last executing test programs: 1m30.507366911s ago: executing program 2 (id=713): pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) socket$pptp(0x18, 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x3000000000000}}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '*\x00'}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) r3 = socket(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x4}, 0x8) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x80}}, 0x10, 0x0}, 0x44840) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 1m12.448214834s ago: executing program 2 (id=713): pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) socket$pptp(0x18, 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x3000000000000}}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '*\x00'}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) r3 = socket(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x4}, 0x8) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x80}}, 0x10, 0x0}, 0x44840) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 58.411608827s ago: executing program 2 (id=713): pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) socket$pptp(0x18, 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x3000000000000}}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '*\x00'}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) r3 = socket(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x4}, 0x8) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x80}}, 0x10, 0x0}, 0x44840) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 41.567338979s ago: executing program 2 (id=713): pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) socket$pptp(0x18, 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x3000000000000}}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '*\x00'}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) r3 = socket(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x4}, 0x8) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x80}}, 0x10, 0x0}, 0x44840) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 27.354384918s ago: executing program 1 (id=1156): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000200)="03", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001400010300000000000000001e"], 0x18}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x9, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r2, &(0x7f0000000340), &(0x7f0000000900)=@udp6, 0x2}, 0x20) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, 0xffffffffffffffff, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006dc0)=[{{0x0, 0x0, &(0x7f0000000100)}}, {{0x0, 0x0, &(0x7f00000005c0)}}, {{&(0x7f00000002c0), 0x80, &(0x7f0000000580)=[{&(0x7f0000000100)=""/18, 0x12}, {&(0x7f0000000340)=""/72, 0x48}, {&(0x7f0000000180)=""/17, 0x11}, {&(0x7f00000003c0)=""/14, 0xe}, {&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000400)=""/63, 0x3f}], 0x6, &(0x7f0000000600)=""/224, 0xe0}, 0x1}, {{&(0x7f0000000700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)=""/35, 0x23}, {&(0x7f00000007c0)=""/159, 0x9f}, {&(0x7f0000000880)=""/109, 0x6d}, {&(0x7f0000000a40)=""/144, 0x90}, {0x0}, {&(0x7f0000000b80)=""/123, 0x7b}], 0x6, &(0x7f0000000c80)=""/60, 0x3c}, 0x1b0}, {{&(0x7f0000000cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003500)=[{&(0x7f0000000d40)=""/167, 0xa7}, {&(0x7f0000000e00)=""/95, 