last executing test programs: 1m13.636190088s ago: executing program 3 (id=307): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x40000) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000000c0)=0x6e) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) 1m1.148969437s ago: executing program 3 (id=307): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x40000) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000000c0)=0x6e) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) 48.478261766s ago: executing program 3 (id=307): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x40000) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000000c0)=0x6e) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) 36.471068532s ago: executing program 3 (id=307): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x40000) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000000c0)=0x6e) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) 21.77782404s ago: executing program 3 (id=307): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x40000) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000000c0)=0x6e) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) 10.547630743s ago: executing program 3 (id=307): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, 0x0, 0x40000) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) getpeername$unix(r2, &(0x7f0000000240)=@abs, &(0x7f00000000c0)=0x6e) ppoll(&(0x7f0000000200)=[{r4, 0x1}], 0x1, 0x0, 0x0, 0x3) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) 3.893888793s ago: executing program 1 (id=1233): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc054) socket$netlink(0x10, 0x3, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 3.642613051s ago: executing program 1 (id=1234): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000bc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0xa}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x61]}}, 0x0, 0x4a}, 0x28) write$cgroup_pid(r2, &(0x7f0000000080), 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}]}]}, 0x78}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x19a, &(0x7f0000000480)='cgrouj\x00\xc6\xbfQf\xf6\xcf\x81\xf8\x1b\xf8\xcf\xd0\xdb^\t\x82=\x8f\t\xf4yY\x111]\xca\xe5\x18\x18\xc3\x9d\x9fu\f5\xe1\xfb\xa7u\xa9\x80\xefbD\xa4\xa4\x00\xc1\xa9\xe7\xa4\x8c\x97P7\xfd\xd5tY\x86\x96\xb4\a\x90\x1d$\xbe$\x9d\x03\xb0R\xda\x183\x9d\xe3,~\x9e\x9c\xf9OYe\x9f&\x8fs\xb2gj\x01/F\xbc\xb8E\xba\xce\xbbJ\xc1d\x1e9\x16\x1bn\x86=\xe6}$\xb1?\xdcj\xcb\\\xc6\xb4\x7f\xef\x01\x17;\xf3\xb3\x00\xb5\xd94\xe7\xb5\xad~\x80z\xc1c\xa9H\xea\x03Y\xd3\xa9\xbd6)}\xb4G\xdb\xf9\xcee\x98\xd3V\xa0\xdf\xf0[\xe2\x12\x85\xd2\x87\x8e\x0fv\x8b\xcd\xb4\xd4.\x0eY\xd2\xcf{\xe7\xf9\xccx\xb3\x18\xee\xcaC{\xd8j\xb6*\x04\xaf,\x0e\x7f\x1d\xb4\x96n=\xff\xfakhs`0\xdc\x88\x83\xdd(T\xf4\xcf\x17\xfeSzd\n\x7f\xc4\x83\xa3\x1ae\xb9_\x05\\f\x9ahf\xfe\x91\xb0t\x1c2\xe0\x88\x88\x88\x9cs&l\xbe\a\xf3\x7fN\x11*\x12\x17\x1a\xb3^\xbe|\xa5H\xf9\xc2TQ\xac\x8e\xdc\xed\xe1^\x97\x95z\x02\xd8\xf5]B\x9eB\x13\xc7\xe6\xb25\xf3\x94p\xe6\x88\x9f\xe0@\xd2\xd2mEt\"\xc4M+wv\xca~\x87x\xcez!\x05\x00\xa6\x12Pd\xb1\xc8\xd0\xbb\n\x1e\x80\x91\x88\x99Kc\x1dn&\x1c\xef[\xe5\n\x9c\xe1\xde\x02\xd8\x89\xdd\xd3?pQ\xfc\xd8\xfdD\x039\x01M8\xa5\x9d@G\xc8\x98O\xfd\xfb\xb76\xd3\xa7\x82I\x16M\xa5\xaci\xb5\xe6\x17\x81\xef\"\xd21\xfd\xdd\xd3\xcd\x17\x06'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280080018000dac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000000340)=[{r0, 0x3028}, {r7, 0x1000}, {r3, 0x11c}, {r1}, {r5, 0x200}, {r2, 0x42}, {r0, 0x80}, {r4, 0x3400}, {r1, 0x401}, {r1, 0x501a}], 0xa, 0x6) write$cgroup_subtree(r6, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 3.228185014s ago: executing program 4 (id=1235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000280)=0x14) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) sendfile(r3, r4, 0x0, 0xffffffff000) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x1402, 0x100, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004090}, 0x4040001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000080000000000000006000000185b0000090000000000", @ANYRES32, @ANYBLOB="0000000001000000185b00000bb0a42388f5053f7ddb15b19300000000000000"], &(0x7f0000000100)='GPL\x00', 0xe, 0x2, &(0x7f0000000140)=""/2, 0xe004c291166afe58, 0xb, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f00000001c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x1, 0xffffffff, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x5, 0xc, 0x5, 0x4232, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x3}, 0x50) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r11, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@dstopts_2292={{0x18, 0x29, 0x3b}}, @rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@empty]}}}], 0x40}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x50, r9, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x8850) 2.644379371s ago: executing program 1 (id=1238): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$kcm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0), 0x100000000000014f, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r0, @ANYRESOCT=r0], 0x558}, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x894b, 0x0) 2.151672762s ago: executing program 4 (id=1243): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x80000000000000a, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') socket(0x8, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) openat$cgroup_procs(r2, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4002840}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0), 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 2.06055462s ago: executing program 0 (id=1244): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc054) socket$netlink(0x10, 0x3, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 1.890212973s ago: executing program 0 (id=1247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x20048000) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newtfilter={0x30, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}], 0x2}}], 0x1, 0x2040000, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x3, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x9, [{@multicast1, 0xb932}, {@private=0xa010101, 0x4000}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000040)={'veth0_vlan\x00', {0x2, 0x4e24, @broadcast}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r10}, 0x38) 1.691547485s ago: executing program 2 (id=1248): mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, 0xffffffffffffffff, 0x0) 1.647428608s ago: executing program 1 (id=1249): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, 0x0, &(0x7f0000000400)) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.560171074s ago: executing program 2 (id=1250): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x1) 1.559272486s ago: executing program 4 (id=1251): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x100000}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d030000000000000003000000000000000000000604000000040000000000001202000000000000005f"], 0x0, 0x4a}, 0x20) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.426756385s ago: executing program 1 (id=1252): socket$kcm(0x29, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000240)=0x1, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000005800000121f", 0x2e}], 0x1}, 0x404c080) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{0x0, 0x14}], 0x1}, 0x0) 1.393182873s ago: executing program 4 (id=1253): socket(0x11, 0x4, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff80000000}, {0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x1c, 0x0, 0x331, 0x0, 0x25dfdbfb, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x8000, 0x700, 0x9, 0x0, {{0x7, 0x4, 0x2, 0x2b, 0x1c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @broadcast, {[@noop, @rr={0x7, 0x7, 0x7d, [@empty]}]}}}}}) socket$inet6(0xa, 0x80003, 0xff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0xffff, 0x2}, 0x6) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@rose, @default, @bcast, @rose, @remote, @null, @bcast, @netrom]}, &(0x7f0000000140)=0x48, 0x0) 1.392057436s ago: executing program 2 (id=1263): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x1) 1.252479749s ago: executing program 1 (id=1254): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x780, 0x1d0, 0x5c8, 0x0, 0x5c8, 0x0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6b0, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}, {0x81, 0x10, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x2}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7e0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) socket(0x10, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x238}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) 1.250330878s ago: executing program 0 (id=1265): socket$kcm(0x29, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000240)=0x1, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000005800000121f", 0x2e}], 0x1}, 0x404c080) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000007d80)={0x0, 0x0, &(0x7f0000007d00)=[{0x0, 0x14}], 0x1}, 0x0) 1.184069654s ago: executing program 2 (id=1255): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='signal_deliver\x00', 0xffffffffffffffff, 0x0, 0x81}, 0x18) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 1.026738541s ago: executing program 2 (id=1256): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc054) socket$netlink(0x10, 0x3, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 989.375478ms ago: executing program 0 (id=1257): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc054) socket$netlink(0x10, 0x3, 0x8) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c000) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 746.360536ms ago: executing program 2 (id=1258): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x4000) sendmsg$DCCPDIAG_GETSOCK(r3, 0x0, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg(r6, &(0x7f000000e340)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x80, 0x0, 0x0, &(0x7f00000079c0)=ANY=[@ANYBLOB="10000000002b00002900000039000000"], 0x10}}], 0x1, 0x40084) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000300000005000006040000000a00000008"], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000}, 0x28) 569.622105ms ago: executing program 0 (id=1259): socket$unix(0x1, 0x1, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4dc1}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000000)='macvtap0\x00') socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000340)="98b12017f91207fac4fd8c57303ffe51413dcc7fadbb6171ed93d852330cd508b17e242c688d0a6c65996f382d077b11b047208bce8de10ad5543cb197fd0ae80c754e061c4fbdbb2331931a0704fb763cf87035f3740e0cb8fa19edd13f756d93397ce126d62b1f8d15db9513ae7c26142e705c7c228e276f342ef02920c88034ba120ea91a08", 0x87) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, 0x0, 0x404f444) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) 428.322268ms ago: executing program 4 (id=1260): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) close(0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x40, r3, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x10000001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=0x0, @ANYBLOB="1d00509900ff0750ef00e700"], 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f00000002c0)=@random="8c", 0x1, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240)=[{}, {}, {}], 0x3, 0x6, &(0x7f0000000280)={[0x8]}, 0x8) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 549.755µs ago: executing program 0 (id=1261): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="00000000000000000000008f1bb76d0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000800)={0x0, 0xedf0, 0x2, 0x0, 0x2, 0xc3}, &(0x7f0000000840)=0x14) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000073010b000000000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_subtree(r6, 0x0, 0x1f) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0xf0b, 0x13, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1ff, 0x4, 0x10001, 0x5902, 0x7f, 0x400, 0x800, 0x2, 0xffff294f}}}}]}, 0x58}}, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000000480)={'tunl0\x00', r7, 0x80, 0x7800, 0x9, 0x7, {{0x35, 0x4, 0x2, 0x6, 0xd4, 0x66, 0x0, 0x9, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x14, 0xee, 0x0, 0x6, [0x3000000, 0xf, 0x0, 0x91]}, @timestamp={0x44, 0x2c, 0x28, 0x0, 0x9, [0x8, 0x7acf, 0xc1, 0xfffffffd, 0x5, 0x4, 0xd9, 0x5, 0xfa, 0x1]}, @timestamp_addr={0x44, 0x34, 0x27, 0x1, 0x5, [{@private=0xa010101, 0x5}, {@private=0xa010102, 0x8f4}, {@loopback, 0x6}, {@multicast2, 0x5}, {@remote, 0x970}, {@local, 0x4}]}, @timestamp_addr={0x44, 0x4c, 0xf3, 0x1, 0x1, [{@rand_addr=0x64010102, 0xf}, {@rand_addr=0x64010101, 0xe}, {@loopback, 0xc3}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@remote, 0x200}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffffb}, {@rand_addr=0x64010102, 0x4}, {@multicast1, 0x5}]}]}}}}}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xe, 0x9}, {0xfff3, 0x5}, {0xe, 0x1}}}, 0x24}}, 0x44804) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000600)={r0, 0xfffffffffffffffb, 0x42f6, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000580)='mem_disconnect\x00', r8, 0x0, 0x5}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) sendmsg$NFT_MSG_GETGEN(r8, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, 0x10, 0xa, 0x0, 0x0, 0x0, {0x1, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000340)={0x80000001, 0x2, 0x7, 0x0, 0x0, [{{r10}, 0x2}, {{r0}, 0x8000000000000001}, {{r2}, 0xe60b}, {{r2}}, {{r1}, 0xffffffffffff9893}, {{r0}, 0x2}, {{r2}, 0x6}]}) 0s ago: executing program 4 (id=1262): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312c", @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_PORT_SET(r2, 0x0, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4090) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x12, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000a60f000400000073012d00000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, &(0x7f00000002c0)) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x740, 0x328, 0x580, 0x580, 0xd0, 0x328, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x230, 0x258, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x5, 0x3c, 0x97, 0x6, 0x401, 0x4, 0x120e, 0x18, 0x40}, {0x5}}}, @common=@srh={{0x30}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7a0) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4, 0x3ff, @empty, 0x1}, 0x1c) close(r4) kernel console output (not intermixed with test programs): 17 has an invalid length. [ 211.328052][ T8464] chnl_net:caif_netlink_parms(): no params data found [ 211.399249][ T8518] IPv6: NLM_F_REPLACE set, but no existing node found! [ 211.581924][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 211.588729][ T5858] Bluetooth: hci3: command 0x0406 tx timeout [ 212.220119][ T5845] Bluetooth: hci1: command tx timeout [ 212.488194][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'. [ 212.555000][ T13] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.665345][ T13] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.688987][ T13] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.726696][ T8514] lo speed is unknown, defaulting to 1000 [ 212.765889][ T13] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.811029][ T8520] lo speed is unknown, defaulting to 1000 [ 212.976814][ T8464] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.984155][ T8464] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.993190][ T8464] bridge_slave_0: entered allmulticast mode [ 213.002430][ T8464] bridge_slave_0: entered promiscuous mode [ 213.075822][ T8464] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.083716][ T8464] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.096558][ T8464] bridge_slave_1: entered allmulticast mode [ 213.104600][ T8464] bridge_slave_1: entered promiscuous mode [ 213.206457][ T8464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.221510][ T8464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.287260][ T8464] team0: Port device team_slave_0 added [ 213.297241][ T8464] team0: Port device team_slave_1 added [ 213.372320][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.379422][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.407083][ T8464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.428568][ T8548] netlink: 'syz.0.699': attribute type 10 has an invalid length. [ 213.437419][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.450154][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.485422][ T8464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.715341][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.701'. [ 213.726155][ T8552] net_ratelimit: 14 callbacks suppressed [ 213.726173][ T8552] openvswitch: netlink: Flow actions attr not present in new flow. [ 213.774371][ T8464] hsr_slave_0: entered promiscuous mode [ 213.781671][ T8464] hsr_slave_1: entered promiscuous mode [ 213.788881][ T8464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.800461][ T8464] Cannot create hsr debugfs directory [ 213.800516][ T8556] netlink: 248 bytes leftover after parsing attributes in process `syz.0.703'. [ 213.839675][ T8552] netlink: 16 bytes leftover after parsing attributes in process `syz.4.701'. [ 214.299385][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.707'. [ 214.309081][ T5845] Bluetooth: hci1: command tx timeout [ 214.334337][ T3474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.367119][ T8567] bridge1: port 1(ip6gretap1) entered blocking state [ 214.375042][ T8567] bridge1: port 1(ip6gretap1) entered disabled state [ 214.380247][ T3474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.387255][ T8567] ip6gretap1: entered allmulticast mode [ 214.398101][ T8567] ip6gretap1: entered promiscuous mode [ 214.569675][ T8567] veth7: entered promiscuous mode [ 214.582234][ T8567] bridge1: port 2(veth7) entered blocking state [ 214.597000][ T8567] bridge1: port 2(veth7) entered disabled state [ 214.612951][ T8567] veth7: entered allmulticast mode [ 214.821422][ T8579] netlink: 'syz.1.710': attribute type 10 has an invalid length. [ 215.101841][ T8464] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.149596][ T8464] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 215.190615][ T8464] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 215.218586][ T8464] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 215.258120][ T8590] netlink: 256 bytes leftover after parsing attributes in process `syz.4.715'. [ 215.408886][ T8464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.446982][ T8464] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.479075][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.486265][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.510613][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.517776][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.591985][ T8605] netlink: 'syz.0.717': attribute type 10 has an invalid length. [ 215.609530][ T8607] netlink: 248 bytes leftover after parsing attributes in process `syz.4.716'. [ 215.707462][ T8608] tipc: Enabled bearer , priority 0 [ 215.791877][ T8608] syzkaller0: entered promiscuous mode [ 215.797667][ T8608] syzkaller0: entered allmulticast mode [ 215.816007][ T8608] tipc: Resetting bearer [ 215.868241][ T8614] smc: net device bond0 applied user defined pnetid SYZ2 [ 215.883786][ T8606] tipc: Resetting bearer [ 215.892377][ T8614] smc: net device bond0 erased user defined pnetid SYZ2 [ 216.038408][ T8619] netlink: 'syz.1.722': attribute type 10 has an invalid length. [ 216.380570][ T5845] Bluetooth: hci1: command tx timeout [ 217.606013][ T8606] tipc: Disabling bearer [ 217.692240][ T8635] lo speed is unknown, defaulting to 1000 [ 217.767930][ T8640] netlink: 'syz.1.730': attribute type 10 has an invalid length. [ 217.953793][ T8647] netlink: 'syz.4.734': attribute type 11 has an invalid length. [ 218.023686][ T8649] bond0: (slave bridge0): Releasing backup interface [ 218.039507][ T8649] bond1: (slave geneve2): Releasing active interface [ 218.046458][ T8649] geneve2: left promiscuous mode [ 218.068145][ T8649] bond2: (slave gretap1): Releasing active interface [ 218.084237][ T8649] bond3: (slave gretap2): Releasing backup interface [ 218.096351][ T8649] gretap2: left allmulticast mode [ 218.130713][ T8464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.245423][ T8464] veth0_vlan: entered promiscuous mode [ 218.257931][ T8464] veth1_vlan: entered promiscuous mode [ 218.298012][ T8464] veth0_macvtap: entered promiscuous mode [ 218.395585][ T8464] veth1_macvtap: entered promiscuous mode [ 218.455117][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.497193][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.548033][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.587870][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.632887][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.663947][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.955529][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.985024][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.080551][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.099666][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.537882][ T8669] tipc: Enabled bearer , priority 0 [ 219.552370][ T8669] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 219.566969][ T8669] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 219.612158][ T8672] netlink: 'syz.4.743': attribute type 10 has an invalid length. [ 219.804065][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.917765][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.085552][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.265876][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.682771][ T13] bridge_slave_1: left allmulticast mode [ 220.691935][ T13] bridge_slave_1: left promiscuous mode [ 220.697729][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.711600][ T13] bridge_slave_0: left allmulticast mode [ 220.723195][ T13] bridge_slave_0: left promiscuous mode [ 220.734905][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.796814][ T8686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.746'. [ 220.871727][ T8690] netlink: 28 bytes leftover after parsing attributes in process `syz.2.746'. [ 221.042714][ T55] block nbd1: Possible stuck request ffff888025215080: control (read@0,1024B). Runtime 60 seconds [ 221.054049][ T55] block nbd1: Possible stuck request ffff888025215240: control (read@1024,1024B). Runtime 60 seconds [ 221.065372][ T55] block nbd1: Possible stuck request ffff888025215400: control (read@2048,1024B). Runtime 60 seconds [ 221.076828][ T55] block nbd1: Possible stuck request ffff8880252155c0: control (read@3072,1024B). Runtime 60 seconds [ 221.305545][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 221.318649][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.327879][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.340526][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.351176][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.071943][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.088726][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.102693][ T13] bond0 (unregistering): Released all slaves [ 222.177515][ T8704] tipc: New replicast peer: 255.255.255.255 [ 222.240660][ T8704] tipc: Enabled bearer , priority 10 [ 222.542606][ T8695] lo speed is unknown, defaulting to 1000 [ 222.645467][ T13] hsr_slave_0: left promiscuous mode [ 222.670579][ T13] hsr_slave_1: left promiscuous mode [ 222.694371][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.710037][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.740667][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.748099][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.844293][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 222.869346][ T13] veth1_macvtap: left promiscuous mode [ 222.873641][ T8708] openvswitch: netlink: Flow actions attr not present in new flow. [ 222.907781][ T13] veth0_macvtap: left promiscuous mode [ 222.914411][ T13] veth1_vlan: left promiscuous mode [ 222.919918][ T13] veth0_vlan: left promiscuous mode [ 222.952234][ T8716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.755'. [ 223.423118][ T5840] Bluetooth: hci1: command tx timeout [ 223.508672][ T8731] syz.0.770: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 223.558893][ T8731] CPU: 1 UID: 0 PID: 8731 Comm: syz.0.770 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 223.558923][ T8731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.558942][ T8731] Call Trace: [ 223.558953][ T8731] [ 223.558962][ T8731] dump_stack_lvl+0x189/0x250 [ 223.559007][ T8731] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 223.559033][ T8731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.559061][ T8731] ? __pfx__printk+0x10/0x10 [ 223.559081][ T8731] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 223.559102][ T8731] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 223.559132][ T8731] warn_alloc+0x214/0x310 [ 223.559153][ T8731] ? stack_depot_save_flags+0x40/0x900 [ 223.559182][ T8731] ? __pfx_warn_alloc+0x10/0x10 [ 223.559205][ T8731] ? kasan_save_track+0x4f/0x80 [ 223.559235][ T8731] ? xskq_create+0x56/0x170 [ 223.559255][ T8731] ? xsk_init_queue+0xb0/0x110 [ 223.559272][ T8731] ? xsk_setsockopt+0x43f/0x710 [ 223.559288][ T8731] ? do_sock_setsockopt+0x25a/0x3e0 [ 223.559315][ T8731] ? __x64_sys_setsockopt+0x18b/0x220 [ 223.559340][ T8731] ? do_syscall_64+0xfa/0x3b0 [ 223.559371][ T8731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.559417][ T8731] __vmalloc_node_range_noprof+0x125/0x12f0 [ 223.559476][ T8731] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 223.559508][ T8731] ? __kasan_kmalloc+0x93/0xb0 [ 223.559531][ T8731] vmalloc_user_noprof+0xad/0xf0 [ 223.559554][ T8731] ? xskq_create+0xbf/0x170 [ 223.559577][ T8731] xskq_create+0xbf/0x170 [ 223.559604][ T8731] xsk_init_queue+0xb0/0x110 [ 223.559629][ T8731] xsk_setsockopt+0x43f/0x710 [ 223.559653][ T8731] ? __pfx_xsk_setsockopt+0x10/0x10 [ 223.559672][ T8731] ? __lock_acquire+0xab9/0xd20 [ 223.559713][ T8731] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 223.559739][ T8731] ? __pfx_xsk_setsockopt+0x10/0x10 [ 223.559761][ T8731] do_sock_setsockopt+0x25a/0x3e0 [ 223.559796][ T8731] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 223.559830][ T8731] ? __fget_files+0x2a/0x420 [ 223.559862][ T8731] __x64_sys_setsockopt+0x18b/0x220 [ 223.559897][ T8731] do_syscall_64+0xfa/0x3b0 [ 223.559921][ T8731] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.559944][ T8731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.559963][ T8731] ? clear_bhb_loop+0x60/0xb0 [ 223.559988][ T8731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.560008][ T8731] RIP: 0033:0x7ffa51f8e929 [ 223.560033][ T8731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.560050][ T8731] RSP: 002b:00007ffa52e11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 223.560071][ T8731] RAX: ffffffffffffffda RBX: 00007ffa521b6080 RCX: 00007ffa51f8e929 [ 223.560085][ T8731] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 223.560097][ T8731] RBP: 00007ffa52010b39 R08: 0000000000000004 R09: 0000000000000000 [ 223.560109][ T8731] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.560122][ T8731] R13: 0000000000000000 R14: 00007ffa521b6080 R15: 00007fffcf769e08 [ 223.560155][ T8731] [ 223.862205][ T8731] Mem-Info: [ 223.865372][ T8731] active_anon:4990 inactive_anon:0 isolated_anon:0 [ 223.865372][ T8731] active_file:1302 inactive_file:39917 isolated_file:0 [ 223.865372][ T8731] unevictable:768 dirty:268 writeback:0 [ 223.865372][ T8731] slab_reclaimable:11302 slab_unreclaimable:129135 [ 223.865372][ T8731] mapped:32730 shmem:1651 pagetables:1039 [ 223.865372][ T8731] sec_pagetables:0 bounce:0 [ 223.865372][ T8731] kernel_misc_reclaimable:0 [ 223.865372][ T8731] free:1299938 free_pcp:13719 free_cma:0 [ 223.917881][ T8731] Node 0 active_anon:19960kB inactive_anon:0kB active_file:5208kB inactive_file:159468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130920kB dirty:1072kB writeback:0kB shmem:5068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12472kB pagetables:4008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 223.955152][ T8731] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 223.988380][ T8731] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 224.018560][ T8731] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 224.025126][ T8731] Node 0 DMA32 free:1281472kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21108kB inactive_anon:0kB active_file:5208kB inactive_file:157644kB unevictable:1536kB writepending:1068kB present:3129332kB managed:2560948kB mlocked:0kB bounce:0kB free_pcp:34348kB local_pcp:16332kB free_cma:0kB [ 224.060256][ T8731] lowmem_reserve[]: 0 0 1 1 1 [ 224.065025][ T8731] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 224.094463][ T8731] lowmem_reserve[]: 0 0 0 0 0 [ 224.099215][ T8731] Node 1 Normal free:3902204kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20548kB local_pcp:11364kB free_cma:0kB [ 224.130691][ T8731] lowmem_reserve[]: 0 0 0 0 0 [ 224.135432][ T8731] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 224.148245][ T8731] Node 0 DMA32: 6*4kB (ME) 124*8kB (ME) 250*16kB (UME) 407*32kB (UME) 165*64kB (UME) 66*128kB (UM) 55*256kB (UM) 55*512kB (UM) 31*1024kB (UME) 6*2048kB (UM) 282*4096kB (UM) = 1278392kB [ 224.167645][ T8731] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 224.180083][ T8731] Node 1 Normal: 181*4kB (UE) 45*8kB (UME) 32*16kB (UME) 84*32kB (UME) 19*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 950*4096kB (M) = 3902204kB [ 224.227121][ T8731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.274482][ T8731] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.354002][ T8731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.402571][ T8731] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.418013][ T8731] 45442 total pagecache pages [ 224.423190][ T8731] 0 pages in swap cache [ 224.439139][ T8731] Free swap = 124996kB [ 224.443641][ T8731] Total swap = 124996kB [ 224.454188][ T8731] 2097051 pages RAM [ 224.468763][ T8731] 0 pages HighMem/MovableOnly [ 224.475288][ T8731] 424708 pages reserved [ 224.484220][ T8731] 0 pages cma reserved [ 224.573108][ T13] team0 (unregistering): Port device team_slave_1 removed [ 224.632520][ T13] team0 (unregistering): Port device team_slave_0 removed [ 225.180035][ T8727] lo speed is unknown, defaulting to 1000 [ 225.195081][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'. [ 225.215839][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'. [ 225.502504][ T5840] Bluetooth: hci1: command tx timeout [ 225.736295][ T8695] chnl_net:caif_netlink_parms(): no params data found [ 226.041785][ T8695] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.049286][ T8695] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.061700][ T8695] bridge_slave_0: entered allmulticast mode [ 226.072816][ T8695] bridge_slave_0: entered promiscuous mode [ 226.084061][ T8695] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.126125][ T8695] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.139499][ T8695] bridge_slave_1: entered allmulticast mode [ 226.147798][ T8695] bridge_slave_1: entered promiscuous mode [ 226.223419][ T8695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.234616][ T8775] tipc: New replicast peer: 255.255.255.255 [ 226.244096][ T8775] tipc: Enabled bearer , priority 10 [ 226.253900][ T8695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.269045][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'. [ 226.278696][ T8775] tipc: Disabling bearer [ 226.380254][ T8695] team0: Port device team_slave_0 added [ 226.404023][ T8695] team0: Port device team_slave_1 added [ 226.510341][ T8695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.534601][ T8695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.669602][ T8695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.673212][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 226.732541][ T8695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.739516][ T8695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.803831][ T8695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.112060][ T8786] lo speed is unknown, defaulting to 1000 [ 227.145692][ T8796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.775'. [ 227.162182][ T8695] hsr_slave_0: entered promiscuous mode [ 227.164992][ T8796] openvswitch: netlink: Flow actions attr not present in new flow. [ 227.178637][ T8695] hsr_slave_1: entered promiscuous mode [ 227.188748][ T8695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.196390][ T8695] Cannot create hsr debugfs directory [ 227.207178][ T8793] lo speed is unknown, defaulting to 1000 [ 227.280583][ T8796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.775'. [ 227.580248][ T5840] Bluetooth: hci1: command tx timeout [ 228.408048][ T8817] tipc: Enabling of bearer rejected, already enabled [ 228.421582][ T8820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.781'. [ 228.431166][ T8820] tipc: Disabling bearer [ 228.636151][ T8824] tipc: New replicast peer: 255.255.255.255 [ 228.655708][ T8824] tipc: Enabled bearer , priority 10 [ 228.677034][ T8824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.793'. [ 228.688550][ T8824] tipc: Disabling bearer [ 228.874439][ T8695] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 228.885876][ T8695] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 228.904295][ T8695] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 228.930355][ T8695] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 229.038054][ T8838] netlink: 'syz.2.784': attribute type 64 has an invalid length. [ 229.073335][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 229.368755][ T8852] netlink: 248 bytes leftover after parsing attributes in process `syz.4.788'. [ 229.525335][ T8840] geneve3: entered promiscuous mode [ 229.549574][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 229.585089][ T139] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 229.632371][ T139] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 229.658947][ T139] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 229.669955][ T5840] Bluetooth: hci1: command tx timeout [ 229.705398][ T8695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.727396][ T8695] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.746023][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.753215][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.787599][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.794865][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.933441][ T8861] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 58588 - 0 [ 229.959748][ T8864] netlink: 248 bytes leftover after parsing attributes in process `syz.2.792'. [ 229.974147][ T8861] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 229.985176][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.233222][ T8861] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 58588 - 0 [ 230.254222][ T8861] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 230.317094][ T8861] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 58588 - 0 [ 230.373446][ T8861] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 230.512972][ T8861] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 58588 - 0 [ 230.540011][ T8861] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 230.600300][ T30] audit: type=1800 audit(1750880478.937:3): pid=8874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.794" name="cgroup.controllers" dev="tmpfs" ino=1004 res=0 errno=0 [ 230.695019][ T8878] lo speed is unknown, defaulting to 1000 [ 230.742473][ T8695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.840515][ T30] audit: type=1800 audit(1750880479.187:4): pid=8882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.797" name="memory.events" dev="tmpfs" ino=956 res=0 errno=0 [ 230.882794][ T139] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.907804][ T139] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 58588 - 0 [ 230.997724][ T139] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.021495][ T139] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 58588 - 0 [ 231.043501][ T139] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.059989][ T139] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 58588 - 0 [ 231.162923][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.179324][ T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 58588 - 0 [ 231.256760][ T8695] veth0_vlan: entered promiscuous mode [ 231.281645][ T8695] veth1_vlan: entered promiscuous mode [ 231.292233][ T8891] netlink: 'syz.2.799': attribute type 12 has an invalid length. [ 231.327940][ T8695] veth0_macvtap: entered promiscuous mode [ 231.346545][ T8695] veth1_macvtap: entered promiscuous mode [ 231.389115][ T8695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.405837][ T8695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.426854][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.436927][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.454046][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.470438][ T8893] netlink: 'syz.0.800': attribute type 4 has an invalid length. [ 231.493370][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.659171][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.678921][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.772894][ T4599] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.788433][ T4599] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.812993][ T8902] netlink: 'syz.0.803': attribute type 10 has an invalid length. [ 231.844340][ T8902] openvswitch: netlink: Flow key attr not present in new flow. [ 231.888326][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 231.898981][ T8902] sctp: [Deprecated]: syz.0.803 (pid 8902) Use of int in max_burst socket option deprecated. [ 231.898981][ T8902] Use struct sctp_assoc_value instead [ 232.065007][ T8907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.806'. [ 232.108537][ T8907] openvswitch: netlink: Flow actions attr not present in new flow. [ 232.203719][ T8910] netlink: 16 bytes leftover after parsing attributes in process `syz.0.806'. [ 233.019424][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.236865][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.364210][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.585124][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.702250][ T12] bridge_slave_1: left allmulticast mode [ 233.707949][ T12] bridge_slave_1: left promiscuous mode [ 233.714178][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.724662][ T12] bridge_slave_0: left allmulticast mode [ 233.730896][ T12] bridge_slave_0: left promiscuous mode [ 233.736681][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.007960][ T8920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'. [ 234.498012][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 234.511311][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 234.520886][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 234.530826][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 234.544985][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.607841][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.618905][ T30] audit: type=1800 audit(1750880482.957:5): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.808" name="memory.events" dev="tmpfs" ino=897 res=0 errno=0 [ 234.643914][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.654457][ T12] bond0 (unregistering): Released all slaves [ 234.706714][ T8925] bridge3: port 1(ip6gretap1) entered blocking state [ 234.731596][ T8925] bridge3: port 1(ip6gretap1) entered disabled state [ 234.791070][ T8925] ip6gretap1: entered allmulticast mode [ 234.823528][ T8925] ip6gretap1: entered promiscuous mode [ 234.913449][ T8933] veth3: entered promiscuous mode [ 234.931612][ T8933] bridge3: port 2(veth3) entered blocking state [ 234.938020][ T8933] bridge3: port 2(veth3) entered disabled state [ 234.954715][ T8933] veth3: entered allmulticast mode [ 235.115943][ T8939] tipc: New replicast peer: 255.255.255.255 [ 235.122763][ T8939] tipc: Enabled bearer , priority 10 [ 235.136104][ T8934] lo speed is unknown, defaulting to 1000 [ 235.149423][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.811'. [ 235.159177][ T8942] tipc: Disabling bearer [ 235.410077][ T8952] netlink: 452 bytes leftover after parsing attributes in process `syz.0.814'. [ 235.431060][ T8953] tipc: New replicast peer: 255.255.255.255 [ 235.506118][ T8953] tipc: Enabled bearer , priority 10 [ 235.644730][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'. [ 235.679959][ T8955] tipc: Disabling bearer [ 235.754058][ T12] hsr_slave_0: left promiscuous mode [ 235.803485][ T12] hsr_slave_1: left promiscuous mode [ 235.814523][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.852671][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.908544][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.939470][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.082608][ T12] veth1_macvtap: left promiscuous mode [ 236.133869][ T12] veth0_macvtap: left promiscuous mode [ 236.139567][ T12] veth1_vlan: left promiscuous mode [ 236.169295][ T12] veth0_vlan: left promiscuous mode [ 236.354805][ T8964] netlink: 248 bytes leftover after parsing attributes in process `syz.1.817'. [ 236.369755][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.818'. [ 236.424686][ T8963] openvswitch: netlink: Flow actions attr not present in new flow. [ 236.507805][ T8963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.818'. [ 236.594259][ T8970] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 236.622854][ T5845] Bluetooth: hci1: command tx timeout [ 236.996894][ T12] team0 (unregistering): Port device team_slave_1 removed [ 237.037055][ T12] team0 (unregistering): Port device team_slave_0 removed [ 237.715674][ T8985] pim6reg: entered allmulticast mode [ 237.884572][ T8992] tipc: New replicast peer: 255.255.255.255 [ 237.903169][ T8992] tipc: Enabled bearer , priority 10 [ 237.917192][ T8934] chnl_net:caif_netlink_parms(): no params data found [ 237.942477][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.826'. [ 237.951860][ T8992] tipc: Disabling bearer [ 237.960942][ T8994] netlink: 'syz.1.827': attribute type 12 has an invalid length. [ 238.027725][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'. [ 238.036687][ T8996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.828'. [ 238.222520][ T9004] tipc: New replicast peer: 255.255.255.255 [ 238.235163][ T9004] tipc: Enabled bearer , priority 10 [ 238.242159][ T8934] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.260800][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.267978][ T8934] bridge_slave_0: entered allmulticast mode [ 238.282110][ T8934] bridge_slave_0: entered promiscuous mode [ 238.298492][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.308002][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.319596][ T8934] bridge_slave_1: entered allmulticast mode [ 238.320296][ T9011] netlink: 248 bytes leftover after parsing attributes in process `syz.1.831'. [ 238.328366][ T8934] bridge_slave_1: entered promiscuous mode [ 238.415708][ T8934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.446961][ T8934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.566745][ T9017] netlink: 248 bytes leftover after parsing attributes in process `syz.0.834'. [ 238.595041][ T8934] team0: Port device team_slave_0 added [ 238.614225][ T8934] team0: Port device team_slave_1 added [ 238.696761][ T8934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.705574][ T8934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.709980][ T5845] Bluetooth: hci1: command tx timeout [ 238.743318][ T8934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.786278][ T8934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.802926][ T8934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.830489][ T8934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.993781][ T9026] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.837'. [ 239.045814][ T8934] hsr_slave_0: entered promiscuous mode [ 239.072330][ T8934] hsr_slave_1: entered promiscuous mode [ 239.089111][ T8934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.112825][ T8934] Cannot create hsr debugfs directory [ 239.356554][ T6944] tipc: Node number set to 2886997007 [ 239.420550][ T9036] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 239.589348][ T9042] netlink: 248 bytes leftover after parsing attributes in process `syz.4.840'. [ 239.814934][ T9048] lo speed is unknown, defaulting to 1000 [ 239.854392][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.842'. [ 240.055858][ T8934] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 240.076134][ T8934] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 240.098038][ T9054] tipc: New replicast peer: 255.255.255.255 [ 240.106059][ T9054] tipc: Enabled bearer , priority 10 [ 240.197726][ T8934] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 240.213524][ T8934] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 240.214959][ T9056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.844'. [ 240.397900][ T6966] IPVS: starting estimator thread 0... [ 240.531579][ T9071] IPVS: using max 29 ests per chain, 69600 per kthread [ 240.585855][ T8934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.596955][ T9080] netlink: 248 bytes leftover after parsing attributes in process `syz.4.846'. [ 240.634303][ T8934] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.673099][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.680316][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.758062][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.765295][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.782283][ T5845] Bluetooth: hci1: command tx timeout [ 240.791033][ T9081] lo speed is unknown, defaulting to 1000 [ 240.890210][ T9087] nbd2: detected capacity change from 0 to 63 [ 240.907830][ T9088] block nbd2: NBD_DISCONNECT [ 240.926816][ T9088] block nbd2: Disconnected due to user request. [ 240.973750][ T9088] block nbd2: shutting down sockets [ 241.057849][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.067215][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 241.076885][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.086001][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 241.093925][ C1] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.103044][ C1] Buffer I/O error on dev nbd2, logical block 2, async page read [ 241.111021][ C1] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.120157][ C1] Buffer I/O error on dev nbd2, logical block 3, async page read [ 241.128261][ T5901] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.139493][ T5901] Buffer I/O error on dev nbd2, logical block 0, async page read [ 241.150514][ T5901] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.159583][ T5901] Buffer I/O error on dev nbd2, logical block 1, async page read [ 241.173347][ T5901] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.184918][ T5901] Buffer I/O error on dev nbd2, logical block 2, async page read [ 241.210227][ T5901] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.237063][ T5901] Buffer I/O error on dev nbd2, logical block 3, async page read [ 241.248749][ T5901] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.285448][ T5901] Buffer I/O error on dev nbd2, logical block 0, async page read [ 241.295561][ T5901] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 241.313127][ T5901] Buffer I/O error on dev nbd2, logical block 1, async page read [ 241.327396][ T5901] ldm_validate_partition_table(): Disk read failed. [ 