last executing test programs: 1m0.759706632s ago: executing program 2 (id=100): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000280)='u', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) 51.811086581s ago: executing program 2 (id=100): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000280)='u', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) 40.240826893s ago: executing program 2 (id=100): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000280)='u', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) 29.00162889s ago: executing program 2 (id=100): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000280)='u', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) 18.283465232s ago: executing program 2 (id=100): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000280)='u', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) 8.018476108s ago: executing program 2 (id=100): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000280)='u', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) 2.027492495s ago: executing program 3 (id=872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00'}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 1.789001046s ago: executing program 4 (id=874): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ID={0x8, 0x6, 0xffffffff}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}}, 0x0) 1.748516757s ago: executing program 0 (id=875): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000000), 0x10) sendto$l2tp(r0, &(0x7f0000000080)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000020f00)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40000122, 0x0) 1.717276805s ago: executing program 4 (id=876): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, 0x0, 0x0) 1.688329336s ago: executing program 3 (id=877): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x0) 1.560228165s ago: executing program 4 (id=879): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000640)="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", 0x125}, {&(0x7f0000001440)="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", 0x490}], 0x2}, 0x0) 1.516299588s ago: executing program 1 (id=880): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) 1.514478772s ago: executing program 3 (id=881): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000640)={0x9, {{0x2, 0x0, @multicast2}}}, 0x90) 1.424356356s ago: executing program 4 (id=882): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 1.341414566s ago: executing program 1 (id=883): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) 1.292274423s ago: executing program 3 (id=884): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) socket(0x2, 0x3, 0x100000001) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @timestamp_reply={0xe, 0x0, 0x0, 0x2, 0x40, 0x4, 0x6, 0x8}}}}}, 0x0) 1.159328076s ago: executing program 1 (id=885): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.155951227s ago: executing program 3 (id=886): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r0, 0x0, 0x6}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 687.586504ms ago: executing program 0 (id=887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 532.0035ms ago: executing program 4 (id=888): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 462.009586ms ago: executing program 0 (id=889): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 428.057362ms ago: executing program 3 (id=890): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) 368.46592ms ago: executing program 1 (id=891): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) 238.075889ms ago: executing program 1 (id=892): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000640)="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", 0x125}, {&(0x7f0000001440)="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", 0x490}], 0x2}, 0x0) 179.719893ms ago: executing program 0 (id=893): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) writev(r0, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) 118.734484ms ago: executing program 4 (id=894): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newtfilter={0x98, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x6c, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'erspan0\x00'}, @TCA_U32_SEL={0x54, 0x5, {0x0, 0x40, 0x4, 0x7, 0x7, 0x7, 0x8, 0x3, [{0xfff, 0x815e, 0x4, 0x1000}, {0x7f, 0xaa, 0x8, 0xeb6d}, {0x9, 0x70b, 0x7, 0xf}, {0x400, 0x800, 0x8000, 0x1}]}}]}}]}, 0x98}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33) 117.934071ms ago: executing program 0 (id=895): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x400000000000003, 0x20, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}]}, 0x30}}, 0x0) 427.034µs ago: executing program 1 (id=896): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYBLOB="54000000100005ff00000000fbdbdf250000004a", @ANYRES32=0x0, @ANYBLOB="018000000a000200340012800b00010067656e6576650000240002800400060008000b"], 0x54}, 0x1, 0x0, 0x0, 0x20010080}, 0x40000) 0s ago: executing program 0 (id=897): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a00)=@security={'security\x00', 0xe, 0x4, 0x278, 0xffffffff, 0x0, 0x0, 0x308, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x10, "3deeee377f9c99ffab6b93292aeef21f66de5c8342f29259ea4d7396a61f"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3}, {0x0, 0x5, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) kernel console output (not intermixed with test programs): 84.155814][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.188025][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.197381][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.204567][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.226546][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.262377][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.269837][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.297656][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.304841][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.317971][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.325379][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.342940][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.350277][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.365889][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.392431][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.399680][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.412125][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.419298][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.494244][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.521810][ T54] Bluetooth: hci0: command tx timeout [ 84.572368][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.599314][ T54] Bluetooth: hci1: command tx timeout [ 84.604810][ T54] Bluetooth: hci2: command tx timeout [ 84.612457][ T5836] Bluetooth: hci3: command tx timeout [ 84.651649][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.658790][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.680183][ T54] Bluetooth: hci4: command tx timeout [ 84.707102][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.714325][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.895281][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.926288][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.076656][ T5841] veth0_vlan: entered promiscuous mode [ 85.124320][ T5841] veth1_vlan: entered promiscuous mode [ 85.155444][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.188709][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.264485][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.307618][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.333855][ T5841] veth0_macvtap: entered promiscuous mode [ 85.357653][ T5841] veth1_macvtap: entered promiscuous mode [ 85.429624][ T5837] veth0_vlan: entered promiscuous mode [ 85.457606][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.467381][ T5848] veth0_vlan: entered promiscuous mode [ 85.483781][ T5837] veth1_vlan: entered promiscuous mode [ 85.502733][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.525717][ T5848] veth1_vlan: entered promiscuous mode [ 85.540620][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.550776][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.561797][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.570643][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.601819][ T5833] veth0_vlan: entered promiscuous mode [ 85.645637][ T5833] veth1_vlan: entered promiscuous mode [ 85.695558][ T5837] veth0_macvtap: entered promiscuous mode [ 85.716823][ T5837] veth1_macvtap: entered promiscuous mode [ 85.755089][ T5848] veth0_macvtap: entered promiscuous mode [ 85.778900][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.790729][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.803278][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.824287][ T5833] veth0_macvtap: entered promiscuous mode [ 85.834069][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.848279][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.871629][ T5848] veth1_macvtap: entered promiscuous mode [ 85.884862][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.901916][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.913357][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.940696][ T5833] veth1_macvtap: entered promiscuous mode [ 85.947459][ T5842] veth0_vlan: entered promiscuous mode [ 85.959774][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.968713][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.978601][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.988112][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.009482][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.020300][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.022836][ T5842] veth1_vlan: entered promiscuous mode [ 86.051247][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.062086][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.073429][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.087032][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.098744][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.142986][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.145983][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.160157][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.185019][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.195968][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.208005][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.241376][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.252711][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.263614][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.274635][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.285357][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.297492][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.317206][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.340281][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.379684][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.398203][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.407388][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.462752][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.474933][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.486618][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.497582][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.507942][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.518808][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.531214][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.595451][ T5842] veth0_macvtap: entered promiscuous mode [ 86.599513][ T54] Bluetooth: hci0: command tx timeout [ 86.613284][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.628499][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.649427][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.658214][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.680391][ T54] Bluetooth: hci2: command tx timeout [ 86.685903][ T54] Bluetooth: hci3: command tx timeout [ 86.693318][ T5839] Bluetooth: hci1: command tx timeout [ 86.715158][ T5842] veth1_macvtap: entered promiscuous mode [ 86.742200][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.757466][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.759651][ T5839] Bluetooth: hci4: command tx timeout [ 86.785894][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.807359][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.817395][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.828149][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.838056][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.849188][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.859120][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.869645][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.880902][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.921571][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.929663][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.992817][ T5924] sctp: [Deprecated]: syz.3.8 (pid 5924) Use of int in maxseg socket option. [ 86.992817][ T5924] Use struct sctp_assoc_value instead [ 87.026257][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.038855][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.070983][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.084276][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.095664][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.106916][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.133797][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.154745][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.174421][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.221533][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.248844][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.264914][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.273831][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.328922][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.336869][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.613336][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.638460][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.771923][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.796010][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.968481][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.992444][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.077386][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.096040][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.107263][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.126950][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.164416][ T5941] netlink: 'syz.1.10': attribute type 6 has an invalid length. [ 88.202112][ T5944] tipc: Started in network mode [ 88.208633][ T5944] tipc: Node identity 7f000001, cluster identity 4711 [ 88.238102][ T5944] tipc: Enabled bearer , priority 10 [ 88.323556][ T5945] dvmrp1: entered allmulticast mode [ 88.400201][ T5950] netlink: 'syz.0.1': attribute type 2 has an invalid length. [ 88.427633][ T5952] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.487490][ T5952] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'. [ 88.508541][ T5952] IPv6: NLM_F_REPLACE set, but no existing node found! [ 88.666458][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.680780][ T5839] Bluetooth: hci0: command tx timeout [ 88.716315][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 88.726644][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13'. [ 88.761065][ T5839] Bluetooth: hci1: command tx timeout [ 88.766570][ T5839] Bluetooth: hci3: command tx timeout [ 88.772808][ T54] Bluetooth: hci2: command tx timeout [ 88.773421][ T5959] gre1: entered promiscuous mode [ 88.812942][ T5959] gre1: entered allmulticast mode [ 88.841490][ T5839] Bluetooth: hci4: command tx timeout [ 88.917344][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16'. [ 89.054105][ T5977] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.105912][ T5976] syz.4.17 (5976) used greatest stack depth: 18840 bytes left [ 89.126807][ T5959] xt_l2tp: wrong L2TP version: 0 [ 89.238059][ T5973] syzkaller1: entered promiscuous mode [ 89.245656][ T5973] syzkaller1: entered allmulticast mode [ 89.350215][ T5934] tipc: Node number set to 2130706433 [ 89.596605][ T5984] netlink: 7100 bytes leftover after parsing attributes in process `syz.3.18'. [ 89.673628][ T6004] veth2: entered allmulticast mode [ 89.792005][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 89.829378][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 89.842355][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 89.867882][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 89.964122][ T6013] syz.1.25 uses obsolete (PF_INET,SOCK_PACKET) [ 90.088098][ T6021] Cannot find add_set index 0 as target [ 90.471025][ T6038] netlink: 24 bytes leftover after parsing attributes in process `syz.2.31'. [ 90.778903][ T6054] warning: `syz.0.