0x5f}, {0x0}, {&(0x7f0000000f40)=""/239, 0xef}, {&(0x7f0000001080)=""/69, 0x45}, {&(0x7f0000001100)=""/188, 0xbc}, {&(0x7f0000002240)=""/181, 0xb5}, {&(0x7f0000002300)=""/142, 0x8e}, {&(0x7f0000003440)=""/136, 0x88}], 0x9, &(0x7f00000011c0)}}, {{&(0x7f00000023c0)=@in={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000038c0)=[{&(0x7f00000035c0)=""/23, 0x17}, {0x0}, {&(0x7f0000003680)=""/99, 0x63}, {&(0x7f00000037c0)=""/152, 0x98}, {&(0x7f0000003880)=""/56, 0x38}], 0x5, &(0x7f0000003940)=""/88, 0x58}}, {{&(0x7f00000039c0)=@tipc=@name, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003a40)=""/47, 0x2f}, {&(0x7f0000003a80)=""/204, 0xcc}, {&(0x7f0000003b80)=""/201, 0xc9}, {&(0x7f0000003c80)=""/180, 0xb4}], 0x4}, 0x8}, {{&(0x7f0000003d80)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000003e00)=""/188, 0xbc}, {0x0}], 0x2, &(0x7f0000004f00)=""/178, 0xb2}, 0x100}, {{&(0x7f0000004fc0)=@phonet, 0x80, &(0x7f0000006540)=[{&(0x7f0000005040)=""/173, 0xad}, {&(0x7f0000005100)=""/239, 0xef}, {0x0}, {&(0x7f0000005300)=""/172, 0xac}, {&(0x7f00000053c0)=""/42, 0x2a}, {&(0x7f0000005540)=""/4096, 0x1000}], 0x6}, 0x9}, {{&(0x7f0000006680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000006800)=[{&(0x7f0000006700)=""/237, 0xed}], 0x1}, 0x477}, {{&(0x7f0000006840)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000006d00)=[{&(0x7f00000068c0)=""/143, 0x8f}, {&(0x7f0000006980)=""/108, 0x6c}, {&(0x7f0000006a00)=""/208, 0xd0}, {0x0}, {0x0}, {&(0x7f0000006c00)=""/236, 0xec}], 0x6, &(0x7f0000006d80)=""/54, 0x36}, 0xba}], 0xb, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 27.132050456s ago: executing program 2 (id=713): pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) socket$pptp(0x18, 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x3000000000000}}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '*\x00'}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) r3 = socket(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x4}, 0x8) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x80}}, 0x10, 0x0}, 0x44840) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 26.244599985s ago: executing program 1 (id=1162): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x1e}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000d22a6900040000000000000000000000000000000000000000000000000000002000000000000000000800"/84], 0xb8}, 0x1, 0x0, 0x0, 0x801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) unshare(0x28000600) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x15, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000145e6164208223c07020000000000000000000000b7080000000000007b8af8ff000000090000007b8af0ff00000000bfa100000000000007010080f8ffffffbfa400000000000007040000f0ffffffb702000008bc000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000078203000600000085100000020000001800000009000000000000000100000085000000c00000"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0x500, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x27e) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003b0007010000000000000000027c00000400ff000c000180060017"], 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0x34}}, 0x0) 22.292971523s ago: executing program 1 (id=1189): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0xd, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r0, 0x29, 0x1e, 0x0, 