241.337865][ T5901] Dev nbd2: unable to read RDB block 0 [ 241.387803][ T5901] nbd2: unable to read partition table [ 241.437457][ T5901] ldm_validate_partition_table(): Disk read failed. [ 241.463677][ T5901] Dev nbd2: unable to read RDB block 0 [ 241.485433][ T9096] bridge5: entered allmulticast mode [ 241.492525][ T5901] nbd2: unable to read partition table [ 241.569543][ T9099] lo speed is unknown, defaulting to 1000 [ 241.663550][ T8934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.760780][ T9108] openvswitch: netlink: Missing key (keys=40, expected=80) [ 241.935871][ T8934] veth0_vlan: entered promiscuous mode [ 241.982773][ T8934] veth1_vlan: entered promiscuous mode [ 242.095247][ T9117] bridge0: port 3(syz_tun) entered blocking state [ 242.104360][ T9117] bridge0: port 3(syz_tun) entered disabled state [ 242.115146][ T9117] syz_tun: entered allmulticast mode [ 242.123609][ T9117] syz_tun: entered promiscuous mode [ 242.137784][ T8934] veth0_macvtap: entered promiscuous mode [ 242.157726][ T8934] veth1_macvtap: entered promiscuous mode [ 242.206309][ T8934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.298316][ T8934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.358843][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.377033][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.454338][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.468006][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.655490][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.673946][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.730642][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.747340][ T9133] batman_adv: batadv0: Local translation table size (116) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 242.759080][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.777182][ T9133] batman_adv: batadv0: Interface deactivated: dummy0 [ 242.791706][ T9133] batman_adv: batadv0: Removing interface: dummy0 [ 242.860327][ T5845] Bluetooth: hci1: command tx timeout [ 243.253019][ T9141] netlink: 'syz.2.863': attribute type 11 has an invalid length. [ 243.757579][ T9147] tipc: Enabling of bearer rejected, already enabled [ 244.347567][ T3474] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.445680][ T3474] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.574726][ T3474] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.623924][ T3474] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.727903][ T3474] bridge_slave_1: left allmulticast mode [ 244.734566][ T3474] bridge_slave_1: left promiscuous mode [ 244.740795][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.751225][ T3474] bridge_slave_0: left allmulticast mode [ 244.756898][ T3474] bridge_slave_0: left promiscuous mode [ 244.763848][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.027616][ T3474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.038615][ T3474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.051633][ T3474] bond0 (unregistering): Released all slaves [ 245.263560][ T9159] netlink: 'syz.0.869': attribute type 12 has an invalid length. [ 245.490634][ T9165] __nla_validate_parse: 4 callbacks suppressed [ 245.490652][ T9165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.872'. [ 245.544987][ T3474] hsr_slave_0: left promiscuous mode [ 245.560132][ T3474] hsr_slave_1: left promiscuous mode [ 245.578316][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.598660][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.635053][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.668064][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 245.683342][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 245.692044][ T3474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.702575][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 245.714297][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 245.723433][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 245.860768][ T3474] veth1_macvtap: left promiscuous mode [ 245.866385][ T3474] veth0_macvtap: left promiscuous mode [ 245.872932][ T3474] veth1_vlan: left promiscuous mode [ 245.878310][ T3474] veth0_vlan: left promiscuous mode [ 247.532669][ T3474] team0 (unregistering): Port device team_slave_1 removed [ 247.584000][ T3474] team0 (unregistering): Port device team_slave_0 removed [ 247.820591][ T5840] Bluetooth: hci1: command tx timeout [ 248.085209][ T9176] lo speed is unknown, defaulting to 1000 [ 248.158128][ T9185] lo speed is unknown, defaulting to 1000 [ 248.208504][ T9206] netlink: 'syz.2.884': attribute type 21 has an invalid length. [ 248.247443][ T9208] netlink: 'syz.4.885': attribute type 11 has an invalid length. [ 248.257858][ T9206] netlink: 'syz.2.884': attribute type 6 has an invalid length. [ 248.266729][ T9206] netlink: 64 bytes leftover after parsing attributes in process `syz.2.884'. [ 248.335721][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 248.367725][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 248.409236][ T9210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.884'. [ 248.713604][ T9176] chnl_net:caif_netlink_parms(): no params data found [ 248.874940][ T9176] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.885613][ T9176] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.895669][ T9176] bridge_slave_0: entered allmulticast mode [ 248.908918][ T9176] bridge_slave_0: entered promiscuous mode [ 248.919031][ T9176] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.930397][ T9176] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.937916][ T9176] bridge_slave_1: entered allmulticast mode [ 248.949499][ T9176] bridge_slave_1: entered promiscuous mode [ 249.025134][ T9176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.043805][ T9176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.160926][ T9176] team0: Port device team_slave_0 added [ 249.176653][ T9176] team0: Port device team_slave_1 added [ 249.237515][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.249099][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.277564][ T9176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.291653][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.319547][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.360864][ T9176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.427734][ T9244] geneve2: entered promiscuous mode [ 249.438836][ T3474] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.488381][ T3474] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.497217][ T3474] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.516359][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 249.535896][ T3474] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.562646][ T9176] hsr_slave_0: entered promiscuous mode [ 249.569284][ T9176] hsr_slave_1: entered promiscuous mode [ 249.594260][ T9176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.619965][ T9176] Cannot create hsr debugfs directory [ 249.900562][ T5840] Bluetooth: hci1: command tx timeout [ 250.006284][ T9255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.896'. [ 250.033439][ T9254] lo speed is unknown, defaulting to 1000 [ 250.287747][ T9262] lo speed is unknown, defaulting to 1000 [ 250.770845][ T9176] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 250.812195][ T9176] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 250.848113][ T9176] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 250.873882][ T9176] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 251.001094][ T9275] netlink: 'syz.2.898': attribute type 16 has an invalid length. [ 251.029859][ T9275] netlink: 'syz.2.898': attribute type 17 has an invalid length. [ 251.066233][ T9275] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 251.111176][ T55] block nbd1: Possible stuck request ffff888025215080: control (read@0,1024B). Runtime 90 seconds [ 251.122007][ T55] block nbd1: Possible stuck request ffff888025215240: control (read@1024,1024B). Runtime 90 seconds [ 251.134290][ T55] block nbd1: Possible stuck request ffff888025215400: control (read@2048,1024B). Runtime 90 seconds [ 251.145357][ T55] block nbd1: Possible stuck request ffff8880252155c0: control (read@3072,1024B). Runtime 90 seconds [ 251.202919][ T9286] x_tables: duplicate underflow at hook 1 [ 251.237367][ T9176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.380854][ T9176] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.419009][ T4599] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.426196][ T4599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.522309][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.529478][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.566803][ T9287] lo speed is unknown, defaulting to 1000 [ 251.568987][ T9292] netlink: 24 bytes leftover after parsing attributes in process `syz.4.904'. [ 251.980138][ T5840] Bluetooth: hci1: command tx timeout [ 252.808502][ T9327] tipc: Enabling of bearer rejected, already enabled [ 252.861156][ T9328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.912'. [ 252.899133][ T9328] tipc: Disabling bearer [ 252.934581][ T9176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.215705][ T9176] veth0_vlan: entered promiscuous mode [ 253.292952][ T9176] veth1_vlan: entered promiscuous mode [ 253.423753][ T9176] veth0_macvtap: entered promiscuous mode [ 253.473123][ T9176] veth1_macvtap: entered promiscuous mode [ 253.575983][ T9176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.623951][ T9176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.656016][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.710439][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.727650][ T9332] tipc: Enabling of bearer rejected, already enabled [ 253.737148][ T9336] bridge0: port 1(veth0_to_bridge) entered blocking state [ 253.769207][ T9336] bridge0: port 1(veth0_to_bridge) entered disabled state [ 253.797806][ T9336] veth0_to_bridge: entered allmulticast mode [ 253.810705][ T9336] veth0_to_bridge: entered promiscuous mode [ 253.817738][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.837709][ T9338] netlink: 12 bytes leftover after parsing attributes in process `syz.4.913'. [ 253.860170][ T9338] tipc: Disabling bearer [ 253.880213][ T9336] netlink: 'syz.1.915': attribute type 10 has an invalid length. [ 253.917752][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.060155][ T5840] Bluetooth: hci1: command tx timeout [ 254.085972][ T9340] lo speed is unknown, defaulting to 1000 [ 254.153151][ T9346] lo speed is unknown, defaulting to 1000 [ 254.155238][ T9341] lo speed is unknown, defaulting to 1000 [ 254.254209][ T9346] lo speed is unknown, defaulting to 1000 [ 254.297511][ T9346] lo speed is unknown, defaulting to 1000 [ 254.328368][ T803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.328485][ T9351] netlink: 'syz.1.919': attribute type 2 has an invalid length. [ 254.362601][ T803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.660644][ T9346] infiniband syz0: set down [ 254.665334][ T9346] infiniband syz0: added lo [ 254.751787][ T6959] lo speed is unknown, defaulting to 1000 [ 254.798986][ T9346] RDS/IB: syz0: added [ 254.810682][ T9344] netlink: 76 bytes leftover after parsing attributes in process `syz.2.916'. [ 254.816339][ T9346] smc: adding ib device syz0 with port count 1 [ 254.862622][ T9346] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 254.877368][ T9363] netlink: 'syz.0.921': attribute type 12 has an invalid length. [ 254.922037][ T3474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.924678][ T6950] lo speed is unknown, defaulting to 1000 [ 254.945122][ T3474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.987335][ T9346] lo speed is unknown, defaulting to 1000 [ 255.479296][ T9346] lo speed is unknown, defaulting to 1000 [ 255.568690][ T9375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 255.901448][ T9346] lo speed is unknown, defaulting to 1000 [ 256.088441][ T9346] lo speed is unknown, defaulting to 1000 [ 256.255209][ T9346] lo speed is unknown, defaulting to 1000 [ 256.416037][ T9346] lo speed is unknown, defaulting to 1000 [ 256.577402][ T9346] lo speed is unknown, defaulting to 1000 [ 256.742554][ T9346] lo speed is unknown, defaulting to 1000 [ 256.811565][ T9379] netlink: 'syz.1.924': attribute type 7 has an invalid length. [ 257.248972][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 257.257657][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 257.266490][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.274947][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.284867][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.329163][ T9346] lo speed is unknown, defaulting to 1000 [ 257.389037][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'. [ 257.399703][ T9393] openvswitch: netlink: Flow actions attr not present in new flow. [ 257.543282][ T9395] netlink: 452 bytes leftover after parsing attributes in process `syz.1.929'. [ 257.612368][ T9388] lo speed is unknown, defaulting to 1000 [ 257.660310][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 257.698261][ T9369] lo speed is unknown, defaulting to 1000 [ 257.765999][ T9400] netlink: 248 bytes leftover after parsing attributes in process `syz.2.931'. [ 258.135550][ T9405] sock: sock_set_timeout: `syz.2.932' (pid 9405) tries to set negative timeout [ 258.155170][ T9405] netlink: 40 bytes leftover after parsing attributes in process `syz.2.932'. [ 258.394944][ T4599] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.509542][ T4599] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.641453][ T4599] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.879250][ T4599] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.081169][ T9420] bond1: left promiscuous mode [ 259.087210][ T9420] @: left promiscuous mode [ 259.098373][ T9420] @: left allmulticast mode [ 259.119260][ T9420] hsr_slave_1: left allmulticast mode [ 259.140818][ T9420] bridge3: left promiscuous mode [ 259.285029][ T9388] chnl_net:caif_netlink_parms(): no params data found [ 259.341552][ T5840] Bluetooth: hci1: command tx timeout [ 259.374869][ T9426] netlink: 248 bytes leftover after parsing attributes in process `syz.2.938'. [ 259.480089][ T4599] bridge_slave_1: left allmulticast mode [ 259.503029][ T4599] bridge_slave_1: left promiscuous mode [ 259.524044][ T9431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.940'. [ 259.528796][ T4599] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.534304][ T9431] openvswitch: netlink: Flow actions attr not present in new flow. [ 259.564754][ T4599] bridge_slave_0: left allmulticast mode [ 259.573743][ T4599] bridge_slave_0: left promiscuous mode [ 259.579521][ T4599] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.788327][ T9433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.941'. [ 259.798080][ T9433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.941'. [ 260.012694][ T4599] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.023821][ T4599] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.034211][ T4599] bond0 (unregistering): Released all slaves [ 260.105432][ T9428] netlink: 248 bytes leftover after parsing attributes in process `syz.0.939'. [ 260.343021][ T9388] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.351639][ T9388] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.358978][ T9388] bridge_slave_0: entered allmulticast mode [ 260.368397][ T9448] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 260.383881][ T9388] bridge_slave_0: entered promiscuous mode [ 260.424750][ T9449] netlink: 248 bytes leftover after parsing attributes in process `syz.1.943'. [ 260.536526][ T9388] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.559408][ T9388] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.577958][ T9388] bridge_slave_1: entered allmulticast mode [ 260.601484][ T9456] openvswitch: netlink: Flow actions attr not present in new flow. [ 260.652175][ T9388] bridge_slave_1: entered promiscuous mode [ 260.839469][ T9388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.917542][ T9388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.077868][ T9471] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 261.421133][ T5845] Bluetooth: hci1: command tx timeout [ 261.441090][ T9388] team0: Port device team_slave_0 added [ 261.454776][ T9471] wg1: entered promiscuous mode [ 261.460080][ T9471] wg1: entered allmulticast mode [ 261.489500][ T9388] team0: Port device team_slave_1 added [ 261.737453][ T9486] Set syz1 is full, maxelem 0 reached [ 261.747307][ T9388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.762737][ T9388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.789052][ T9388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.831125][ T4599] hsr_slave_0: left promiscuous mode [ 261.859553][ T4599] hsr_slave_1: left promiscuous mode [ 261.883766][ T4599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.939253][ T4599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.954381][ T4599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.966829][ T4599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.036337][ T4599] veth1_macvtap: left promiscuous mode [ 262.044933][ T4599] veth0_macvtap: left promiscuous mode [ 262.051229][ T4599] veth1_vlan: left promiscuous mode [ 262.056732][ T4599] veth0_vlan: left promiscuous mode [ 262.425852][ T9504] netlink: 'syz.1.959': attribute type 1 has an invalid length. [ 262.523941][ T9506] __nla_validate_parse: 5 callbacks suppressed [ 262.523960][ T9506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.960'. [ 262.589160][ T4599] team0 (unregistering): Port device team_slave_1 removed [ 262.632727][ T4599] team0 (unregistering): Port device team_slave_0 removed [ 262.777711][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.960'. [ 262.786704][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.960'. [ 263.039529][ T9388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.063250][ T9388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.102932][ T9388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.124694][ T9501] lo: entered allmulticast mode [ 263.130119][ T9502] pim6reg: left allmulticast mode [ 263.135406][ T9502] lo: left allmulticast mode [ 263.204986][ T9508] netlink: 64 bytes leftover after parsing attributes in process `syz.1.960'. [ 263.276101][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.962'. [ 263.387660][ T9388] hsr_slave_0: entered promiscuous mode [ 263.410459][ T9388] hsr_slave_1: entered promiscuous mode [ 263.423828][ T9388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.450423][ T9388] Cannot create hsr debugfs directory [ 263.500399][ T5845] Bluetooth: hci1: command 0x040f tx timeout [ 263.666749][ T9530] netlink: 'syz.1.967': attribute type 12 has an invalid length. [ 263.953176][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.971'. [ 263.963894][ T9538] openvswitch: netlink: Flow actions attr not present in new flow. [ 263.987376][ T9538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.971'. [ 264.156064][ T9540] lo speed is unknown, defaulting to 1000 [ 264.197501][ T9540] lo speed is unknown, defaulting to 1000 [ 264.344484][ T9547] tipc: New replicast peer: 255.255.255.255 [ 264.358119][ T9549] netlink: 32 bytes leftover after parsing attributes in process `syz.1.973'. [ 264.380452][ T9547] tipc: Enabled bearer , priority 10 [ 264.388123][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.972'. [ 264.423956][ T9553] netlink: 72 bytes leftover after parsing attributes in process `syz.1.973'. [ 264.434113][ T9552] tipc: Disabling bearer [ 264.591673][ T9549] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.602427][ T9388] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 264.623171][ T9388] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 264.648605][ T9388] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 264.661946][ T9388] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 264.888288][ T9388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.998194][ T9388] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.067011][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.074255][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.131561][ T4599] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.138741][ T4599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.582815][ T5840] Bluetooth: hci1: command 0x040f tx timeout [ 265.651616][ T9587] netlink: 'syz.1.980': attribute type 10 has an invalid length. [ 265.665944][ T9587] bridge0: port 2(dummy0) entered blocking state [ 265.673654][ T9587] bridge0: port 2(dummy0) entered disabled state [ 265.680572][ T9587] dummy0: entered allmulticast mode [ 265.687450][ T9587] dummy0: entered promiscuous mode [ 265.736837][ T9388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.873291][ T9388] veth0_vlan: entered promiscuous mode [ 265.886054][ T9592] lo speed is unknown, defaulting to 1000 [ 265.906909][ T9388] veth1_vlan: entered promiscuous mode [ 265.914683][ T9594] netlink: 'syz.4.981': attribute type 1 has an invalid length. [ 265.981499][ T9601] openvswitch: netlink: Flow actions attr not present in new flow. [ 265.996717][ T9594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 266.004315][ T9592] lo speed is unknown, defaulting to 1000 [ 266.048124][ T9600] bond2: (slave gretap1): making interface the new active one [ 266.102304][ T9600] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 266.218093][ T9388] veth0_macvtap: entered promiscuous mode [ 266.261061][ T9388] veth1_macvtap: entered promiscuous mode [ 266.338283][ T9388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.387760][ T9388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.492621][ T4599] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.519879][ T4599] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.607124][ T4599] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.702000][ T4599] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.953292][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.974521][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.060002][ T803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.067871][ T803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.911898][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.965788][ T9639] __nla_validate_parse: 10 callbacks suppressed [ 267.965803][ T9639] netlink: 248 bytes leftover after parsing attributes in process `syz.2.992'. [ 268.675560][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.784243][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.844789][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.948581][ T12] bridge_slave_1: left allmulticast mode [ 268.954881][ T12] bridge_slave_1: left promiscuous mode [ 268.963732][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.974143][ T12] bridge_slave_0: left allmulticast mode [ 268.982626][ T12] bridge_slave_0: left promiscuous mode [ 268.988369][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.926104][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.956858][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.958747][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.975604][ T12] bond0 (unregistering): Released all slaves [ 269.978077][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.993861][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.002242][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.010693][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 270.021760][ T9647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.994'. [ 270.159660][ T9662] lo speed is unknown, defaulting to 1000 [ 270.201229][ T9662] lo speed is unknown, defaulting to 1000 [ 270.243793][ T9666] tipc: New replicast peer: 255.255.255.255 [ 270.281585][ T9666] tipc: Enabled bearer , priority 10 [ 270.311629][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.998'. [ 270.371545][ T9670] tipc: Disabling bearer [ 270.564294][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1002'. [ 270.642110][ T9675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1003'. [ 270.784403][ T9680] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1001'. [ 270.796792][ T9677] lo speed is unknown, defaulting to 1000 [ 270.815170][ T9680] netlink: 'syz.2.1001': attribute type 7 has an invalid length. [ 270.858785][ T9677] lo speed is unknown, defaulting to 1000 [ 270.882538][ T9680] : entered promiscuous mode [ 271.175015][ T9685] tipc: New replicast peer: 255.255.255.255 [ 271.184549][ T9685] tipc: Enabled bearer , priority 10 [ 271.452035][ T9694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.540760][ T9694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1007'. [ 271.582325][ T9662] chnl_net:caif_netlink_parms(): no params data found [ 271.638264][ T9692] lo speed is unknown, defaulting to 1000 [ 271.884155][ T9692] lo speed is unknown, defaulting to 1000 [ 272.060228][ T5840] Bluetooth: hci1: command tx timeout [ 272.196860][ T12] hsr_slave_0: left promiscuous mode [ 272.210772][ T12] hsr_slave_1: left promiscuous mode [ 272.230671][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.253481][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.272111][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.284473][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.337892][ T12] veth1_macvtap: left promiscuous mode [ 272.354234][ T12] veth0_macvtap: left promiscuous mode [ 272.360934][ T12] veth1_vlan: left promiscuous mode [ 272.366379][ T12] veth0_vlan: left promiscuous mode [ 272.786431][ T12] team0 (unregistering): Port device team_slave_1 removed [ 272.828114][ T12] team0 (unregistering): Port device team_slave_0 removed [ 273.205975][ T9703] syz_tun: left allmulticast mode [ 273.230510][ T9703] syz_tun: left promiscuous mode [ 273.235739][ T9703] bridge0: port 3(syz_tun) entered disabled state [ 273.266471][ T9703] bond0: (slave bridge0): Releasing backup interface [ 273.284896][ T9703] bridge_slave_0: left allmulticast mode [ 273.295394][ T9703] bridge_slave_0: left promiscuous mode [ 273.302245][ T9703] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.315598][ T9703] bridge_slave_1: left allmulticast mode [ 273.322435][ T9703] bridge_slave_1: left promiscuous mode [ 273.328227][ T9703] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.344243][ T9703] bond1: (slave veth0_to_bond): Releasing active interface [ 273.355216][ T9703] veth0_to_bond: left promiscuous mode [ 273.363719][ T9703] bond1: (slave vlan2): making interface the new active one [ 273.375531][ T9703] bond0: (slave bond_slave_0): Releasing backup interface [ 273.384609][ T9703] bond0: (slave bond_slave_1): Releasing backup interface [ 273.396702][ T9703] team0: Port device team_slave_0 removed [ 273.406053][ T9703] team0: Port device team_slave_1 removed [ 273.415533][ T9703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.424913][ T9703] bond1: (slave veth5): Releasing active interface [ 273.431609][ T9703] bond1: (slave veth5): the permanent HWaddr of slave - 82:cd:2c:69:3f:1f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 273.448739][ T9703] vlan2: entered promiscuous mode [ 273.453857][ T9703] veth1: entered promiscuous mode [ 273.463142][ T9703] bond1: (slave vlan2): Releasing active interface [ 273.469658][ T9703] vlan2: left promiscuous mode [ 273.474530][ T9703] veth1: left promiscuous mode [ 273.481302][ T9703] batman_adv: batadv0: Removing interface: vxlan0 [ 273.488413][ T9703] ip6gretap1: left allmulticast mode [ 273.493798][ T9703] ip6gretap1: left promiscuous mode [ 273.499156][ T9703] bridge1: port 1(ip6gretap1) entered disabled state [ 273.509292][ T9703] veth7: left allmulticast mode [ 273.514551][ T9703] veth7: left promiscuous mode [ 273.519543][ T9703] bridge1: port 2(veth7) entered disabled state [ 273.530860][ T9703] bond2: (slave gretap1): Releasing active interface [ 273.661507][ T9715] !: renamed from dummy0 [ 273.824720][ T9662] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.845564][ T9662] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.871914][ T9662] bridge_slave_0: entered allmulticast mode [ 273.915281][ T9662] bridge_slave_0: entered promiscuous mode [ 273.937889][ T9662] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.946540][ T9662] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.957216][ T9662] bridge_slave_1: entered allmulticast mode [ 273.993975][ T9662] bridge_slave_1: entered promiscuous mode [ 274.039229][ T9710] lo speed is unknown, defaulting to 1000 [ 274.140106][ T5840] Bluetooth: hci1: command tx timeout [ 274.266161][ T9710] lo speed is unknown, defaulting to 1000 [ 274.269138][ T9662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.554294][ T9662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.922594][ T9662] team0: Port device team_slave_0 added [ 274.932371][ T9662] team0: Port device team_slave_1 added [ 275.007993][ T9662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.066349][ T9662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.134867][ T9662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.179401][ T9662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.189441][ T9662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.224099][ T9662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.381988][ T9662] hsr_slave_0: entered promiscuous mode [ 275.388376][ T9662] hsr_slave_1: entered promiscuous mode [ 275.401857][ T9662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.412114][ T9662] Cannot create hsr debugfs directory [ 275.543985][ T9759] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1015'. [ 275.681017][ T9762] netlink: 'syz.2.1016': attribute type 10 has an invalid length. [ 275.906945][ T9765] tipc: New replicast peer: 255.255.255.255 [ 275.919090][ T9765] tipc: Enabled bearer , priority 10 [ 276.222671][ T5840] Bluetooth: hci1: command tx timeout [ 276.266647][ T9774] vxcan2: entered promiscuous mode [ 276.312965][ T9782] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1022'. [ 276.518951][ T9662] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 276.548894][ T9662] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 276.576048][ T9662] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 276.606724][ T9662] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 276.670050][ T9786] xt_TPROXY: Can be used only with -p tcp or -p udp [ 276.854848][ T9795] netlink: 'syz.0.1024': attribute type 1 has an invalid length. [ 276.892374][ T9662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.955265][ T9795] bond3: entered promiscuous mode [ 276.962153][ T9795] 8021q: adding VLAN 0 to HW filter on device bond3 [ 276.974052][ T9800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1025'. [ 277.163880][ T9799] bond3: (slave bridge6): making interface the new active one [ 277.185823][ T9799] bridge6: entered promiscuous mode [ 277.196958][ T9799] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 277.269574][ T9800] lo speed is unknown, defaulting to 1000 [ 277.284913][ T9662] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.299537][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.306727][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.338662][ T9800] lo speed is unknown, defaulting to 1000 [ 277.353474][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.360691][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.470359][ T9808] tipc: New replicast peer: 255.255.255.255 [ 277.476900][ T9808] tipc: Enabled bearer , priority 10 [ 277.545752][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1027'. [ 277.600677][ T9809] tipc: Disabling bearer [ 277.884638][ T9813] netlink: 'syz.4.1028': attribute type 10 has an invalid length. [ 277.964611][ T9813] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 278.307519][ T5840] Bluetooth: hci1: command tx timeout [ 278.381564][ T9662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.398000][ T9818] tipc: Enabling of bearer rejected, already