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.116806][ T6078] caif0: entered allmulticast mode [ 91.511892][ T6092] Zero length message leads to an empty skb [ 91.522611][ T6093] netlink: 'syz.3.50': attribute type 27 has an invalid length. [ 91.669209][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 91.715579][ T6100] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 91.765869][ T6102] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20004 [ 92.053639][ T6111] netlink: 'syz.2.56': attribute type 21 has an invalid length. [ 92.063344][ T6111] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.079396][ T6111] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.086745][ T6111] IPv6: NLM_F_CREATE should be set when creating new route [ 92.094246][ T6111] IPv6: NLM_F_CREATE should be set when creating new route [ 92.101558][ T6111] IPv6: NLM_F_CREATE should be set when creating new route [ 92.123442][ T25] cfg80211: failed to load regulatory.db [ 92.217306][ T6119] netlink: 'syz.1.59': attribute type 5 has an invalid length. [ 92.240998][ T6121] gretap0: entered promiscuous mode [ 92.249190][ T6119] netlink: 'syz.1.59': attribute type 6 has an invalid length. [ 92.315683][ T6121] gretap0: left promiscuous mode [ 93.071774][ T6162] netlink: 'syz.0.68': attribute type 9 has an invalid length. [ 93.090384][ T6162] netlink: 'syz.0.68': attribute type 7 has an invalid length. [ 93.099257][ T6162] netlink: 'syz.0.68': attribute type 8 has an invalid length. [ 93.280937][ T6167] Cannot find set identified by id 0 to match [ 93.324849][ T6167] pim6reg: entered allmulticast mode [ 94.628280][ T6232] dvmrp0: entered allmulticast mode [ 94.672306][ T6232] pimreg: entered allmulticast mode [ 94.756039][ T6232] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.822996][ T6232] batadv_slave_1: entered promiscuous mode [ 95.654551][ T6266] Cannot find add_set index 0 as target [ 96.412191][ T67] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.556888][ T67] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.671747][ T67] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.887845][ T6302] netlink: 'syz.4.103': attribute type 10 has an invalid length. [ 96.914655][ T67] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.946241][ T6304] netlink: 'syz.4.103': attribute type 10 has an invalid length. [ 97.075285][ T6302] team0: Failed to send options change via netlink (err -105) [ 97.099060][ T6302] team0: Port device netdevsim0 added [ 97.116823][ T6309] __nla_validate_parse: 22 callbacks suppressed [ 97.116846][ T6309] netlink: 16 bytes leftover after parsing attributes in process `syz.1.104'. [ 97.185507][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 97.274199][ T6304] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 97.330295][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.342796][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.355620][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.384945][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.396665][ T5836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 97.397559][ T6304] team0: Failed to send options change via netlink (err -105) [ 97.413317][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.508725][ T6304] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 97.564343][ T6304] team0: Port device netdevsim0 removed [ 97.588285][ T6304] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 97.872191][ T6334] rdma_op ffff8880282209f0 conn xmit_rdma 0000000000000000 [ 97.944058][ T6334] IPv6: sit1: Disabled Multicast RS [ 97.961902][ T6334] sit1: entered allmulticast mode [ 98.231965][ T67] bridge_slave_1: left allmulticast mode [ 98.237931][ T67] bridge_slave_1: left promiscuous mode [ 98.255235][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.327966][ T67] bridge_slave_0: left allmulticast mode [ 98.357604][ T67] bridge_slave_0: left promiscuous mode [ 98.380913][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.420399][ T6352] atomic_op ffff88807bab7198 conn xmit_atomic 0000000000000000 [ 98.823981][ T6378] netlink: 44 bytes leftover after parsing attributes in process `syz.3.114'. [ 98.944341][ T6382] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.000857][ T6385] openvswitch: netlink: Flow key attr not present in new flow. [ 99.174570][ T6393] netlink: 20 bytes leftover after parsing attributes in process `syz.0.120'. [ 99.276147][ T67] dvmrp1 (unregistering): left allmulticast mode [ 99.480842][ T5839] Bluetooth: hci4: command tx timeout [ 99.509215][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.122'. [ 99.707335][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.121'. [ 99.858911][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.882461][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.903012][ T67] bond0 (unregistering): Released all slaves [ 99.933215][ T6363] batadv0: entered promiscuous mode [ 99.966012][ T6370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.016446][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.030313][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.050242][ T6404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.152338][ T67] tipc: Disabling bearer [ 100.179262][ T67] tipc: Left network mode [ 100.213383][ T6315] chnl_net:caif_netlink_parms(): no params data found [ 100.858378][ T6315] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.879592][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.904070][ T6315] bridge_slave_0: entered allmulticast mode [ 100.920608][ T6315] bridge_slave_0: entered promiscuous mode [ 101.179175][ T6315] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.186391][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.194595][ T6315] bridge_slave_1: entered allmulticast mode [ 101.201907][ T6315] bridge_slave_1: entered promiscuous mode [ 101.345334][ T6315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.403224][ T67] hsr_slave_0: left promiscuous mode [ 101.413417][ T67] hsr_slave_1: left promiscuous mode [ 101.421319][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.432540][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.447742][ T6471] openvswitch: netlink: IP tunnel dst address not specified [ 101.457160][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.465458][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.489503][ T67] veth1_macvtap: left promiscuous mode [ 101.495514][ T67] veth0_macvtap: left promiscuous mode [ 101.501322][ T67] veth1_vlan: left promiscuous mode [ 101.506861][ T67] veth0_vlan: left promiscuous mode [ 101.560252][ T5839] Bluetooth: hci4: command tx timeout [ 101.617072][ T67] pim6reg (unregistering): left allmulticast mode [ 102.015564][ T67] team0 (unregistering): Port device team_slave_1 removed [ 102.066399][ T67] team0 (unregistering): Port device team_slave_0 removed [ 102.517759][ T6315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.532881][ T6471] macvlan1: entered promiscuous mode [ 102.551952][ T6478] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 102.567923][ T6478] bridge1: entered promiscuous mode [ 102.605022][ T6478] bridge1: entered allmulticast mode [ 102.622995][ T6479] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 102.864167][ T6315] team0: Port device team_slave_0 added [ 102.919956][ T6315] team0: Port device team_slave_1 added [ 102.980777][ T6492] netlink: 'syz.4.141': attribute type 1 has an invalid length. [ 103.002185][ T6492] netlink: 'syz.4.141': attribute type 1 has an invalid length. [ 103.058908][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.069227][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.173335][ T6315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.236887][ T6315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.279554][ T6315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.336145][ T6315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.353317][ T6494] IPv6: syztnl0: Disabled Multicast RS [ 103.404917][ T6506] netlink: 830 bytes leftover after parsing attributes in process `syz.0.145'. [ 103.616825][ T6509] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 103.633845][ T6509] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 103.643703][ T5839] Bluetooth: hci4: command tx timeout [ 103.770479][ T6315] hsr_slave_0: entered promiscuous mode [ 103.825074][ T6315] hsr_slave_1: entered promiscuous mode [ 103.840901][ T6315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.859075][ T6315] Cannot create hsr debugfs directory [ 103.965544][ T6533] netlink: 132 bytes leftover after parsing attributes in process `syz.0.150'. [ 105.744854][ T5839] Bluetooth: hci4: command tx timeout [ 106.104811][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.114559][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.188780][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 106.222666][ T6607] netlink: 60 bytes leftover after parsing attributes in process `syz.4.164'. [ 106.241138][ T6607] unsupported nlmsg_type 40 [ 106.333570][ T6587] batadv_slave_1: left promiscuous mode [ 106.410762][ T6587] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.421059][ T6587] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.430223][ T6587] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.440911][ T6587] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.493537][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.162'. [ 106.867988][ T6315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.898594][ T6315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.946232][ T6315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.000093][ T6315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.112877][ T6637] netlink: 'syz.0.169': attribute type 10 has an invalid length. [ 107.152815][ T6637] batman_adv: batadv0: Adding interface: team0 [ 107.173722][ T6637] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.198893][ T6641] syz.3.171: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 107.223872][ T6641] CPU: 1 UID: 0 PID: 6641 Comm: syz.3.171 Not tainted 6.13.0-rc2-syzkaller-00485-gc1bad69f8baf #0 [ 107.234542][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 107.240969][ T6637] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 107.244634][ T6641] Call Trace: [ 107.244652][ T6641] [ 107.244665][ T6641] dump_stack_lvl+0x241/0x360 [ 107.265385][ T6641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.270660][ T6641] ? __pfx__printk+0x10/0x10 [ 107.275326][ T6641] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 107.281814][ T6641] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 107.288399][ T6641] warn_alloc+0x278/0x410 [ 107.292888][ T6641] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 107.298988][ T6641] ? __pfx_warn_alloc+0x10/0x10 [ 107.303885][ T6641] ? kasan_save_track+0x3f/0x80 [ 107.308762][ T6641] ? __kasan_kmalloc+0x98/0xb0 [ 107.313553][ T6641] ? xsk_setsockopt+0x4ea/0x950 [ 107.318475][ T6641] ? do_sock_setsockopt+0x3af/0x720 [ 107.323700][ T6641] ? __x64_sys_setsockopt+0x1ee/0x280 [ 107.329098][ T6641] ? do_syscall_64+0xf3/0x230 [ 107.333794][ T6641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.339885][ T6641] __vmalloc_node_range_noprof+0x126/0x1380 [ 107.345817][ T6641] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 107.352165][ T6641] ? __kasan_kmalloc+0x98/0xb0 [ 107.357120][ T6641] vmalloc_user_noprof+0x74/0x80 [ 107.362076][ T6641] ? xskq_create+0xb6/0x170 [ 107.366607][ T6641] xskq_create+0xb6/0x170 [ 107.371115][ T6641] xsk_init_queue+0xa1/0x100 [ 107.375759][ T6641] xsk_setsockopt+0x4ea/0x950 [ 107.380485][ T6641] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.385724][ T6641] ? __pfx_aa_sk_perm+0x10/0x10 [ 107.390608][ T6641] ? aa_sock_opt_perm+0x79/0x120 [ 107.395582][ T6641] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.400807][ T6641] do_sock_setsockopt+0x3af/0x720 [ 107.405867][ T6641] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 107.411528][ T6641] ? __fget_files+0x395/0x410 [ 107.416238][ T6641] ? __fget_files+0x2a/0x410 [ 107.420879][ T6641] __x64_sys_setsockopt+0x1ee/0x280 [ 107.426198][ T6641] do_syscall_64+0xf3/0x230 [ 107.430812][ T6641] ? clear_bhb_loop+0x35/0x90 [ 107.435516][ T6641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.441432][ T6641] RIP: 0033:0x7fb4c9185d29 [ 107.445894][ T6641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.465525][ T6641] RSP: 002b:00007fb4c9f3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.473979][ T6641] RAX: ffffffffffffffda RBX: 00007fb4c9375fa0 RCX: 00007fb4c9185d29 [ 107.481985][ T6641] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 107.489980][ T6641] RBP: 00007fb4c9201a20 R08: 0000000000000004 R09: 0000000000000000 [ 107.497980][ T6641] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.505976][ T6641] R13: 0000000000000000 R14: 00007fb4c9375fa0 R15: 00007ffc5e449f48 [ 107.513982][ T6641] [ 107.617893][ T6315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.656428][ T6641] Mem-Info: [ 107.687418][ T6315] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.699084][ T6641] active_anon:4715 inactive_anon:0 isolated_anon:0 [ 107.699084][ T6641] active_file:1419 inactive_file:38258 isolated_file:0 [ 107.699084][ T6641] unevictable:768 dirty:263 writeback:0 [ 107.699084][ T6641] slab_reclaimable:9864 slab_unreclaimable:96120 [ 107.699084][ T6641] mapped:29772 shmem:1434 pagetables:709 [ 107.699084][ T6641] sec_pagetables:0 bounce:0 [ 107.699084][ T6641] kernel_misc_reclaimable:0 [ 107.699084][ T6641] free:1348873 free_pcp:696 free_cma:0 [ 107.795331][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.802581][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.814107][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.821307][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.836254][ T6641] Node 0 active_anon:19160kB inactive_anon:0kB active_file:5676kB inactive_file:152960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114788kB dirty:1052kB writeback:0kB shmem:4200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10892kB pagetables:2936kB sec_pagetables:0kB all_unreclaimable? no [ 107.881978][ T6641] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 107.942926][ T6657] netlink: 'syz.0.172': attribute type 1 has an invalid length. [ 107.956695][ T6315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 107.979565][ T6657] netlink: 224 bytes leftover after parsing attributes in process `syz.0.172'. [ 107.997427][ T6641] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 108.024807][ T6315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.133637][ T6641] lowmem_reserve[]: 0 2465 2466 0 0 [ 108.158407][ T6641] Node 0 DMA32 free:1471288kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:19264kB inactive_anon:0kB active_file:5676kB inactive_file:152140kB unevictable:1536kB writepending:1052kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:2060kB local_pcp:968kB free_cma:0kB [ 108.239805][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.175'. [ 108.271103][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.175'. [ 108.338820][ T6641] lowmem_reserve[]: 0 0 0 0 0 [ 108.355205][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.175'. [ 108.376670][ T6641] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 108.411042][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.175'. [ 108.446324][ T6641] lowmem_reserve[]: 0 0 0 0 0 [ 108.446680][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.175'. [ 108.452332][ T6641] Node 1 Normal free:3907736kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 108.480387][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.175'. [ 108.517515][ T6641] lowmem_reserve[]: 0 0 0 0 0 [ 108.520503][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.175'. [ 108.544143][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.175'. [ 108.548787][ T6641] Node 0 [ 108.561494][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.175'. [ 108.571236][ T6641] DMA: [ 108.584745][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.175'. [ 108.585578][ T6641] 0*4kB [ 108.587729][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.175'. [ 108.626113][ T6641] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 108.627523][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.175'. [ 108.651928][ T6641] Node 0 DMA32: 2*4kB (ME) 114*8kB (UME) 108*16kB (UME) 82*32kB (UME) 74*64kB (UME) 44*128kB (UME) 12*256kB (UM) 10*512kB (UM) 5*1024kB (UME) 6*2048kB (UME) 349*4096kB (M) = 1470744kB [ 108.676379][ T6669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.175'. [ 108.720899][ T6641] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 108.766321][ T6641] Node 1 Normal: 192*4kB (UE) 59*8kB (UME) 38*16kB (UME) 197*32kB (UME) 93*64kB (UME) 35*128kB (UME) 10*256kB (UME) 11*512kB (UME) 6*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3907736kB [ 108.791051][ T6315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.829721][ T6641] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.873671][ T6641] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 108.929697][ T6641] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 108.953525][ T6315] veth0_vlan: entered promiscuous mode [ 108.969342][ T6641] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.005488][ T6641] 41764 total pagecache pages [ 109.015660][ T6641] 0 pages in swap cache [ 109.020375][ T6641] Free swap = 124996kB [ 109.047768][ T6315] veth1_vlan: entered promiscuous mode [ 109.064556][ T6641] Total swap = 124996kB [ 109.068777][ T6641] 2097051 pages RAM [ 109.089072][ T6641] 0 pages HighMem/MovableOnly [ 109.097456][ T6641] 427011 pages reserved [ 109.108010][ T6641] 0 pages cma reserved [ 109.158171][ T6315] veth0_macvtap: entered promiscuous mode [ 109.198863][ T6315] veth1_macvtap: entered promiscuous mode [ 109.245624][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.287732][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.325217][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.357812][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.376973][ T6707] sock: sock_timestamping_bind_phc: sock not bind to device [ 109.384801][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.433169][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.468898][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.626053][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.638121][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.649868][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.661076][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.671576][ T6315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.683339][ T6315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.695771][ T6315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.708117][ T6315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.747754][ T6315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.770400][ T6315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.800709][ T6315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.256979][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.274042][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.392197][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.400226][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.834782][ T6749] netlink: 'syz.3.192': attribute type 1 has an invalid length. [ 111.237536][ T6766] netlink: 'syz.3.194': attribute type 4 has an invalid length. [ 111.334924][ T6772] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 111.420884][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.665841][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.155182][ T6797] netlink: 'syz.4.199': attribute type 10 has an invalid length. [ 112.158501][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 112.173055][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 112.189671][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 112.201286][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 112.202808][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.210404][ T5836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 112.228013][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 112.441126][ T6797] team0: Port device wlan1 added [ 112.482816][ T6797] syz.4.199 (6797) used greatest stack depth: 18616 bytes left [ 112.577631][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.806734][ T6819] veth1: entered promiscuous mode [ 112.847626][ T6819] veth1: left promiscuous mode [ 112.907729][ T6824] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 112.931508][ T6824] 0ªX¹¦Dö»: entered allmulticast mode [ 113.020583][ T6827] netlink: 'syz.4.212': attribute type 1 has an invalid length. [ 113.031050][ T12] bridge_slave_1: left allmulticast mode [ 113.037095][ T12] bridge_slave_1: left promiscuous mode [ 113.050686][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.067554][ T12] bridge_slave_0: left allmulticast mode [ 113.076947][ T12] bridge_slave_0: left promiscuous mode [ 113.088187][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.570674][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.585254][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.595826][ T12] bond0 (unregistering): Released all slaves [ 113.738085][ T6792] chnl_net:caif_netlink_parms(): no params data found [ 114.067464][ T6872] Â: renamed from pim6reg1 [ 114.098913][ T6792] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.106416][ T6792] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.138072][ T6792] bridge_slave_0: entered allmulticast mode [ 114.167226][ T6792] bridge_slave_0: entered promiscuous mode [ 114.241001][ T6872] bridge_slave_0: left allmulticast mode [ 114.246813][ T6872] bridge_slave_0: left promiscuous mode [ 114.257128][ T6872] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.283639][ T6872] bridge_slave_1: left allmulticast mode [ 114.293064][ T6872] bridge_slave_1: left promiscuous mode [ 114.298901][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.318290][ T6872] bond0: (slave bond_slave_0): Releasing backup interface [ 114.343875][ T6872] bond0: (slave bond_slave_1): Releasing backup interface [ 114.359287][ T5839] Bluetooth: hci4: command tx timeout [ 114.378524][ T6872] team0: Port device team_slave_0 removed [ 114.393706][ T6872] team0: Port device team_slave_1 removed [ 114.400754][ T6872] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.405796][ T6886] __nla_validate_parse: 62 callbacks suppressed [ 114.405819][ T6886] netlink: 604 bytes leftover after parsing attributes in process `syz.1.223'. [ 114.408522][ T6872] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.433923][ T6872] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.442723][ T6872] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.458375][ T6870] netlink: 'syz.0.219': attribute type 2 has an invalid length. [ 114.467426][ T6792] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.482572][ T6792] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.496771][ T6792] bridge_slave_1: entered allmulticast mode [ 114.511636][ T6792] bridge_slave_1: entered promiscuous mode [ 114.551492][ T6883] netlink: 'syz.1.223': attribute type 29 has an invalid length. [ 114.624381][ T6884] netlink: 'syz.1.223': attribute type 29 has an invalid length. [ 114.662058][ T6792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.703065][ T6792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.731892][ T12] hsr_slave_0: left promiscuous mode [ 114.752700][ T12] hsr_slave_1: left promiscuous mode [ 114.772094][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.796602][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.830781][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.838354][ T6893] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.838368][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.902496][ T12] veth1_macvtap: left promiscuous mode [ 114.908088][ T12] veth0_macvtap: left promiscuous mode [ 114.940039][ T12] veth1_vlan: left promiscuous mode [ 114.954054][ T12] veth0_vlan: left promiscuous mode [ 115.121906][ T6904] netlink: 36 bytes leftover after parsing attributes in process `syz.0.227'. [ 115.416831][ T12] team0 (unregistering): Port device team_slave_1 removed [ 115.453932][ T12] team0 (unregistering): Port device team_slave_0 removed [ 115.928928][ T6792] team0: Port device team_slave_0 added [ 116.017539][ T6792] team0: Port device team_slave_1 added [ 116.117789][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.149142][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.219185][ T6792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.241462][ T6792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.259505][ T6792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.326404][ T6792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.442271][ T5839] Bluetooth: hci4: command tx timeout [ 116.637776][ T6792] hsr_slave_0: entered promiscuous mode [ 116.673147][ T6929] ieee802154 phy0 wpan0: encryption failed: -22 [ 116.687974][ T6792] hsr_slave_1: entered promiscuous mode [ 116.716068][ T6792] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.725221][ T6792] Cannot create hsr debugfs directory [ 117.210568][ T6954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'. [ 117.292317][ T6958] Illegal XDP return value 1299254944 on prog (id 179) dev N/A, expect packet loss! [ 117.362470][ T6963] netlink: 'syz.4.241': attribute type 6 has an invalid length. [ 117.452420][ T6956] bridge_slave_0 (unregistering): left allmulticast mode [ 117.459757][ T6956] bridge_slave_0 (unregistering): left promiscuous mode [ 117.467033][ T6956] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.539864][ T6959] vlan2: entered promiscuous mode [ 117.748364][ T6792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 117.766104][ T6792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 117.775308][ T6979] netlink: 32 bytes leftover after parsing attributes in process `syz.3.245'. [ 117.798622][ T6982] bridge0: entered promiscuous mode [ 117.807313][ T6792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 117.823452][ T6792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 117.970009][ T6980] bridge0: left promiscuous mode [ 117.980299][ T6989] tun0: tun_chr_ioctl cmd 1074025677 [ 117.985768][ T6989] tun0: linktype set to 270 [ 118.083205][ T6792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.183902][ T6792] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.195302][ T7000] netlink: 'syz.0.250': attribute type 3 has an invalid length. [ 118.205002][ T7000] netlink: 666 bytes leftover after parsing attributes in process `syz.0.250'. [ 118.330329][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.337553][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.374476][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.381690][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.484648][ T7011] netlink: 44 bytes leftover after parsing attributes in process `syz.0.252'. [ 118.519443][ T5839] Bluetooth: hci4: command tx timeout [ 118.634177][ T7016] trusted_key: syz.1.253 sent an empty control message without MSG_MORE. [ 119.186962][ T3573] IPVS: starting estimator thread 0... [ 119.193326][ T7028] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 119.274636][ T6792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.289339][ T7035] IPVS: using max 20 ests per chain, 48000 per kthread [ 119.440689][ T6792] veth0_vlan: entered promiscuous mode [ 119.461825][ T6792] veth1_vlan: entered promiscuous mode [ 119.604138][ T6792] veth0_macvtap: entered promiscuous mode [ 119.632051][ T6792] veth1_macvtap: entered promiscuous mode [ 119.682381][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.709141][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.729585][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.753724][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.785556][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.815990][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.849170][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.886123][ T6792] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.909220][ T6792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.939364][ T6792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.962461][ T6792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.972535][ T6792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.994122][ T6792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.007200][ T6792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.144970][ T2914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.162193][ T2914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.204569][ T7053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.263'. [ 120.226334][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.251128][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.511156][ T7068] netlink: 'syz.4.267': attribute type 10 has an invalid length. [ 120.535612][ T7068] netlink: 40 bytes leftover after parsing attributes in process `syz.4.267'. [ 120.554818][ T7068] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.734416][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'. [ 121.161210][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.335672][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.371161][ T7099] IPVS: set_ctl: invalid protocol: 12 10.1.1.0:20003 [ 121.608927][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 121.621447][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.634361][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 121.643141][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 121.652348][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 121.661384][ T5836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 121.668736][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 121.669974][ T7111] netlink: 'syz.3.276': attribute type 1 has an invalid length. [ 121.780866][ T7105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.278'. [ 121.801166][ T7115] netlink: 826 bytes leftover after parsing attributes in process `syz.1.280'. [ 121.832289][ T7101] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 121.874235][ T7120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.282'. [ 121.887878][ T7108] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.889852][ T7118] netlink: 96 bytes leftover after parsing attributes in process `syz.4.281'. [ 121.896025][ T11] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 121.954994][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.031784][ T67] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 122.238413][ T7130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.284'. [ 122.306157][ T7134] netlink: 136 bytes leftover after parsing attributes in process `syz.4.285'. [ 122.315797][ T7134] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 122.336548][ T7136] netlink: 76 bytes leftover after parsing attributes in process `syz.1.286'. [ 122.357640][ T12] bridge_slave_1: left allmulticast mode [ 122.364125][ T12] bridge_slave_1: left promiscuous mode [ 122.371216][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.424644][ T12] bridge_slave_0: left allmulticast mode [ 122.439115][ T12] bridge_slave_0: left promiscuous mode [ 122.445031][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.001061][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.012518][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.023120][ T12] bond0 (unregistering): Released all slaves [ 123.160626][ T7106] chnl_net:caif_netlink_parms(): no params data found [ 123.179320][ T7155] netlink: 'syz.0.289': attribute type 5 has an invalid length. [ 123.481033][ T7177] set match dimension is over the limit! [ 123.608575][ T12] hsr_slave_0: left promiscuous mode [ 123.666790][ T12] hsr_slave_1: left promiscuous mode [ 123.699148][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.718478][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.726376][ T5839] Bluetooth: hci4: command tx timeout [ 123.747403][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.783194][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.818343][ T12] veth1_macvtap: left promiscuous mode [ 123.849913][ T12] veth0_macvtap: left promiscuous mode [ 123.861552][ T12] veth1_vlan: left promiscuous mode [ 123.877139][ T12] veth0_vlan: left promiscuous mode [ 124.544847][ T12] team0 (unregistering): Port device team_slave_1 removed [ 124.590906][ T12] team0 (unregistering): Port device team_slave_0 removed [ 124.974656][ T7106] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.982364][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.993312][ T7106] bridge_slave_0: entered allmulticast mode [ 125.000972][ T7106] bridge_slave_0: entered promiscuous mode [ 125.009594][ T7106] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.016725][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.024188][ T7106] bridge_slave_1: entered allmulticast mode [ 125.032359][ T7106] bridge_slave_1: entered promiscuous mode [ 125.177900][ T7106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.255396][ T7106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.436186][ T7106] team0: Port device team_slave_0 added [ 125.481364][ T7106] team0: Port device team_slave_1 added [ 125.627121][ T7106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.638838][ T7106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.667436][ T7106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.725962][ T7106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.734120][ T7106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.777801][ T7106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.805671][ T5836] Bluetooth: hci4: command tx timeout [ 125.951545][ T7106] hsr_slave_0: entered promiscuous mode [ 125.961048][ T7106] hsr_slave_1: entered promiscuous mode [ 125.977327][ T7106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.988820][ T7106] Cannot create hsr debugfs directory [ 126.628830][ T7106] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 126.650359][ T7106] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 126.671110][ T7106] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 126.685695][ T7106] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 126.824642][ T7106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.854061][ T7106] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.876566][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.883765][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.906617][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.913985][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.226836][ T7106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.467875][ T7106] veth0_vlan: entered promiscuous mode [ 127.496159][ T7106] veth1_vlan: entered promiscuous mode [ 127.562678][ T7106] veth0_macvtap: entered promiscuous mode [ 127.612486][ T7106] veth1_macvtap: entered promiscuous mode [ 127.657837][ T7106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.678633][ T7106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.688804][ T7106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.707623][ T7106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.724360][ T7106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.762608][ T7106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.773461][ T7106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.783760][ T7106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.801783][ T7106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.814194][ T7106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.828179][ T7106] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.837434][ T7106] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.846508][ T7106] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.864583][ T7106] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.879532][ T5836] Bluetooth: hci4: command 0x040f tx timeout [ 127.916519][ T7313] __nla_validate_parse: 3 callbacks suppressed [ 127.916542][ T7313] netlink: 56 bytes leftover after parsing attributes in process `syz.0.325'. [ 127.949675][ T7313] netlink: 56 bytes leftover after parsing attributes in process `syz.0.325'. [ 127.990882][ T7313] netlink: 56 bytes leftover after parsing attributes in process `syz.0.325'. [ 128.000039][ T7313] netlink: 56 bytes leftover after parsing attributes in process `syz.0.325'. [ 128.035842][ T7313] netlink: 56 bytes leftover after parsing attributes in process `syz.0.325'. [ 128.060872][ T7313] netlink: 56 bytes leftover after parsing attributes in process `syz.0.325'. [ 128.079502][ T7313] netlink: 56 bytes leftover after parsing attributes in process `syz.0.325'. [ 128.089963][ T7313] netlink: 56 bytes leftover after parsing attributes in process `syz.0.325'. [ 128.104041][ T7313] netlink: 56 bytes leftover after parsing attributes in process `syz.0.325'. [ 128.113632][ T7313] netlink: 56 bytes leftover after parsing attributes in process `syz.0.325'. [ 128.219535][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.227797][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.317818][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.336097][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.483369][ T7319] netlink: 'syz.0.327': attribute type 32 has an invalid length. [ 128.712705][ T7322] xt_SECMARK: invalid mode: 0 [ 129.953844][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.186496][ T7305] Set syz1 is full, maxelem 65536 reached [ 130.992270][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.101208][ T7375] openvswitch: netlink: Missing key (keys=40, expected=80) [ 131.128766][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.195927][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.205796][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.214724][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.236732][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.246164][ T5836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 131.255333][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.371600][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.653280][ T12] bridge_slave_1: left allmulticast mode [ 131.659170][ T12] bridge_slave_1: left promiscuous mode [ 131.664940][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.710106][ T12] bridge_slave_0: left allmulticast mode [ 131.717224][ T12] bridge_slave_0: left promiscuous mode [ 131.731969][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.120829][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.135690][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.146319][ T12] bond0 (unregistering): Released all slaves [ 132.158359][ T7384] netlink: 'syz.3.343': attribute type 6 has an invalid length. [ 132.184160][ T7406] syz.1.341: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 132.203239][ T7406] CPU: 1 UID: 0 PID: 7406 Comm: syz.1.341 Not tainted 6.13.0-rc2-syzkaller-00485-gc1bad69f8baf #0 [ 132.213890][ T7406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 132.224094][ T7406] Call Trace: [ 132.227405][ T7406] [ 132.230367][ T7406] dump_stack_lvl+0x241/0x360 [ 132.235115][ T7406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.240341][ T7406] ? __pfx__printk+0x10/0x10 [ 132.244961][ T7406] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 132.251411][ T7406] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 132.257959][ T7406] warn_alloc+0x278/0x410 [ 132.262349][ T7406] ? __pfx_warn_alloc+0x10/0x10 [ 132.267367][ T7406] ? xp_create_and_assign_umem+0x17b/0xc50 [ 132.273204][ T7406] ? __get_vm_area_node+0x1c8/0x2d0 [ 132.278436][ T7406] ? __get_vm_area_node+0x25c/0x2d0 [ 132.283766][ T7406] __vmalloc_node_range_noprof+0x62f/0x1380 [ 132.289688][ T7406] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 132.295454][ T7406] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 132.301889][ T7406] ? rcu_is_watching+0x15/0xb0 [ 132.306683][ T7406] ? trace_kmalloc+0x1f/0xd0 [ 132.311299][ T7406] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 132.316873][ T7406] ? __kvmalloc_node_noprof+0x72/0x190 [ 132.322364][ T7406] __kvmalloc_node_noprof+0x142/0x190 [ 132.327875][ T7406] ? xp_create_and_assign_umem+0x17b/0xc50 [ 132.333752][ T7406] xp_create_and_assign_umem+0x17b/0xc50 [ 132.339442][ T7406] ? dev_get_by_index+0x23/0x2d0 [ 132.344784][ T7406] xsk_bind+0x386/0xdc0 [ 132.349020][ T7406] __sys_bind+0x1e4/0x290 [ 132.353398][ T7406] ? __pfx___sys_bind+0x10/0x10 [ 132.358293][ T7406] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 132.364700][ T7406] ? exc_page_fault+0x590/0x8b0 [ 132.369597][ T7406] __x64_sys_bind+0x7a/0x90 [ 132.374124][ T7406] do_syscall_64+0xf3/0x230 [ 132.378666][ T7406] ? clear_bhb_loop+0x35/0x90 [ 132.383398][ T7406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.389315][ T7406] RIP: 0033:0x7f82f5b85d29 [ 132.393749][ T7406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.413383][ T7406] RSP: 002b:00007f82f6983038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 132.421858][ T7406] RAX: ffffffffffffffda RBX: 00007f82f5d76320 RCX: 00007f82f5b85d29 [ 132.429852][ T7406] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 000000000000000b [ 132.437842][ T7406] RBP: 00007f82f5c01a20 R08: 0000000000000000 R09: 0000000000000000 [ 132.445833][ T7406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.453864][ T7406] R13: 0000000000000001 R14: 00007f82f5d76320 R15: 00007ffcea26f208 [ 132.461876][ T7406] [ 132.480581][ T7406] Mem-Info: [ 132.485417][ T7406] active_anon:4307 inactive_anon:0 isolated_anon:0 [ 132.485417][ T7406] active_file:1466 inactive_file:38274 isolated_file:0 [ 132.485417][ T7406] unevictable:768 dirty:235 writeback:0 [ 132.485417][ T7406] slab_reclaimable:10508 slab_unreclaimable:98438 [ 132.485417][ T7406] mapped:32549 shmem:1441 pagetables:648 [ 132.485417][ T7406] sec_pagetables:0 bounce:0 [ 132.485417][ T7406] kernel_misc_reclaimable:0 [ 132.485417][ T7406] free:1330147 free_pcp:1614 free_cma:0 [ 132.531735][ T7406] Node 0 active_anon:17228kB inactive_anon:0kB active_file:5864kB inactive_file:153024kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130196kB dirty:940kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10820kB pagetables:2592kB sec_pagetables:0kB all_unreclaimable? no [ 132.576209][ T7406] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 132.638273][ T7406] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.705317][ T7406] lowmem_reserve[]: 0 2465 2466 0 0 [ 132.716427][ T7406] Node 0 DMA32 free:1403128kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:16988kB inactive_anon:0kB active_file:5864kB inactive_file:152204kB unevictable:1536kB writepending:936kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:1248kB local_pcp:568kB free_cma:0kB [ 132.748682][ T7406] lowmem_reserve[]: 0 0 0 0 0 [ 132.753924][ T7406] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 132.781639][ T7406] lowmem_reserve[]: 0 0 0 0 0 [ 132.786471][ T7406] Node 1 Normal