0xffffffffffffffa8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendto$inet6(r0, &(0x7f0000000000)="c0", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xb0, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x74, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x54, 0x1, 'quot\xa8\xd2(\xbf)\xd5~\xa2\xde\x8c\x05\x8e]\xaf\x81^\xd1\xedV\xa2~\xe8h\xabP\x93K)\xea\x15\x9b\x95\x18\xa1\xb5\t\xf9~\xc0\xfe\x1b\xca\xeb\x1e\xcc\xee\xeac\x82\x00\xa3p\x97JO\x1f\x8e\x82\x8f9\x00'/80}]}}}]}], {0x14, 0x10}}, 0xf8}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(r6, &(0x7f0000005580)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca6b2a9ecf3471d2", 0x28}, {&(0x7f0000000500)="fc484e55021886bb", 0x7fffefd8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000017c0)="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"}, {&(0x7f00000018c0)="0690cdffc3c99d08640babd8b1faa6df615c25e02ab79f08aa99b6473bf9e1c984c8be7cd9e668d8de435074118a778b7a395ab8d1ff9a2bc104345405c59a67be46f397e4f18affabd1a72ac8c05c0ccf03403aaee3d0a6dae57ebdbe92c8e1d912f0439a346a59f0c752b42dad97a6ea36802269a0bc4e7d3461fd3857e37b464e9c2860e0eec11030a5706c82a236fa6d458bc3bf77effaace52765be5a6122cec973983f4cab0c2d3b8444198e9eac2219e35118558cfbb78d92321e83e32efefcaee4105d"}]}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000019c0)="32873e0af904df83eba8da63f6bfb47de07786850f9849cc565bc8b5acbabcee59573f9259737b46041f8f3012b3e4b3b8cc422bce4969af968d7f62ba8728353bd10f9264b0960bf984e2d3dfefefed7d276e23603c6daf3b16b18786ea1a45ae9835886b80c26e7c9b1073df97696fcffebde19f0286bf7586c37bb1ba1cbb7988f6dc8613d906928003f7129144c6c8f11ed9eec42226a692d02bd50b1614d82b7d8a36dfc9e9693c5bd961541331f93ec45068f046e82b3859193397a238"}, {&(0x7f0000000140)="d4ab3d34f63ee8a52a98da63d502423f644afcb22e9987a427c884d1843a85a8332c3bee22db6ec450f567bea2bda0cb"}, {&(0x7f0000001a80)="5bdadc3c765839cfdb2b77ba98e32b72f8b7c2a87de32598190849e3c5c8b3f1acabd95724c84249b5bf71e803523dd2c9ba4c34d69ccff99a976bbed0e05482894e096cf41a5e094d337ff91ab3e6e94e5be5cc1dbf037cc84a775a419e3e0b9e23028f5cc71cbc1e3acc3d78d97acd94bf352d2380777aab62233e5ac8a674d53bdc40d9fb8a191e5e0e3d82364a6e6c7a8e5bf9eb09f004d483"}, {&(0x7f0000001bc0)="dc4adc770ef68bafd0c48beba52a4e43b9197bc12e512b86731105f7de5cf43c060fc631c14780ac4d73df8bbd73771f0939f0e114ed3d8d6e395d3c9faeb6236c8f2ebff6eaba4c55619bc0e1d245809ef9e083d4736c23e48617996614979877c670597ccb35170523155648a8d74c1e9d3c18285a70d8567127bfa6be09340b8c52e779d3d82353921abc3f43500a5477b0249bd4030aefa808102094b7ccc6d6121566596112201313283517e1e9c3a69adedb052381ac9127d016adf71761cbfa"}], 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @loopback, @private=0xa010100}}}]}}, {{&(0x7f0000000280)={0x2, 0x4e24, @multicast2}, 0x0, &(0x7f0000002080)=[{&(0x7f0000001cc0)="ea21255a455e4f733fc185aa616df976e175f62f6f586d515150357cce71598dbb774d7ee9dc5d47b47acaef5be2c5099398108fafce07f38dddb03bf3ac512b501f75905c21358acceab6d4f02b5518d9b0fa94982a5e0399ece5f9725403c8fef0bcda6ca804de2946e42dbddfe7bdeefc64ee650d339330a73e82e217e13813"}, {&(0x7f00000002c0)="9c13b9a84e61d7b213cef3de213fe0cbd298"}, {&(0x7f0000001d80)="2bccab8fcae8c999eb7d2e33b4fb8a238eaad53aa05746dcc0f503566d9bae4051966701b058ce9838596c70b8e30956755f7be5fd8970c6196a81128c8d50a6669faecd7fe17a91d0339da08c38e8579f6329a13da75b05e560d60ccba0fb63d30f2a3dbbd9b60b56b450efa2d8b963fcbe445cf3461c6a9d1cfba680"}, {&(0x7f0000001b40)="42480a5da76643c134cc03adb46fed8b332b7b011772e225b170ac7227"}, {&(0x7f0000001e