enabled [ 278.418338][ T9820] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 278.455962][ T9823] netlink: 'syz.1.1032': attribute type 1 has an invalid length. [ 278.485826][ T9823] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 278.514077][ T9823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.532161][ T9662] veth0_vlan: entered promiscuous mode [ 278.575459][ T9662] veth1_vlan: entered promiscuous mode [ 278.608261][ T9823] dummy0: left allmulticast mode [ 278.623192][ T9823] dummy0: left promiscuous mode [ 278.628913][ T9823] bridge0: port 2(dummy0) entered disabled state [ 278.654655][ T9823] veth0_to_bridge: left allmulticast mode [ 278.661960][ T9823] veth0_to_bridge: left promiscuous mode [ 278.671590][ T9823] bridge0: port 1(veth0_to_bridge) entered disabled state [ 278.715520][ T9823] bond0: (slave ip6gretap1): Releasing backup interface [ 278.762279][ T9831] SET target dimension over the limit! [ 278.792329][ T9831] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1033'. [ 278.953361][ T9662] veth0_macvtap: entered promiscuous mode [ 278.984017][ T9662] veth1_macvtap: entered promiscuous mode [ 279.057993][ T9662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.072039][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1036'. [ 279.097311][ T9662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.171448][ T74] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.192721][ T74] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.283215][ T74] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.300605][ T74] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.321766][ T9745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.329603][ T9745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.478799][ T9852] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 279.545013][ T9853] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1039'. [ 279.571040][ T9745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.573081][ T9856] netlink: 'syz.0.1042': attribute type 10 has an invalid length. [ 279.578889][ T9745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.725927][ T9852] lo speed is unknown, defaulting to 1000 [ 279.734898][ T9852] lo speed is unknown, defaulting to 1000 [ 279.824694][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.852748][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.324756][ T9869] netlink: 'syz.0.1044': attribute type 1 has an invalid length. [ 280.333078][ T9869] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1044'. [ 280.576439][ T803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.852641][ T803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.987430][ T803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.186108][ T55] block nbd1: Possible stuck request ffff888025215080: control (read@0,1024B). Runtime 120 seconds [ 281.197151][ T55] block nbd1: Possible stuck request ffff888025215240: control (read@1024,1024B). Runtime 120 seconds [ 281.209687][ T55] block nbd1: Possible stuck request ffff888025215400: control (read@2048,1024B). Runtime 120 seconds [ 281.229624][ T55] block nbd1: Possible stuck request ffff8880252155c0: control (read@3072,1024B). Runtime 120 seconds [ 281.289432][ T803] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.434582][ T803] bridge_slave_1: left allmulticast mode [ 281.441429][ T803] bridge_slave_1: left promiscuous mode [ 281.447131][ T803] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.457070][ T803] bridge_slave_0: left allmulticast mode [ 281.462939][ T803] bridge_slave_0: left promiscuous mode [ 281.468687][ T803] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.752378][ T803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.763922][ T803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.774327][ T803] bond0 (unregistering): Released all slaves [ 282.084500][ T803] hsr_slave_0: left promiscuous mode [ 282.094041][ T803] hsr_slave_1: left promiscuous mode [ 282.100275][ T803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.107693][ T803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.115663][ T803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.123241][ T803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.144630][ T803] veth1_macvtap: left promiscuous mode [ 282.150328][ T803] veth0_macvtap: left promiscuous mode [ 282.155897][ T803] veth1_vlan: left promiscuous mode [ 282.162038][ T803] veth0_vlan: left promiscuous mode [ 282.541636][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'. [ 282.885415][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.899610][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.907499][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.908255][ T803] team0 (unregistering): Port device team_slave_1 removed [ 282.916825][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.930042][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.006559][ T803] team0 (unregistering): Port device team_slave_0 removed [ 283.944605][ T9886] lo speed is unknown, defaulting to 1000 [ 283.980063][ T9902] netlink: 'syz.2.1053': attribute type 10 has an invalid length. [ 283.992855][ T9886] lo speed is unknown, defaulting to 1000 [ 284.065703][ T9904] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1054'. [ 284.438476][ T9912] Bluetooth: MGMT ver 1.23 [ 284.738172][ T9914] lo speed is unknown, defaulting to 1000 [ 284.791348][ T9914] lo speed is unknown, defaulting to 1000 [ 285.020520][ T5845] Bluetooth: hci1: command tx timeout [ 285.174184][ T9920] lo speed is unknown, defaulting to 1000 [ 285.374032][ T9886] chnl_net:caif_netlink_parms(): no params data found [ 285.601813][ T9922] netlink: 'syz.4.1059': attribute type 4 has an invalid length. [ 285.666533][ T6965] lo speed is unknown, defaulting to 1000 [ 285.695450][ T6965] syz0: Port: 1 Link ACTIVE [ 285.733887][ T9920] lo speed is unknown, defaulting to 1000 [ 285.793338][ T6965] lo speed is unknown, defaulting to 1000 [ 285.794344][ T9886] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.827458][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.837077][ T9886] bridge_slave_0: entered allmulticast mode [ 285.858087][ T9935] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1062'. [ 285.866694][ T9886] bridge_slave_0: entered promiscuous mode [ 285.966584][ T9886] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.982749][ T9935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1062'. [ 285.990149][ T9886] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.010734][ T9886] bridge_slave_1: entered allmulticast mode [ 286.018892][ T9886] bridge_slave_1: entered promiscuous mode [ 286.109881][ T9944] netlink: 'syz.2.1065': attribute type 10 has an invalid length. [ 286.220749][ T9886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.275380][ T9886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.565315][ T9886] team0: Port device team_slave_0 added [ 286.598700][ T9886] team0: Port device team_slave_1 added [ 286.657088][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.677285][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.715607][ T9886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.737414][ T9886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.748339][ T9886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.781594][ T9886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.887909][ T9955] netlink: 'syz.2.1068': attribute type 16 has an invalid length. [ 286.900697][ T9955] netlink: 'syz.2.1068': attribute type 17 has an invalid length. [ 286.981447][ T9955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.023258][ T9886] hsr_slave_0: entered promiscuous mode [ 287.030643][ T9886] hsr_slave_1: entered promiscuous mode [ 287.037164][ T9886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.045107][ T9886] Cannot create hsr debugfs directory [ 287.102212][ T5845] Bluetooth: hci1: command tx timeout [ 287.308712][ T9959] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1070'. [ 287.335582][ T9959] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1070'. [ 287.363035][ T9965] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 287.732643][ T9965] lo speed is unknown, defaulting to 1000 [ 287.892212][ T9965] lo speed is unknown, defaulting to 1000 [ 288.350389][ T9886] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 288.395270][ T9886] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 288.441020][ T9886] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 288.474110][ T9886] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 288.855467][ T9886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.954573][ T9886] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.023066][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.030332][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.099570][ T9741] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.106796][ T9741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.181799][ T5845] Bluetooth: hci1: command tx timeout [ 289.301941][T10007] netlink: 'syz.1.1077': attribute type 10 has an invalid length. [ 289.345662][T10007] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 289.847843][T10025] bridge0: port 1(syz_tun) entered blocking state [ 289.886069][T10025] bridge0: port 1(syz_tun) entered disabled state [ 289.914636][T10025] syz_tun: entered allmulticast mode [ 289.922346][T10025] syz_tun: entered promiscuous mode [ 289.967578][ T9886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.305946][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1082'. [ 290.309446][ T9886] veth0_vlan: entered promiscuous mode [ 290.321283][T10044] netlink: 'syz.1.1083': attribute type 12 has an invalid length. [ 290.403873][ T9886] veth1_vlan: entered promiscuous mode [ 290.498653][ T9886] veth0_macvtap: entered promiscuous mode [ 290.517665][ T9886] veth1_macvtap: entered promiscuous mode [ 290.594830][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.644150][ T9886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.697494][ T3474] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.752384][ T3474] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.824928][T10058] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 290.844505][ T3474] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.861505][T10053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1085'. [ 290.930138][ T3474] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.966305][T10060] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 291.260470][ T5845] Bluetooth: hci1: command tx timeout [ 291.627091][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.664564][ T30] audit: type=1800 audit(1750880540.017:6): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1086" name="memory.events" dev="tmpfs" ino=1434 res=0 errno=0 [ 291.709981][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.923184][ T9745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.941039][ T9745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.048414][T10069] netlink: 'syz.1.1089': attribute type 10 has an invalid length. [ 292.274458][T10080] netlink: 'syz.1.1093': attribute type 10 has an invalid length. [ 292.293743][T10080] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1093'. [ 292.474384][T10080] bridge0: port 2(dummy0) entered blocking state [ 292.485323][T10080] bridge0: port 2(dummy0) entered disabled state [ 292.507264][T10080] dummy0: entered allmulticast mode [ 292.516852][T10080] dummy0: entered promiscuous mode [ 292.659127][ T9745] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.713991][T10085] lo speed is unknown, defaulting to 1000 [ 292.722783][T10085] lo speed is unknown, defaulting to 1000 [ 292.823734][ T9745] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.954162][ T9745] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.028606][ T9745] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.205675][ T9745] bridge_slave_1: left allmulticast mode [ 293.214257][ T9745] bridge_slave_1: left promiscuous mode [ 293.221736][ T9745] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.238821][ T9745] bridge_slave_0: left allmulticast mode [ 293.245065][ T9745] bridge_slave_0: left promiscuous mode [ 293.250957][ T9745] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.563441][ T9745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.575078][ T9745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.585656][ T9745] bond0 (unregistering): Released all slaves [ 293.944013][ T9745] hsr_slave_0: left promiscuous mode [ 293.962699][ T9745] hsr_slave_1: left promiscuous mode [ 293.968580][ T9745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.976489][ T9745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.986056][ T9745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.993515][ T9745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.014226][ T9745] veth1_macvtap: left promiscuous mode [ 294.020049][ T9745] veth0_macvtap: left promiscuous mode [ 294.025641][ T9745] veth1_vlan: left promiscuous mode [ 294.030993][ T9745] veth0_vlan: left promiscuous mode [ 294.151071][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 294.176585][T10091] openvswitch: netlink: Flow actions attr not present in new flow. [ 294.713075][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 294.722643][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 294.730932][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 294.739197][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 294.778176][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 295.151806][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'. [ 295.204833][ T9745] team0 (unregistering): Port device team_slave_1 removed [ 295.251335][ T9745] team0 (unregistering): Port device team_slave_0 removed [ 295.660785][T10100] netlink: 'syz.1.1095': attribute type 4 has an invalid length. [ 295.683820][T10115] vlan2: entered promiscuous mode [ 295.688965][T10115] macvlan0: entered promiscuous mode [ 295.866775][T10111] lo speed is unknown, defaulting to 1000 [ 295.915381][T10111] lo speed is unknown, defaulting to 1000 [ 296.806305][T10123] netlink: 'syz.0.1103': attribute type 10 has an invalid length. [ 296.870007][ T5845] Bluetooth: hci1: command tx timeout [ 297.762367][T10134] netlink: 'syz.2.1107': attribute type 1 has an invalid length. [ 297.800616][T10134] 8021q: adding VLAN 0 to HW filter on device bond3 [ 297.864684][T10134] bond3: (slave gretap1): making interface the new active one [ 297.875510][T10140] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1108'. [ 297.902736][T10134] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 298.019610][T10139] lo speed is unknown, defaulting to 1000 [ 298.060511][T10146] syzkaller0: entered allmulticast mode [ 298.066163][T10139] lo speed is unknown, defaulting to 1000 [ 298.085513][T10146] syzkaller0 (unregistering): left allmulticast mode [ 298.182494][T10111] chnl_net:caif_netlink_parms(): no params data found [ 298.403812][T10153] netlink: 'syz.2.1111': attribute type 4 has an invalid length. [ 298.463778][T10111] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.473177][T10111] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.481331][T10111] bridge_slave_0: entered allmulticast mode [ 298.492595][T10111] bridge_slave_0: entered promiscuous mode [ 298.513755][T10111] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.521522][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.528728][T10111] bridge_slave_1: entered allmulticast mode [ 298.537429][T10111] bridge_slave_1: entered promiscuous mode [ 298.556016][T10156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.634738][T10111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.663086][T10111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.675569][T10154] lo speed is unknown, defaulting to 1000 [ 298.788634][T10154] lo speed is unknown, defaulting to 1000 [ 298.796226][T10111] team0: Port device team_slave_0 added [ 