free:3907548kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:280kB local_pcp:248kB free_cma:0kB [ 132.817167][ T7406] lowmem_reserve[]: 0 0 0 0 0 [ 132.822080][ T7406] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 132.840371][ T7406] Node 0 DMA32: 1*4kB (U) 116*8kB (UME) 143*16kB (M) 57*32kB (ME) 89*64kB (UME) 38*128kB (UME) 15*256kB (UM) 8*512kB (UM) 6*1024kB (UME) 2*2048kB (M) 334*4096kB (M) = 1401844kB [ 132.865070][ T7406] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 132.877875][ T7406] Node 1 Normal: 129*4kB (UE) 59*8kB (UME) 38*16kB (UME) 197*32kB (UME) 92*64kB (UME) 36*128kB (UME) 10*256kB (UME) 11*512kB (UME) 6*1024kB (UME) 4*2048kB (UE) 944*4096kB (M) = 3907548kB [ 132.907557][ T7406] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.917638][ T7406] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.933219][ T7406] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.942906][ T7406] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.953461][ T7406] 41181 total pagecache pages [ 132.958345][ T7406] 0 pages in swap cache [ 132.962827][ T7406] Free swap = 124996kB [ 132.967000][ T7406] Total swap = 124996kB [ 132.971536][ T7406] 2097051 pages RAM [ 132.976172][ T7406] 0 pages HighMem/MovableOnly [ 132.980951][ T7406] 427011 pages reserved [ 132.985135][ T7406] 0 pages cma reserved [ 133.057271][ T7418] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 4, id = 0 [ 133.081688][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.161701][ T7412] batman_adv: batadv0: Adding interface: dummy0 [ 133.168024][ T7412] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.219051][ T7412] batman_adv: batadv0: Interface activated: dummy0 [ 133.265690][ T7415] batadv0: mtu less than device minimum [ 133.287516][ T7415] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.299855][ T7415] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.312604][ T7415] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.325365][ T7415] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.338088][ T7415] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.350858][ T7415] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.362896][ T7415] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 133.399394][ T5836] Bluetooth: hci4: command tx timeout [ 133.542439][ T7423] vlan0: entered promiscuous mode [ 133.654511][ T7378] chnl_net:caif_netlink_parms(): no params data found [ 133.877354][ T12] hsr_slave_0: left promiscuous mode [ 133.892796][ T12] hsr_slave_1: left promiscuous mode [ 133.905843][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.915853][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.926477][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.934328][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.978441][ T12] veth1_macvtap: left promiscuous mode [ 133.984391][ T12] veth0_macvtap: left promiscuous mode [ 133.990765][ T12] veth1_vlan: left promiscuous mode [ 133.996334][ T12] veth0_vlan: left promiscuous mode [ 134.475344][ T12] team0 (unregistering): Port device team_slave_1 removed [ 134.528666][ T12] team0 (unregistering): Port device team_slave_0 removed [ 134.810217][ T7463] xt_TPROXY: Can be used only with -p tcp or -p udp [ 135.044390][ T7468] __nla_validate_parse: 190 callbacks suppressed [ 135.044414][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 135.060221][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 135.069329][ T7468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'. [ 135.153717][ T7450] tipc: Started in network mode [ 135.158932][ T7450] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 135.166819][ T7450] tipc: Enabled bearer , priority 0 [ 135.285017][ T7472] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 135.304830][ T7378] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.319314][ T7378] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.326724][ T7378] bridge_slave_0: entered allmulticast mode [ 135.336996][ T7378] bridge_slave_0: entered promiscuous mode [ 135.362689][ T7378] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.388530][ T7378] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.405438][ T7378] bridge_slave_1: entered allmulticast mode [ 135.422487][ T7378] bridge_slave_1: entered promiscuous mode [ 135.479131][ T5836] Bluetooth: hci4: command tx timeout [ 135.536864][ T7378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.554040][ C0] net_ratelimit: 12 callbacks suppressed [ 135.554062][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 135.564419][ T7378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.662605][ T7378] team0: Port device team_slave_0 added [ 135.674109][ T7378] team0: Port device team_slave_1 added [ 135.785766][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.809167][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.837453][ T7378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.915861][ T7378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.925222][ T7378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.989273][ T7378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.143371][ T7378] hsr_slave_0: entered promiscuous mode [ 136.161112][ T7378] hsr_slave_1: entered promiscuous mode [ 136.192102][ T7512] netlink: 124 bytes leftover after parsing attributes in process `syz.1.372'. [ 136.201755][ T7378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.229784][ T7378] Cannot create hsr debugfs directory [ 136.260214][ T7510] batman_adv: batadv0: Interface deactivated: dummy0 [ 136.279532][ T5887] tipc: Node number set to 11578026 [ 136.329331][ T7510] batman_adv: batadv0: Removing interface: dummy0 [ 136.361591][ T7510] bridge_slave_0: left allmulticast mode [ 136.380315][ T7510] bridge_slave_0: left promiscuous mode [ 136.398737][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.511906][ T7510] bridge_slave_1: left allmulticast mode [ 136.517828][ T7510] bridge_slave_1: left promiscuous mode [ 136.530390][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.562431][ T7510] bond0: (slave bond_slave_0): Releasing backup interface [ 136.596922][ T7510] bond0: (slave bond_slave_1): Releasing backup interface [ 136.655558][ T7510] team0: Port device team_slave_0 removed [ 136.691785][ T7510] team0: Port device team_slave_1 removed [ 136.716089][ T7510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.729373][ T7510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.739921][ T7510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.747763][ T7510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.767765][ T7510] bond0: (slave netdevsim0): Releasing backup interface [ 136.785107][ T7510] team0: Port device wlan1 removed [ 136.846682][ T11] tipc: Resetting bearer [ 137.140430][ T7538] netlink: 28 bytes leftover after parsing attributes in process `syz.4.378'. [ 137.537058][ T7549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.380'. [ 137.560974][ T5836] Bluetooth: hci4: command tx timeout [ 137.617709][ T7551] netlink: 'syz.3.382': attribute type 1 has an invalid length. [ 137.637341][ T7551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.644830][ T7551] IPv6: NLM_F_CREATE should be set when creating new route [ 137.712317][ T7563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.385'. [ 137.854689][ T7566] tipc: Started in network mode [ 137.865456][ T7566] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 137.876375][ T7566] tipc: Enabling of bearer rejected, failed to enable media [ 137.948155][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'. [ 138.003695][ T7378] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 138.015185][ T7569] netlink: 'syz.0.387': attribute type 10 has an invalid length. [ 138.031518][ T7378] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 138.055195][ T7569] batman_adv: batadv0: Adding interface: wlan0 [ 138.065716][ T7569] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.091884][ T7569] batman_adv: batadv0: Interface activated: wlan0 [ 138.101774][ T7378] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 138.120044][ T7378] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 138.127337][ T7574] netlink: 32 bytes leftover after parsing attributes in process `syz.4.389'. [ 138.307741][ T7586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.391'. [ 138.350937][ T7378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.382914][ T7378] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.394269][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.401472][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.466269][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.473572][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.679965][ T7598] bond0: Unable to set down delay as MII monitoring is disabled [ 138.703584][ T7596] delete_channel: no stack [ 138.760961][ T7599] bond1 (unregistering): Released all slaves [ 139.068279][ T7378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.225484][ T7378] veth0_vlan: entered promiscuous mode [ 139.268501][ T7621] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 139.282183][ T7621] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 139.304020][ T7378] veth1_vlan: entered promiscuous mode [ 139.365816][ T7378] veth0_macvtap: entered promiscuous mode [ 139.385943][ T7378] veth1_macvtap: entered promiscuous mode [ 139.443032][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.475247][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.493504][ T7378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.515924][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.553495][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.565148][ T7378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.612027][ T7378] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.639346][ T5836] Bluetooth: hci4: command tx timeout [ 139.649072][ T7378] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.657840][ T7378] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.675954][ T7378] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.704372][ T7644] netlink: 'syz.0.411': attribute type 33 has an invalid length. [ 139.833268][ T7378] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 139.858334][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.943781][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.952040][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.105335][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.120172][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.497151][ T7651] syzkaller1: entered promiscuous mode [ 140.509599][ T7651] syzkaller1: entered allmulticast mode [ 140.536394][ T7666] __nla_validate_parse: 3 callbacks suppressed [ 140.536419][ T7666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.417'. [ 141.214781][ T7687] 8021q: adding VLAN 0 to HW filter on device bond4 [ 141.251990][ T7687] bond0: (slave bond4): Enslaving as an active interface with an up link [ 141.345692][ T7691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.424'. [ 141.405033][ T7691] netlink: 28 bytes leftover after parsing attributes in process `syz.4.424'. [ 141.664494][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.216039][ T7701] netlink: 28 bytes leftover after parsing attributes in process `syz.1.426'. [ 142.325793][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.469983][ T7714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.430'. [ 142.517406][ T7714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.430'. [ 142.580259][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.595686][ T7718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 142.825830][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 142.844368][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.859281][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 142.869255][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 142.892739][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 142.905000][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 142.913556][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 143.153343][ T12] bridge_slave_1: left allmulticast mode [ 143.172028][ T12] bridge_slave_1: left promiscuous mode [ 143.177849][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.250910][ T12] bridge_slave_0: left allmulticast mode [ 143.284520][ T12] bridge_slave_0: left promiscuous mode [ 143.291099][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.113769][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.117810][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 144.132393][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.443'. [ 144.146070][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.157375][ T12] bond0 (unregistering): Released all slaves [ 144.560256][ T7721] chnl_net:caif_netlink_parms(): no params data found [ 144.688458][ T12] hsr_slave_0: left promiscuous mode [ 144.705461][ T12] hsr_slave_1: left promiscuous mode [ 144.720493][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.741548][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.761977][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.770423][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.842731][ T7789] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.852495][ T12] veth1_macvtap: left promiscuous mode [ 144.858917][ T12] veth0_macvtap: left promiscuous mode [ 144.864812][ T12] veth1_vlan: left promiscuous mode [ 144.873668][ T7789] openvswitch: netlink: Flow key attr not present in new flow. [ 144.881747][ T12] veth0_vlan: left promiscuous mode [ 144.999706][ T5839] Bluetooth: hci4: command tx timeout [ 145.866858][ T12] team0 (unregistering): Port device team_slave_1 removed [ 145.933506][ T12] team0 (unregistering): Port device team_slave_0 removed [ 146.463064][ T7824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.460'. [ 146.538677][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.540599][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 146.555993][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'. [ 146.558500][ T7721] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.575487][ T7721] bridge_slave_0: entered allmulticast mode [ 146.584392][ T7721] bridge_slave_0: entered promiscuous mode [ 146.618513][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.641269][ T7721] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.673412][ T7721] bridge_slave_1: entered allmulticast mode [ 146.697537][ T7721] bridge_slave_1: entered promiscuous mode [ 146.780322][ T7721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.817270][ T7721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.818654][ T7832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.878361][ T7721] team0: Port device team_slave_0 added [ 146.894609][ T7721] team0: Port device team_slave_1 added [ 146.947673][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.963723][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.042248][ T7721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.057427][ T7835] x_tables: duplicate