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 110.825674][ T7607] netlink: 24 bytes leftover after parsing attributes in process `syz.3.454'. [ 110.901356][ T7611] netlink: 28 bytes leftover after parsing attributes in process `syz.3.456'. [ 110.915219][ T7611] netlink: 36 bytes leftover after parsing attributes in process `syz.3.456'. [ 111.267436][ T7629] wg1 speed is unknown, defaulting to 1000 [ 111.867204][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 112.487029][ T7672] validate_nla: 1 callbacks suppressed [ 112.487049][ T7672] netlink: 'syz.0.476': attribute type 1 has an invalid length. [ 113.039652][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.063635][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.077850][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.107145][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.118379][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 113.147708][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.223345][ T7702] wg1 speed is unknown, defaulting to 1000 [ 113.388056][ T7724] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 113.412169][ T7725] netlink: 'syz.3.490': attribute type 5 has an invalid length. [ 113.421576][ T7723] netlink: 'syz.3.490': attribute type 5 has an invalid length. [ 113.508084][ T7727] IPVS: set_ctl: invalid protocol: 20551 255.255.255.255:20001 [ 113.703572][ T81] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 113.712324][ T81] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 113.725669][ T81] bond0 (unregistering): Released all slaves [ 113.952733][ T7738] netdevsim netdevsim3: Direct firmware load for . [ 113.952733][ T7738] failed with error -2 [ 113.957606][ T7737] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.970772][ T7737] IPv6: NLM_F_CREATE should be set when creating new route [ 113.981801][ T7738] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 113.981801][ T7738] [ 113.997675][ T7742] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 114.327622][ T81] hsr_slave_0: left promiscuous mode [ 114.339716][ T81] hsr_slave_1: left promiscuous mode [ 114.923817][ T81] batadv0 (unregistering): left allmulticast mode [ 114.936163][ T81] team0 (unregistering): Port device batadv0 removed [ 115.111555][ T7761] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.119015][ T7761] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.210472][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.225640][ T7761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.237240][ T5838] Bluetooth: hci4: command tx timeout [ 115.278494][ T7761] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.287410][ T7761] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.295886][ T7761] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.304828][ T7761] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.332581][ T7761] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.341338][ T7761] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.350116][ T7761] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.358747][ T7761] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 115.408950][ T7702] chnl_net:caif_netlink_parms(): no params data found [ 115.475217][ T7772] sctp: [Deprecated]: syz.4.505 (pid 7772) Use of int in max_burst socket option. [ 115.475217][ T7772] Use struct sctp_assoc_value instead [ 115.545526][ T7775] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 115.585198][ T7781] __nla_validate_parse: 42 callbacks suppressed [ 115.585216][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 115.604421][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.505'. [ 115.636761][ T7702] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.643912][ T7702] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.691185][ T7702] bridge_slave_0: entered allmulticast mode [ 115.712780][ T7702] bridge_slave_0: entered promiscuous mode [ 115.725260][ T7786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.508'. [ 115.799351][ T7702] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.806569][ T7702] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.815159][ T7702] bridge_slave_1: entered allmulticast mode [ 115.822429][ T7702] bridge_slave_1: entered promiscuous mode [ 115.847924][ T7789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.509'. [ 115.861737][ T7791] netlink: 16 bytes leftover after parsing attributes in process `syz.4.510'. [ 115.893248][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.511'. [ 115.897988][ T7791] syz_tun: entered promiscuous mode [ 115.902255][ T7793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.511'. [ 115.919452][ T7791] syz_tun: left promiscuous mode [ 115.968727][ T7796] netlink: 44 bytes leftover after parsing attributes in process `syz.1.511'. [ 115.981463][ T7702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.040991][ T7702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.176249][ T7702] team0: Port device team_slave_0 added [ 116.193628][ T7804] netlink: 24 bytes leftover after parsing attributes in process `syz.1.513'. [ 116.206555][ T7702] team0: Port device team_slave_1 added [ 116.312626][ T7702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.325478][ T7702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.342710][ T7809] netlink: 428 bytes leftover after parsing attributes in process `syz.0.516'. [ 116.375622][ T7702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.415222][ T7702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.422427][ T7702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.486103][ T7702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.621652][ T7702] hsr_slave_0: entered promiscuous mode [ 116.639624][ T7702] hsr_slave_1: entered promiscuous mode [ 116.651914][ T7702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.663507][ T7702] Cannot create hsr debugfs directory [ 116.705777][ T7825] netlink: 'syz.1.518': attribute type 1 has an invalid length. [ 117.322973][ T5838] Bluetooth: hci4: command tx timeout [ 117.433686][ T7702] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 117.456420][ T7702] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.479839][ T7702] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.501049][ T7702] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 117.582140][ T7702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.605299][ T7702] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.617048][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.625209][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.646030][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.653171][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.816912][ T7702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.856750][ T7702] veth0_vlan: entered promiscuous mode [ 117.866896][ T7702] veth1_vlan: entered promiscuous mode [ 117.892523][ T7702] veth0_macvtap: entered promiscuous mode [ 117.901721][ T7702] veth1_macvtap: entered promiscuous mode [ 117.915514][ T7702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.927373][ T7702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.937347][ T7702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.947823][ T7702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.958903][ T7702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.979820][ T7702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.991763][ T7702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.013826][ T7702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.036774][ T7702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.055477][ T7702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.069250][ T7702] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.078452][ T7702] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.087975][ T7702] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.109228][ T7702] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.214731][ T7889] netlink: 'syz.4.531': attribute type 1 has an invalid length. [ 118.322246][ T7895] ªªªªªª: renamed from lo (while UP) [ 118.374764][ T1030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.417920][ T1030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.488050][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.500526][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.570832][ T7907] xt_cluster: you have exceeded the maximum number of cluster nodes (261 > 32) [ 118.594125][ T7905] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 118.852463][ T7917] can: request_module (can-proto-3) failed. [ 118.965500][ T7930] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.974312][ T7930] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.982753][ T7930] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.991336][ T7930] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.036046][ T7930] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zR' [ 119.047075][ T7930] CPU: 1 UID: 0 PID: 7930 Comm: syz.0.540 Not tainted 6.14.0-rc2-syzkaller-00576-gde7a88b639d4 #0 [ 119.047099][ T7930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 119.047109][ T7930] Call Trace: [ 119.047116][ T7930] [ 119.047123][ T7930] dump_stack_lvl+0x241/0x360 [ 119.047152][ T7930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.047172][ T7930] ? __pfx__printk+0x10/0x10 [ 119.047195][ T7930] ? __kmalloc_cache_noprof+0x243/0x390 [ 119.047217][ T7930] ? sysfs_warn_dup+0x51/0xa0 [ 119.047241][ T7930] sysfs_warn_dup+0x8e/0xa0 [ 119.047260][ T7930] sysfs_do_create_link_sd+0xbe/0x110 [ 119.047282][ T7930] device_add_class_symlinks+0x1c5/0x250 [ 119.047309][ T7930] device_add+0x553/0xbf0 [ 119.047338][ T7930] wiphy_register+0x1922/0x2650 [ 119.047377][ T7930] ? __pfx_wiphy_register+0x10/0x10 [ 119.047396][ T7930] ? minstrel_ht_alloc+0x84b/0x940 [ 119.047427][ T7930] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 119.047459][ T7930] ieee80211_register_hw+0x35d9/0x42e0 [ 119.047488][ T7930] ? ieee80211_register_hw+0x1651/0x42e0 [ 119.047510][ T7930] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 119.047537][ T7930] ? __asan_memset+0x23/0x50 [ 119.047561][ T7930] ? __hrtimer_init+0x170/0x250 [ 119.047582][ T7930] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 119.047639][ T7930] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 119.047661][ T7930] ? trace_kmalloc+0x1f/0xd0 [ 119.047677][ T7930] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 119.047697][ T7930] ? kstrndup+0xbb/0x150 [ 119.047727][ T7930] hwsim_new_radio_nl+0xece/0x2290 [ 119.047753][ T7930] ? __pfx___nla_validate_parse+0x10/0x10 [ 119.047781][ T7930] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 119.047831][ T7930] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 119.047860][ T7930] genl_rcv_msg+0xb1f/0xec0 [ 119.047889][ T7930] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.047936][ T7930] ? __pfx_lock_acquire+0x10/0x10 [ 119.047960][ T7930] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 119.047984][ T7930] ? __pfx___might_resched+0x10/0x10 [ 119.048018][ T7930] netlink_rcv_skb+0x206/0x480 [ 119.048054][ T7930] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.048077][ T7930] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.048137][ T7930] genl_rcv+0x28/0x40 [ 119.048156][ T7930] netlink_unicast+0x7f6/0x990 [ 119.048190][ T7930] ? __pfx_netlink_unicast+0x10/0x10 [ 119.048211][ T7930] ? __virt_addr_valid+0x45f/0x530 [ 119.048237][ T7930] ? __phys_addr_symbol+0x2f/0x70 [ 119.048260][ T7930] ? __check_object_size+0x47a/0x730 [ 119.048284][ T7930] netlink_sendmsg+0x8de/0xcb0 [ 119.048312][ T7930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.048331][ T7930] ? aa_sock_msg_perm+0x91/0x160 [ 119.048361][ T7930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.048376][ T7930] __sock_sendmsg+0x221/0x270 [ 119.048398][ T7930] ____sys_sendmsg+0x53a/0x860 [ 119.048429][ T7930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.048448][ T7930] ? __fget_files+0x2a/0x410 [ 119.048472][ T7930] ? __fget_files+0x2a/0x410 [ 119.048505][ T7930] __sys_sendmsg+0x269/0x350 [ 119.048528][ T7930] ? __pfx_futex_wake+0x10/0x10 [ 119.048556][ T7930] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.048628][ T7930] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.048653][ T7930] ? do_syscall_64+0x100/0x230 [ 119.048678][ T7930] ? do_syscall_64+0xb6/0x230 [ 119.048701][ T7930] do_syscall_64+0xf3/0x230 [ 119.048722][ T7930] ? clear_bhb_loop+0x35/0x90 [ 119.048747][ T7930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.048769][ T7930] RIP: 0033:0x7efe2fb8cde9 [ 119.048785][ T7930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.048798][ T7930] RSP: 002b:00007efe309ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.048816][ T7930] RAX: ffffffffffffffda RBX: 00007efe2fda5fa0 RCX: 00007efe2fb8cde9 [ 119.048828][ T7930] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000008 [ 119.048838][ T7930] RBP: 00007efe2fc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 119.048848][ T7930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.048859][ T7930] R13: 0000000000000000 R14: 00007efe2fda5fa0 R15: 00007ffd396359e8 [ 119.048889][ T7930] [ 119.519318][ T5841] Bluetooth: hci4: command tx timeout [ 119.926265][ T7941] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zR' [ 