298.837861][T10111] team0: Port device team_slave_1 added [ 298.937461][T10158] lo speed is unknown, defaulting to 1000 [ 298.944220][ T5845] Bluetooth: hci1: command tx timeout [ 298.995977][T10111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.026495][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.062665][T10111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.096615][T10165] batman_adv: batadv0: Adding interface: macvlan2 [ 299.111087][T10165] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.160727][T10165] batman_adv: batadv0: Interface activated: macvlan2 [ 299.178857][T10111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.188481][T10111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.248297][T10111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.299045][T10158] lo speed is unknown, defaulting to 1000 [ 299.408902][T10111] hsr_slave_0: entered promiscuous mode [ 299.423087][T10111] hsr_slave_1: entered promiscuous mode [ 299.432188][T10111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.439949][T10111] Cannot create hsr debugfs directory [ 299.819160][T10174] netlink: 'syz.1.1116': attribute type 10 has an invalid length. [ 300.120039][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1117'. [ 300.129151][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 300.150275][T10178] netlink: 'syz.1.1117': attribute type 1 has an invalid length. [ 300.158031][T10178] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1117'. [ 300.232061][T10178] nbd: socks must be embedded in a SOCK_ITEM attr [ 300.246051][T10178] block nbd0: shutting down sockets [ 301.041147][ T5845] Bluetooth: hci1: command tx timeout [ 301.344335][T10193] netlink: 'syz.1.1122': attribute type 4 has an invalid length. [ 301.368869][T10195] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 301.376786][T10195] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1121'. [ 301.426845][T10195] macvtap1: entered promiscuous mode [ 301.436869][T10195] vlan0: entered promiscuous mode [ 301.448568][T10195] macvtap1: entered allmulticast mode [ 301.462464][T10195] vlan0: entered allmulticast mode [ 301.472620][T10195] veth0_vlan: entered allmulticast mode [ 301.490660][T10195] vlan0: left allmulticast mode [ 301.495544][T10195] veth0_vlan: left allmulticast mode [ 301.509868][T10195] vlan0: left promiscuous mode [ 301.564638][T10111] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 301.607694][T10111] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 301.675239][T10111] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 301.695408][T10111] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 301.981484][T10213] netlink: 'syz.4.1127': attribute type 10 has an invalid length. [ 302.026716][T10111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.097538][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'. [ 302.101707][T10111] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.146917][T10215] lo speed is unknown, defaulting to 1000 [ 302.158202][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.165377][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.189362][T10215] lo speed is unknown, defaulting to 1000 [ 302.262413][ T3474] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.269643][ T3474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.405147][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'. [ 302.432738][T10226] lo speed is unknown, defaulting to 1000 [ 302.475521][T10233] netlink: 'syz.0.1125': attribute type 21 has an invalid length. [ 302.483894][T10233] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1125'. [ 302.515811][T10220] netlink: 'syz.0.1125': attribute type 13 has an invalid length. [ 302.541385][T10220] netlink: 'syz.0.1125': attribute type 17 has an invalid length. [ 303.100280][ T5845] Bluetooth: hci1: command tx timeout [ 303.232408][T10226] lo speed is unknown, defaulting to 1000 [ 303.240792][T10241] tipc: New replicast peer: 255.255.255.255 [ 303.247316][T10241] tipc: Enabled bearer , priority 10 [ 303.646918][T10248] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1132'. [ 303.677386][T10111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.865757][T10111] veth0_vlan: entered promiscuous mode [ 304.149491][T10111] veth1_vlan: entered promiscuous mode [ 304.251095][T10111] veth0_macvtap: entered promiscuous mode [ 304.322223][T10111] veth1_macvtap: entered promiscuous mode [ 304.401317][T10111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.512047][T10111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.538225][T10260] bridge3: entered promiscuous mode [ 304.560093][T10260] bridge3: entered allmulticast mode [ 304.572836][T10260] team0: Port device bridge3 added [ 304.588453][T10264] IPVS: set_ctl: invalid protocol: 33 172.20.20.10:20004 [ 304.599260][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.641920][ T6965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.673755][T10263] bond3: (slave gretap1): Releasing active interface [ 304.714376][ T3474] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.744128][ T3474] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.755690][ T3474] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.425428][ T6965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.281754][T10267] team0: Mode changed to "broadcast" [ 306.333710][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.368983][T10276] lo speed is unknown, defaulting to 1000 [ 306.377064][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.432111][T10276] lo speed is unknown, defaulting to 1000 [ 306.512618][T10288] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1144'. [ 306.524997][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.533975][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.644964][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1145'. [ 306.682787][T10291] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1145'. [ 307.064955][T10300] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 307.256249][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.308517][T10303] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1148'. [ 307.505823][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.632335][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.816718][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.929231][ T13] bridge_slave_1: left allmulticast mode [ 307.937129][ T13] bridge_slave_1: left promiscuous mode [ 307.943347][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.953682][ T13] bridge_slave_0: left allmulticast mode [ 307.959340][ T13] bridge_slave_0: left promiscuous mode [ 307.965340][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.239389][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.252672][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.263045][ T13] bond0 (unregistering): Released all slaves [ 308.624807][ T13] hsr_slave_0: left promiscuous mode [ 308.644233][ T13] hsr_slave_1: left promiscuous mode [ 308.653205][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.660746][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.668586][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.679959][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.704771][ T13] veth1_macvtap: left promiscuous mode [ 308.710418][ T13] veth0_macvtap: left promiscuous mode [ 308.716028][ T13] veth1_vlan: left promiscuous mode [ 308.721447][ T13] veth0_vlan: left promiscuous mode [ 309.616473][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.626210][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.634646][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.648608][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.661260][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.900704][ T13] team0 (unregistering): Port device team_slave_1 removed [ 309.941854][ T13] team0 (unregistering): Port device team_slave_0 removed [ 309.996640][T10336] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1157'. [ 310.315134][T10311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1151'. [ 310.324516][T10311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1151'. [ 310.443661][T10338] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1158'. [ 310.455405][T10338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 310.487018][T10338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1158'. [ 310.553135][T10333] lo speed is unknown, defaulting to 1000 [ 310.571345][T10333] lo speed is unknown, defaulting to 1000 [ 310.600690][T10342] tipc: New replicast peer: 255.255.255.255 [ 310.672770][T10342] tipc: Enabled bearer , priority 10 [ 310.755581][T10343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1159'. [ 310.831467][T10343] tipc: Disabling bearer [ 311.274709][ T55] block nbd1: Possible stuck request ffff888025215080: control (read@0,1024B). Runtime 150 seconds [ 311.288011][ T55] block nbd1: Possible stuck request ffff888025215240: control (read@1024,1024B). Runtime 150 seconds [ 311.299102][ T55] block nbd1: Possible stuck request ffff888025215400: control (read@2048,1024B). Runtime 150 seconds [ 311.310258][ T55] block nbd1: Possible stuck request ffff8880252155c0: control (read@3072,1024B). Runtime 150 seconds [ 311.544425][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1163'. [ 311.553654][T10353] openvswitch: netlink: Flow actions attr not present in new flow. [ 311.564077][T10353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1163'. [ 311.603597][T10350] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1161'. [ 311.607117][T10354] SET target dimension over the limit! [ 311.750283][ T5845] Bluetooth: hci1: command tx timeout [ 311.937057][T10333] chnl_net:caif_netlink_parms(): no params data found [ 312.197869][T10333] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.212890][T10333] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.221656][T10333] bridge_slave_0: entered allmulticast mode [ 312.232457][T10333] bridge_slave_0: entered promiscuous mode [ 312.242643][T10333] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.254332][T10333] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.262774][T10333] bridge_slave_1: entered allmulticast mode [ 312.273508][T10333] bridge_slave_1: entered promiscuous mode [ 312.386124][T10333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.422500][T10333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.443402][T10380] veth0: entered promiscuous mode [ 312.588267][T10333] team0: Port device team_slave_0 added [ 312.902704][T10333] team0: Port device team_slave_1 added [ 313.109272][T10333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.116517][T10333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.157658][T10404] netlink: 'syz.4.1173': attribute type 10 has an invalid length. [ 313.166852][T10333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.203878][T10333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.217039][T10333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.243940][T10333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.431345][T10333] hsr_slave_0: entered promiscuous mode [ 313.437969][T10333] hsr_slave_1: entered promiscuous mode [ 313.454266][T10333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.477979][T10333] Cannot create hsr debugfs directory [ 313.820097][ T5845] Bluetooth: hci1: command tx timeout [ 313.826202][T10427] openvswitch: netlink: Flow actions attr not present in new flow. [ 314.198995][T10441] netlink: 'syz.1.1179': attribute type 10 has an invalid length. [ 314.228249][T10440] bridge0: port 1(erspan0) entered blocking state [ 314.238186][T10441] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 314.250130][T10440] bridge0: port 1(erspan0) entered disabled state [ 314.270123][T10440] erspan0: entered allmulticast mode [ 314.277053][T10440] erspan0: entered promiscuous mode [ 314.333922][T10440] erspan0: left allmulticast mode [ 314.343107][T10440] erspan0: left promiscuous mode [ 314.350882][T10440] bridge0: port 1(erspan0) entered disabled state [ 314.422866][T10333] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.444136][T10333] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.468117][T10333] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.491752][T10333] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.689445][T10333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.734147][T10333] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.756823][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.764190][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.813439][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.820812][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.857871][T10459] lo speed is unknown, defaulting to 1000 [ 314.865284][T10459] lo speed is unknown, defaulting to 1000 [ 314.949498][ T30] audit: type=1800 audit(1750880563.297:7): pid=10448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1182" name="memory.events" dev="tmpfs" ino=1541 res=0 errno=0 [ 315.501288][T10333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.594274][T10476] GUP no longer grows the stack in syz.1.1188 (10476): 200000006000-20000000a000 (200000005000) [ 315.655750][T10476] CPU: 0 UID: 0 PID: 10476 Comm: syz.1.1188 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 315.655781][T10476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.655807][T10476] Call Trace: [ 315.655820][T10476] [ 315.655830][T10476] dump_stack_lvl+0x189/0x250 [ 315.655873][T10476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.655905][T10476] ? __pfx__printk+0x10/0x10 [ 315.655924][T10476] ? find_vma+0xe7/0x160 [ 315.655958][T10476] __get_user_pages+0x2a60/0x30b0 [ 315.656029][T10476] ? __pfx___get_user_pages+0x10/0x10 [ 315.656058][T10476] ? __gup_longterm_locked+0xbf7/0x15b0 [ 315.656087][T10476] ? down_read_killable+0x1d1/0x350 [ 315.656114][T10476] ? try_get_folio+0x633/0x660 [ 315.656137][T10476] __gup_longterm_locked+0xd66/0x15b0 [ 315.656174][T10476] ? try_grab_folio_fast+0x1be/0x4f0 [ 315.656205][T10476] ? gup_fast_fallback+0x1afc/0x2260 [ 315.656237][T10476] gup_fast_fallback+0x1cd4/0x2260 [ 315.656306][T10476] ? __pfx_gup_fast_fallback+0x10/0x10 [ 315.656331][T10476] ? trace_contention_end+0x39/0x120 [ 315.656352][T10476] ? __mutex_lock+0x330/0xe80 [ 315.656377][T10476] ? futex_unqueue+0x22/0x240 [ 315.656397][T10476] ? futex_unqueue+0x22/0x240 [ 315.656413][T10476] ? futex_unqueue+0x22/0x240 [ 315.656432][T10476] ? is_valid_gup_args+0x11f/0x200 [ 315.656464][T10476] ? get_user_pages_fast+0x4d/0xb0 [ 315.656496][T10476] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 315.656523][T10476] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 315.656545][T10476] ? wait_for_space+0x24d/0x2d0 [ 315.656568][T10476] iov_iter_get_pages2+0x5e/0xa0 [ 315.656591][T10476] __se_sys_vmsplice+0x548/0x10d0 [ 315.656637][T10476] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 315.656659][T10476] ? __pfx_futex_wait+0x10/0x10 [ 315.656701][T10476] ? __lock_acquire+0xab9/0xd20 [ 315.656788][T10476] ? rcu_is_watching+0x15/0xb0 [ 315.656824][T10476] ? do_syscall_64+0xbe/0x3b0 [ 315.656853][T10476] do_syscall_64+0xfa/0x3b0 [ 315.656876][T10476] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.656899][T10476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.656919][T10476] ? clear_bhb_loop+0x60/0xb0 [ 315.656944][T10476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.656963][T10476] RIP: 0033:0x7fe3ad18e929 [ 315.656982][T10476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.657000][T10476] RSP: 002b:00007fe3adf52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 315.657022][T10476] RAX: ffffffffffffffda RBX: 00007fe3ad3b5fa0 RCX: 00007fe3ad18e929 [ 315.657037][T10476] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 315.657050][T10476] RBP: 00007fe3ad210b39 R08: 0000000000000000 R09: 0000000000000000 [ 315.657062][T10476] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 315.657074][T10476] R13: 0000000000000000 R14: 