00)="b7ce10008ea665d7c6b4fa71c525afbf2aa96935500c0ddd1d8b7b1b8c62b1bd0914bbd5ab6c00cc8fc1a5239aec4d453cd068afa29f3a2c673d3718b843283651b2a6e469cb532915e18d648e8dda7392463db8025490c2836600e827a4f306d71a232e315764124de4a9d9065e7fd7c34c0e4e0c7168e95aa1086062b048bb5bf4344a36632078b68dcccb09602e538dbc80bd91d5b151bf3cf2f04c57e92374788916df6cba2f39c376e59b578b3a8a9b49b766c220b13005c5d802505ce540e8589ede5c19855a08ca7da3eae0d7bed31027df9ff350201780"}, {&(0x7f0000001f00)="5f9b68626ebab4d91c5276552f9c1cdb6dbdb26f9d21792c893ee93bddbf98ddf0088e6d76b841050c0bf38c0938cdf4b2c95fd1b88e3f5016ea8760a50a3e9fb8d5"}, {&(0x7f0000001f80)="782ad1f62e0378d0da6affa17342b37529ce224e75c3be31fd91ec3d9d7ab89eda082f5bb279e526137600f7a301410e89a9735feb3aa4915c6b811ab724ce39ea092ea4af3814c2211db270ddbcab0a4f834a30150ce17cd4380af76bbdbcbe6252d47058a5350db06541da8fa089b11431f4521ddca5f3d9fe9c90d5920f9f989ec9e9dc31d2d806a9f5a54bfa268b5809bd8df90f05950e1749d4b606352b14a0305c0c2e5e397ad38c73ea901623f9f52439d97a5d5f3818522b326d26d4c180ad372ba98d8739df7299d5fae3486b4424a0"}], 0x0, &(0x7f0000002100)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0x90}}, @ip_ttl={{0x0, 0x0, 0x2, 0x9}}, @ip_ttl={{0x0, 0x0, 0x2, 0x757c131c}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x8}}]}}, {{&(0x7f0000002180)={0x2, 0x4e20, @private=0xa010100}, 0x0, &(0x7f0000002740)=[{&(0x7f00000021c0)="f702b593bcb0c8be473b944bfe1f51d3811ce4bc4d111d8f12e48342c66ce56c7e7771c9f6bab64deb550d2226584d16f7dbaf7111419d300f4a25a0351656811b4045608e0489f6160cc23bb4304e83cf6f7af27880b6bb8417bfd7b10517c0854f333b256b61028d00d796dd4dc6f48d782b41476d1adf841e67fe6a0a8166d810231bcfc8a1ed2f8c6d4331ba00aa9cfb7c661e54bdaf6ecfdbdeb9df9c6c96219803148337860819b6ad37bf9c2b1c48cfdec5605a5c169def674629689946a5b8eeeee3659731fff6679c7ed490c9960d4d84fa27d8fe53daf934dd0313b6a70b"}, {&(0x7f0000003140)="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"}, {&(0x7f00000022c0)="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"}, {&(0x7f00000023c0)="a104f50f6da139b81cec89fdbe683ffca9aa87054b444cf7f83b354c67c94c02b0080be9184413b5ba3d1c99eaed3a24efe0f659f83315a361a36a4e090933c9ef223f269a8cbe442bf50b05912330550ebaab49d6968c3ac40b067ba5588e4b923b57ef8cdfa812bd904ee985c4255ab27bf24894407cca0073624f1015e18efa6f003345b75d4066863718560da483ad014138e2e8f929bbb2118c84beaacbd1b9f137e504d275a16c6f7a8555af7347d9ca7d802eda33306cc6ad"}, {&(0x7f0000002480)="3ebde3bee3e3df770ef5b9db14962055b5637da337933f8bc382d07390a5d39617594f5a191024c79b7d4be2d26370c51dc44e29f370376c9e6c9cc6743b15bbc2bbb10128abd8e902307f896e1309f663f671cd962cfe56ec9d02085fe651956f7a2283aa1f989343b1775baa0ff4a625f16a2b1d5c5d2d47d22e191f30a19686156c48"}, {&(0x7f0000002540)="3d34282760ea4e5da6b838cd7a44dc3172466b822a046a0b2165324fe7e606d6104927e1d2fe20b4028d480483e9477cd4d05ab3e13266a41c79bc0361b26482f6db63036f6c9ff1378e1cc11a9e5846ca260116cd9748cd0b5a54686d37ec0a61550378e97ea9dfb3159515011e0d0d2513053c4258ee3abe39e3af53c5bb6841a2fa6e8b370261b2d5410c14ec4524a1ef01707a02597e54ad3234530b5e21abfbcbccd81a45045c18ac96185f61eb32f828000758d0121fce84c6c55772c623816dd372f4f35cab24a398998a1afba2e7fbd552ed593b003cc760dda205aa8df6b8388c79fd6a925ca3af2ea01d4c1434"}, {&(0x7f0000002640)="885d1ab1f57c7fafda2c21861cf89f90908fafe8a9b47c6fa0dcd682f2df2c4964c6ff1a48bc2edde7e616e98f32f47fe96daa08ca10b955322a53ce09845c2e39c76db6b39553ed9b2e5a318f0d764dcc20a1c80c59b25c59e57925587ece517976d2bb26b05ce7b42b168af51b0c1c5ebb7822191400b144cd784425600af38fd6382a4550ed058dfdb61fe2a45325c81d139470b4d5f7e706383342165cbd9b4ce3efac45413f5aa4a36408753989d10ffd0201ae"}, {&(0x7f0000002700)="f3584b67aedd585dd9f0cf2dd19ecdfe633461d465977a8dae7f8667a84f4446854df953ee348193fd789b6907627c7d69920998a0d7"}], 