119.956354][ T7941] CPU: 0 UID: 0 PID: 7941 Comm: syz.0.546 Not tainted 6.14.0-rc2-syzkaller-00576-gde7a88b639d4 #0 [ 119.956381][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 119.956392][ T7941] Call Trace: [ 119.956398][ T7941] [ 119.956406][ T7941] dump_stack_lvl+0x241/0x360 [ 119.956439][ T7941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.956459][ T7941] ? __pfx__printk+0x10/0x10 [ 119.956483][ T7941] ? __kmalloc_cache_noprof+0x243/0x390 [ 119.956507][ T7941] ? sysfs_warn_dup+0x51/0xa0 [ 119.956532][ T7941] sysfs_warn_dup+0x8e/0xa0 [ 119.956554][ T7941] sysfs_do_create_link_sd+0xbe/0x110 [ 119.956582][ T7941] device_add_class_symlinks+0x1c5/0x250 [ 119.956613][ T7941] device_add+0x553/0xbf0 [ 119.956643][ T7941] wiphy_register+0x1922/0x2650 [ 119.956684][ T7941] ? __pfx_wiphy_register+0x10/0x10 [ 119.956703][ T7941] ? minstrel_ht_alloc+0x84b/0x940 [ 119.956731][ T7941] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 119.956757][ T7941] ieee80211_register_hw+0x35d9/0x42e0 [ 119.956784][ T7941] ? ieee80211_register_hw+0x1651/0x42e0 [ 119.956808][ T7941] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 119.956837][ T7941] ? __asan_memset+0x23/0x50 [ 119.956862][ T7941] ? __hrtimer_init+0x170/0x250 [ 119.956884][ T7941] mac80211_hwsim_new_radio+0x2ae8/0x4a40 [ 119.956942][ T7941] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 119.956967][ T7941] ? trace_kmalloc+0x1f/0xd0 [ 119.956985][ T7941] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 119.957007][ T7941] ? kstrndup+0xbb/0x150 [ 119.957118][ T7941] hwsim_new_radio_nl+0xece/0x2290 [ 119.957157][ T7941] ? __pfx___nla_validate_parse+0x10/0x10 [ 119.957188][ T7941] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 119.957238][ T7941] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 119.957272][ T7941] genl_rcv_msg+0xb1f/0xec0 [ 119.957300][ T7941] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.957345][ T7941] ? __pfx_lock_acquire+0x10/0x10 [ 119.957367][ T7941] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 119.957386][ T7941] ? __pfx___might_resched+0x10/0x10 [ 119.957419][ T7941] netlink_rcv_skb+0x206/0x480 [ 119.957444][ T7941] ? __pfx_genl_rcv_msg+0x10/0x10 [ 119.957465][ T7941] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 119.957522][ T7941] genl_rcv+0x28/0x40 [ 119.957540][ T7941] netlink_unicast+0x7f6/0x990 [ 119.957572][ T7941] ? __pfx_netlink_unicast+0x10/0x10 [ 119.957594][ T7941] ? __virt_addr_valid+0x45f/0x530 [ 119.957619][ T7941] ? __phys_addr_symbol+0x2f/0x70 [ 119.957642][ T7941] ? __check_object_size+0x47a/0x730 [ 119.957668][ T7941] netlink_sendmsg+0x8de/0xcb0 [ 119.957696][ T7941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.957719][ T7941] ? aa_sock_msg_perm+0x91/0x160 [ 119.957748][ T7941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.957763][ T7941] __sock_sendmsg+0x221/0x270 [ 119.957785][ T7941] ____sys_sendmsg+0x53a/0x860 [ 119.957817][ T7941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.957837][ T7941] ? __fget_files+0x2a/0x410 [ 119.957862][ T7941] ? __fget_files+0x2a/0x410 [ 119.957894][ T7941] __sys_sendmsg+0x269/0x350 [ 119.957922][ T7941] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.958021][ T7941] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.958048][ T7941] ? do_syscall_64+0x100/0x230 [ 119.958074][ T7941] ? do_syscall_64+0xb6/0x230 [ 119.958097][ T7941] do_syscall_64+0xf3/0x230 [ 119.958117][ T7941] ? clear_bhb_loop+0x35/0x90 [ 119.958143][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.958164][ T7941] RIP: 0033:0x7efe2fb8cde9 [ 119.958180][ T7941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.958194][ T7941] RSP: 002b:00007efe309ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.958212][ T7941] RAX: ffffffffffffffda RBX: 00007efe2fda5fa0 RCX: 00007efe2fb8cde9 [ 119.958224][ T7941] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000009 [ 119.958233][ T7941] RBP: 00007efe2fc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 119.958243][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.958253][ T7941] R13: 0000000000000000 R14: 00007efe2fda5fa0 R15: 00007ffd396359e8 [ 119.958283][ T7941] [ 120.384365][ T7953] netlink: 'syz.3.547': attribute type 1 has an invalid length. [ 120.935940][ T7995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.943332][ T7995] IPv6: NLM_F_CREATE should be set when creating new route [ 120.950647][ T7995] IPv6: NLM_F_CREATE should be set when creating new route [ 120.962143][ T7980] __nla_validate_parse: 17 callbacks suppressed [ 120.962162][ T7980] netlink: 36 bytes leftover after parsing attributes in process `syz.1.551'. [ 121.058611][ T7997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.555'. [ 121.150292][ T8007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.558'. [ 121.161643][ T8011] netlink: 12 bytes leftover after parsing attributes in process `syz.4.560'. [ 121.330084][ T8020] netlink: 96 bytes leftover after parsing attributes in process `syz.0.562'. [ 121.411395][ T8028] xt_CT: No such helper "pptp" [ 121.427813][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.565'. [ 121.546104][ T8046] netlink: 'syz.3.567': attribute type 9 has an invalid length. [ 121.832986][ T8062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.571'. [ 121.833277][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.573'. [ 121.846448][ T8062] netlink: 28 bytes leftover after parsing attributes in process `syz.1.571'. [ 121.891857][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.574'. [ 121.902826][ T8077] vlan3: left promiscuous mode [ 121.911608][ T8077] vlan0: left promiscuous mode [ 121.917278][ T8077] bridge0: port 3(vlan3) entered disabled state [ 121.925311][ T8077] bridge_slave_1: left allmulticast mode [ 121.931872][ T8077] bridge_slave_1: left promiscuous mode [ 121.937746][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.979319][ T8077] bridge_slave_0: left allmulticast mode [ 121.995372][ T8077] bridge_slave_0: left promiscuous mode [ 122.003874][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.036004][ T8077] bridge0 (unregistering): left promiscuous mode [ 122.134655][ T8085] netlink: 'syz.3.575': attribute type 29 has an invalid length. [ 122.227796][ T8090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 122.289811][ T8092] netlink: 'syz.3.577': attribute type 3 has an invalid length. [ 122.332645][ T8096] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 122.343418][ T8096] gretap1: entered promiscuous mode [ 122.412568][ T8100] netlink: 'syz.1.579': attribute type 10 has an invalid length. [ 122.442956][ T8100] macvlan0: entered allmulticast mode [ 122.459701][ T8100] veth1_vlan: entered allmulticast mode [ 122.481348][ T8100] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 123.785657][ T8153] wg1 speed is unknown, defaulting to 1000 [ 123.996401][ T8167] ip6erspan0: entered promiscuous mode [ 124.435667][ T8153] wg1 speed is unknown, defaulting to 1000 [ 124.980303][ T8201] netlink: 'syz.1.611': attribute type 1 has an invalid length. [ 125.300474][ T8214] team0: Device gtp0 is of different type [ 125.476147][ T8224] erspan0: entered promiscuous mode [ 125.499068][ T8224] erspan0: left promiscuous mode [ 126.390351][ T8283] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.399536][ T8283] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.408735][ T8283] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.417935][ T8283] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.450811][ T8283] __nla_validate_parse: 15 callbacks suppressed [ 126.450830][ T8283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.639'. [ 126.465172][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.640'. [ 126.549402][ T8295] netlink: 24 bytes leftover after parsing attributes in process `syz.4.638'. [ 126.685867][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.643'. [ 126.714145][ T8297] netlink: 'syz.3.642': attribute type 1 has an invalid length. [ 126.762036][ T8297] 8021q: adding VLAN 0 to HW filter on device bond8 [ 126.881063][ T8314] netlink: 'syz.1.646': attribute type 1 has an invalid length. [ 127.476222][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.653'. [ 127.615821][ T8348] bond0: entered promiscuous mode [ 127.628096][ T8348] bond_slave_0: entered promiscuous mode [ 127.634437][ T8348] bond_slave_1: entered promiscuous mode [ 127.807928][ T8361] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 127.821416][ T8361] netlink: 'syz.4.659': attribute type 10 has an invalid length. [ 127.829847][ T8361] netlink: 132 bytes leftover after parsing attributes in process `syz.4.659'. [ 128.034711][ T8375] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 128.168417][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.666'. [ 128.394048][ T8394] dvmrp0: entered allmulticast mode [ 128.506706][ T54] Bluetooth: hci3: command 0x0405 tx timeout [ 128.551180][ T8405] netlink: 'syz.1.673': attribute type 5 has an invalid length. [ 128.709872][ T8411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.675'. [ 128.719259][ T8411] netlink: 'syz.0.675': attribute type 7 has an invalid length. [ 128.727608][ T8411] netlink: 'syz.0.675': attribute type 8 has an invalid length. [ 128.735430][ T8411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.675'. [ 129.231932][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.679'. [ 129.294605][ T8431] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 129.976986][ T8451] IPVS: length: 252 != 24 [ 130.787578][ T8477] openvswitch: netlink: IP tunnel dst address not specified [ 131.621591][ T8513] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 131.834579][ T8520] __nla_validate_parse: 3 callbacks suppressed [ 131.834598][ T8520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.703'. [ 131.936075][ T8525] wg1 speed is unknown, defaulting to 1000 [ 132.363311][ T8545] x_tables: duplicate underflow at hook 3 [ 132.662822][ T5830] syz-executor (5830) used greatest stack depth: 18800 bytes left [ 132.855572][ T8561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.717'. [ 133.022519][ T8570] netlink: 'syz.3.718': attribute type 11 has an invalid length. [ 133.046707][ T8570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.718'. [ 133.199321][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.721'. [ 133.232044][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 133.245200][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 133.263948][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 133.274074][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 133.283913][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 133.292671][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 133.334742][ T8578] wg1 speed is unknown, defaulting to 1000 [ 133.477694][ T8578] chnl_net:caif_netlink_parms(): no params data found [ 133.605603][ T8578] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.627219][ T8578] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.634506][ T8578] bridge_slave_0: entered allmulticast mode [ 133.657807][ T8578] bridge_slave_0: entered promiscuous mode [ 133.670943][ T8578] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.678612][ T8578] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.685831][ T8578] bridge_slave_1: entered allmulticast mode [ 133.693281][ T8578] bridge_slave_1: entered promiscuous mode [ 133.831007][ T8602] netlink: 830 bytes leftover after parsing attributes in process `syz.1.725'. [ 133.864012][ T8578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.897001][ T8578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.057823][ T8578] team0: Port device team_slave_0 added [ 134.070878][ T8613] wg1 speed is unknown, defaulting to 1000 [ 134.089836][ T8578] team0: Port device team_slave_1 added [ 134.212455][ T8578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.220610][ T8578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.274231][ T8578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.300060][ T8578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.322151][ T8578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.386740][ T8578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.508656][ T8578] hsr_slave_0: entered promiscuous mode [ 134.544175][ T8578] hsr_slave_1: entered promiscuous mode [ 134.557542][ T8578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.565153][ T8578] Cannot create hsr debugfs directory [ 134.883213][ T8578] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.905441][ T8578] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.016361][ T8578] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.039499][ T8578] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.135764][ T8578] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.156307][ T8578] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.228729][ T8578] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.246657][ T8578] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.387013][ T54] Bluetooth: hci0: command tx timeout [ 135.393176][ T8578] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.409053][ T8578] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.429399][ T8578] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.460207][ T8578] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 135.590140][ T8578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.599051][ T8662] netlink: 'syz.3.739': attribute type 1 has an invalid length. [ 135.625797][ T8578] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.649315][ T8662] netlink: 224 bytes leftover after parsing attributes in process `syz.3.739'. [ 135.664051][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.671219][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.716525][ T8668] wg1 speed is unknown, defaulting to 1000 [ 135.739164][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.746287][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.765159][ T8662] netlink: 'syz.3.739': attribute type 1 has an invalid length. [ 135.858239][ T8662] 8021q: adding VLAN 0 to HW filter on device bond10 [ 135.992675][ T8578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.089042][ T8686] sctp: [Deprecated]: syz.3.746 (pid 8686) Use of int in maxseg socket option. [ 136.089042][ T8686] Use struct sctp_assoc_value instead [ 136.231430][ T8684] pim6reg1: entered promiscuous mode [ 136.237312][ T8684] pim6reg1: entered allmulticast mode [ 136.358946][ T8698] netlink: 'syz.3.747': attribute type 1 has an invalid length. [ 136.367706][ T8578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.417505][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.748'. [ 136.575000][ T8578] veth0_vlan: entered promiscuous mode [ 136.618975][ T8578] veth1_vlan: entered promiscuous mode [ 136.681684][ T8578] veth0_macvtap: entered promiscuous mode [ 136.697121][ T8578] veth1_macvtap: entered promiscuous mode [ 136.761937][ T8712] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.826488][ T8578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.856848][ T8578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.876853][ T8578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.894704][ T8578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.905381][ T8578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.921797][ T8578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.936500][ T8727] warn_alloc: 2 callbacks suppressed [ 136.936515][ T8727] syz.1.755: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 136.961579][ T8578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.986514][ T8578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.002437][ T8578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.007892][ T8727] CPU: 1 UID: 0 PID: 8727 Comm: syz.1.755 Not tainted 6.14.0-rc2-syzkaller-00576-gde7a88b639d4 #0 [ 137.007916][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 137.007925][ T8727] Call Trace: [ 137.007931][ T8727] [ 137.007938][ T8727] dump_stack_lvl+0x241/0x360 [ 137.007963][ T8727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.007979][ T8727] ? __pfx__printk+0x10/0x10 [ 137.007999][ T8727] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 137.008019][ T8727] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 137.008039][ T8727] warn_alloc+0x278/0x410 [ 137.008057][ T8727] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 137.008080][ T8727] ? __pfx_warn_alloc+0x10/0x10 [ 137.008096][ T8727] ? kasan_save_track+0x3f/0x80 [ 137.008110][ T8727] ? __kasan_kmalloc+0x98/0xb0 [ 137.008134][ T8727] ? xsk_setsockopt+0x4aa/0x810 [ 137.008154][ T8727] ? do_sock_setsockopt+0x3af/0x720 [ 137.008173][ T8727] ? __x64_sys_setsockopt+0x1ee/0x280 [ 137.008191][ T8727] ? do_syscall_64+0xf3/0x230 [ 137.008208][ T8727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.008236][ T8727] __vmalloc_node_range_noprof+0x126/0x1380 [ 137.008284][ T8727] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.008311][ T8727] ? __kasan_kmalloc+0x98/0xb0 [ 137.008332][ T8727] vmalloc_user_noprof+0x74/0x80 [ 137.008354][ T8727] ? xskq_create+0xb6/0x170 [ 137.008368][ T8727] xskq_create+0xb6/0x170 [ 137.008385][ T8727] xsk_init_queue+0xa1/0x100 [ 137.008409][ T8727] xsk_setsockopt+0x4aa/0x810 [ 137.008433][ T8727] ? __pfx_xsk_setsockopt+0x10/0x10 [ 137.008454][ T8727] ? __pfx_aa_sk_perm+0x10/0x10 [ 137.008477][ T8727] ? aa_sock_opt_perm+0x79/0x120 [ 137.008503][ T8727] ? __pfx_xsk_setsockopt+0x10/0x10 [ 137.008522][ T8727] do_sock_setsockopt+0x3af/0x720 [ 137.008547][ T8727] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 137.008572][ T8727] ? __fget_files+0x395/0x410 [ 137.008591][ T8727] ? __fget_files+0x2a/0x410 [ 137.008617][ T8727] __x64_sys_setsockopt+0x1ee/0x280 [ 137.008643][ T8727] do_syscall_64+0xf3/0x230 [ 137.008662][ T8727] ? clear_bhb_loop+0x35/0x90 [ 137.008684][ T8727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.008703][ T8727] RIP: 0033:0x7fc56898cde9 [ 137.008717][ T8727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.008729][ T8727] RSP: 002b:00007fc569809038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 137.008746][ T8727] RAX: ffffffffffffffda RBX: 00007fc568ba6080 RCX: 00007fc56898cde9 [ 137.008758][ T8727] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 137.008767][ T8727] RBP: 00007fc568a0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 137.008777][ T8727] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.008786][ T8727] R13: 0000000000000000 R14: 00007fc568ba6080 R15: 00007ffe74413d88 [ 137.008811][ T8727] [ 137.008818][ T8727] Mem-Info: [ 137.022835][ T8578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.022855][ T8578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.022887][ T8578] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.022900][ T8578] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.024037][ T8578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.096868][ T8731] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 137.121833][ T8578] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.216954][ T8727] active_anon:5771 inactive_anon:0 isolated_anon:0 [ 137.216954][ T8727] active_file:1553 inactive_file:38332 isolated_file:0 [ 137.216954][ T8727] unevictable:768 dirty:145 writeback:0 [ 137.216954][ T8727] slab_reclaimable:10606 slab_unreclaimable:103162 [ 137.216954][ T8727] mapped:28519 shmem:1430 pagetables:689 [ 137.216954][ T8727] sec_pagetables:0 bounce:0 [ 137.216954][ T8727] kernel_misc_reclaimable:0 [ 137.216954][ T8727] free:1338188 free_pcp:643 free_cma:0 [ 137.278260][ T8578] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.425137][ T8727] Node 0 active_anon:23068kB inactive_anon:0kB active_file:6212kB inactive_file:153252kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114092kB dirty:628kB writeback:0kB shmem:4188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11652kB pagetables:2952kB sec_pagetables:0kB all_unreclaimable? no [ 137.439525][ T8578] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.457666][ T8727] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 137.497482][ T54] Bluetooth: hci0: command tx timeout [ 137.504106][ T8727] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 137.506793][ T8578] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.540446][ T8727] lowmem_reserve[]: 0 2490 2490 0 0 [ 137.550633][ T8727] Node 0 DMA32 free:1430500kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:23128kB inactive_anon:0kB active_file:6212kB inactive_file:152948kB unevictable:1536kB writepending:624kB present:3129332kB managed:2549860kB mlocked:0kB bounce:0kB free_pcp:1508kB local_pcp:1320kB free_cma:0kB [ 137.588338][ T8732] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 137.601576][ T8727] lowmem_reserve[]: 0 0 0 0 0 [ 137.617049][ T8727] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 137.714924][ T8727] lowmem_reserve[]: 0 0 0 0 0 [ 137.736312][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.763845][ T8727] Node 1 Normal free:3906752kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:44kB local_pcp:0kB free_cma:0kB [ 137.775819][ T8739] xt_bpf: check failed: parse error [ 137.793028][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.809413][ T8727] lowmem_reserve[]: 0 0 0 0 0 [ 137.814980][ T8727] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 137.829154][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.842536][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.845063][ T8727] Node 0 [ 137.851185][ T8739] netlink: 28 bytes leftover after parsing attributes in process `syz.3.758'. [ 137.851406][ T8727] DMA32: 0*4kB 107*8kB (UM) 244*16kB (UME) 102*32kB (UM) 76*64kB (ME) 176*128kB (UME) 212*256kB (UM) 142*512kB (UME) 101*1024kB (UME) 5*2048kB (UM) 281*4096kB (UM) = 1427032kB [ 137.910382][ T8727] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 137.953325][ T8727] Node 1 Normal: 208*4kB (UM) 62*8kB (UME) 41*16kB (UME) 176*32kB (UME) 86*64kB (UME) 31*128kB (UME) 14*256kB (UME) 12*512kB (UME) 5*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3906752kB [ 137.982732][ T8727] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.008136][ T8727] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.064902][ T8727] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.087140][ T8727] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.111120][ T8727] 41316 total pagecache pages [ 138.115933][ T8727] 0 pages in swap cache [ 138.132006][ T8727] Free swap = 124996kB [ 138.143965][ T8727] Total swap = 124996kB [ 138.149354][ T8727] 2097051 pages RAM [ 138.153188][ T8727] 0 pages HighMem/MovableOnly [ 138.158727][ T8727] 427864 pages reserved [ 138.163026][ T8727] 0 pages cma reserved [ 138.257411][ T8754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.762'. [ 138.275881][ T8749] xt_CT: No such helper "netbios-ns" [ 138.679542][ T8784] xt_CT: No such helper "snmp" [ 138.711816][ T8775] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 138.743628][ T8787] wg1 speed is unknown, defaulting to 1000 [ 139.216396][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.267156][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 139.342755][ T8787] wg1 speed is unknown, defaulting to 1000 [ 139.423150][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.569580][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.721403][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.763101][ T8815] netlink: 'syz.4.775': attribute type 13 has an invalid length. [ 139.922149][ T12] bridge_slave_1: left allmulticast mode [ 139.935053][ T12] bridge_slave_1: left promiscuous mode [ 139.953327][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.032072][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.047907][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.056152][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.064236][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.072619][ T12] bridge_slave_0: left allmulticast mode [ 140.080232][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 140.087375][ T12] bridge_slave_0: left promiscuous mode [ 140.093147][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 140.101458][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.435432][ T5841] Bluetooth: hci3: command 0x0405 tx timeout [ 140.617063][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.631774][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.643652][ T12] bond0 (unregistering): Released all slaves [ 140.685248][ T8825] wg1 speed is unknown, defaulting to 1000 [ 140.715308][ T8840] wg1 speed is unknown, defaulting to 1000 [ 140.773355][ T8845] netlink: 'syz.1.781': attribute type 1 has an invalid length. [ 140.782520][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 140.791616][ T8845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.781'. [ 140.905044][ T8849] syzkaller0: entered allmulticast mode [ 140.919549][ T8849] syzkaller0 (unregistering): left allmulticast mode [ 140.933587][ T8853] netlink: 84 bytes leftover after parsing attributes in process `syz.1.783'. [ 141.056988][ T8853] netlink: 348 bytes leftover after parsing attributes in process `syz.1.783'. [ 141.231036][ T12] hsr_slave_0: left promiscuous mode [ 141.247110][ T12] hsr_slave_1: left promiscuous mode [ 141.261864][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.271091][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.293528][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.313956][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.331481][ T8876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.790'. [ 141.379412][ T8876] netlink: 24 bytes leftover after parsing attributes in process `syz.4.790'. [ 141.392189][ T12] veth1_macvtap: left promiscuous mode [ 141.398360][ T8876] nbd: device at index 64 is going down [ 141.404280][ T12] veth0_macvtap: left promiscuous mode [ 141.410117][ T12] veth1_vlan: left promiscuous mode [ 141.415591][ T12] veth0_vlan: left promiscuous mode [ 141.898988][ T12] team0 (unregistering): Port device team_slave_1 removed [ 141.935688][ T12] team0 (unregistering): Port device team_slave_0 removed [ 142.190691][ T54] Bluetooth: hci0: command tx timeout [ 142.344060][ T8884] wg1 speed is unknown, defaulting to 1000 [ 142.482068][ T8825] chnl_net:caif_netlink_parms(): no params data found [ 142.558368][ T8893] netlink: 552 bytes leftover after parsing attributes in process `syz.1.794'. [ 142.569428][ T8891] tipc: Started in network mode [ 142.597209][ T8891] tipc: Node identity ac1414aa, cluster identity 4711 [ 142.625175][ T8891] tipc: Enabled bearer , priority 10 [ 142.738078][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.789053][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.796334][ T8825] bridge_slave_0: entered allmulticast mode [ 142.844447][ T8825] bridge_slave_0: entered promiscuous mode [ 142.859044][ T8825] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.866248][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.875452][ T8825] bridge_slave_1: entered allmulticast mode [ 142.903742][ T8825] bridge_slave_1: entered promiscuous mode [ 142.944795][ T8913] __nla_validate_parse: 1 callbacks suppressed [ 142.944812][ T8913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.797'. [ 143.210358][ T8825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.272396][ T8825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.328663][ T8929] pim6reg1: entered promiscuous mode [ 143.334019][ T8929] pim6reg1: entered allmulticast mode [ 143.387922][ T8825] team0: Port device team_slave_0 added [ 143.434668][ T8825] team0: Port device team_slave_1 added [ 143.478294][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.491036][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.576296][ T8825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.610525][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.618759][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.664237][ T8825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.738562][ T5919] tipc: Node number set to 2886997162 [ 143.749424][ T8949] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 143.809892][ T8825] hsr_slave_0: entered promiscuous mode [ 143.816298][ T8825] hsr_slave_1: entered promiscuous mode [ 143.842370][ T8825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.854846][ T8825] Cannot create hsr debugfs directory [ 144.266659][ T54] Bluetooth: hci0: command tx timeout [ 144.530864][ T8972] vxcan1: entered promiscuous mode [ 144.536040][ T8972] vxcan1: entered allmulticast mode [ 144.602643][ T8976] vxcan3: entered promiscuous mode [ 144.619042][ T8976] vxcan3: entered allmulticast mode [ 144.624846][ T8825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.664926][ T8825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.698576][ T8825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.729681][ T8825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.861214][ T8988] wg1 speed is unknown, defaulting to 1000 [ 144.879434][ T8987] wg1 speed is unknown, defaulting to 1000 [ 144.986386][ T8825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.140665][ T8825] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.171455][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.178629][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.234630][ T9005] wg1 speed is unknown, defaulting to 1000 [ 145.248864][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.256019][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.399273][ T9010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.823'. [ 145.710064][ T8825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.874581][ T8825] veth0_vlan: entered promiscuous mode [ 145.892222][ T8825] veth1_vlan: entered promiscuous mode [ 145.972474][ T8825] veth0_macvtap: entered promiscuous mode [ 145.984148][ T8825] veth1_macvtap: entered promiscuous mode [ 146.020776][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.037902][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.050657][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.061652][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.071902][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.083126][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.095336][ T8825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.116228][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.127273][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.154544][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.176270][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.187349][ T8825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.198734][ T8825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.211408][ T8825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.224013][ T8825] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.233015][ T8825] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.242716][ T8825] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.252270][ T8825] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.326322][ T8257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.335383][ T8257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.359165][ T54] Bluetooth: hci0: command tx timeout [ 146.368655][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.382577][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.671705][ T9039] wg1 speed is unknown, defaulting to 1000 [ 146.866366][ T9046] netlink: 16 bytes leftover after parsing attributes in process `syz.1.832'. [ 147.141807][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 147.266484][ T9067] netlink: 'syz.3.838': attribute type 10 has an invalid length. [ 147.280032][ T9064] netlink: 'syz.1.836': attribute type 14 has an invalid length. [ 147.294299][ T9039] ipt_rpfilter: unknown options [ 147.782473][ T8255] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.045319][ T9097] bond_slave_1: entered promiscuous mode [ 148.064599][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.846'. [ 148.175948][ T9098] bond_slave_1 (unregistering): left promiscuous mode [ 148.255949][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.276024][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.287738][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.295703][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.304553][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.318046][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.353710][ T9102] wg1 speed is unknown, defaulting to 1000 [ 148.441884][ T9109] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:21 [ 148.543716][ T9102] chnl_net:caif_netlink_parms(): no params data found [ 148.555522][ T9113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.851'. [ 148.686205][ T9102] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.698084][ T9102] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.709174][ T9102] bridge_slave_0: entered allmulticast mode [ 148.717359][ T9102] bridge_slave_0: entered promiscuous mode [ 148.772251][ T9102] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.792718][ T9102] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.812302][ T9102] bridge_slave_1: entered allmulticast mode [ 148.825136][ T9102] bridge_slave_1: entered promiscuous mode [ 148.865984][ T9102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.881505][ T9102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.932057][ T8255] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.946477][ T9131] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 149.023888][ T9102] team0: Port device team_slave_0 added [ 149.027222][ T9132] netlink: 'syz.3.852': attribute type 10 has an invalid length. [ 149.079615][ T8255] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.150551][ T9102] team0: Port device team_slave_1 added [ 149.276285][ T8255] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.301077][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.309175][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.352554][ T9102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.373902][ T9145] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 149.379310][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 149.398902][ T9144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 149.411608][ T9144] netlink: 'syz.1.856': attribute type 18 has an invalid length. [ 149.412038][ T9102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.426852][ T9102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.453517][ T9102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.488115][ T9146] netlink: 'syz.1.856': attribute type 6 has an invalid length. [ 149.495842][ T9146] netlink: 'syz.1.856': attribute type 7 has an invalid length. [ 149.503999][ T9146] netlink: 'syz.1.856': attribute type 8 has an invalid length. [ 149.521581][ T9144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.856'. [ 149.552469][ T9144] vlan3: entered promiscuous mode [ 149.559569][ T9144] gretap0: entered promiscuous mode [ 149.573612][ T9102] hsr_slave_0: entered promiscuous mode [ 149.580775][ T9102] hsr_slave_1: entered promiscuous mode [ 149.587012][ T9102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.594855][ T9102] Cannot create hsr debugfs directory [ 149.695186][ T9148] netlink: 'syz.1.857': attribute type 10 has an invalid length. [ 149.706208][ T9148] netlink: 140 bytes leftover after parsing attributes in process `syz.1.857'. [ 149.708887][ T9150] netlink: 'syz.4.858': attribute type 10 has an invalid length. [ 149.755812][ T9150] team0: Port device bridge0 added [ 149.838153][ T8255] bridge_slave_1: left allmulticast mode [ 149.848473][ T8255] bridge_slave_1: left promiscuous mode [ 149.854383][ T8255] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.878313][ T8255] bridge_slave_0: left allmulticast mode [ 149.884155][ T8255] bridge_slave_0: left promiscuous mode [ 149.892316][ T8255] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.015201][ T9157] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 150.095154][ T9160] netlink: 40 bytes leftover after parsing attributes in process `syz.4.862'. [ 150.351983][ T54] Bluetooth: hci0: command tx timeout [ 150.459081][ T8255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.472083][ T8255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.483405][ T8255] bond0 (unregistering): Released all slaves [ 150.535122][ T9162] : entered promiscuous mode [ 150.546125][ T9163] wg1 speed is unknown, defaulting to 1000 [ 151.026892][ T8255] hsr_slave_0: left promiscuous mode [ 151.037126][ T8255] hsr_slave_1: left promiscuous mode [ 151.043098][ T8255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.055818][ T8255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.090478][ T8255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.106431][ T8255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.190118][ T8255] veth1_macvtap: left promiscuous mode [ 151.195725][ T8255] veth0_macvtap: left promiscuous mode [ 151.207732][ T8255] veth1_vlan: left promiscuous mode [ 151.213077][ T8255] veth0_vlan: left promiscuous mode [ 151.650457][ T8255] team0 (unregistering): Port device team_slave_1 removed [ 151.694848][ T8255] team0 (unregistering): Port device team_slave_0 removed [ 152.405078][ T9208] netlink: 92 bytes leftover after parsing attributes in process `syz.3.876'. [ 152.426767][ T54] Bluetooth: hci0: command tx timeout [ 152.513253][ T9102] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.533990][ T9102] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 152.574869][ T9102] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 152.596632][ T9210] netlink: 96 bytes leftover after parsing attributes in process `syz.4.877'. [ 152.613129][ T9102] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 152.705831][ T9217] netlink: 132 bytes leftover after parsing attributes in process `syz.3.879'. [ 152.743710][ T9102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.783534][ T9102] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.798070][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.805242][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.826291][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.833436][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.152134][ T9102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.212450][ T9102] veth0_vlan: entered promiscuous mode [ 153.235470][ T9102] veth1_vlan: entered promiscuous mode [ 153.269370][ T9102] veth0_macvtap: entered promiscuous mode [ 153.293523][ T9102] veth1_macvtap: entered promiscuous mode [ 153.333808][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.356782][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.377496][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.403359][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.413640][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.424362][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.449974][ T9102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.483970][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.495339][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.505337][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.516014][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.525896][ T9102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.537732][ T9102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.549560][ T9102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.592993][ T9102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.605038][ T9102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.634337][ T9102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.644320][ T9102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.737804][ T2952] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.752139][ T2952] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.795053][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.811319][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.083390][ T9263] batadv_slave_1: entered promiscuous mode [ 154.095885][ T9262] batadv_slave_1: left promiscuous mode [ 154.201709][ T9269] __nla_validate_parse: 3 callbacks suppressed [ 154.201727][ T9269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.893'. [ 154.541605][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.899'. [ 154.613066][ T9289] pim6reg1: entered promiscuous mode [ 154.625439][ T9289] pim6reg1: entered allmulticast mode [ 154.898758][ T9296] bridge0: port 3(ipvlan2) entered blocking state [ 154.915324][ T9296] bridge0: port 3(ipvlan2) entered disabled state [ 154.924955][ T9296] ipvlan2: entered allmulticast mode [ 154.946699][ T9296] bridge0: entered allmulticast mode [ 154.955529][ T9296] ipvlan2: left allmulticast mode [ 154.973004][ T9296] bridge0: left allmulticast mode [ 155.265580][ T9303] tipc: Can't bind to reserved service type 2 [ 155.870439][ T9331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.911'. [ 155.894272][ T9333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.912'. [ 156.047181][ T2940] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.062647][ T9340] openvswitch: netlink: Missing valid actions attribute. [ 156.084199][ T9340] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.770507][ T9359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.915'. [ 156.807916][ T9359] netlink: 232 bytes leftover after parsing attributes in process `syz.3.915'. [ 156.852112][ T9359] macvtap1: entered promiscuous mode [ 156.910069][ T9349] syzkaller1: entered promiscuous mode [ 156.915603][ T9349] syzkaller1: entered allmulticast mode [ 157.049449][ T2940] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.218344][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.229759][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.238106][ T2940] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.253295][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.262984][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.273206][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.280963][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.361355][ T2940] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.365558][ T9386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 157.402174][ T9372] wg1 speed is unknown, defaulting to 1000 [ 157.445814][ T9382] wg1 speed is unknown, defaulting to 1000 [ 157.698653][ T9398] xt_hashlimit: overflow, rate too high: 0 [ 157.858360][ T2940] bridge_slave_1: left allmulticast mode [ 157.864074][ T2940] bridge_slave_1: left promiscuous mode [ 157.897126][ T2940] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.937526][ T2940] bridge_slave_0: left allmulticast mode [ 157.943507][ T2940] bridge_slave_0: left promiscuous mode [ 157.953870][ T2940] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.333490][ T2940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.344471][ T2940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.354995][ T2940] bond0 (unregistering): Released all slaves [ 158.373181][ T9372] chnl_net:caif_netlink_parms(): no params data found [ 158.690636][ T9372] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.719130][ T9372] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.729785][ T9372] bridge_slave_0: entered allmulticast mode [ 158.757215][ T9372] bridge_slave_0: entered promiscuous mode [ 158.873087][ T9418] wg1 speed is unknown, defaulting to 1000 [ 158.878635][ T9372] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.897263][ T9372] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.904590][ T9372] bridge_slave_1: entered allmulticast mode [ 158.912560][ T9408] netlink: 28 bytes leftover after parsing attributes in process `syz.3.928'. [ 158.923147][ T9372] bridge_slave_1: entered promiscuous mode [ 158.954635][ T9421] x_tables: duplicate underflow at hook 1 [ 158.960783][ T2940] hsr_slave_0: left promiscuous mode [ 158.967654][ T2940] hsr_slave_1: left promiscuous mode [ 158.973562][ T2940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.981300][ T2940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.990801][ T2940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.998556][ T2940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.020368][ T2940] veth1_macvtap: left promiscuous mode [ 159.025918][ T2940] veth0_macvtap: left promiscuous mode [ 159.031881][ T2940] veth1_vlan: left promiscuous mode [ 159.037255][ T2940] veth0_vlan: left promiscuous mode [ 159.311552][ T5841] Bluetooth: hci0: command tx timeout [ 159.515839][ T2940] team0 (unregistering): Port device team_slave_1 removed [ 159.565838][ T2940] team0 (unregistering): Port device team_slave_0 removed [ 160.119439][ T9427] wg1 speed is unknown, defaulting to 1000 [ 160.144830][ T9428] wg1 speed is unknown, defaulting to 1000 [ 160.176414][ T9372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.203404][ T9372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.456135][ T9372] team0: Port device team_slave_0 added [ 160.473676][ T9372] team0: Port device team_slave_1 added [ 160.523385][ T9372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.543866][ T9372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.570969][ T9372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.627421][ T9372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.634418][ T9372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.708994][ T9372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.900886][ T9372] hsr_slave_0: entered promiscuous mode [ 160.926404][ T9372] hsr_slave_1: entered promiscuous mode [ 160.946413][ T9372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.964651][ T9372] Cannot create hsr debugfs directory [ 160.992809][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.003330][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 161.012240][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 161.030944][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 161.039393][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 161.047451][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 161.091752][ T2940] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.214007][ T9433] wg1 speed is unknown, defaulting to 1000 [ 161.387395][ T54] Bluetooth: hci0: command tx timeout [ 161.412169][ T2940] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.447049][ T9455] netlink: 80 bytes leftover after parsing attributes in process `syz.1.939'. [ 161.465704][ T9455] netlink: 'syz.1.939': attribute type 10 has an invalid length. [ 161.506529][ T9455] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 161.555832][ T2940] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.588388][ T9437] wg1 speed is unknown, defaulting to 1000 [ 161.599659][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 161.652577][ T2940] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.840732][ T9466] IPVS: set_ctl: invalid protocol: 3 100.1.1.1:20000 [ 161.917295][ T9471] netlink: 64 bytes leftover after parsing attributes in process `syz.3.944'. [ 161.958681][ T2940] bridge_slave_1: left allmulticast mode [ 161.966765][ T2940] bridge_slave_1: left promiscuous mode [ 161.973900][ T2940] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.997652][ T2940] bridge_slave_0: left allmulticast mode [ 162.003826][ T2940] bridge_slave_0: left promiscuous mode [ 162.012498][ T2940] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.118132][ T9480] sctp: [Deprecated]: syz.3.946 (pid 9480) Use of int in max_burst socket option deprecated. [ 162.118132][ T9480] Use struct sctp_assoc_value instead [ 162.406554][ T2940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.418199][ T2940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.428892][ T2940] bond0 (unregistering): Released all slaves [ 162.695977][ T9437] chnl_net:caif_netlink_parms(): no params data found [ 162.734881][ T9486] netlink: 'syz.1.948': attribute type 21 has an invalid length. [ 162.743345][ T9486] netlink: 128 bytes leftover after parsing attributes in process `syz.1.948'. [ 162.767303][ T9486] netlink: 3 bytes leftover after parsing attributes in process `syz.1.948'. [ 162.862295][ T9492] netlink: 'syz.4.949': attribute type 1 has an invalid length. [ 162.885101][ T9492] netlink: 'syz.4.949': attribute type 1 has an invalid length. [ 163.075549][ T54] Bluetooth: hci4: command tx timeout [ 163.092702][ T9505] netlink: 'syz.1.950': attribute type 11 has an invalid length. [ 163.147934][ T9437] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.173994][ T9437] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.184289][ T9437] bridge_slave_0: entered allmulticast mode [ 163.191567][ T9437] bridge_slave_0: entered promiscuous mode [ 163.199602][ T9437] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.207488][ T9437] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.214830][ T9437] bridge_slave_1: entered allmulticast mode [ 163.223153][ T9437] bridge_slave_1: entered promiscuous mode [ 163.286699][ T2940] hsr_slave_0: left promiscuous mode [ 163.302323][ T2940] hsr_slave_1: left promiscuous mode [ 163.337562][ T2940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.342967][ T9518] delete_channel: no stack [ 163.345050][ T2940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.367008][ T9518] netlink: 'syz.3.957': attribute type 9 has an invalid length. [ 163.378181][ T2940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.385647][ T2940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.421879][ T2940] veth1_macvtap: left promiscuous mode [ 163.427494][ T2940] veth0_macvtap: left promiscuous mode [ 163.433178][ T2940] veth1_vlan: left promiscuous mode [ 163.438614][ T2940] veth0_vlan: left promiscuous mode [ 163.466767][ T54] Bluetooth: hci0: command tx timeout [ 163.526510][ T9522] netlink: 'syz.4.958': attribute type 1 has an invalid length. [ 163.538974][ T9522] netlink: 'syz.4.958': attribute type 2 has an invalid length. [ 163.909299][ T2940] team0 (unregistering): Port device team_slave_1 removed [ 163.951995][ T2940] team0 (unregistering): Port device team_slave_0 removed [ 164.425346][ T9437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.473585][ T9372] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 164.510175][ T9437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.537482][ T9372] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 164.570267][ T9372] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.591485][ T9372] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.646380][ T9437] team0: Port device team_slave_0 added [ 164.661559][ T9437] team0: Port device team_slave_1 added [ 164.754563][ T9437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.767809][ T9437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.794061][ T9437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.817475][ T9437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.824561][ T9437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.851221][ T9437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.908874][ T9437] hsr_slave_0: entered promiscuous mode [ 164.915086][ T9437] hsr_slave_1: entered promiscuous mode [ 164.922395][ T9437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.930392][ T9437] Cannot create hsr debugfs directory [ 165.048371][ T9372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.093317][ T9372] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.114479][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.121662][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.146271][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.147098][ T54] Bluetooth: hci4: command tx timeout [ 165.153397][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.372305][ T9372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.486407][ T9437] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.513056][ T9437] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.548580][ T54] Bluetooth: hci0: command tx timeout [ 165.571611][ T9437] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.596106][ T9437] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.673421][ T9372] veth0_vlan: entered promiscuous mode [ 165.752100][ T9372] veth1_vlan: entered promiscuous mode [ 165.879244][ T9571] netlink: 32 bytes leftover after parsing attributes in process `syz.4.970'. [ 165.899671][ T9372] veth0_macvtap: entered promiscuous mode [ 165.938699][ T9372] veth1_macvtap: entered promiscuous mode [ 165.981788][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.004318][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.033011][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.052857][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.074713][ T9372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.098104][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 166.114968][ T9583] netlink: 'syz.1.972': attribute type 1 has an invalid length. [ 166.134381][ T9437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.141988][ T9585] netlink: 'syz.4.975': attribute type 1 has an invalid length. [ 166.150435][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.161351][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.172154][ T9372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.183720][ T9372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.195643][ T9372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.220493][ T9585] 8021q: adding VLAN 0 to HW filter on device bond8 [ 166.229704][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.974'. [ 166.239819][ T25] IPVS: starting estimator thread 0... [ 166.251587][ T9576] batadv2: entered allmulticast mode [ 166.261691][ T9585] netlink: 40 bytes leftover after parsing attributes in process `syz.4.975'. [ 166.281998][ T9372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.290922][ T9372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.301717][ T9372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.310895][ T9372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.327271][ T9587] bond8: (slave gretap1): making interface the new active one [ 166.327707][ T9590] IPVS: using max 21 ests per chain, 50400 per kthread [ 166.336292][ T9587] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 166.356909][ T9589] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.974'. [ 166.437385][ T9437] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.483863][ T9559] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.491086][ T9559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.514177][ T9559] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.521378][ T9559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.529552][ T9595] sctp: [Deprecated]: syz.4.976 (pid 9595) Use of struct sctp_assoc_value in delayed_ack socket option. [ 166.529552][ T9595] Use struct sctp_sack_info instead [ 166.612830][ T9557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.635116][ T9557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.714260][ T9559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.735814][ T9559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.741502][ T9598] netlink: 'syz.4.978': attribute type 4 has an invalid length. [ 166.749855][ T9602] __nla_validate_parse: 1 callbacks suppressed [ 166.749871][ T9602] netlink: 88 bytes leftover after parsing attributes in process `syz.3.979'. [ 166.844790][ T9602] wg1 speed is unknown, defaulting to 1000 [ 167.184778][ T9625] Cannot find del_set index 65534 as target [ 167.193947][ T9625] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 167.226236][ T9623] netlink: 'syz.1.982': attribute type 3 has an invalid length. [ 167.234196][ T54] Bluetooth: hci4: command tx timeout [ 167.240701][ T9623] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.982'. [ 167.263515][ T9437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.323152][ T9437] veth0_vlan: entered promiscuous mode [ 167.368809][ T9437] veth1_vlan: entered promiscuous mode [ 167.437078][ T9437] veth0_macvtap: entered promiscuous mode [ 167.451408][ T9437] veth1_macvtap: entered promiscuous mode [ 167.487574][ T9437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.498386][ T9437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.526707][ T9437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.554735][ T9437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.577060][ T9437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.587881][ T9437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.599237][ T9437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.622325][ T9437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.647981][ T9437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.666238][ T9437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.686805][ T9437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.700756][ T9437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.720368][ T9437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.731735][ T9437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.747118][ T9641] tap0: tun_chr_ioctl cmd 2147767506 [ 167.768716][ T9437] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.778119][ T9437] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.787397][ T9437] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.796295][ T9437] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.873292][ T9557] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.038714][ T9557] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.093831][ T8257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.124963][ T8257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.168763][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.177611][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.310251][ T9557] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.484576][ T9557] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.552815][ T9557] bridge_slave_1: left allmulticast mode [ 168.558886][ T9557] bridge_slave_1: left promiscuous mode [ 168.564586][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.574096][ T9557] bridge_slave_0: left allmulticast mode [ 168.580345][ T9557] bridge_slave_0: left promiscuous mode [ 168.586008][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.741636][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.988'. [ 169.166536][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.179902][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.188362][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.197870][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.205541][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.213038][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.482606][ T9557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.507932][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.516846][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.526115][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.527456][ T9557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.556376][ T9557] bond0 (unregistering): Released all slaves [ 169.557111][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.600866][ T9659] wg1 speed is unknown, defaulting to 1000 [ 169.613278][ T5841] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 169.625492][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.772088][ T9671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.994'. [ 169.880999][ T9666] wg1 speed is unknown, defaulting to 1000 [ 170.035805][ T9690] openvswitch: netlink: Geneve opt len 62 is not a multiple of 4. [ 170.122802][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.998'. [ 170.251934][ T9557] hsr_slave_0: left promiscuous mode [ 170.262433][ T9557] hsr_slave_1: left promiscuous mode [ 170.268614][ T9557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.276208][ T9557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.284591][ T9557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.293309][ T9557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.325124][ T9557] veth1_macvtap: left promiscuous mode [ 170.337167][ T9557] veth0_macvtap: left promiscuous mode [ 170.345416][ T9557] veth1_vlan: left promiscuous mode [ 170.357697][ T9557] veth0_vlan: left promiscuous mode [ 170.824072][ T9557] team0 (unregistering): Port device team_slave_1 removed [ 170.873211][ T9557] team0 (unregistering): Port device team_slave_0 removed [ 171.186285][ T9715] netlink: 'syz.3.1004': attribute type 10 has an invalid length. [ 171.217831][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1003'. [ 171.306992][ T54] Bluetooth: hci0: command tx timeout [ 171.685252][ T9659] chnl_net:caif_netlink_parms(): no params data found [ 171.708290][ T54] Bluetooth: hci4: command tx timeout [ 171.909995][ T9659] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.920475][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.928875][ T9659] bridge_slave_0: entered allmulticast mode [ 171.930256][ T9741] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1007'. [ 171.935845][ T9659] bridge_slave_0: entered promiscuous mode [ 171.951873][ T9659] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.959084][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.968031][ T9659] bridge_slave_1: entered allmulticast mode [ 171.975032][ T9659] bridge_slave_1: entered promiscuous mode [ 172.141844][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1010'. [ 172.183348][ T9659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.195955][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1010'. [ 172.219175][ T9659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.295373][ T9659] team0: Port device team_slave_0 added [ 172.329263][ T9659] team0: Port device team_slave_1 added [ 172.335110][ T9755] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1010'. [ 172.346708][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1010'. [ 172.388088][ T9666] chnl_net:caif_netlink_parms(): no params data found [ 172.468121][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.475115][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.597108][ T9659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.637017][ T9768] FAULT_INJECTION: forcing a failure. [ 172.637017][ T9768] name failslab, interval 1, probability 0, space 0, times 0 [ 172.650613][ T9768] CPU: 0 UID: 0 PID: 9768 Comm: syz.4.1014 Not tainted 6.14.0-rc2-syzkaller-00576-gde7a88b639d4 #0 [ 172.650637][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 172.650647][ T9768] Call Trace: [ 172.650653][ T9768] [ 172.650661][ T9768] dump_stack_lvl+0x241/0x360 [ 172.650684][ T9768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.650701][ T9768] ? __pfx__printk+0x10/0x10 [ 172.650718][ T9768] ? __kmalloc_noprof+0xb5/0x4c0 [ 172.650739][ T9768] ? __pfx___might_resched+0x10/0x10 [ 172.650758][ T9768] ? aa_get_newest_label+0xff/0x6f0 [ 172.650795][ T9768] should_fail_ex+0x40a/0x550 [ 172.650818][ T9768] should_failslab+0xac/0x100 [ 172.650838][ T9768] __kmalloc_noprof+0xdd/0x4c0 [ 172.650855][ T9768] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 172.650874][ T9768] ? apparmor_capable+0x13b/0x1b0 [ 172.650893][ T9768] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 172.650918][ T9768] genl_rcv_msg+0x80b/0xec0 [ 172.650948][ T9768] ? __pfx_genl_rcv_msg+0x10/0x10 [ 172.650995][ T9768] ? __pfx_lock_acquire+0x10/0x10 [ 172.651015][ T9768] ? __pfx_batadv_pre_doit+0x10/0x10 [ 172.651033][ T9768] ? __pfx_batadv_netlink_set_mesh+0x10/0x10 [ 172.651052][ T9768] ? __pfx_batadv_post_doit+0x10/0x10 [ 172.651072][ T9768] ? __pfx___might_resched+0x10/0x10 [ 172.651100][ T9768] netlink_rcv_skb+0x206/0x480 [ 172.651124][ T9768] ? __pfx_genl_rcv_msg+0x10/0x10 [ 172.651144][ T9768] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 172.651194][ T9768] genl_rcv+0x28/0x40 [ 172.651211][ T9768] netlink_unicast+0x7f6/0x990 [ 172.651242][ T9768] ? __pfx_netlink_unicast+0x10/0x10 [ 172.651262][ T9768] ? __virt_addr_valid+0x45f/0x530 [ 172.651286][ T9768] ? __phys_addr_symbol+0x2f/0x70 [ 172.651308][ T9768] ? __check_object_size+0x47a/0x730 [ 172.651333][ T9768] netlink_sendmsg+0x8de/0xcb0 [ 172.651362][ T9768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.651383][ T9768] ? aa_sock_msg_perm+0x91/0x160 [ 172.651409][ T9768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.651423][ T9768] __sock_sendmsg+0x221/0x270 [ 172.651444][ T9768] ____sys_sendmsg+0x53a/0x860 [ 172.651472][ T9768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.651491][ T9768] ? __fget_files+0x2a/0x410 [ 172.651514][ T9768] ? __fget_files+0x2a/0x410 [ 172.651543][ T9768] __sys_sendmsg+0x269/0x350 [ 172.651567][ T9768] ? __pfx___sys_sendmsg+0x10/0x10 [ 172.651600][ T9768] ? do_sys_openat2+0x17a/0x1d0 [ 172.651646][ T9768] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 172.651668][ T9768] ? do_syscall_64+0x100/0x230 [ 172.651690][ T9768] ? do_syscall_64+0xb6/0x230 [ 172.651713][ T9768] do_syscall_64+0xf3/0x230 [ 172.651730][ T9768] ? clear_bhb_loop+0x35/0x90 [ 172.651754][ T9768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.651772][ T9768] RIP: 0033:0x7f1a2798cde9 [ 172.651792][ T9768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.651804][ T9768] RSP: 002b:00007f1a28786038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.651819][ T9768] RAX: ffffffffffffffda RBX: 00007f1a27ba5fa0 RCX: 00007f1a2798cde9 [ 172.651828][ T9768] RDX: 0000000000000000 RSI: 0000400000000540 RDI: 0000000000000003 [ 172.651836][ T9768] RBP: 00007f1a28786090 R08: 0000000000000000 R09: 0000000000000000 [ 172.651845][ T9768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.651852][ T9768] R13: 0000000000000000 R14: 00007f1a27ba5fa0 R15: 00007fffd4e10578 [ 172.651874][ T9768] [ 172.652160][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.015227][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.059255][ T9659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.235889][ T9557] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.257194][ T9782] ax25_connect(): syz.1.1019 uses autobind, please contact jreuter@yaina.de [ 173.351936][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.360175][ T9666] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.367741][ T9666] bridge_slave_0: entered allmulticast mode [ 173.375355][ T9666] bridge_slave_0: entered promiscuous mode [ 173.387346][ T54] Bluetooth: hci0: command tx timeout [ 173.388517][ T9666] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.400575][ T9666] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.410742][ T9791] IPVS: length: 118 != 24 [ 173.416858][ T9666] bridge_slave_1: entered allmulticast mode [ 173.424162][ T9666] bridge_slave_1: entered promiscuous mode [ 173.434651][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 173.463627][ T9557] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.521245][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1021'. [ 173.524611][ T9659] hsr_slave_0: entered promiscuous mode [ 173.551887][ T9659] hsr_slave_1: entered promiscuous mode [ 173.577620][ T9659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.585225][ T9659] Cannot create hsr debugfs directory [ 173.609768][ T9785] wg1 speed is unknown, defaulting to 1000 [ 173.624883][ T9796] dvmrp0: mtu less than device minimum [ 173.673767][ T9798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1022'. [ 173.683051][ T9798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1022'. [ 173.685791][ T9557] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.715000][ T9666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.742356][ T9666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.781684][ T9557] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.792171][ T54] Bluetooth: hci4: command tx timeout [ 173.892474][ T9666] team0: Port device team_slave_0 added [ 173.917451][ T9666] team0: Port device team_slave_1 added [ 173.924278][ T5884] hid-generic 0005:0458:0009.