00007fe3ad3b5fa0 R15: 00007ffcd5961408 [ 315.657108][T10476] [ 315.671484][T10333] veth0_vlan: entered promiscuous mode [ 315.899968][ T5845] Bluetooth: hci1: command tx timeout [ 316.242431][T10333] veth1_vlan: entered promiscuous mode [ 316.297873][T10485] netlink: 'syz.4.1192': attribute type 10 has an invalid length. [ 316.322392][T10485] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.336578][T10485] bond0: (slave team0): Enslaving as an active interface with an up link [ 316.614430][T10333] veth0_macvtap: entered promiscuous mode [ 316.631862][T10488] syzkaller0: entered allmulticast mode [ 316.666377][T10488] syzkaller0 (unregistering): left allmulticast mode [ 316.745657][T10333] veth1_macvtap: entered promiscuous mode [ 316.823973][T10333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.887389][T10333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.930129][ T139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.964110][ T139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.989602][ T139] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.040727][ T139] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.126822][T10497] tipc: Enabling of bearer rejected, already enabled [ 317.312356][T10497] __nla_validate_parse: 9 callbacks suppressed [ 317.312376][T10497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 317.321225][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.389842][T10497] tipc: Disabling bearer [ 317.407315][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.675665][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.734753][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.981240][ T5845] Bluetooth: hci1: command tx timeout [ 318.151219][T10516] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1200'. [ 318.172132][T10518] netlink: 'syz.4.1202': attribute type 10 has an invalid length. [ 318.182444][T10518] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1202'. [ 318.231593][T10518] bridge0: port 1(0!) entered blocking state [ 318.249666][T10518] bridge0: port 1(0!) entered disabled state [ 318.268908][T10518] !: entered allmulticast mode [ 318.289185][T10523] netlink: 'syz.2.1203': attribute type 10 has an invalid length. [ 318.303247][T10518] !: entered promiscuous mode [ 318.384475][T10518] lo speed is unknown, defaulting to 1000 [ 318.394146][T10518] lo speed is unknown, defaulting to 1000 [ 318.413625][T10528] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 318.633272][ T37] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.737317][ T37] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.976292][ T37] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.117100][ T37] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.245063][ T37] bridge_slave_1: left allmulticast mode [ 319.251500][ T37] bridge_slave_1: left promiscuous mode [ 319.257192][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.269193][ T37] bridge_slave_0: left allmulticast mode [ 319.275145][ T37] bridge_slave_0: left promiscuous mode [ 319.281284][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.578724][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.589650][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.600807][ T37] bond0 (unregistering): Released all slaves [ 319.947250][ T37] hsr_slave_0: left promiscuous mode [ 319.956947][ T37] hsr_slave_1: left promiscuous mode [ 319.964901][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.972451][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.983835][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.992119][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.014748][ T37] veth1_macvtap: left promiscuous mode [ 320.020470][ T37] veth0_macvtap: left promiscuous mode [ 320.026053][ T37] veth1_vlan: left promiscuous mode [ 320.031875][ T37] veth0_vlan: left promiscuous mode [ 320.299366][T10540] x_tables: duplicate underflow at hook 1 [ 320.342892][T10546] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1207'. [ 320.834634][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 320.845325][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 320.863518][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 320.882858][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 320.908147][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 320.956795][ T37] team0 (unregistering): Port device team_slave_1 removed [ 321.013712][ T37] team0 (unregistering): Port device team_slave_0 removed [ 321.410580][T10549] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 321.442350][T10553] netlink: 'syz.2.1207': attribute type 10 has an invalid length. [ 321.462306][T10547] lo speed is unknown, defaulting to 1000 [ 321.497092][T10547] lo speed is unknown, defaulting to 1000 [ 321.498205][T10554] lo speed is unknown, defaulting to 1000 [ 321.666983][T10566] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1220'. [ 321.997979][T10554] lo speed is unknown, defaulting to 1000 [ 322.302915][T10580] netlink: 'syz.4.1215': attribute type 10 has an invalid length. [ 322.489932][T10582] x_tables: duplicate underflow at hook 1 [ 322.714913][T10591] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1218'. [ 322.912882][T10585] lo speed is unknown, defaulting to 1000 [ 322.940290][ T5845] Bluetooth: hci1: command tx timeout [ 323.060005][T10585] lo speed is unknown, defaulting to 1000 [ 323.101433][T10601] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1221'. [ 323.168327][T10554] chnl_net:caif_netlink_parms(): no params data found [ 323.613313][T10554] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.620805][T10554] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.628026][T10554] bridge_slave_0: entered allmulticast mode [ 323.644293][T10554] bridge_slave_0: entered promiscuous mode [ 323.653781][T10554] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.683127][T10554] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.699513][T10554] bridge_slave_1: entered allmulticast mode [ 323.721785][T10554] bridge_slave_1: entered promiscuous mode [ 323.829216][T10554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.870162][T10554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.024239][T10623] netlink: 'syz.2.1227': attribute type 10 has an invalid length. [ 324.046805][T10617] lo speed is unknown, defaulting to 1000 [ 324.172137][T10554] team0: Port device team_slave_0 added [ 324.186165][T10617] lo speed is unknown, defaulting to 1000 [ 324.242608][T10554] team0: Port device team_slave_1 added [ 324.335574][T10627] netlink: 'syz.1.1228': attribute type 11 has an invalid length. [ 324.395529][T10629] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1229'. [ 324.448545][T10620] netlink: 'syz.0.1225': attribute type 4 has an invalid length. [ 324.559280][T10554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.578510][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.638753][T10554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.677785][T10554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.695888][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.739916][T10554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.922595][T10554] hsr_slave_0: entered promiscuous mode [ 324.950984][T10554] hsr_slave_1: entered promiscuous mode [ 324.957512][T10554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.966210][T10554] Cannot create hsr debugfs directory [ 325.019973][ T5845] Bluetooth: hci1: command tx timeout [ 325.239901][T10648] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 325.506239][T10653] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1234'. [ 326.116198][T10554] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 326.150161][T10554] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 326.177333][T10554] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 326.451584][T10554] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 326.517118][T10673] netlink: 'syz.2.1239': attribute type 10 has an invalid length. [ 326.683447][T10685] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1241'. [ 326.825360][T10554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.853849][T10554] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.877563][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.884797][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.927861][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.935049][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.037708][T10692] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1246'. [ 327.112632][ T5845] Bluetooth: hci1: command tx timeout [ 327.128204][T10696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1247'. [ 327.155724][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1247'. [ 327.157882][T10554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.462242][T10705] netlink: 'syz.1.1249': attribute type 4 has an invalid length. [ 327.625697][T10714] netlink: 'syz.1.1252': attribute type 10 has an invalid length. [ 327.647311][T10554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.751487][T10554] veth0_vlan: entered promiscuous mode [ 327.801033][T10554] veth1_vlan: entered promiscuous mode [ 327.827334][T10720] netlink: 'syz.0.1265': attribute type 10 has an invalid length. [ 327.953086][T10554] veth0_macvtap: entered promiscuous mode [ 327.992831][T10554] veth1_macvtap: entered promiscuous mode [ 328.025663][T10554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.065666][T10554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.094624][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.141887][T10722] lo speed is unknown, defaulting to 1000 [ 328.149472][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.185253][T10722] lo speed is unknown, defaulting to 1000 [ 328.221285][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.230315][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.489432][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.519440][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.608784][T10736] bond0: entered promiscuous mode [ 328.660453][T10736] gretap2: entered promiscuous mode [ 328.682018][T10736] batadv_slave_0: entered promiscuous mode [ 328.709661][T10736] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 328.752917][T10736] hsr2: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 328.787455][T10736] hsr2: entered promiscuous mode [ 328.829231][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.853683][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.920753][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.942419][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.973829][T10733] lo speed is unknown, defaulting to 1000 [ 329.082449][T10733] lo speed is unknown, defaulting to 1000 [ 329.137327][T10554] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 329.149303][T10554] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 329.157739][T10554] CPU: 1 UID: 0 PID: 10554 Comm: syz-executor Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 329.169990][T10554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.180057][T10554] RIP: 0010:klist_remove+0x14a/0x340 [ 329.185361][T10554] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 21 c6 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 21 c6 f6 49 8b 44 24 58 48 89 44 24 08 [ 329.204976][T10554] RSP: 0018:ffffc9000b27f840 EFLAGS: 00010202 [ 329.211041][T10554] RAX: 000000000000000b RBX: ffff8880414bbc00 RCX: 0000000000000000 [ 329.219009][T10554] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 329.226978][T10554] RBP: ffffc9000b27f928 R08: ffffffff8f87c5c3 R09: 1ffffffff1f0f8b8 [ 329.234945][T10554] R10: dffffc0000000000 R11: fffffbfff1f0f8b9 R12: 0000000000000000 [ 329.242907][T10554] R13: 1ffff1100b39788c R14: ffff888059cbc460 R15: dffffc0000000000 [ 329.250867][T10554] FS: 0000000000000000(0000) GS:ffff888125d49000(0000) knlGS:0000000000000000 [ 329.259788][T10554] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.266367][T10554] CR2: 00007ffdc52df690 CR3: 000000003410e000 CR4: 00000000003526f0 [ 329.274343][T10554] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 329.282313][T10554] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 329.290286][T10554] Call Trace: [ 329.293569][T10554] [ 329.296506][T10554] ? __pfx_klist_remove+0x10/0x10 [ 329.301546][T10554] ? __pfx_kobject_move+0x10/0x10 [ 329.306574][T10554] ? get_device_parent+0x366/0x3a0 [ 329.311681][T10554] device_move+0x193/0x700 [ 329.316096][T10554] hci_conn_del_sysfs+0xb8/0x170 [ 329.321040][T10554] hci_conn_del+0x8ff/0xcb0 [ 329.325545][T10554] hci_conn_hash_flush+0x191/0x230 [ 329.330661][T10554] hci_dev_close_sync+0xaef/0x1330 [ 329.335777][T10554] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 329.341321][T10554] ? up_write+0x1c4/0x420 [ 329.345658][T10554] hci_unregister_dev+0x206/0x500 [ 329.350686][T10554] vhci_release+0x80/0xd0 [ 329.355014][T10554] ? __pfx_vhci_release+0x10/0x10 [ 329.360027][T10554] __fput+0x44c/0xa70 [ 329.364011][T10554] task_work_run+0x1d1/0x260 [ 329.368612][T10554] ? __pfx_task_work_run+0x10/0x10 [ 329.373725][T10554] ? kmem_cache_free+0x18f/0x400 [ 329.378662][T10554] do_exit+0x6ad/0x22e0 [ 329.382836][T10554] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 329.388209][T10554] ? __pfx_do_exit+0x10/0x10 [ 329.392809][T10554] ? _raw_spin_unlock_irq+0x23/0x50 [ 329.398006][T10554] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.403205][T10554] do_group_exit+0x21c/0x2d0 [ 329.407801][T10554] __x64_sys_exit_group+0x3f/0x40 [ 329.412827][T10554] x64_sys_call+0x21ba/0x21c0 [ 329.417507][T10554] do_syscall_64+0xfa/0x3b0 [ 329.422016][T10554] ? lockdep_hardirqs_on+0x9c/0x150 [ 329.427211][T10554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.433268][T10554] ? clear_bhb_loop+0x60/0xb0 [ 329.437944][T10554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.443832][T10554] RIP: 0033:0x7f86a538e929 [ 329.448243][T10554] Code: Unable to access opcode bytes at 0x7f86a538e8ff. [ 329.455354][T10554] RSP: 002b:00007ffdc52e1868 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 329.463761][T10554] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f86a538e929 [ 329.471725][T10554] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 329.479687][T10554] RBP: 00007f86a53ee8f0 R08: 00007ffdc52df607 R09: 0000000000000003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 329.487663][T10554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.495635][T10554] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffdc52e1a20 [ 329.503608][T10554] [ 329.506620][T10554] Modules linked in: [ 329.510837][ T5845] Bluetooth: hci1: command tx timeout [ 329.511977][T10554] ---[ end trace 0000000000000000 ]--- [ 329.667918][T10554] RIP: 0010:klist_remove+0x14a/0x340 [ 329.679100][T10554] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 d9 21 c6 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 ba 21 c6 f6 49 8b 44 24 58 48 89 44 24 08 [ 329.762501][T10554] RSP: 0018:ffffc9000b27f840 EFLAGS: 00010202 [ 329.768621][T10554] RAX: 000000000000000b RBX: ffff8880414bbc00 RCX: 0000000000000000 [ 329.777334][T10554] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 329.787766][T10554] RBP: ffffc9000b27f928 R08: ffffffff8f87c5c3 R09: 1ffffffff1f0f8b8 [ 329.796299][T10554] R10: dffffc0000000000 R11: fffffbfff1f0f8b9 R12: 0000000000000000 [ 329.823222][T10554] R13: 1ffff1100b39788c R14: ffff888059cbc460 R15: dffffc0000000000 [ 329.839989][T10554] FS: 0000000000000000(0000) GS:ffff888125c49000(0000) knlGS:0000000000000000 [ 329.848958][T10554] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.871566][T10554] CR2: 000020000081e000 CR3: 00000000313f4000 CR4: 00000000003526f0 [ 329.879592][T10554] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 329.900779][T10554] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 329.908784][T10554] Kernel panic - not syncing: Fatal exception [ 329.915167][T10554] Kernel Offset: disabled [ 329.919494][T10554] Rebooting in 86400 seconds..