underflow at hook 2 [ 147.067505][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.079117][ T5839] Bluetooth: hci4: command tx timeout [ 147.099528][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.169584][ T7721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.197557][ T7840] netlink: 'syz.3.465': attribute type 3 has an invalid length. [ 147.229303][ T7840] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.465'. [ 147.308649][ T7721] hsr_slave_0: entered promiscuous mode [ 147.329516][ T7721] hsr_slave_1: entered promiscuous mode [ 147.336161][ T7721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.348231][ T7721] Cannot create hsr debugfs directory [ 147.352077][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'. [ 147.371103][ T7847] ip6t_srh: unknown srh match flags 4000 [ 147.490564][ T7849] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 147.492670][ T7847] syz.4.467[7847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.508553][ T7847] syz.4.467[7847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.534983][ T7847] syz.4.467[7847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.803911][ T7863] netlink: 'syz.4.475': attribute type 4 has an invalid length. [ 148.111472][ T7877] netlink: 20 bytes leftover after parsing attributes in process `syz.4.478'. [ 148.149902][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.479'. [ 148.460582][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.480'. [ 148.509276][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.480'. [ 148.782761][ T7890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.481'. [ 149.062342][ T7721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 149.090240][ T7721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 149.136770][ T7721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.159380][ T5839] Bluetooth: hci4: command tx timeout [ 149.199126][ T7721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.330488][ T7721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.347797][ T7721] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.370205][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.377375][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.405406][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.412629][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.515873][ T7913] batman_adv: batadv0: Removing interface: team0 [ 149.545731][ T7913] bridge_slave_0: left allmulticast mode [ 149.558677][ T7913] bridge_slave_0: left promiscuous mode [ 149.565705][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.582951][ T7913] bridge_slave_1: left allmulticast mode [ 149.586565][ T7918] SET target dimension over the limit! [ 149.598741][ T7913] bridge_slave_1: left promiscuous mode [ 149.623667][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.655183][ T7913] bond0: (slave bond_slave_0): Releasing backup interface [ 149.676217][ T7913] bond0: (slave bond_slave_1): Releasing backup interface [ 149.742852][ T7913] team0: Port device team_slave_0 removed [ 149.766627][ T7913] team0: Port device team_slave_1 removed [ 149.786327][ T7913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.797612][ T7913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.806227][ T7913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.814515][ T7913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.827914][ T7913] batman_adv: batadv0: Interface deactivated: wlan0 [ 149.835382][ T7913] batman_adv: batadv0: Removing interface: wlan0 [ 149.872329][ T7921] pim6reg: entered allmulticast mode [ 150.254859][ T7721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.301170][ T7946] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 150.340132][ T7944] netlink: 'syz.0.498': attribute type 4 has an invalid length. [ 150.374978][ T7947] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 150.474598][ T7721] veth0_vlan: entered promiscuous mode [ 150.518118][ T7721] veth1_vlan: entered promiscuous mode [ 150.580956][ T7721] veth0_macvtap: entered promiscuous mode [ 150.596789][ T7721] veth1_macvtap: entered promiscuous mode [ 150.631854][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.661807][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.676948][ T7721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.695325][ T7721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.707028][ T7721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.716855][ T7721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.813725][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.835666][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.877768][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.886151][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.917218][ T7963] openvswitch: netlink: Key type 157 is out of range max 32 [ 150.932562][ T7964] openvswitch: netlink: Key type 157 is out of range max 32 [ 151.651246][ T7980] syz.3.511[7980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.651363][ T7980] syz.3.511[7980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.910782][ T7983] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 152.037155][ T7994] __nla_validate_parse: 3 callbacks suppressed [ 152.037176][ T7994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.516'. [ 152.066674][ T7994] netlink: 36 bytes leftover after parsing attributes in process `syz.3.516'. [ 152.649224][ T8023] netlink: zone id is out of range [ 152.659501][ T8023] netlink: zone id is out of range [ 152.664677][ T8023] netlink: zone id is out of range [ 152.684415][ T8023] netlink: zone id is out of range [ 152.694436][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.703976][ T8023] netlink: zone id is out of range [ 152.715832][ T8023] netlink: zone id is out of range [ 153.890999][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.902228][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.911655][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.924572][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.932603][ T5836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.941670][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.997215][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.021747][ T8060] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.535'. [ 154.122081][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.156786][ T8054] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 154.255252][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.709339][ T11] bridge_slave_1: left allmulticast mode [ 154.715057][ T11] bridge_slave_1: left promiscuous mode [ 154.749262][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.809727][ T11] bridge_slave_0: left allmulticast mode [ 154.815442][ T11] bridge_slave_0: left promiscuous mode [ 154.845837][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.413322][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.424004][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.434275][ T11] bond0 (unregistering): Released all slaves [ 155.570981][ T8056] chnl_net:caif_netlink_parms(): no params data found [ 155.725742][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.3.548'. [ 155.812152][ T8121] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.553'. [ 155.825599][ T8114] 8021q: adding VLAN 0 to HW filter on device bond3 [ 155.829957][ T8121] net_ratelimit: 341 callbacks suppressed [ 155.829975][ T8121] openvswitch: netlink: Flow key attribute not present in set flow. [ 155.860414][ T8114] bond0: (slave bond3): Enslaving as an active interface with an up link [ 155.984288][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 155.995839][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.555'. [ 156.055366][ T5839] Bluetooth: hci4: command tx timeout [ 156.158067][ T11] hsr_slave_0: left promiscuous mode [ 156.177507][ T11] hsr_slave_1: left promiscuous mode [ 156.205535][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.218103][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.241083][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.256860][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.289771][ T11] veth1_macvtap: left promiscuous mode [ 156.295446][ T11] veth0_macvtap: left promiscuous mode [ 156.302015][ T11] veth1_vlan: left promiscuous mode [ 156.308571][ T11] veth0_vlan: left promiscuous mode [ 156.323827][ T8146] netlink: 36 bytes leftover after parsing attributes in process `syz.1.560'. [ 156.825762][ T11] team0 (unregistering): Port device team_slave_1 removed [ 156.865643][ T11] team0 (unregistering): Port device team_slave_0 removed [ 157.233386][ T8056] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.245572][ T8056] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.254812][ T8056] bridge_slave_0: entered allmulticast mode [ 157.266798][ T8056] bridge_slave_0: entered promiscuous mode [ 157.279159][ T8056] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.286382][ T8056] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.319382][ T8056] bridge_slave_1: entered allmulticast mode [ 157.326714][ T8056] bridge_slave_1: entered promiscuous mode [ 157.364475][ T8159] netlink: 68 bytes leftover after parsing attributes in process `syz.0.564'. [ 157.388071][ T8159] netlink: 68 bytes leftover after parsing attributes in process `syz.0.564'. [ 157.427357][ T8162] netlink: 28 bytes leftover after parsing attributes in process `syz.1.565'. [ 157.471726][ T8056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.505952][ T8056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.601877][ T8172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 157.644256][ T8056] team0: Port device team_slave_0 added [ 157.685820][ T8056] team0: Port device team_slave_1 added [ 157.773586][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.568'. [ 157.871781][ T8184] netlink: 512 bytes leftover after parsing attributes in process `syz.4.570'. [ 157.886451][ T8184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.033673][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.044197][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.091427][ T8056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.119409][ T5839] Bluetooth: hci4: command tx timeout [ 158.129447][ T8186] vlan0: entered promiscuous mode [ 158.150033][ T8186] batadv0: entered promiscuous mode [ 158.168374][ T8186] team0: Port device vlan0 added [ 158.177692][ T8056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.191376][ T8056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.239105][ T8056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.423027][ T8056] hsr_slave_0: entered promiscuous mode [ 158.441522][ T8056] hsr_slave_1: entered promiscuous mode [ 158.456316][ T8056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.464180][ T8056] Cannot create hsr debugfs directory [ 158.534367][ T5887] hid-generic 0005:07C0:0058.0001: item fetching failed at offset 0/1 [ 158.551236][ T5887] hid-generic 0005:07C0:0058.0001: probe with driver hid-generic failed with error -22 [ 158.556189][ T8210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.579'. [ 158.754665][ T8221] syzkaller1: entered allmulticast mode [ 158.778798][ T8221] gretap1: entered allmulticast mode [ 158.791939][ T8221] bridge0: port 1(gretap1) entered blocking state [ 158.798648][ T8221] bridge0: port 1(gretap1) entered disabled state [ 158.807003][ T8221] gretap1: entered promiscuous mode [ 158.821011][ T8221] bridge0: port 1(gretap1) entered blocking state [ 158.827917][ T8221] bridge0: port 1(gretap1) entered forwarding state [ 158.855296][ T8222] macsec0: entered promiscuous mode [ 158.870075][ T8226] veth1_macvtap: left promiscuous mode [ 158.948794][ T8229] netlink: 32 bytes leftover after parsing attributes in process `syz.4.584'. [ 158.963194][ T8229] netlink: 36 bytes leftover after parsing attributes in process `syz.4.584'. [ 158.976058][ T8224] 0ªX¹¦Dö»: left allmulticast mode [ 159.042031][ T8224] bridge0: port 1(gretap1) entered disabled state [ 159.079732][ T8224] batadv0: left promiscuous mode [ 159.486661][ T8249] netlink: 1264 bytes leftover after parsing attributes in process `syz.1.586'. [ 159.527472][ T8224] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.543708][ T8224] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.553380][ T8224] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.586952][ T8224] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.605257][ T8251] netlink: 'syz.1.587': attribute type 3 has an invalid length. [ 159.642329][ T8224] vlan0: left promiscuous mode [ 159.660841][ T8224] team0: Port device vlan0 removed [ 159.693973][ T8224] syzkaller1: left allmulticast mode [ 159.732062][ T8224] gretap1: left allmulticast mode [ 159.743797][ T8224] gretap1: left promiscuous mode [ 159.757151][ T8224] bridge0: port 1(gretap1) entered disabled state [ 160.000140][ T8259] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 160.095388][ T8263] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 160.122516][ T8263] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 160.137029][ T8264] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 160.153670][ T8264] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 160.199330][ T5839] Bluetooth: hci4: command tx timeout [ 160.392638][ T8056] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 160.440806][ T8056] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 160.455941][ T8056] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 160.481428][ T8056] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 160.639884][ T8289] netlink: 'syz.4.601': attribute type 10 has an invalid length. [ 160.661961][ T8056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.695090][ T8056] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.706281][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.713524][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.728398][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.735595][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.962665][ T8056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.022947][ T8056] veth0_vlan: entered promiscuous mode [ 161.050203][ T8056] veth1_vlan: entered promiscuous mode [ 161.109633][ T8056] veth0_macvtap: entered promiscuous mode [ 161.140480][ T8056] veth1_macvtap: entered promiscuous mode [ 161.188486][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.238871][ T8056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.261371][ T8311] tun0: tun_chr_ioctl cmd 1074025675 [ 161.269454][ T8311] tun0: persist disabled [ 161.292086][ T8056] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.322271][ T8056] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.344810][ T8056] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.360557][ T8056] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.514973][ T3536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.522999][ T3536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.584528][ T8324] xfrm1: entered allmulticast mode [ 161.610945][ T3536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.621396][ T3536] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.689746][ T8330] netlink: 'syz.1.612': attribute type 21 has an invalid length. [ 162.142941][ T8356] set match dimension is over the limit! [ 162.418253][ T8367] xt_cgroup: invalid path, errno=-2 [ 162.556741][ T8370] __nla_validate_parse: 7 callbacks suppressed [ 162.556764][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 162.572795][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 162.582508][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 162.592053][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 162.602137][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 162.613180][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 162.625974][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 162.643038][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 162.652662][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 162.661670][ T8370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'. [ 162.798634][ T8347] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 162.815673][ T8378] netlink: 'syz.0.628': attribute type 1 has an invalid length. [ 163.220574][ T8401] ip6_vti0: entered promiscuous mode [ 163.226498][ T8401] vlan2: entered promiscuous mode [ 163.236313][ T8401] ip6_vti0: left promiscuous mode [ 163.362164][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.039278][ T5839] Bluetooth: hci2: command 0x0401 tx timeout [ 164.305967][ T8408] netlink: 'syz.1.640': attribute type 1 has an invalid length. [ 164.717481][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.737414][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.746575][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.754845][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.782208][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.792817][ T5836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 164.802038][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.998074][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.132439][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.403661][ T12] bridge_slave_1: left allmulticast mode [ 165.409828][ T12] bridge_slave_1: left promiscuous mode [ 165.415583][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.442275][ T12] bridge_slave_0: left allmulticast mode [ 165.448018][ T12] bridge_slave_0: left promiscuous mode [ 165.454039][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.977708][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.991711][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.005853][ T12] bond0 (unregistering): Released all slaves [ 166.016539][ T8427] chnl_net:caif_netlink_parms(): no params data found [ 166.072697][ T8473] wireguard0: entered promiscuous mode [ 166.085152][ T8473] wireguard0: entered allmulticast mode [ 166.183133][ T8475] netlink: 'syz.3.667': attribute type 4 has an invalid length. [ 166.673696][ T8501] xt_HMARK: spi-set and port-set can't be combined [ 166.839611][ T5839] Bluetooth: hci4: command tx timeout [ 166.963843][ T8427] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.978068][ T8427] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.985603][ T8427] bridge_slave_0: entered allmulticast mode [ 166.993535][ T8427] bridge_slave_0: entered promiscuous mode [ 167.022784][ T12] hsr_slave_0: left promiscuous mode [ 167.059228][ T12] hsr_slave_1: left promiscuous mode [ 167.081206][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.100384][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.111070][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.118649][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.154260][ T12] veth1_macvtap: left promiscuous mode [ 167.160128][ T12] veth0_macvtap: left promiscuous mode [ 167.165768][ T12] veth1_vlan: left promiscuous mode [ 167.172399][ T12] veth0_vlan: left promiscuous mode [ 167.675331][ T12] team0 (unregistering): Port device team_slave_1 removed [ 167.717283][ T12] team0 (unregistering): Port device team_slave_0 removed [ 168.096025][ T8427] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.103845][ T8427] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.114321][ T8427] bridge_slave_1: entered allmulticast mode [ 168.121782][ T8427] bridge_slave_1: entered promiscuous mode [ 168.137435][ T8530] __nla_validate_parse: 70 callbacks suppressed [ 168.137459][ T8530] netlink: 96 bytes leftover after parsing attributes in process `syz.0.691'. [ 168.363382][ T8427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.380960][ T8427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.526018][ T8427] team0: Port device team_slave_0 added [ 168.560215][ T8427] team0: Port device team_slave_1 added [ 168.657663][ T8548] netlink: 24 bytes leftover after parsing attributes in process `syz.4.701'. [ 168.658147][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.693611][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.758193][ T8427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.851754][ T8427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.875231][ T8427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.912498][ T8427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.927608][ T5839] Bluetooth: hci4: command tx timeout [ 169.143511][ T8427] hsr_slave_0: entered promiscuous mode [ 169.157764][ T8427] hsr_slave_1: entered promiscuous mode [ 169.176599][ T8427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.192639][ T8427] Cannot create hsr debugfs directory [ 169.612500][ T8587] netem: unknown loss type 5 [ 169.629201][ T8587] netem: change failed [ 169.737145][ T8591] pim6reg1: entered promiscuous mode [ 169.744605][ T8591] pim6reg1: entered allmulticast mode [ 169.948395][ T8427] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 169.967392][ T8427] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 169.986750][ T8427] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.012932][ T8427] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 170.252346][ T8427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.331363][ T8427] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.372917][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.380107][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.420984][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.428150][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.659330][ T8626] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 170.852907][ T8638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.741'. [ 170.869828][ T8427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.874448][ T8640] netlink: 'syz.3.742': attribute type 1 has an invalid length. [ 170.889507][ T8640] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.742'. [ 170.968353][ T8427] veth0_vlan: entered promiscuous mode [ 170.991618][ T8427] veth1_vlan: entered promiscuous mode [ 171.001107][ T5839] Bluetooth: hci4: command tx timeout [ 171.059771][ T8427] veth0_macvtap: entered promiscuous mode [ 171.069229][ T8427] veth1_macvtap: entered promiscuous mode [ 171.088216][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.099091][ T8427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.110244][ T8427] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.119294][ T8427] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.128036][ T8427] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.136878][ T8427] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.204107][ T8651] netlink: 'syz.0.745': attribute type 3 has an invalid length. [ 171.226973][ T8652] netlink: 80 bytes leftover after parsing attributes in process `syz.4.748'. [ 171.361374][ T8656] pim6reg1: entered promiscuous mode [ 171.366749][ T8656] pim6reg1: entered allmulticast mode [ 171.587482][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.605759][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.609113][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.613722][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.961903][ T8683] netlink: 76 bytes leftover after parsing attributes in process `syz.3.763'. [ 172.098225][ T8689] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 172.140358][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 172.258638][ T8698] netlink: 'syz.0.769': attribute type 4 has an invalid length. [ 172.276726][ T8698] netlink: 'syz.0.769': attribute type 4 has an invalid length. [ 172.440650][ T8707] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 172.464825][ T8708] bridge0: port 1(vlan0) entered blocking state [ 172.471781][ T8708] bridge0: port 1(vlan0) entered disabled state [ 172.478236][ T8708] vlan0: entered allmulticast mode [ 172.489881][ T8708] vlan0: left allmulticast mode [ 172.817132][ T8724] netlink: 'syz.0.781': attribute type 1 has an invalid length. [ 172.825406][ T8724] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.781'. [ 173.234950][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'. [ 173.286715][ T8749] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 173.398106][ T8753] syz.0.794[8753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.398218][ T8753] syz.0.794[8753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.418600][ T8753] syz.0.794[8753] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.523630][ T8759] netlink: 'syz.4.797': attribute type 1 has an invalid length. [ 173.589045][ T8759] netlink: 224 bytes leftover after parsing attributes in process `syz.4.797'. [ 173.668667][ T2914] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.612391][ T2914] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.735562][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 174.739515][ T8773] syz.0.803[8773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.758516][ T8773] syz.0.803[8773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.783833][ T30] audit: type=1107 audit(1734572558.429:2): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 174.817053][ T8773] syz.0.803[8773] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 174.889874][ T2914] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.146048][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 175.161097][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 175.174308][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 175.190983][ T2914] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.206887][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 175.215940][ T5836] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 175.224195][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 175.480994][ T8801] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.596993][ T2914] bridge_slave_1: left allmulticast mode [ 175.602920][ T2914] bridge_slave_1: left promiscuous mode [ 175.608657][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.657562][ T2914] bridge_slave_0: left allmulticast mode [ 175.663621][ T2914] bridge_slave_0: left promiscuous mode [ 175.673406][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.230349][ T2914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.244159][ T2914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.254682][ T2914] bond0 (unregistering): Released all slaves [ 176.268113][ T8785] chnl_net:caif_netlink_parms(): no params data found [ 176.600131][ T8785] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.616453][ T8785] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.624189][ T8785] bridge_slave_0: entered allmulticast mode [ 176.636965][ T8785] bridge_slave_0: entered promiscuous mode [ 176.646605][ T8785] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.660705][ T8785] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.668125][ T8785] bridge_slave_1: entered allmulticast mode [ 176.680905][ T8785] bridge_slave_1: entered promiscuous mode [ 176.735739][ T8785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.759831][ T8785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.778766][ T2914] hsr_slave_0: left promiscuous mode [ 176.785241][ T2914] hsr_slave_1: left promiscuous mode [ 176.802349][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.814019][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.827898][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.853572][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.939904][ T2914] veth1_macvtap: left promiscuous mode [ 176.952343][ T2914] veth0_macvtap: left promiscuous mode [ 176.958835][ T8854] xt_hashlimit: max too large, truncated to 1048576 [ 176.965888][ T2914] veth1_vlan: left promiscuous mode [ 176.979162][ T2914] veth0_vlan: left promiscuous mode [ 177.399178][ T5836] Bluetooth: hci4: command tx timeout [ 177.667070][ T2914] team0 (unregistering): Port device team_slave_1 removed [ 177.706607][ T2914] team0 (unregistering): Port device team_slave_0 removed [ 178.149161][ T8872] netlink: 'syz.3.844': attribute type 12 has an invalid length. [ 178.173607][ T8785] team0: Port device team_slave_0 added [ 178.210042][ T8785] team0: Port device team_slave_1 added [ 178.319715][ T8785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.349640][ T8785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.445628][ T8785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.478614][ T8785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.486137][ T8785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.513088][ T8785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.606918][ T8785] hsr_slave_0: entered promiscuous mode [ 178.659749][ T8785] hsr_slave_1: entered promiscuous mode [ 178.677574][ T8785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.694619][ T8785] Cannot create hsr debugfs directory [ 178.869390][ T8896] netlink: 36 bytes leftover after parsing attributes in process `syz.4.855'. [ 178.883010][ T8898] netlink: 16 bytes leftover after parsing attributes in process `syz.0.857'. [ 178.892577][ T8898] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.924546][ T8902] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.933930][ T8902] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.942742][ T8902] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.951552][ T8902] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.986253][ T8902] vxlan0: entered promiscuous mode [ 178.992675][ T8902] vxlan0: entered allmulticast mode [ 179.036708][ T8902] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.046048][ T8902] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.055545][ T8902] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.065189][ T8902] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.247184][ T8910] vcan0: entered promiscuous mode [ 179.255989][ T8910] vlan2: entered promiscuous mode [ 179.274678][ T8910] vcan0: left promiscuous mode [ 179.479203][ T5836] Bluetooth: hci4: command tx timeout [ 179.608001][ T8932] netlink: 'syz.3.872': attribute type 10 has an invalid length. [ 179.633315][ T8932] netlink: 2 bytes leftover after parsing attributes in process `syz.3.872'. [ 