last executing test programs: 2.974481664s ago: executing program 2 (id=1119): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc0643, 0x0) 2.795915118s ago: executing program 2 (id=1122): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='ext4_fc_commit_start\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_pid(r1, &(0x7f0000000980), 0x12) 2.701914784s ago: executing program 4 (id=1125): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x102, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='global_dirty_state\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) 2.629717537s ago: executing program 3 (id=1126): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, 0xffffffffffffffff, 0x5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002480)={0x0, 0x0, 0x0, &(0x7f0000001f40)='GPL\x00', 0x1, 0x52, &(0x7f0000001f80)=""/82, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002340), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xffffffff}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3fffc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.532430752s ago: executing program 1 (id=1128): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%-5lx \x00'}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) 2.53112782s ago: executing program 2 (id=1129): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x30}}, 0x0) 2.510249094s ago: executing program 4 (id=1130): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x0, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x8001, 0x0, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2.454232087s ago: executing program 3 (id=1131): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='jbd2_checkpoint\x00', r2}, 0x10) ioctl$TUNSETOFFLOAD(r0, 0x40086607, 0x20001412) 2.203850808s ago: executing program 3 (id=1133): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20000014) 2.182586449s ago: executing program 1 (id=1134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 2.171047328s ago: executing program 2 (id=1135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xe1c42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @link_local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0xfdef) 2.085933075s ago: executing program 0 (id=1136): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x17, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711202000000000095000000000000000842d6873aada8afa8bbff1b39bd9b5476967f0c9fb5793fb31816ba9188aafce5d922e6349b93f7cea6021bd547458a342f3ea33381e7c688faa78eec7fbf0bb25c21f3864a90469bef1c3e0a1f9f578cac1aa56eaca5ccf44a793de21f40cdfb21bcdaf792f93049e2fbe72412699c7e1ffa692a21e2a0576504aea34e7279d723b32a153cd46d9009a887079925f1e6a24355b59cd9870b389b9ba593ea7680bb37284d46ca4abac7281a81852e50ec6f0905040a478890f596041eb68066d1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2.035522081s ago: executing program 4 (id=1137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xe1c42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(r0, 0x0, 0xfdef) 1.965963612s ago: executing program 0 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x1e02, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x5c}, 0x1, 0x600}, 0x0) 548.323609ms ago: executing program 0 (id=1139): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, &(0x7f00000002c0)) 494.117537ms ago: executing program 2 (id=1140): socket$inet6(0xa, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x204, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1e5, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @broadcast, @random="90e488f9971a", {}, @value}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}, [{0xdd, 0x35, "2d5014b2109a59339408ad50548584c01cda5f3ced6f13b590b9aaf1bca488130effc03c7c2adf4757f254203300027902dd1fa777"}, {0xdd, 0x73, "eb13a8b3df323b58645505746aa35226d44912415c3d4ac256aa5c2291a3317d27815fda589135d0308f4ff131b3c4a96dde0f9c497c9bbde281223c0596f01156deb1f851f7602fb2299c382c07898a4d7dddbc046ef6a9b938b13f76ccceb4d339a7d92a6a7f45bd90df8b5bd53f1eec1a24"}, {0xdd, 0xe4, "4f2a899e94bcf0613609929460dda7b3421f2af277170aab1eef1bc7a6bad283ec72e75c78d8f4f30f5e2ee79daf8ece54852b5b93eabb5832b001d39227230802e601a7f9749d370367565ddb88a137c4572cce24103d4337027917c48d29a1860dad1f99fe412ea5a5eff0a43812f63ec34a05279e6dc25839f828e60b01f9b6a65bf411101d89dc154716566458aa4111340a6d895801f8d51908b9bdd47762550f4ee51c8a3f64cfe2f8b701e79d393a957fa4e3e620099b226f683280ec0f5d85f9c59d29d9159126c9f114d0e08f17f96e4757dd81825d8f432246cdb8ab571fcf"}, {0xdd, 0x7, "5dad8ac12f9666"}]}}]}, 0x204}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 480.334088ms ago: executing program 3 (id=1141): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x15, 0x5, 0x0) socket(0x0, 0x0, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)) 479.220612ms ago: executing program 4 (id=1142): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc000000010a030000000000000000000a0000030900010073797a4a610000009a00060043cf92e59ce130fc5f5cb848e30d27908326b7c74ab0343b403e63d7d35b04182640e74db5dff9b28515a859957ebf1042bc8c05a6825630937fea40581d3e6124fab624ea8d2fa3d11913efdac7a6dcfffaf6f6b34e5db7e45075dbf80478009e3f42d33b048521ea6b6bd93bff4e7dbfe4da2a83f165712d7b2e8ae30c8ea3d0e074e814fb9bb37ca1dcf3be1f8905de785fdfde7300000c0004400000000000000004080002400000000108000240000000010c000440fffffffffffff9370900010073797a30000000000900010073797a3100000000"], 0xfc}}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='global_dirty_state\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x0, 0xc}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000005c0)={0x40}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) close(r3) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 441.766867ms ago: executing program 0 (id=1143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000007c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x37}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8}, 0x90) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_id}, 0x20) 316.474973ms ago: executing program 1 (id=1144): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) 295.51926ms ago: executing program 3 (id=1145): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%-5lx \x00'}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r2, &(0x7f0000000000), 0x248800) 266.895082ms ago: executing program 2 (id=1146): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x5, &(0x7f0000000600)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42, 0x4}, [@ldst={0x6, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xe0, &(0x7f0000000640)=""/224, 0x0, 0x10}, 0x90) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000440)={0x1f, 0x0, @none}, 0xe) epoll_create(0x1ff) shutdown(r0, 0x1) 263.69812ms ago: executing program 4 (id=1147): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000040000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 232.218155ms ago: executing program 0 (id=1148): close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x5452, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000000200a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 204.422112ms ago: executing program 1 (id=1149): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1, 0x0, &(0x7f00000004c0)) 126.926786ms ago: executing program 1 (id=1150): socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000005ec0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ssrr={0x89, 0x3}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 111.788365ms ago: executing program 4 (id=1151): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20000014) 54.411538ms ago: executing program 0 (id=1152): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@hopopts_2292={{0x18}}, @tclass={{0x14, 0x29, 0x43, 0x3ff}}], 0x30}}], 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @empty}, @empty}}}}}}, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$TUNSETNOCSUM(r4, 0x8923, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60ffff0000442f02fe800000000000000000000000000000fe8000000000000000000000000000aa022065580000000000000800000086dd080088be"], 0x0) 5.825822ms ago: executing program 3 (id=1153): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000005ec0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ssrr={0x89, 0x3}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1ff}) 0s ago: executing program 1 (id=1154): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {}, @device_b}, @ext_ch_sw={0xf, 0x4, {{}, @void}}}}]}, 0x40}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0xd5b, 0x8000, 0x0, 0xffffffffffffffff, 0x7fffffff}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1802000000000000000000000000000085b1551db8000000a90000009500d04858e52e850000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r8, {0xb, 0x3}, {}, {0x0, 0x5}}}, 0x24}}, 0x0) unshare(0x20000400) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r9, &(0x7f0000000040)={0x24, @long={0x2}}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r4, 0x58, &(0x7f0000000380)}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x58, &(0x7f0000000400)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r10, &(0x7f0000000700)={0x0, 0x3000000, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r11, 0x703, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x20}}, 0x4040840) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r13, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r14, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x30}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x29, 0x80, 0x1, 0x40, 0x10, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x7801, 0x400, 0x4}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.159' (ED25519) to the list of known hosts. [ 64.187577][ T5086] cgroup: Unknown subsys name 'net' [ 64.327606][ T5086] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.023801][ T5086] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.870485][ T5102] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.889892][ T5109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.897448][ T5109] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.905230][ T5109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.914256][ T5109] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.922503][ T5109] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.930227][ T5109] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.930640][ T5111] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.938285][ T5109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.951424][ T5113] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.952478][ T5109] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.968842][ T5113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.976168][ T5111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.977563][ T5113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.984107][ T5109] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.998907][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.004445][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.006196][ T5109] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.014538][ T5115] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.021475][ T5109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.028398][ T5116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.035300][ T5109] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.041705][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.049691][ T5109] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.057373][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.062485][ T5109] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.076121][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.089429][ T5105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.106500][ T5105] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 67.123408][ T5109] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.621317][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 67.701228][ T5103] chnl_net:caif_netlink_parms(): no params data found [ 67.889446][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.897064][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.904507][ T5096] bridge_slave_0: entered allmulticast mode [ 67.913322][ T5096] bridge_slave_0: entered promiscuous mode [ 67.943474][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.951031][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.958772][ T5096] bridge_slave_1: entered allmulticast mode [ 67.966336][ T5096] bridge_slave_1: entered promiscuous mode [ 67.980602][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 67.992404][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 68.064193][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 68.079540][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.099903][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.128329][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.135544][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.142971][ T5103] bridge_slave_0: entered allmulticast mode [ 68.150048][ T5103] bridge_slave_0: entered promiscuous mode [ 68.158810][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.166051][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.173302][ T5103] bridge_slave_1: entered allmulticast mode [ 68.180845][ T5103] bridge_slave_1: entered promiscuous mode [ 68.278610][ T5096] team0: Port device team_slave_0 added [ 68.298785][ T5103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.324530][ T5096] team0: Port device team_slave_1 added [ 68.338040][ T5103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.405884][ T5103] team0: Port device team_slave_0 added [ 68.456468][ T5103] team0: Port device team_slave_1 added [ 68.499730][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.507169][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.514674][ T5097] bridge_slave_0: entered allmulticast mode [ 68.522591][ T5097] bridge_slave_0: entered promiscuous mode [ 68.533713][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.541606][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.567709][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.610687][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.618190][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.625351][ T5095] bridge_slave_0: entered allmulticast mode [ 68.632646][ T5095] bridge_slave_0: entered promiscuous mode [ 68.642342][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.649687][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.658417][ T5095] bridge_slave_1: entered allmulticast mode [ 68.665691][ T5095] bridge_slave_1: entered promiscuous mode [ 68.672580][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.679920][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.687288][ T5097] bridge_slave_1: entered allmulticast mode [ 68.694567][ T5097] bridge_slave_1: entered promiscuous mode [ 68.702159][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.709456][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.735645][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.765970][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.773101][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.799447][ T5103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.861087][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.868814][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.876020][ T5098] bridge_slave_0: entered allmulticast mode [ 68.883853][ T5098] bridge_slave_0: entered promiscuous mode [ 68.891803][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.901364][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.928004][ T5103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.955204][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.967892][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.980972][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.004549][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.011925][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.019339][ T5098] bridge_slave_1: entered allmulticast mode [ 69.026451][ T5098] bridge_slave_1: entered promiscuous mode [ 69.044331][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.137868][ T5106] Bluetooth: hci4: command tx timeout [ 69.137888][ T5109] Bluetooth: hci0: command tx timeout [ 69.147363][ T5109] Bluetooth: hci1: command tx timeout [ 69.149643][ T5102] Bluetooth: hci2: command tx timeout [ 69.154687][ T5105] Bluetooth: hci3: command tx timeout [ 69.186132][ T5097] team0: Port device team_slave_0 added [ 69.199067][ T5096] hsr_slave_0: entered promiscuous mode [ 69.206116][ T5096] hsr_slave_1: entered promiscuous mode [ 69.219351][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.244608][ T5103] hsr_slave_0: entered promiscuous mode [ 69.251355][ T5103] hsr_slave_1: entered promiscuous mode [ 69.258331][ T5103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.266468][ T5103] Cannot create hsr debugfs directory [ 69.275569][ T5095] team0: Port device team_slave_0 added [ 69.284993][ T5095] team0: Port device team_slave_1 added [ 69.294407][ T5097] team0: Port device team_slave_1 added [ 69.317362][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.379421][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.386411][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.413497][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.452608][ T5098] team0: Port device team_slave_0 added [ 69.479518][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.486555][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.512846][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.525710][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.532957][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.558939][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.579540][ T5098] team0: Port device team_slave_1 added [ 69.597407][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.604375][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.630917][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.740266][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.748278][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.774450][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.829495][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.836463][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.863582][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.891526][ T5095] hsr_slave_0: entered promiscuous mode [ 69.901883][ T5095] hsr_slave_1: entered promiscuous mode [ 69.908509][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.916084][ T5095] Cannot create hsr debugfs directory [ 69.977035][ T5097] hsr_slave_0: entered promiscuous mode [ 69.983616][ T5097] hsr_slave_1: entered promiscuous mode [ 69.990631][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.998333][ T5097] Cannot create hsr debugfs directory [ 70.094684][ T5098] hsr_slave_0: entered promiscuous mode [ 70.102228][ T5098] hsr_slave_1: entered promiscuous mode [ 70.108878][ T5098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.116452][ T5098] Cannot create hsr debugfs directory [ 70.494254][ T5103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.520752][ T5103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.545138][ T5103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.556419][ T5103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.617180][ T5096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.628013][ T5096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.646795][ T5096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.659796][ T5096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.738233][ T5097] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.750586][ T5097] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.772436][ T5097] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.782654][ T5097] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.900063][ T5098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.919924][ T5098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.937126][ T5098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.958277][ T5098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.022374][ T5103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.129157][ T5103] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.158706][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.166154][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.188171][ T5095] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.201161][ T5095] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.217494][ T5105] Bluetooth: hci3: command tx timeout [ 71.217512][ T5109] Bluetooth: hci1: command tx timeout [ 71.217550][ T5109] Bluetooth: hci0: command tx timeout [ 71.222919][ T5105] Bluetooth: hci4: command tx timeout [ 71.228934][ T5109] Bluetooth: hci2: command tx timeout [ 71.269738][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.276960][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.290091][ T5095] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.305356][ T5095] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.327835][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.420827][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.448997][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.489404][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.496546][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.553101][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.560319][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.599006][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.623866][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.631619][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.641488][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.654534][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.661749][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.725080][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.732347][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.783250][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.815486][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.846210][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.853455][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.870848][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.878067][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.994349][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.051147][ T5096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.083662][ T5103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.106391][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.113691][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.153256][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.160507][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.203466][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.517766][ T5103] veth0_vlan: entered promiscuous mode [ 72.573226][ T5103] veth1_vlan: entered promiscuous mode [ 72.653411][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.781502][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.803784][ T5103] veth0_macvtap: entered promiscuous mode [ 72.862178][ T5103] veth1_macvtap: entered promiscuous mode [ 72.890815][ T5096] veth0_vlan: entered promiscuous mode [ 72.922156][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.951138][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.962899][ T5103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.972810][ T5103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.991214][ T5103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.000409][ T5103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.023568][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.036695][ T5097] veth0_vlan: entered promiscuous mode [ 73.063375][ T5096] veth1_vlan: entered promiscuous mode [ 73.106375][ T5097] veth1_vlan: entered promiscuous mode [ 73.173351][ T5098] veth0_vlan: entered promiscuous mode [ 73.204829][ T5095] veth0_vlan: entered promiscuous mode [ 73.238629][ T5096] veth0_macvtap: entered promiscuous mode [ 73.275343][ T5096] veth1_macvtap: entered promiscuous mode [ 73.297398][ T5109] Bluetooth: hci2: command tx timeout [ 73.297785][ T5102] Bluetooth: hci4: command tx timeout [ 73.302874][ T5109] Bluetooth: hci0: command tx timeout [ 73.308751][ T5105] Bluetooth: hci3: command tx timeout [ 73.314021][ T5109] Bluetooth: hci1: command tx timeout [ 73.332969][ T5098] veth1_vlan: entered promiscuous mode [ 73.346733][ T2830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.357090][ T2830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.366416][ T5095] veth1_vlan: entered promiscuous mode [ 73.395173][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.407969][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.419734][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.471701][ T5097] veth0_macvtap: entered promiscuous mode [ 73.489849][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.501430][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.512933][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.530577][ T5096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.539705][ T5096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.549096][ T5096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.558944][ T5096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.583768][ T5097] veth1_macvtap: entered promiscuous mode [ 73.589084][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.597704][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.669670][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.686716][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.715614][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.726491][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.745204][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.794799][ T5095] veth0_macvtap: entered promiscuous mode [ 73.795940][ T5183] x_tables: duplicate underflow at hook 2 [ 73.823283][ T5095] veth1_macvtap: entered promiscuous mode [ 73.843215][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.856716][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.874756][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.898242][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.911807][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.925239][ T5098] veth0_macvtap: entered promiscuous mode [ 73.969705][ T5097] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.979663][ T5097] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.989967][ T5097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.000199][ T5097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.040227][ T5098] veth1_macvtap: entered promiscuous mode [ 74.049369][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.060092][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.070976][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.082344][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.092977][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.106440][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.119271][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.191360][ T2830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.203254][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.223043][ T2830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.226891][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.242157][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.253071][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.263074][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.274554][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.292528][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.315429][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.334232][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.345448][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.365740][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.375728][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.392559][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.402558][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.420933][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.435572][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.451765][ T5186] veth1_macvtap: entered allmulticast mode [ 74.524170][ T5095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.536172][ T5095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.545938][ T5095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.555994][ T5095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.574056][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.593274][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.603622][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.615056][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.625173][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.636008][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.646005][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.658218][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.671158][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.730433][ T5098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.741107][ T5098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.750154][ T5098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.759091][ T5098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.782639][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.803516][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.857576][ T2469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.865626][ T2469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.031549][ T2433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.051078][ T2433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.113578][ T5191] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 75.155247][ T5191] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.179282][ T2433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.207322][ T2433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.263981][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.297616][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.377548][ T5109] Bluetooth: hci3: command tx timeout [ 75.383098][ T5105] Bluetooth: hci4: command tx timeout [ 75.388735][ T5109] Bluetooth: hci0: command tx timeout [ 75.394263][ T5109] Bluetooth: hci1: command tx timeout [ 75.401780][ T5102] Bluetooth: hci2: command tx timeout [ 75.456112][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.502571][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.607185][ T2469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.648002][ T2469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.889860][ T5207] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.017077][ T5209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.171094][ T5207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 76.198477][ T5207] bridge_slave_1: left allmulticast mode [ 76.215128][ T5207] bridge_slave_1: left promiscuous mode [ 76.227593][ T5207] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.263590][ T5207] bridge_slave_0: left allmulticast mode [ 76.280230][ T5207] bridge_slave_0: left promiscuous mode [ 76.291741][ T5207] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.380550][ T5221] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 76.415634][ T5221] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 76.929328][ T5229] veth1_macvtap: entered allmulticast mode [ 77.027067][ T5231] netlink: 'syz.3.15': attribute type 13 has an invalid length. [ 77.071496][ T5231] veth0_macvtap: left promiscuous mode [ 77.101339][ T5231] macvtap0: entered promiscuous mode [ 77.169039][ T5231] macvtap0: refused to change device tx_queue_len [ 77.691541][ T5246] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 77.760418][ T5249] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 78.329720][ T5258] syz.1.27 uses obsolete (PF_INET,SOCK_PACKET) [ 78.408466][ T5260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 78.822913][ T5260] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 78.878275][ T5260] netlink: 'syz.3.25': attribute type 2 has an invalid length. [ 79.292035][ T5298] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 79.704518][ T5304] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 80.470675][ T5319] veth1_macvtap: entered allmulticast mode [ 81.279401][ T5345] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 81.315687][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 81.466178][ T5349] netlink: 'syz.0.48': attribute type 1 has an invalid length. [ 81.494531][ T5349] netlink: 'syz.0.48': attribute type 2 has an invalid length. [ 81.996282][ T5363] Zero length message leads to an empty skb [ 82.129203][ T5368] veth1_macvtap: entered allmulticast mode [ 82.412396][ T5381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.55'. [ 82.461202][ T5381] netlink: 104 bytes leftover after parsing attributes in process `syz.4.55'. [ 83.166030][ T5392] veth1_macvtap: entered allmulticast mode [ 83.355167][ T5398] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 83.604634][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 83.740019][ T5403] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 83.783589][ T5403] netlink: 'syz.3.64': attribute type 2 has an invalid length. [ 84.312326][ T5431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 84.357387][ T5431] netlink: 104 bytes leftover after parsing attributes in process `syz.0.69'. [ 84.456380][ T5433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 84.597267][ T5433] netlink: 'syz.2.73': attribute type 1 has an invalid length. [ 84.608786][ T5437] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 84.613157][ T5433] netlink: 'syz.2.73': attribute type 2 has an invalid length. [ 84.661208][ T5436] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 85.550725][ T5456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 85.595590][ T5458] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 85.685039][ T5456] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 85.709374][ T5456] netlink: 'syz.1.82': attribute type 2 has an invalid length. [ 86.105709][ T5474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.85'. [ 86.129718][ T5474] netlink: 104 bytes leftover after parsing attributes in process `syz.1.85'. [ 86.459949][ T5484] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 86.812119][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 86.887799][ T5495] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 86.913314][ T5495] netlink: 'syz.1.95': attribute type 2 has an invalid length. [ 87.014059][ T9] cfg80211: failed to load regulatory.db [ 87.279908][ T5515] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 87.547280][ T5523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 87.587555][ T5523] netlink: 104 bytes leftover after parsing attributes in process `syz.2.100'. [ 87.955631][ T5535] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 88.041165][ T5538] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 88.767577][ T5561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.114'. [ 88.816440][ T5561] netlink: 104 bytes leftover after parsing attributes in process `syz.0.114'. [ 89.133451][ T5577] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 89.845508][ T5590] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 89.931916][ T5595] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 90.442496][ T5615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.127'. [ 90.476963][ T5615] netlink: 104 bytes leftover after parsing attributes in process `syz.2.127'. [ 91.024617][ T5640] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 91.084878][ T5642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'. [ 91.138030][ T5642] netlink: 104 bytes leftover after parsing attributes in process `syz.3.133'. [ 91.216385][ T5648] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 91.553456][ T5657] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 91.602722][ T5659] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 91.931943][ T5670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 91.992383][ T5670] netlink: 104 bytes leftover after parsing attributes in process `syz.0.142'. [ 92.418366][ T5688] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 92.466944][ T5689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 92.512444][ T5689] netlink: 'syz.1.150': attribute type 1 has an invalid length. [ 92.520544][ T5689] netlink: 'syz.1.150': attribute type 2 has an invalid length. [ 92.749493][ T5697] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 92.956584][ T5703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.153'. [ 93.250538][ T5710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 93.308701][ T5710] netlink: 'syz.1.155': attribute type 1 has an invalid length. [ 93.329935][ T5715] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 93.346463][ T5710] netlink: 'syz.1.155': attribute type 2 has an invalid length. [ 94.184920][ T5742] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 94.673084][ T5759] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 95.163756][ T5781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.174'. [ 95.247005][ T5781] netlink: 104 bytes leftover after parsing attributes in process `syz.1.174'. [ 95.577935][ T5800] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 95.951585][ T5816] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 96.815416][ T5852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.196'. [ 96.874776][ T5852] netlink: 104 bytes leftover after parsing attributes in process `syz.3.196'. [ 97.470708][ T5864] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 97.653263][ T5873] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.029042][ T5879] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 98.299722][ T5885] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 98.990195][ T5911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.210'. [ 99.011424][ T5911] netlink: 104 bytes leftover after parsing attributes in process `syz.4.210'. [ 99.462244][ T5927] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 99.672539][ T5945] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 99.689222][ T5944] IPVS: stopping master sync thread 5945 ... [ 100.354915][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 100.487768][ T5960] netlink: 'syz.4.226': attribute type 1 has an invalid length. [ 100.506996][ T5960] netlink: 'syz.4.226': attribute type 2 has an invalid length. [ 100.855733][ T5974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.230'. [ 100.893800][ T5974] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 101.031636][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.233'. [ 101.073450][ T5984] netlink: 104 bytes leftover after parsing attributes in process `syz.0.233'. [ 101.098079][ T5983] warning: `syz.1.234' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.126783][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.232'. [ 101.208159][ T5985] netlink: 104 bytes leftover after parsing attributes in process `syz.4.232'. [ 101.945996][ T6011] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 101.976678][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 102.157981][ T6013] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 102.205921][ T6013] netlink: 'syz.0.242': attribute type 2 has an invalid length. [ 102.681791][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'. [ 102.810424][ T6043] syzkaller1: entered promiscuous mode [ 102.817136][ T6043] syzkaller1: entered allmulticast mode [ 103.178185][ T6062] netlink: 'syz.0.255': attribute type 12 has an invalid length. [ 103.206118][ T6062] netlink: 'syz.0.255': attribute type 29 has an invalid length. [ 103.226992][ T6062] netlink: 'syz.0.255': attribute type 2 has an invalid length. [ 103.234830][ T6062] netlink: 'syz.0.255': attribute type 2 has an invalid length. [ 103.256464][ T6062] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 103.280202][ T6062] netlink: 'syz.0.255': attribute type 37 has an invalid length. [ 103.296069][ T6062] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.711015][ T6092] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 104.851729][ T6124] Bluetooth: MGMT ver 1.22 [ 105.044562][ T6130] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2097153 (only 8 groups) [ 105.869921][ T6153] __nla_validate_parse: 1 callbacks suppressed [ 105.869945][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 105.997519][ T6153] validate_nla: 1 callbacks suppressed [ 105.997540][ T6153] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 106.025507][ T6153] netlink: 'syz.1.280': attribute type 2 has an invalid length. [ 106.977052][ T5109] Bluetooth: hci0: command 0x080f tx timeout [ 107.291299][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.294'. [ 107.327012][ T6201] netlink: 104 bytes leftover after parsing attributes in process `syz.1.294'. [ 108.092357][ T6220] syzkaller1: entered promiscuous mode [ 108.116670][ T6220] syzkaller1: entered allmulticast mode [ 109.083129][ T6243] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 111.075369][ T6306] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 111.779338][ T6320] syzkaller1: entered promiscuous mode [ 111.806658][ T6320] syzkaller1: entered allmulticast mode [ 112.144279][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 112.253902][ T6330] netlink: 'syz.3.329': attribute type 1 has an invalid length. [ 112.286626][ T6330] netlink: 'syz.3.329': attribute type 2 has an invalid length. [ 113.547609][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'. [ 113.556545][ T6365] netlink: 104 bytes leftover after parsing attributes in process `syz.2.337'. [ 115.074879][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.346'. [ 115.179396][ T6402] netlink: 'syz.1.346': attribute type 1 has an invalid length. [ 115.212717][ T6402] netlink: 'syz.1.346': attribute type 2 has an invalid length. [ 116.750773][ T6445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 116.848874][ T6445] netlink: 'syz.0.361': attribute type 1 has an invalid length. [ 116.856661][ T6445] netlink: 'syz.0.361': attribute type 2 has an invalid length. [ 118.520040][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.375'. [ 118.591267][ T6498] netlink: 'syz.0.375': attribute type 1 has an invalid length. [ 118.621000][ T6498] netlink: 'syz.0.375': attribute type 2 has an invalid length. [ 120.358476][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.389'. [ 120.492362][ T6546] netlink: 'syz.3.389': attribute type 1 has an invalid length. [ 120.529434][ T6546] netlink: 'syz.3.389': attribute type 2 has an invalid length. [ 122.007977][ T6601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 122.087176][ T6601] netlink: 'syz.1.404': attribute type 1 has an invalid length. [ 122.108202][ T6601] netlink: 'syz.1.404': attribute type 2 has an invalid length. [ 123.753897][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.417'. [ 123.882667][ T6650] netlink: 'syz.4.417': attribute type 1 has an invalid length. [ 123.902302][ T6650] netlink: 'syz.4.417': attribute type 2 has an invalid length. [ 125.926248][ T6711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 126.102401][ T6709] netlink: 'syz.3.431': attribute type 1 has an invalid length. [ 126.136922][ T6709] netlink: 'syz.3.431': attribute type 2 has an invalid length. [ 128.055437][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.448'. [ 128.177211][ T6774] netlink: 'syz.3.448': attribute type 1 has an invalid length. [ 128.203525][ T6774] netlink: 'syz.3.448': attribute type 2 has an invalid length. [ 130.059257][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.465'. [ 130.143031][ T6830] netlink: 'syz.3.465': attribute type 1 has an invalid length. [ 130.176496][ T6830] netlink: 'syz.3.465': attribute type 2 has an invalid length. [ 133.066754][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.078077][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.371687][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.504'. [ 134.450704][ T6978] netlink: 'syz.4.504': attribute type 1 has an invalid length. [ 134.470174][ T6978] netlink: 'syz.4.504': attribute type 2 has an invalid length. [ 135.797328][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 135.879399][ T7024] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 135.907093][ T7024] netlink: 'syz.3.517': attribute type 2 has an invalid length. [ 136.394604][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 136.615799][ T7046] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 136.675550][ T7046] netlink: 'syz.1.523': attribute type 2 has an invalid length. [ 138.703292][ T7104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 138.835034][ T7104] netlink: 'syz.2.537': attribute type 1 has an invalid length. [ 138.857738][ T7104] netlink: 'syz.2.537': attribute type 2 has an invalid length. [ 140.335892][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'. [ 140.525613][ T7155] netlink: 'syz.1.553': attribute type 1 has an invalid length. [ 140.555574][ T7155] netlink: 'syz.1.553': attribute type 2 has an invalid length. [ 143.085986][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.580'. [ 143.171344][ T7240] netlink: 'syz.3.580': attribute type 1 has an invalid length. [ 143.199552][ T7240] netlink: 'syz.3.580': attribute type 2 has an invalid length. [ 147.851364][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'. [ 147.911903][ T7351] netlink: 'syz.0.612': attribute type 1 has an invalid length. [ 147.921411][ T7351] netlink: 'syz.0.612': attribute type 2 has an invalid length. [ 148.330535][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.616'. [ 148.377184][ T7373] netlink: 104 bytes leftover after parsing attributes in process `syz.1.616'. [ 148.900673][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.629'. [ 148.977313][ T7400] netlink: 'syz.2.629': attribute type 1 has an invalid length. [ 149.010481][ T7400] netlink: 'syz.2.629': attribute type 2 has an invalid length. [ 153.299432][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.668'. [ 153.338768][ T7539] netlink: 104 bytes leftover after parsing attributes in process `syz.4.668'. [ 153.429016][ T7542] xt_TCPMSS: Only works on TCP SYN packets [ 153.522039][ T7542] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 153.744807][ T7546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 153.775422][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'. [ 154.449112][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'. [ 154.522340][ T7577] netlink: 'syz.3.682': attribute type 1 has an invalid length. [ 154.562275][ T7577] netlink: 'syz.3.682': attribute type 2 has an invalid length. [ 154.737434][ T7582] netlink: 48 bytes leftover after parsing attributes in process `syz.1.683'. [ 155.124982][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.685'. [ 155.176993][ T7591] netlink: 104 bytes leftover after parsing attributes in process `syz.3.685'. [ 155.488070][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.689'. [ 155.610415][ T7605] netlink: 'syz.3.689': attribute type 1 has an invalid length. [ 155.640632][ T7605] netlink: 'syz.3.689': attribute type 2 has an invalid length. [ 156.244137][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.696'. [ 156.354844][ T7629] netlink: 'syz.3.696': attribute type 1 has an invalid length. [ 156.388802][ T7629] netlink: 'syz.3.696': attribute type 2 has an invalid length. [ 156.853129][ T7644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 157.727584][ T7661] ieee802154 phy0 wpan0: encryption failed: -22 [ 158.203099][ T7680] netlink: 'syz.1.710': attribute type 1 has an invalid length. [ 158.217398][ T7680] netlink: 'syz.1.710': attribute type 2 has an invalid length. [ 158.395527][ T7694] __nla_validate_parse: 2 callbacks suppressed [ 158.395549][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.716'. [ 158.443470][ T7697] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 158.479490][ T7694] netlink: 104 bytes leftover after parsing attributes in process `syz.2.716'. [ 158.624363][ T7708] netlink: 40 bytes leftover after parsing attributes in process `syz.1.718'. [ 159.051128][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.728'. [ 159.109086][ T7732] netlink: 'syz.2.728': attribute type 1 has an invalid length. [ 159.131083][ T7732] netlink: 'syz.2.728': attribute type 2 has an invalid length. [ 159.846677][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.742'. [ 159.985002][ T7772] netlink: 'syz.3.742': attribute type 1 has an invalid length. [ 160.017166][ T7772] netlink: 'syz.3.742': attribute type 2 has an invalid length. [ 160.253615][ T7783] netlink: 56 bytes leftover after parsing attributes in process `syz.0.744'. [ 160.444591][ T7804] xt_l2tp: missing protocol rule (udp|l2tpip) [ 161.149859][ T7830] netlink: 8 bytes leftover after parsing attributes in process `syz.1.757'. [ 161.385618][ T7830] netlink: 'syz.1.757': attribute type 1 has an invalid length. [ 161.407648][ T7830] netlink: 'syz.1.757': attribute type 2 has an invalid length. [ 161.533877][ T7846] netlink: 44 bytes leftover after parsing attributes in process `syz.2.762'. [ 161.766750][ T7856] netlink: 'syz.2.766': attribute type 5 has an invalid length. [ 161.800919][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.766'. [ 162.363719][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.773'. [ 162.446548][ T7884] netlink: 'syz.2.775': attribute type 1 has an invalid length. [ 162.455926][ T7884] netlink: 'syz.2.775': attribute type 2 has an invalid length. [ 162.650268][ T7888] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.824046][ T7898] netlink: 'syz.2.780': attribute type 16 has an invalid length. [ 162.836329][ T7898] netlink: 'syz.2.780': attribute type 17 has an invalid length. [ 163.488191][ T7928] __nla_validate_parse: 4 callbacks suppressed [ 163.488214][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 163.609884][ T7928] netlink: 'syz.3.789': attribute type 1 has an invalid length. [ 163.697440][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'. [ 163.841882][ T7938] netlink: 9352 bytes leftover after parsing attributes in process `syz.4.794'. [ 163.878285][ T7938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.794'. [ 165.190065][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.810'. [ 165.270504][ T7995] bond0: entered promiscuous mode [ 165.275759][ T7995] bond_slave_0: entered promiscuous mode [ 165.305312][ T7995] bond_slave_1: entered promiscuous mode [ 165.317465][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.326226][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.334915][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.345506][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.372977][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 165.382052][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.577076][ T8009] netlink: 232 bytes leftover after parsing attributes in process `syz.4.813'. [ 165.613868][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.831050][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.949321][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.095159][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.212532][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.821'. [ 166.223270][ T8027] netlink: 104 bytes leftover after parsing attributes in process `syz.4.821'. [ 166.535711][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'. [ 166.545177][ T8003] chnl_net:caif_netlink_parms(): no params data found [ 166.729347][ T61] bridge_slave_1: left allmulticast mode [ 166.735348][ T61] bridge_slave_1: left promiscuous mode [ 166.744659][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.776723][ T61] bridge_slave_0: left allmulticast mode [ 166.782769][ T61] bridge_slave_0: left promiscuous mode [ 166.799996][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.391516][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.404069][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.425881][ T61] bond0 (unregistering): Released all slaves [ 167.457055][ T5102] Bluetooth: hci2: command tx timeout [ 167.514746][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'. [ 167.662323][ T8070] validate_nla: 2 callbacks suppressed [ 167.662356][ T8070] netlink: 'syz.0.832': attribute type 1 has an invalid length. [ 167.707107][ T8070] netlink: 'syz.0.832': attribute type 2 has an invalid length. [ 167.776468][ T8003] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.789495][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.805423][ T8003] bridge_slave_0: entered allmulticast mode [ 167.816546][ T8003] bridge_slave_0: entered promiscuous mode [ 167.823623][ T8085] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:0 [ 167.828233][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.847466][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.866259][ T8003] bridge_slave_1: entered allmulticast mode [ 167.875007][ T8003] bridge_slave_1: entered promiscuous mode [ 168.231489][ T8003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.300652][ T8003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.373661][ T61] hsr_slave_0: left promiscuous mode [ 168.399667][ T61] hsr_slave_1: left promiscuous mode [ 168.442118][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.465326][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.487894][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.495343][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.543426][ T61] veth1_vlan: left promiscuous mode [ 168.564430][ T61] veth0_vlan: left promiscuous mode [ 169.262444][ T8151] netlink: 'syz.1.850': attribute type 1 has an invalid length. [ 169.271711][ T8151] netlink: 'syz.1.850': attribute type 2 has an invalid length. [ 169.276470][ T8150] netlink: 52 bytes leftover after parsing attributes in process `syz.2.855'. [ 169.288964][ T8150] netlink: 64 bytes leftover after parsing attributes in process `syz.2.855'. [ 169.307002][ T8150] netlink: 52 bytes leftover after parsing attributes in process `syz.2.855'. [ 169.328065][ T8150] netlink: 20 bytes leftover after parsing attributes in process `syz.2.855'. [ 169.498815][ T61] team0 (unregistering): Port device team_slave_1 removed [ 169.544546][ T5102] Bluetooth: hci2: command tx timeout [ 169.553958][ T61] team0 (unregistering): Port device team_slave_0 removed [ 170.037125][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.850'. [ 170.104038][ T8157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.857'. [ 170.116998][ T8157] netlink: 104 bytes leftover after parsing attributes in process `syz.2.857'. [ 170.144082][ T8003] team0: Port device team_slave_0 added [ 170.172659][ T8003] team0: Port device team_slave_1 added [ 170.346078][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.378941][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.450419][ T8003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.491106][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.500430][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.583074][ T8003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.796158][ T8003] hsr_slave_0: entered promiscuous mode [ 170.813747][ T8003] hsr_slave_1: entered promiscuous mode [ 170.848232][ T8003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.871009][ T8003] Cannot create hsr debugfs directory [ 170.917414][ T8180] syzkaller1: entered promiscuous mode [ 170.936889][ T8180] syzkaller1: entered allmulticast mode [ 171.327098][ T8205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.870'. [ 171.362688][ T8204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.869'. [ 171.380930][ T8204] netlink: 104 bytes leftover after parsing attributes in process `syz.1.869'. [ 171.538263][ T8205] netlink: 'syz.4.870': attribute type 1 has an invalid length. [ 171.550347][ T8205] netlink: 'syz.4.870': attribute type 2 has an invalid length. [ 171.618435][ T5102] Bluetooth: hci2: command tx timeout [ 172.277663][ T8003] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.303750][ T8003] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.346241][ T8003] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.399727][ T8003] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.655736][ T8003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.873620][ T8003] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.008360][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.015586][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.108926][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.116158][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.697120][ T5102] Bluetooth: hci2: command tx timeout [ 173.739241][ T8003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.801398][ T8003] veth0_vlan: entered promiscuous mode [ 173.900906][ T8003] veth1_vlan: entered promiscuous mode [ 173.989794][ T8003] veth0_macvtap: entered promiscuous mode [ 174.031514][ T8003] veth1_macvtap: entered promiscuous mode [ 174.160222][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.181203][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.201774][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.226963][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.265974][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.284914][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.307089][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.326844][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.358834][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.398308][ T8315] __nla_validate_parse: 5 callbacks suppressed [ 174.398330][ T8315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'. [ 174.519019][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.532751][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.592829][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.617179][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.634398][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.668690][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.690000][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.706280][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.759839][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.867741][ T8003] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.876604][ T8003] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.918948][ T8003] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.928291][ T8003] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.957478][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.903'. [ 175.340089][ T2469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.361361][ T2469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.528488][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.543677][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.551908][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 175.657274][ T8349] netlink: 'syz.1.913': attribute type 1 has an invalid length. [ 175.687371][ T8349] netlink: 'syz.1.913': attribute type 2 has an invalid length. [ 176.427166][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.923'. [ 177.817039][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 178.163597][ T5109] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.173737][ T5109] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.182272][ T5109] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.191163][ T5109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.211307][ T5109] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 178.218863][ T5109] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 178.674943][ T8431] chnl_net:caif_netlink_parms(): no params data found [ 178.825665][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.075516][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.300688][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.461373][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.531717][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.560704][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.569145][ T8431] bridge_slave_0: entered allmulticast mode [ 179.589418][ T8477] netlink: 1068 bytes leftover after parsing attributes in process `syz.1.948'. [ 179.608534][ T8431] bridge_slave_0: entered promiscuous mode [ 179.639158][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.651742][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.669333][ T8431] bridge_slave_1: entered allmulticast mode [ 179.686734][ T8431] bridge_slave_1: entered promiscuous mode [ 179.713812][ T8477] netlink: 1068 bytes leftover after parsing attributes in process `syz.1.948'. [ 179.766392][ T8477] netlink: 1068 bytes leftover after parsing attributes in process `syz.1.948'. [ 179.777868][ T8477] netlink: 1068 bytes leftover after parsing attributes in process `syz.1.948'. [ 179.828615][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.853300][ T8477] netlink: 1068 bytes leftover after parsing attributes in process `syz.1.948'. [ 179.861656][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.934346][ T8477] netlink: 1068 bytes leftover after parsing attributes in process `syz.1.948'. [ 179.976224][ T8477] netlink: 1068 bytes leftover after parsing attributes in process `syz.1.948'. [ 180.052117][ T8477] netlink: 1068 bytes leftover after parsing attributes in process `syz.1.948'. [ 180.060353][ T8431] team0: Port device team_slave_0 added [ 180.069364][ T35] bridge_slave_1: left allmulticast mode [ 180.076062][ T35] bridge_slave_1: left promiscuous mode [ 180.086112][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.105617][ T35] bridge_slave_0: left allmulticast mode [ 180.111866][ T35] bridge_slave_0: left promiscuous mode [ 180.126557][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.257250][ T5102] Bluetooth: hci2: command tx timeout [ 180.773445][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.2.959'. [ 180.843469][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.863698][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.876469][ T35] bond0 (unregistering): Released all slaves [ 180.893860][ T8431] team0: Port device team_slave_1 added [ 181.177239][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.204108][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.239051][ T8431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.284535][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.296648][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.333489][ T8431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.389375][ T8514] syzkaller1: entered promiscuous mode [ 181.395271][ T8514] syzkaller1: entered allmulticast mode [ 181.554968][ T35] hsr_slave_0: left promiscuous mode [ 181.574940][ T35] hsr_slave_1: left promiscuous mode [ 181.586357][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.596030][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.639217][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.655053][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.707091][ T35] veth1_macvtap: left promiscuous mode [ 181.712981][ T35] veth0_macvtap: left promiscuous mode [ 181.727821][ T35] veth1_vlan: left promiscuous mode [ 181.735550][ T35] veth0_vlan: left promiscuous mode [ 182.295414][ T8540] netlink: 1068 bytes leftover after parsing attributes in process `syz.0.970'. [ 182.338044][ T5102] Bluetooth: hci2: command 0x041b tx timeout [ 182.352938][ T35] team0 (unregistering): Port device team_slave_1 removed [ 182.393171][ T35] team0 (unregistering): Port device team_slave_0 removed [ 182.770450][ T8514] macsec1: entered promiscuous mode [ 182.775692][ T8514] macvlan0: entered promiscuous mode [ 182.785469][ T8514] macvlan0: left promiscuous mode [ 182.833137][ T8431] hsr_slave_0: entered promiscuous mode [ 182.841383][ T8431] hsr_slave_1: entered promiscuous mode [ 182.850179][ T8431] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.861283][ T8431] Cannot create hsr debugfs directory [ 183.270854][ T8555] macvlan2: entered promiscuous mode [ 183.276403][ T8555] macvlan2: entered allmulticast mode [ 183.765815][ T8431] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 183.802337][ T8431] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 183.823545][ T8431] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 183.847705][ T8431] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.134833][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.171440][ T8586] macvlan2: entered promiscuous mode [ 184.176995][ T8586] macvlan2: entered allmulticast mode [ 184.224686][ T8431] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.254062][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.261287][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.319078][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.326270][ T5099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.417250][ T5109] Bluetooth: hci2: command 0x041b tx timeout [ 184.999092][ T8630] __nla_validate_parse: 17 callbacks suppressed [ 184.999115][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.996'. [ 185.049056][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.188393][ T8431] veth0_vlan: entered promiscuous mode [ 185.235157][ T8431] veth1_vlan: entered promiscuous mode [ 185.296375][ T8642] macvlan4: entered promiscuous mode [ 185.309150][ T8642] macvlan4: entered allmulticast mode [ 185.315794][ T8642] bridge0: entered promiscuous mode [ 185.324618][ T8642] bridge0: entered allmulticast mode [ 185.365464][ T8642] team0: Port device macvlan4 added [ 185.526419][ T8431] veth0_macvtap: entered promiscuous mode [ 185.568648][ T8431] veth1_macvtap: entered promiscuous mode [ 185.654654][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.699406][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.726977][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.752063][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.775426][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.826053][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.842717][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.854220][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.874199][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.925683][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.960098][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.987377][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.007721][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.033164][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.056850][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.081247][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.112660][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.146145][ T8672] Bluetooth: MGMT ver 1.22 [ 186.157688][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.185028][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1009'. [ 186.209968][ T8431] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.262527][ T8431] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.296576][ T8431] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.327156][ T8431] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.497102][ T5109] Bluetooth: hci2: command 0x041b tx timeout [ 186.571254][ T8687] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1014'. [ 186.649368][ T2469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.685407][ T2469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.766391][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.794858][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.159955][ T8712] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 187.442082][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1020'. [ 187.822676][ T8749] Driver unsupported XDP return value 0 on prog (id 287) dev N/A, expect packet loss! [ 188.142653][ T8752] netlink: 1068 bytes leftover after parsing attributes in process `syz.3.1032'. [ 188.174920][ T8752] netlink: 1068 bytes leftover after parsing attributes in process `syz.3.1032'. [ 188.226267][ T8752] netlink: 1068 bytes leftover after parsing attributes in process `syz.3.1032'. [ 188.273022][ T8752] netlink: 1068 bytes leftover after parsing attributes in process `syz.3.1032'. [ 188.306315][ T8752] netlink: 1068 bytes leftover after parsing attributes in process `syz.3.1032'. [ 188.341211][ T8752] netlink: 1068 bytes leftover after parsing attributes in process `syz.3.1032'. [ 188.577312][ T5102] Bluetooth: hci2: command 0x041b tx timeout [ 190.061331][ T8822] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 0 [ 190.277223][ T8831] netlink: 'syz.2.1056': attribute type 9 has an invalid length. [ 190.285016][ T8831] __nla_validate_parse: 20 callbacks suppressed [ 190.285034][ T8831] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1056'. [ 190.392414][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1055'. [ 190.657846][ T5115] Bluetooth: hci2: command 0x041b tx timeout [ 190.965712][ T8874] netlink: 'syz.3.1070': attribute type 2 has an invalid length. [ 190.997090][ T8874] netlink: 'syz.3.1070': attribute type 1 has an invalid length. [ 191.004911][ T8874] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1070'. [ 191.017721][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1072'. [ 191.083278][ T8876] team_slave_0: entered promiscuous mode [ 191.095648][ T8876] team_slave_0: entered allmulticast mode [ 191.148263][ T8876] team0: Port device team_slave_0 removed [ 191.297905][ T8890] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1076'. [ 191.461354][ T5115] Bluetooth: hci0: command 0x080f tx timeout [ 191.461378][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 191.469735][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 191.474521][ T4493] Bluetooth: hci3: command 0x0406 tx timeout [ 192.145364][ T8931] pim6reg1: entered promiscuous mode [ 192.170096][ T8931] pim6reg1: entered allmulticast mode [ 192.271119][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1102'. [ 192.619369][ T8965] sit0: entered promiscuous mode [ 192.647263][ T8965] sit0: entered allmulticast mode [ 193.366721][ T8991] bridge_slave_0: entered allmulticast mode [ 193.547494][ T8997] pim6reg1: entered promiscuous mode [ 193.552961][ T8997] pim6reg1: entered allmulticast mode [ 193.645443][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'. [ 193.788502][ T9002] pim6reg1: entered promiscuous mode [ 193.793877][ T9002] pim6reg1: entered allmulticast mode [ 194.514205][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.521747][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.456108][ T9017] pim6reg1: entered promiscuous mode [ 195.467148][ T9017] pim6reg1: entered allmulticast mode [ 195.664826][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'. [ 195.855516][ T9049] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1147'. [ 195.904870][ T9054] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1148'. [ 196.045036][ T9060] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000193: 0000 [#1] PREEMPT SMP KASAN PTI [ 196.057685][ T9060] KASAN: null-ptr-deref in range [0x0000000000000c98-0x0000000000000c9f] [ 196.066244][ T9060] CPU: 0 PID: 9060 Comm: syz.0.1152 Not tainted 6.10.0-rc4-syzkaller-00945-gf261aa15b2ca #0 [ 196.076438][ T9060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 196.086554][ T9060] RIP: 0010:coalesce_fill_reply+0xcc/0x1b70 [ 196.092627][ T9060] Code: e8 19 2c f9 f7 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 e3 f1 5e f8 bb 98 0c 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 c5 f1 5e f8 48 8b 03 48 89 44 24 [ 196.112276][ T9060] RSP: 0018:ffffc90004b96ee0 EFLAGS: 00010206 [ 196.118390][ T9060] RAX: 0000000000000193 RBX: 0000000000000c98 RCX: 0000000000040000 [ 196.126385][ T9060] RDX: ffffc90003992000 RSI: 0000000000001196 RDI: 0000000000001197 [ 196.134369][ T9060] RBP: ffffc90004b97118 R08: ffffffff899bb137 R09: 006e75745f7a7973 [ 196.142354][ T9060] R10: dffffc0000000000 R11: ffffffff899cf860 R12: ffffffff899cf860 [ 196.150449][ T9060] R13: dffffc0000000000 R14: ffff8880573e2940 R15: ffff888020f838c0 [ 196.158428][ T9060] FS: 00007f8d1c3ff6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 196.167458][ T9060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.174055][ T9060] CR2: 0000001b3221bff8 CR3: 0000000057f74000 CR4: 00000000003506f0 [ 196.182055][ T9060] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.190117][ T9060] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.198264][ T9060] Call Trace: [ 196.201547][ T9060] [ 196.204481][ T9060] ? __die_body+0x88/0xe0 [ 196.208830][ T9060] ? die_addr+0x108/0x140 [ 196.213175][ T9060] ? exc_general_protection+0x3dd/0x5d0 [ 196.218746][ T9060] ? asm_exc_general_protection+0x26/0x30 [ 196.224475][ T9060] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 196.230148][ T9060] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 196.235804][ T9060] ? ethnl_default_dumpit+0x517/0xb30 [ 196.241196][ T9060] ? coalesce_fill_reply+0xcc/0x1b70 [ 196.246507][ T9060] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.252504][ T9060] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 196.258152][ T9060] ? rcu_is_watching+0x15/0xb0 [ 196.262952][ T9060] ? trace_contention_end+0x3c/0x120 [ 196.268275][ T9060] ? nla_put+0x131/0x1e0 [ 196.272567][ T9060] ? __asan_memcpy+0x40/0x70 [ 196.277183][ T9060] ? nla_put+0x131/0x1e0 [ 196.281444][ T9060] ? ethnl_fill_reply_header+0x295/0x3c0 [ 196.287091][ T9060] ? __pfx_netdev_run_todo+0x10/0x10 [ 196.292387][ T9060] ? __pfx_ethnl_fill_reply_header+0x10/0x10 [ 196.298376][ T9060] ? ethnl_ops_complete+0xba/0xd0 [ 196.303411][ T9060] ? coalesce_prepare_data+0x175/0x1e0 [ 196.308885][ T9060] ? __pfx_coalesce_fill_reply+0x10/0x10 [ 196.314530][ T9060] ? ethnl_default_dumpit+0x83/0xb30 [ 196.319832][ T9060] ethnl_default_dumpit+0x5ac/0xb30 [ 196.325058][ T9060] ? ethnl_default_dumpit+0x83/0xb30 [ 196.330368][ T9060] genl_dumpit+0x107/0x1a0 [ 196.334812][ T9060] netlink_dump+0x647/0xd80 [ 196.339766][ T9060] ? __pfx_netlink_dump+0x10/0x10 [ 196.345067][ T9060] ? genl_start+0x597/0x6d0 [ 196.349674][ T9060] __netlink_dump_start+0x59f/0x780 [ 196.354887][ T9060] genl_rcv_msg+0x88c/0xec0 [ 196.359402][ T9060] ? mark_lock+0x9a/0x350 [ 196.363749][ T9060] ? __pfx_genl_rcv_msg+0x10/0x10 [ 196.368811][ T9060] ? __pfx_genl_start+0x10/0x10 [ 196.373676][ T9060] ? __pfx_genl_dumpit+0x10/0x10 [ 196.378660][ T9060] ? __pfx_genl_done+0x10/0x10 [ 196.383450][ T9060] ? __pfx_lock_acquire+0x10/0x10 [ 196.388481][ T9060] ? __pfx_ethnl_default_start+0x10/0x10 [ 196.394122][ T9060] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 196.399868][ T9060] ? __pfx_ethnl_default_done+0x10/0x10 [ 196.405425][ T9060] ? __pfx___might_resched+0x10/0x10 [ 196.410725][ T9060] netlink_rcv_skb+0x1e3/0x430 [ 196.415499][ T9060] ? __pfx_genl_rcv_msg+0x10/0x10 [ 196.420538][ T9060] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.425836][ T9060] ? __netlink_deliver_tap+0x77e/0x7c0 [ 196.431308][ T9060] genl_rcv+0x28/0x40 [ 196.435302][ T9060] netlink_unicast+0x7f0/0x990 [ 196.440086][ T9060] ? __pfx_netlink_unicast+0x10/0x10 [ 196.445385][ T9060] ? __virt_addr_valid+0x183/0x520 [ 196.450529][ T9060] ? __check_object_size+0x49c/0x900 [ 196.455868][ T9060] ? bpf_lsm_netlink_send+0x9/0x10 [ 196.461019][ T9060] netlink_sendmsg+0x8e4/0xcb0 [ 196.465842][ T9060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.471165][ T9060] ? __import_iovec+0x536/0x820 [ 196.476063][ T9060] ? aa_sock_msg_perm+0x91/0x160 [ 196.481026][ T9060] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 196.486410][ T9060] ? security_socket_sendmsg+0x87/0xb0 [ 196.491969][ T9060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.497268][ T9060] __sock_sendmsg+0x221/0x270 [ 196.501959][ T9060] ____sys_sendmsg+0x525/0x7d0 [ 196.506740][ T9060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.512053][ T9060] __sys_sendmsg+0x2b0/0x3a0 [ 196.516678][ T9060] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.521831][ T9060] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.528182][ T9060] ? do_syscall_64+0x100/0x230 [ 196.532960][ T9060] ? do_syscall_64+0xb6/0x230 [ 196.537669][ T9060] do_syscall_64+0xf3/0x230 [ 196.542220][ T9060] ? clear_bhb_loop+0x35/0x90 [ 196.546915][ T9060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.552844][ T9060] RIP: 0033:0x7f8d1c975ae9 [ 196.557287][ T9060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.576938][ T9060] RSP: 002b:00007f8d1c3ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.585393][ T9060] RAX: ffffffffffffffda RBX: 00007f8d1cb03fa0 RCX: 00007f8d1c975ae9 [ 196.593381][ T9060] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000009 [ 196.601408][ T9060] RBP: 00007f8d1c9f6756 R08: 0000000000000000 R09: 0000000000000000 [ 196.609406][ T9060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.617405][ T9060] R13: 000000000000000b R14: 00007f8d1cb03fa0 R15: 00007ffc7bf916e8 [ 196.625416][ T9060] [ 196.628469][ T9060] Modules linked in: [ 196.651175][ T9060] ---[ end trace 0000000000000000 ]--- [ 196.657287][ T9060] RIP: 0010:coalesce_fill_reply+0xcc/0x1b70 [ 196.663339][ T9060] Code: e8 19 2c f9 f7 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 e3 f1 5e f8 bb 98 0c 00 00 49 03 1e 48 89 d8 48 c1 e8 03 <42> 80 3c 28 00 74 08 48 89 df e8 c5 f1 5e f8 48 8b 03 48 89 44 24 [ 196.684092][ T9060] RSP: 0018:ffffc90004b96ee0 EFLAGS: 00010206 [ 196.690942][ T9060] RAX: 0000000000000193 RBX: 0000000000000c98 RCX: 0000000000040000 [ 196.707444][ T9060] RDX: ffffc90003992000 RSI: 0000000000001196 RDI: 0000000000001197 [ 196.708428][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1154'. [ 196.715989][ T9060] RBP: ffffc90004b97118 R08: ffffffff899bb137 R09: 006e75745f7a7973 [ 196.716023][ T9060] R10: dffffc0000000000 R11: ffffffff899cf860 R12: ffffffff899cf860 [ 196.716057][ T9060] R13: dffffc0000000000 R14: ffff8880573e2940 R15: ffff888020f838c0 [ 196.787846][ T9060] FS: 00007f8d1c3ff6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 196.797474][ T9060] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.805024][ T9060] CR2: 0000001b32213ff8 CR3: 0000000057f74000 CR4: 00000000003506f0 [ 196.814176][ T9060] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.823077][ T9060] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.831687][ T9060] Kernel panic - not syncing: Fatal exception [ 196.838233][ T9060] Kernel Offset: disabled [ 196.842730][ T9060] Rebooting in 86400 seconds..