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 173.991139][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.007663][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.035002][ T9666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.109961][ T9666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.126832][ T9666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.166884][ T9666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.295597][ T9809] FAULT_INJECTION: forcing a failure. [ 174.295597][ T9809] name failslab, interval 1, probability 0, space 0, times 0 [ 174.310124][ T9809] CPU: 1 UID: 0 PID: 9809 Comm: syz.3.1026 Not tainted 6.14.0-rc2-syzkaller-00576-gde7a88b639d4 #0 [ 174.310150][ T9809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 174.310160][ T9809] Call Trace: [ 174.310166][ T9809] [ 174.310173][ T9809] dump_stack_lvl+0x241/0x360 [ 174.310200][ T9809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.310218][ T9809] ? __pfx__printk+0x10/0x10 [ 174.310237][ T9809] ? __kmalloc_noprof+0xb5/0x4c0 [ 174.310259][ T9809] ? __pfx___might_resched+0x10/0x10 [ 174.310277][ T9809] ? aa_get_newest_label+0xff/0x6f0 [ 174.310306][ T9809] should_fail_ex+0x40a/0x550 [ 174.310333][ T9809] should_failslab+0xac/0x100 [ 174.310355][ T9809] __kmalloc_noprof+0xdd/0x4c0 [ 174.310374][ T9809] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 174.310395][ T9809] ? apparmor_capable+0x13b/0x1b0 [ 174.310415][ T9809] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 174.310441][ T9809] genl_rcv_msg+0x80b/0xec0 [ 174.310468][ T9809] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.310517][ T9809] ? __pfx_lock_acquire+0x10/0x10 [ 174.310539][ T9809] ? __pfx_batadv_pre_doit+0x10/0x10 [ 174.310558][ T9809] ? __pfx_batadv_netlink_set_mesh+0x10/0x10 [ 174.310577][ T9809] ? __pfx_batadv_post_doit+0x10/0x10 [ 174.310597][ T9809] ? __pfx___might_resched+0x10/0x10 [ 174.310628][ T9809] netlink_rcv_skb+0x206/0x480 [ 174.310652][ T9809] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.310674][ T9809] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.310717][ T9809] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 174.310756][ T9809] genl_rcv+0x28/0x40 [ 174.310773][ T9809] netlink_unicast+0x7f6/0x990 [ 174.310803][ T9809] ? __pfx_netlink_unicast+0x10/0x10 [ 174.310823][ T9809] ? __virt_addr_valid+0x45f/0x530 [ 174.310847][ T9809] ? __phys_addr_symbol+0x2f/0x70 [ 174.310869][ T9809] ? __check_object_size+0x47a/0x730 [ 174.310894][ T9809] netlink_sendmsg+0x8de/0xcb0 [ 174.310923][ T9809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.310944][ T9809] ? aa_sock_msg_perm+0x91/0x160 [ 174.310970][ T9809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.310984][ T9809] __sock_sendmsg+0x221/0x270 [ 174.311006][ T9809] ____sys_sendmsg+0x53a/0x860 [ 174.311037][ T9809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.311057][ T9809] ? __fget_files+0x2a/0x410 [ 174.311080][ T9809] ? __fget_files+0x2a/0x410 [ 174.311111][ T9809] __sys_sendmsg+0x269/0x350 [ 174.311138][ T9809] ? __pfx___sys_sendmsg+0x10/0x10 [ 174.311173][ T9809] ? do_sys_openat2+0x17a/0x1d0 [ 174.311222][ T9809] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.311245][ T9809] ? do_syscall_64+0x100/0x230 [ 174.311269][ T9809] ? do_syscall_64+0xb6/0x230 [ 174.311291][ T9809] do_syscall_64+0xf3/0x230 [ 174.311310][ T9809] ? clear_bhb_loop+0x35/0x90 [ 174.311335][ T9809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.311354][ T9809] RIP: 0033:0x7f440c18cde9 [ 174.311370][ T9809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.311384][ T9809] RSP: 002b:00007f440cf9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.311402][ T9809] RAX: ffffffffffffffda RBX: 00007f440c3a5fa0 RCX: 00007f440c18cde9 [ 174.311414][ T9809] RDX: 0000000000000000 RSI: 0000400000000540 RDI: 0000000000000003 [ 174.311424][ T9809] RBP: 00007f440cf9c090 R08: 0000000000000000 R09: 0000000000000000 [ 174.311433][ T9809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.311442][ T9809] R13: 0000000000000000 R14: 00007f440c3a5fa0 R15: 00007ffc89e9b7c8 [ 174.311470][ T9809] [ 174.870942][ T9557] bridge_slave_1: left allmulticast mode [ 174.876987][ T9557] bridge_slave_1: left promiscuous mode [ 174.882713][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.905066][ T9557] bridge_slave_0: left allmulticast mode [ 174.910968][ T9557] bridge_slave_0: left promiscuous mode [ 174.918017][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.938195][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'. [ 175.292065][ T9557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.303717][ T9557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.315345][ T9557] bond0 (unregistering): Released all slaves [ 175.337492][ T9666] hsr_slave_0: entered promiscuous mode [ 175.343913][ T9666] hsr_slave_1: entered promiscuous mode [ 175.351226][ T9666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.382875][ T9666] Cannot create hsr debugfs directory [ 175.467375][ T54] Bluetooth: hci0: command tx timeout [ 175.668851][ T9815] veth1_vlan (unregistering): left allmulticast mode [ 175.694218][ T9815] bond0: (slave macvlan0): Releasing backup interface [ 175.701916][ T9815] bond0: (slave macvlan0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:34 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 175.773430][ T8] hid (null): unknown global tag 0xc [ 175.795930][ T8] hid-generic 0005:16C0:00ED.0003: unknown global tag 0xc [ 175.843370][ T8] hid-generic 0005:16C0:00ED.0003: item 0 0 1 12 parsing failed [ 175.867483][ T54] Bluetooth: hci4: command tx timeout [ 175.879063][ T8] hid-generic 0005:16C0:00ED.0003: probe with driver hid-generic failed with error -22 [ 176.043534][ T9835] wg1 speed is unknown, defaulting to 1000 [ 176.237916][ T9557] hsr_slave_0: left promiscuous mode [ 176.243998][ T9557] hsr_slave_1: left promiscuous mode [ 176.267527][ T9557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.274983][ T9557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.307715][ T9557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.315566][ T9557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.360632][ T9557] veth1_macvtap: left promiscuous mode [ 176.366458][ T9557] veth0_macvtap: left promiscuous mode [ 176.372540][ T9557] veth1_vlan: left promiscuous mode [ 176.378352][ T9557] veth0_vlan: left promiscuous mode [ 176.865846][ T9846] FAULT_INJECTION: forcing a failure. [ 176.865846][ T9846] name failslab, interval 1, probability 0, space 0, times 0 [ 176.879109][ T9846] CPU: 0 UID: 0 PID: 9846 Comm: syz.1.1037 Not tainted 6.14.0-rc2-syzkaller-00576-gde7a88b639d4 #0 [ 176.879132][ T9846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 176.879142][ T9846] Call Trace: [ 176.879148][ T9846] [ 176.879155][ T9846] dump_stack_lvl+0x241/0x360 [ 176.879181][ T9846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.879199][ T9846] ? __pfx__printk+0x10/0x10 [ 176.879227][ T9846] should_fail_ex+0x40a/0x550 [ 176.879254][ T9846] should_failslab+0xac/0x100 [ 176.879276][ T9846] __kmalloc_noprof+0xdd/0x4c0 [ 176.879295][ T9846] ? batadv_tvlv_container_register+0x3d/0x360 [ 176.879319][ T9846] batadv_tvlv_container_register+0x3d/0x360 [ 176.879343][ T9846] batadv_netlink_set_mesh+0x4d7/0x1240 [ 176.879369][ T9846] genl_rcv_msg+0xb1f/0xec0 [ 176.879398][ T9846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.879426][ T9846] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 176.879462][ T9846] ? __pfx_lock_acquire+0x10/0x10 [ 176.879483][ T9846] ? __pfx_batadv_pre_doit+0x10/0x10 [ 176.879501][ T9846] ? __pfx_batadv_netlink_set_mesh+0x10/0x10 [ 176.879520][ T9846] ? __pfx_batadv_post_doit+0x10/0x10 [ 176.879547][ T9846] ? __pfx___might_resched+0x10/0x10 [ 176.879579][ T9846] netlink_rcv_skb+0x206/0x480 [ 176.879603][ T9846] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.879623][ T9846] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.879660][ T9846] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 176.879698][ T9846] genl_rcv+0x28/0x40 [ 176.879715][ T9846] netlink_unicast+0x7f6/0x990 [ 176.879745][ T9846] ? __pfx_netlink_unicast+0x10/0x10 [ 176.879764][ T9846] ? __virt_addr_valid+0x45f/0x530 [ 176.879788][ T9846] ? __phys_addr_symbol+0x2f/0x70 [ 176.879809][ T9846] ? __check_object_size+0x47a/0x730 [ 176.879834][ T9846] netlink_sendmsg+0x8de/0xcb0 [ 176.879862][ T9846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.879887][ T9846] ? aa_sock_msg_perm+0x91/0x160 [ 176.879914][ T9846] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.879929][ T9846] __sock_sendmsg+0x221/0x270 [ 176.879950][ T9846] ____sys_sendmsg+0x53a/0x860 [ 176.879981][ T9846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.880000][ T9846] ? __fget_files+0x2a/0x410 [ 176.880024][ T9846] ? __fget_files+0x2a/0x410 [ 176.880054][ T9846] __sys_sendmsg+0x269/0x350 [ 176.880081][ T9846] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.880116][ T9846] ? do_sys_openat2+0x17a/0x1d0 [ 176.880165][ T9846] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.880189][ T9846] ? do_syscall_64+0x100/0x230 [ 176.880211][ T9846] ? do_syscall_64+0xb6/0x230 [ 176.880233][ T9846] do_syscall_64+0xf3/0x230 [ 176.880252][ T9846] ? clear_bhb_loop+0x35/0x90 [ 176.880276][ T9846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.880296][ T9846] RIP: 0033:0x7fc56898cde9 [ 176.880311][ T9846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.880325][ T9846] RSP: 002b:00007fc56982a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.880342][ T9846] RAX: ffffffffffffffda RBX: 00007fc568ba5fa0 RCX: 00007fc56898cde9 [ 176.880354][ T9846] RDX: 0000000000000000 RSI: 0000400000000540 RDI: 0000000000000003 [ 176.880365][ T9846] RBP: 00007fc56982a090 R08: 0000000000000000 R09: 0000000000000000 [ 176.880375][ T9846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.880384][ T9846] R13: 0000000000000000 R14: 00007fc568ba5fa0 R15: 00007ffe74413d88 [ 176.880413][ T9846] [ 177.368570][ T9557] team0 (unregistering): Port device team_slave_1 removed [ 177.443029][ T9557] team0 (unregistering): Port device team_slave_0 removed [ 177.557726][ T54] Bluetooth: hci0: command tx timeout [ 177.568437][ T9854] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 177.947054][ T54] Bluetooth: hci4: command tx timeout [ 178.025965][ T9659] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.048816][ T9659] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.093669][ T9659] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.124513][ T9659] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.381655][ T9659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.457931][ T9659] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.466228][ T9864] __nla_validate_parse: 3 callbacks suppressed [ 178.466246][ T9864] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1043'. [ 178.483782][ T8257] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.490954][ T8257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.517535][ T9864] unsupported nlmsg_type 40 [ 178.555545][ T9560] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.562745][ T9560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.653925][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 178.675328][ T9666] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.703360][ T9666] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.725530][ T9666] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.753214][ T9666] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 178.807241][ T9870] wg1 speed is unknown, defaulting to 1000 [ 178.885658][ T9856] dccp_close: ABORT with 64 bytes unread [ 179.041510][ T9666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.085002][ T9881] pim6reg1: entered promiscuous mode [ 179.097250][ T9881] pim6reg1: entered allmulticast mode [ 179.151948][ T9666] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.269366][ T9560] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.276516][ T9560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.285602][ T9560] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.292727][ T9560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.316061][ T9659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.388956][ T9873] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1046'. [ 179.732706][ T9659] veth0_vlan: entered promiscuous mode [ 179.779379][ T9659] veth1_vlan: entered promiscuous mode [ 179.869952][ T9659] veth0_macvtap: entered promiscuous mode [ 179.958725][ T9659] veth1_macvtap: entered promiscuous mode [ 180.034398][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.076612][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.110188][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.146607][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.188385][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.238947][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.277110][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.307202][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.327300][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.367767][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.403262][ T9666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.434437][ T9659] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.467012][ T9659] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.496640][ T9659] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.505380][ T9659] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.708044][ T9666] veth0_vlan: entered promiscuous mode [ 180.781238][ T9666] veth1_vlan: entered promiscuous mode [ 180.883331][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.892544][ T9666] veth0_macvtap: entered promiscuous mode [ 180.902104][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.948536][ T9666] veth1_macvtap: entered promiscuous mode [ 180.978702][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.046890][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.096728][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.126602][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.136473][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.167495][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.187996][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.199699][ T8257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.217334][ T8257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.239790][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.309991][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.358294][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.406611][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.446623][ T9666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.486612][ T9666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.527868][ T9666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.578844][ T9666] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.616614][ T9666] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.625360][ T9666] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.687715][ T9666] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.883623][ T8257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.910626][ T8257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.057575][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.065447][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.342493][ T9907] wg1 speed is unknown, defaulting to 1000 [ 182.415489][ T9666] ------------[ cut here ]------------ [ 182.421733][ T9666] refcount_t: underflow; use-after-free. [ 182.428254][ T9666] WARNING: CPU: 0 PID: 9666 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 182.438256][ T9666] Modules linked in: [ 182.442508][ T9666] CPU: 0 UID: 0 PID: 9666 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00576-gde7a88b639d4 #0 [ 182.453539][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 182.463720][ T9666] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 182.469982][ T9666] Code: 60 a1 80 8c e8 47 57 8c fc 90 0f 0b 90 90 eb 99 e8 1b 94 cc fc c6 05 97 da 31 0b 01 90 48 c7 c7 c0 a1 80 8c e8 27 57 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 f8 93 cc fc c6 05 71 da 31 0b 01 90 [ 182.489957][ T9666] RSP: 0018:ffffc9000405f738 EFLAGS: 00010246 [ 182.496055][ T9666] RAX: 63b376dc759c6200 RBX: ffff88804d8bc878 RCX: ffff88801eb9da00 [ 182.504111][ T9666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.512453][ T9666] RBP: 0000000000000003 R08: ffffffff81817d12 R09: fffffbfff1d3a614 [ 182.520534][ T9666] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffff88804d8bc860 [ 182.528608][ T9666] R13: ffffffff86384f30 R14: 1ffff11009b1790c R15: ffff88804d8bc860 [ 182.536991][ T9666] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 182.545955][ T9666] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.553120][ T9666] CR2: 00007fc569829f98 CR3: 000000007e422000 CR4: 00000000003526f0 [ 182.561194][ T9666] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.569314][ T9666] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.577379][ T9666] Call Trace: [ 182.580679][ T9666] [ 182.583631][ T9666] ? __warn+0x165/0x4d0 [ 182.588217][ T9666] ? refcount_warn_saturate+0x15a/0x1d0 [ 182.593795][ T9666] ? report_bug+0x2b3/0x500 [ 182.598372][ T9666] ? refcount_warn_saturate+0x15a/0x1d0 [ 182.603949][ T9666] ? handle_bug+0x60/0x90 [ 182.608353][ T9666] ? exc_invalid_op+0x1a/0x50 [ 182.613056][ T9666] ? asm_exc_invalid_op+0x1a/0x20 [ 182.618195][ T9666] ? __pfx_klist_children_put+0x10/0x10 [ 182.623774][ T9666] ? __warn_printk+0x292/0x360 [ 182.628676][ T9666] ? refcount_warn_saturate+0x15a/0x1d0 [ 182.634249][ T9666] ? refcount_warn_saturate+0x159/0x1d0 [ 182.640278][ T9666] klist_dec_and_del+0x3ec/0x3f0 [ 182.645246][ T9666] ? __pfx_klist_children_put+0x10/0x10 [ 182.651107][ T9666] ? __pfx_klist_children_put+0x10/0x10 [ 182.656759][ T9666] ? __pfx_klist_children_put+0x10/0x10 [ 182.662330][ T9666] klist_remove+0x25e/0x480 [ 182.666937][ T9666] ? __pfx_klist_remove+0x10/0x10 [ 182.671993][ T9666] ? __pfx_kobject_move+0x10/0x10 [ 182.677101][ T9666] ? get_device_parent+0x25d/0x410 [ 182.682244][ T9666] device_move+0x1b4/0x710 [ 182.686769][ T9666] ? kasan_quarantine_put+0xdc/0x230 [ 182.692090][ T9666] hci_conn_del_sysfs+0xb5/0x170 [ 182.697110][ T9666] hci_conn_del+0x8c4/0xc40 [ 182.701647][ T9666] hci_conn_hash_flush+0x258/0x350 [ 182.706852][ T9666] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 182.712519][ T9666] ? drain_workqueue+0x2d3/0x3a0 [ 182.717569][ T9666] ? hci_discovery_set_state+0x57/0x180 [ 182.723141][ T9666] hci_dev_close_sync+0xa8b/0x1260 [ 182.728353][ T9666] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 182.733927][ T9666] ? rcu_is_watching+0x15/0xb0 [ 182.735082][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 182.738761][ T9666] hci_unregister_dev+0x20b/0x510 [ 182.738930][ T9666] vhci_release+0x80/0xd0 [ 182.738953][ T9666] ? __pfx_vhci_release+0x10/0x10 [ 182.738977][ T9666] __fput+0x3e9/0x9f0 [ 182.739015][ T9666] task_work_run+0x24f/0x310 [ 182.739043][ T9666] ? __pfx_task_work_run+0x10/0x10 [ 182.739060][ T9666] ? do_exit+0xa25/0x28e0 [ 182.739086][ T9666] ? do_exit+0xa25/0x28e0 [ 182.739113][ T9666] do_exit+0xa2a/0x28e0 [ 182.739145][ T9666] ? __pfx_do_exit+0x10/0x10 [ 182.739166][ T9666] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 182.739195][ T9666] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.739228][ T9666] ? _raw_spin_unlock_irq+0x23/0x50 [ 182.739246][ T9666] ? lockdep_hardirqs_on+0x99/0x150 [ 182.739268][ T9666] do_group_exit+0x207/0x2c0 [ 182.739296][ T9666] __x64_sys_exit_group+0x3f/0x40 [ 182.827338][ T9666] x64_sys_call+0x26a8/0x26b0 [ 182.832041][ T9666] do_syscall_64+0xf3/0x230 [ 182.836597][ T9666] ? clear_bhb_loop+0x35/0x90 [ 182.841303][ T9666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.847867][ T9666] RIP: 0033:0x7f2ed118cde9 [ 182.852320][ T9666] Code: Unable to access opcode bytes at 0x7f2ed118cdbf. [ 182.859754][ T9666] RSP: 002b:00007ffe62f64298 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 182.868290][ T9666] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed118cde9 [ 182.876284][ T9666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 182.884371][ T9666] RBP: 00007f2ed11ed8d0 R08: 00007ffe62f62037 R09: 0000000000000003 [ 182.892506][ T9666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.900568][ T9666] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffe62f64450 [ 182.908654][ T9666] [ 182.911725][ T9666] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 182.918993][ T9666] CPU: 0 UID: 0 PID: 9666 Comm: syz-executor Not tainted 6.14.0-rc2-syzkaller-00576-gde7a88b639d4 #0 [ 182.929823][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 182.939877][ T9666] Call Trace: [ 182.943147][ T9666] [ 182.946080][ T9666] dump_stack_lvl+0x241/0x360 [ 182.950778][ T9666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.955987][ T9666] ? __pfx__printk+0x10/0x10 [ 182.960585][ T9666] ? vscnprintf+0x5d/0x90 [ 182.964901][ T9666] panic+0x349/0x880 [ 182.968820][ T9666] ? __warn+0x174/0x4d0 [ 182.972984][ T9666] ? __pfx_panic+0x10/0x10 [ 182.977403][ T9666] __warn+0x344/0x4d0 [ 182.981375][ T9666] ? refcount_warn_saturate+0x15a/0x1d0 [ 182.986918][ T9666] report_bug+0x2b3/0x500 [ 182.991259][ T9666] ? refcount_warn_saturate+0x15a/0x1d0 [ 182.996817][ T9666] handle_bug+0x60/0x90 [ 183.000976][ T9666] exc_invalid_op+0x1a/0x50 [ 183.005473][ T9666] asm_exc_invalid_op+0x1a/0x20 [ 183.010322][ T9666] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 183.016470][ T9666] Code: 60 a1 80 8c e8 47 57 8c fc 90 0f 0b 90 90 eb 99 e8 1b 94 cc fc c6 05 97 da 31 0b 01 90 48 c7 c7 c0 a1 80 8c e8 27 57 8c fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 f8 93 cc fc c6 05 71 da 31 0b 01 90 [ 183.036070][ T9666] RSP: 0018:ffffc9000405f738 EFLAGS: 00010246 [ 183.042138][ T9666] RAX: 63b376dc759c6200 RBX: ffff88804d8bc878 RCX: ffff88801eb9da00 [ 183.050107][ T9666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.058073][ T9666] RBP: 0000000000000003 R08: ffffffff81817d12 R09: fffffbfff1d3a614 [ 183.066035][ T9666] R10: dffffc0000000000 R11: fffffbfff1d3a614 R12: ffff88804d8bc860 [ 183.074001][ T9666] R13: ffffffff86384f30 R14: 1ffff11009b1790c R15: ffff88804d8bc860 [ 183.081970][ T9666] ? __pfx_klist_children_put+0x10/0x10 [ 183.087515][ T9666] ? __warn_printk+0x292/0x360 [ 183.092283][ T9666] ? refcount_warn_saturate+0x159/0x1d0 [ 183.097822][ T9666] klist_dec_and_del+0x3ec/0x3f0 [ 183.102759][ T9666] ? __pfx_klist_children_put+0x10/0x10 [ 183.108297][ T9666] ? __pfx_klist_children_put+0x10/0x10 [ 183.113848][ T9666] ? __pfx_klist_children_put+0x10/0x10 [ 183.119387][ T9666] klist_remove+0x25e/0x480 [ 183.123884][ T9666] ? __pfx_klist_remove+0x10/0x10 [ 183.128909][ T9666] ? __pfx_kobject_move+0x10/0x10 [ 183.133931][ T9666] ? get_device_parent+0x25d/0x410 [ 183.139041][ T9666] device_move+0x1b4/0x710 [ 183.143459][ T9666] ? kasan_quarantine_put+0xdc/0x230 [ 183.148743][ T9666] hci_conn_del_sysfs+0xb5/0x170 [ 183.153678][ T9666] hci_conn_del+0x8c4/0xc40 [ 183.158185][ T9666] hci_conn_hash_flush+0x258/0x350 [ 183.163295][ T9666] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 183.168922][ T9666] ? drain_workqueue+0x2d3/0x3a0 [ 183.173858][ T9666] ? hci_discovery_set_state+0x57/0x180 [ 183.179397][ T9666] hci_dev_close_sync+0xa8b/0x1260 [ 183.184506][ T9666] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 183.190041][ T9666] ? rcu_is_watching+0x15/0xb0 [ 183.194800][ T9666] hci_unregister_dev+0x20b/0x510 [ 183.199828][ T9666] vhci_release+0x80/0xd0 [ 183.204156][ T9666] ? __pfx_vhci_release+0x10/0x10 [ 183.209174][ T9666] __fput+0x3e9/0x9f0 [ 183.213162][ T9666] task_work_run+0x24f/0x310 [ 183.217747][ T9666] ? __pfx_task_work_run+0x10/0x10 [ 183.222850][ T9666] ? do_exit+0xa25/0x28e0 [ 183.227180][ T9666] ? do_exit+0xa25/0x28e0 [ 183.231505][ T9666] do_exit+0xa2a/0x28e0 [ 183.235666][ T9666] ? __pfx_do_exit+0x10/0x10 [ 183.240246][ T9666] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 183.246233][ T9666] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 183.252565][ T9666] ? _raw_spin_unlock_irq+0x23/0x50 [ 183.257759][ T9666] ? lockdep_hardirqs_on+0x99/0x150 [ 183.262952][ T9666] do_group_exit+0x207/0x2c0 [ 183.267541][ T9666] __x64_sys_exit_group+0x3f/0x40 [ 183.272556][ T9666] x64_sys_call+0x26a8/0x26b0 [ 183.277226][ T9666] do_syscall_64+0xf3/0x230 [ 183.281721][ T9666] ? clear_bhb_loop+0x35/0x90 [ 183.286394][ T9666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.292280][ T9666] RIP: 0033:0x7f2ed118cde9 [ 183.296689][ T9666] Code: Unable to access opcode bytes at 0x7f2ed118cdbf. [ 183.303690][ T9666] RSP: 002b:00007ffe62f64298 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 183.312097][ T9666] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2ed118cde9 [ 183.320058][ T9666] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 183.328019][ T9666] RBP: 00007f2ed11ed8d0 R08: 00007ffe62f62037 R09: 0000000000000003 [ 183.335998][ T9666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.343969][ T9666] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffe62f64450 [ 183.351958][ T9666] [ 183.355625][ T9666] Kernel Offset: disabled [ 183.360091][ T9666] Rebooting in 86400 seconds..