179.678883][ T8932] team0: entered promiscuous mode [ 179.687179][ T8932] bridge0: port 1(team0) entered blocking state [ 179.696485][ T8932] bridge0: port 1(team0) entered disabled state [ 179.719512][ T8932] team0: entered allmulticast mode [ 179.992550][ T8785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.024462][ T8785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.035841][ T8785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.055089][ T8785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 180.189929][ T8785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.222852][ T8785] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.261564][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.268808][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.289638][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.296836][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.661615][ T8785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.728993][ T8785] veth0_vlan: entered promiscuous mode [ 180.746941][ T8785] veth1_vlan: entered promiscuous mode [ 180.786606][ T8785] veth0_macvtap: entered promiscuous mode [ 180.798606][ T8785] veth1_macvtap: entered promiscuous mode [ 180.821198][ T8785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.841844][ T8785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.857458][ T8785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.868089][ T8785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.881676][ T8785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.896722][ T8785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.944332][ T8967] netlink: 'syz.0.887': attribute type 10 has an invalid length. [ 180.954602][ T8961] pim6reg1: entered promiscuous mode [ 180.978737][ T8961] pim6reg1: entered allmulticast mode [ 181.035230][ T8967] team0: Device hsr_slave_0 failed to register rx_handler [ 181.231914][ T8973] netlink: 'syz.1.891': attribute type 1 has an invalid length. [ 181.251697][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.279290][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.282681][ T8973] bond1: entered promiscuous mode [ 181.292565][ T8973] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.306760][ T8972] tipc: Started in network mode [ 181.315239][ T8972] tipc: Node identity ac1414aa, cluster identity 4711 [ 181.330768][ T8972] tipc: Enabled bearer , priority 10 [ 181.357953][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.391336][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.559142][ C1] ------------[ cut here ]------------ [ 181.564969][ C1] WARNING: CPU: 1 PID: 5833 at kernel/workqueue.c:2257 __queue_work+0xcd3/0xf50 [ 181.574051][ C1] Modules linked in: [ 181.577988][ C1] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor Not tainted 6.13.0-rc2-syzkaller-00485-gc1bad69f8baf #0 [ 181.589052][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 181.598361][ T8987] netlink: 20 bytes leftover after parsing attributes in process `syz.1.896'. [ 181.599113][ C1] RIP: 0010:__queue_work+0xcd3/0xf50 [ 181.613358][ C1] Code: ff e8 71 e8 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 63 e8 37 00 eb 13 e8 5c e8 37 00 eb 0c e8 55 e8 37 00 eb 05 e8 4e e8 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 181.633001][ C1] RSP: 0018:ffffc90000a18b08 EFLAGS: 00010046 [ 181.639088][ C1] RAX: ffffffff816775dd RBX: 0000000000000100 RCX: ffff88806f0d8000 [ 181.647069][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 181.655057][ C1] RBP: 0000000000010000 R08: ffffffff81676a08 R09: 1ffffffff2034186 [ 181.663139][ C1] R10: dffffc0000000000 R11: ffffffff81677e10 R12: ffff88805f398800 [ 181.671132][ C1] R13: ffff88805f3989c0 R14: dffffc0000000000 R15: 0000000000000008 [ 181.679289][ C1] FS: 000055557ac30500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 181.688321][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 181.694940][ C1] CR2: 00007ffd77b8cd78 CR3: 00000000665e0000 CR4: 00000000003526f0 [ 181.702928][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 181.710910][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 181.718894][ C1] Call Trace: [ 181.722191][ C1] [ 181.725063][ C1] ? __warn+0x165/0x4d0 [ 181.729236][ C1] ? __queue_work+0xcd3/0xf50 [ 181.733933][ C1] ? report_bug+0x2b3/0x500 [ 181.738458][ C1] ? __queue_work+0xcd3/0xf50 [ 181.743161][ C1] ? handle_bug+0x60/0x90 [ 181.747591][ C1] ? exc_invalid_op+0x1a/0x50 [ 181.752282][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 181.757320][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 181.763143][ C1] ? __queue_work+0xe8/0xf50 [ 181.767742][ C1] ? __queue_work+0xcbd/0xf50 [ 181.772446][ C1] ? __queue_work+0xcd3/0xf50 [ 181.777137][ C1] ? __queue_work+0xcbd/0xf50 [ 181.781827][ C1] ? call_timer_fn+0xa8/0x650 [ 181.786522][ C1] call_timer_fn+0x187/0x650 [ 181.791125][ C1] ? call_timer_fn+0xc0/0x650 [ 181.795814][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 181.801631][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 181.806759][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 181.812589][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 181.817799][ C1] ? rcu_is_watching+0x15/0xb0 [ 181.822586][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 181.828406][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 181.834402][ C1] __run_timer_base+0x695/0x8e0 [ 181.839274][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 181.844664][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 181.851005][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 181.856227][ C1] run_timer_softirq+0xb7/0x170 [ 181.861090][ C1] handle_softirqs+0x2d4/0x9b0 [ 181.865882][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 181.870665][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 181.875972][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 181.881185][ C1] __irq_exit_rcu+0xf7/0x220 [ 181.885799][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 181.891021][ C1] irq_exit_rcu+0x9/0x30 [ 181.895280][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 181.900948][ C1] [ 181.903886][ C1] [ 181.906823][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 181.912821][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 181.918902][ C1] Code: 8b 3d 64 74 8f 0c 48 89 de 5b e9 93 f1 5a 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 00 d6 03 00 65 8b 15 b0 77 64 7e 81 e2 00 01 ff 00 [ 181.938533][ C1] RSP: 0018:ffffc90003c378b0 EFLAGS: 00000287 [ 181.944617][ C1] RAX: ffffffff847690cf RBX: 00000000000000ef RCX: ffffffff847690a2 [ 181.952597][ C1] RDX: ffff88806f0d8000 RSI: 0000000000000000 RDI: 0000000000000002 [ 181.960574][ C1] RBP: ffff8881472b4901 R08: ffffffff847690ba R09: 1ffff11002549549 [ 181.968574][ C1] R10: dffffc0000000000 R11: ffffed100254954a R12: 00000000000000f0 [ 181.976575][ C1] R13: dffffc0000000000 R14: ffff888012a4aa30 R15: ffff888012a4aa10 [ 181.984562][ C1] ? tomoyo_check_acl+0x2ea/0x3f0 [ 181.989631][ C1] ? tomoyo_check_acl+0x2ff/0x3f0 [ 181.994670][ C1] ? tomoyo_check_acl+0x2d2/0x3f0 [ 181.999712][ C1] tomoyo_check_acl+0x2ff/0x3f0 [ 182.004580][ C1] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 182.010410][ C1] tomoyo_path_permission+0x1af/0x360 [ 182.015805][ C1] tomoyo_path_perm+0x490/0x740 [ 182.020676][ C1] ? tomoyo_path_perm+0x287/0x740 [ 182.025719][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 182.031124][ C1] ? filename_lookup+0x470/0x670 [ 182.036114][ C1] security_inode_getattr+0x130/0x330 [ 182.041503][ C1] vfs_getattr+0x2a/0x3b0 [ 182.045851][ C1] vfs_statx+0x18c/0x490 [ 182.050230][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 182.055044][ C1] ? getname_flags+0x1e3/0x540 [ 182.059844][ C1] vfs_fstatat+0xe5/0x130 [ 182.064198][ C1] __x64_sys_newfstatat+0x11d/0x1a0 [ 182.069417][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 182.075169][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.081509][ C1] ? do_syscall_64+0x100/0x230 [ 182.086286][ C1] ? do_syscall_64+0xb6/0x230 [ 182.090984][ C1] do_syscall_64+0xf3/0x230 [ 182.095516][ C1] ? clear_bhb_loop+0x35/0x90 [ 182.100205][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.106118][ C1] RIP: 0033:0x7fe45ed8453a [ 182.110546][ C1] Code: 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 0b 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 [ 182.130173][ C1] RSP: 002b:00007ffd77b8d528 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 182.138615][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe45ed8453a [ 182.146597][ C1] RDX: 00007ffd77b8d550 RSI: 00007ffd77b8d5e0 RDI: 00000000ffffff9c [ 182.154574][ C1] RBP: 00007ffd77b8d5e0 R08: 0000000000000000 R09: 0000000000000000 [ 182.162562][ C1] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffd77b8e660 [ 182.170544][ C1] R13: 00007fe45ee0180c R14: 00007ffd77b8e6a0 R15: 00000000000000e2 [ 182.178541][ C1] [ 182.181584][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 182.188869][ C1] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor Not tainted 6.13.0-rc2-syzkaller-00485-gc1bad69f8baf #0 [ 182.199725][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 182.209795][ C1] Call Trace: [ 182.213079][ C1] [ 182.215932][ C1] dump_stack_lvl+0x241/0x360 [ 182.220636][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.225848][ C1] ? __pfx__printk+0x10/0x10 [ 182.230464][ C1] ? _printk+0xd5/0x120 [ 182.234656][ C1] ? __init_begin+0x41000/0x41000 [ 182.239710][ C1] ? vscnprintf+0x5d/0x90 [ 182.244066][ C1] panic+0x349/0x880 [ 182.247979][ C1] ? __warn+0x174/0x4d0 [ 182.252172][ C1] ? __pfx_panic+0x10/0x10 [ 182.256616][ C1] __warn+0x344/0x4d0 [ 182.260610][ C1] ? __queue_work+0xcd3/0xf50 [ 182.265303][ C1] report_bug+0x2b3/0x500 [ 182.269652][ C1] ? __queue_work+0xcd3/0xf50 [ 182.274341][ C1] handle_bug+0x60/0x90 [ 182.278522][ C1] exc_invalid_op+0x1a/0x50 [ 182.283039][ C1] asm_exc_invalid_op+0x1a/0x20 [ 182.287899][ C1] RIP: 0010:__queue_work+0xcd3/0xf50 [ 182.293195][ C1] Code: ff e8 71 e8 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 63 e8 37 00 eb 13 e8 5c e8 37 00 eb 0c e8 55 e8 37 00 eb 05 e8 4e e8 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 182.312832][ C1] RSP: 0018:ffffc90000a18b08 EFLAGS: 00010046 [ 182.318914][ C1] RAX: ffffffff816775dd RBX: 0000000000000100 RCX: ffff88806f0d8000 [ 182.326921][ C1] RDX: 0000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 182.334902][ C1] RBP: 0000000000010000 R08: ffffffff81676a08 R09: 1ffffffff2034186 [ 182.342880][ C1] R10: dffffc0000000000 R11: ffffffff81677e10 R12: ffff88805f398800 [ 182.350862][ C1] R13: ffff88805f3989c0 R14: dffffc0000000000 R15: 0000000000000008 [ 182.358871][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 182.364697][ C1] ? __queue_work+0xe8/0xf50 [ 182.369294][ C1] ? __queue_work+0xcbd/0xf50 [ 182.373984][ C1] ? __queue_work+0xcbd/0xf50 [ 182.378678][ C1] ? call_timer_fn+0xa8/0x650 [ 182.383370][ C1] call_timer_fn+0x187/0x650 [ 182.387973][ C1] ? call_timer_fn+0xc0/0x650 [ 182.392667][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 182.398480][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 182.403604][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 182.409418][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 182.414623][ C1] ? rcu_is_watching+0x15/0xb0 [ 182.419408][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 182.425322][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 182.431140][ C1] __run_timer_base+0x695/0x8e0 [ 182.436015][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 182.441407][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.447745][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 182.452955][ C1] run_timer_softirq+0xb7/0x170 [ 182.457818][ C1] handle_softirqs+0x2d4/0x9b0 [ 182.462606][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 182.467389][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 182.472696][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 182.477915][ C1] __irq_exit_rcu+0xf7/0x220 [ 182.482523][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 182.487745][ C1] irq_exit_rcu+0x9/0x30 [ 182.492010][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 182.497661][ C1] [ 182.500596][ C1] [ 182.503532][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 182.509555][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 182.515634][ C1] Code: 8b 3d 64 74 8f 0c 48 89 de 5b e9 93 f1 5a 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 00 d6 03 00 65 8b 15 b0 77 64 7e 81 e2 00 01 ff 00 [ 182.535244][ C1] RSP: 0018:ffffc90003c378b0 EFLAGS: 00000287 [ 182.541325][ C1] RAX: ffffffff847690cf RBX: 00000000000000ef RCX: ffffffff847690a2 [ 182.549310][ C1] RDX: ffff88806f0d8000 RSI: 0000000000000000 RDI: 0000000000000002 [ 182.557285][ C1] RBP: ffff8881472b4901 R08: ffffffff847690ba R09: 1ffff11002549549 [ 182.565263][ C1] R10: dffffc0000000000 R11: ffffed100254954a R12: 00000000000000f0 [ 182.573244][ C1] R13: dffffc0000000000 R14: ffff888012a4aa30 R15: ffff888012a4aa10 [ 182.581230][ C1] ? tomoyo_check_acl+0x2ea/0x3f0 [ 182.586270][ C1] ? tomoyo_check_acl+0x2ff/0x3f0 [ 182.591306][ C1] ? tomoyo_check_acl+0x2d2/0x3f0 [ 182.596347][ C1] tomoyo_check_acl+0x2ff/0x3f0 [ 182.601212][ C1] ? __pfx_tomoyo_check_path_acl+0x10/0x10 [ 182.607039][ C1] tomoyo_path_permission+0x1af/0x360 [ 182.612431][ C1] tomoyo_path_perm+0x490/0x740 [ 182.617388][ C1] ? tomoyo_path_perm+0x287/0x740 [ 182.622426][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 182.627905][ C1] ? filename_lookup+0x470/0x670 [ 182.632883][ C1] security_inode_getattr+0x130/0x330 [ 182.638268][ C1] vfs_getattr+0x2a/0x3b0 [ 182.642619][ C1] vfs_statx+0x18c/0x490 [ 182.646887][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 182.651669][ C1] ? getname_flags+0x1e3/0x540 [ 182.656445][ C1] vfs_fstatat+0xe5/0x130 [ 182.660786][ C1] __x64_sys_newfstatat+0x11d/0x1a0 [ 182.666005][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 182.671766][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.678104][ C1] ? do_syscall_64+0x100/0x230 [ 182.682879][ C1] ? do_syscall_64+0xb6/0x230 [ 182.687573][ C1] do_syscall_64+0xf3/0x230 [ 182.692089][ C1] ? clear_bhb_loop+0x35/0x90 [ 182.696795][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.702697][ C1] RIP: 0033:0x7fe45ed8453a [ 182.707120][ C1] Code: 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 0b 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 90 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 [ 182.726741][ C1] RSP: 002b:00007ffd77b8d528 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 182.735167][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe45ed8453a [ 182.743164][ C1] RDX: 00007ffd77b8d550 RSI: 00007ffd77b8d5e0 RDI: 00000000ffffff9c [ 182.751142][ C1] RBP: 00007ffd77b8d5e0 R08: 0000000000000000 R09: 0000000000000000 [ 182.759122][ C1] R10: 0000000000000100 R11: 0000000000000286 R12: 00007ffd77b8e660 [ 182.767107][ C1] R13: 00007fe45ee0180c R14: 00007ffd77b8e6a0 R15: 00000000000000e2 [ 182.775101][ C1] [ 182.778522][ C1] Kernel Offset: disabled [ 182.782924][ C1] Rebooting in 86400 seconds..