0x0, &(0x7f00000027c0)=[@ip_retopts={{0x0, 0x0, 0x7, {[@ssrr={0x89, 0x0, 0x61, [@remote, @multicast2, @dev, @rand_addr=0x64010101]}, @ssrr={0x89, 0x0, 0xc9, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}, @broadcast]}]}}}, @ip_ttl={{0x0, 0x0, 0x2, 0xffffffff}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x4a}}]}}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002840)="54653b031a83ec936474cabe967f80e0073e2e6e92a81dc1714af95ba204bd27957d6eb627de79a1deae4c23ae4d7fdfb8a0d71c8af3f42aa1c4e5"}], 0x0, &(0x7f00000028c0)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0x7}}]}}, {{&(0x7f0000002900)={0x2, 0x4e24, @multicast2}, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002940)="1444d9c6724ad3d7"}, {&(0x7f0000002980)="867a9686868b6c3a8d507316885c6afd13964586c85c8d84720c6d5fe098a06fc9661e43d1d19f1b57566a1caa584054ad4edf985b013c8c056542d3bcda0c88486610a7f069c86cb86a16fb14ffaec6f0f3c27a6b83f5b04edc761b4fc2a10b810b081bd94367625d22980d75f6928d8c3adb9f460e36a9ad2e82c55d2a2af8dc1091874c3c2d18f1bd3c09fde5e6351a2dc62bb30728526f163cf53fbf161cacd588c355f4976ef92a72962cc9b37332bac01eb551d0ce5fbe321b3481c1dff2a71937686458e0630f27cd9c9d6c7f789a"}, {&(0x7f0000002a80)="252c565fdc5ae842ba85ce158e7ac8447e9ff2654721d11287dbcf2c8feaf72f7e3173a8ee0ebe2e100ce9e646c8356cd081fb8c5bc5386f06a63b6294f0e352a62d3546e603d06f6dd68f55926597003e2e48aa236955140caf2a65e4723ba18c49c1346b561c6177d1857a0d59d227323a67d256534761ba902c6aecb935700d7d5ddd6d3f0ee31b38e10906508016b867e45c931eb675f3650613f74491ede94069640b950444694fddf53a1734fc1fff06d67fcc4fc3"}, {&(0x7f0000002b40)="cc42a80c15fabbb47f9a0c804f8233df88086147beb180c3bc7778b972a95220b44dad72ac63a388d2b2940a070e5a2183f9e6895002e652ba0cbcfb5af965aa70739a855261889056a7b59bedad362c723158b6195e719efabb91ff03bb805f8086f61425b13b01031ed0e5daf8c4dd57becb3e5c6b814cf695827233f9cea3696726d0739b3e13a3aa1d"}, {&(0x7f0000002c00)="62483f20bb8660c05c5513bf88e17fbc9084ddd4721d37d75bb93b9e4e0b19faaa0c20dc2a83c20c6a28169e683cd57c5593f1814061e76c0c00d91d292a936b8d16a6017240c1dc470aae5083c86a4d184c784e8d18dda33cd9f1c9f3ff4e16632f6c323a15638c"}, {&(0x7f0000002c80)="ce28405d84befc2cd4d3733539ac046c1952892ad048a6f2dcea9875dd67741e96952180fe4923d34b83cdcbb461cea03292c77c14b4d42bbd6886b513c500aa6ac00a019a9ce65b5f992d9887ab93813cd1192584f242bb02fbe6c17f797a4d92b0b280d4e25059395c0cbe42b1e1b437b1d1bf1ad72c35084a4c08bd20342b76b5fcaf8e6cf79817dc80902d39e00a29b0b6f4f5d8c14a829e8f35cb7ba222cb78b9d4efe8dae3e36e73ac8c17bc316ea8ca9c048aa613579db69bd7cac1"}, {&(0x7f0000002d40)="6093f5c9d69b0ad35a01f47f1216255d964de1663bd9bab7ad316867995c9f5599313aa7efaa97e4c5e6ee118ef1b121f33540dc6ddedde68d570cece6fd5a1e080cfd40c813df6ddca2ad4e390315eb89b72e0a390a85a7fba670a07f5bbf60b443bafcb393ac125aa6f33a44e15ea4"}, {&(0x7f0000002dc0)="e0532a23cb99853298bd62bfe808bbe21ac8cb6f4f5670f67c290c406f0474507891217393954c988d82124d8c95d98410be84630f10e17d33f91459130035b4b36b59bb811bbd3e066d582cf0247b123a8b7ae27bf6afac45f2e7c080bd0b0aafeff17fa12c83767ff4ecc7250ab0599f4834e508f0f0bd5cd149d86666670a1b5b0b3c9a87d21d2b1178c36eac851c640b2c096cc368d7d9cedfd1424b5857d22195674930c6824176a79898918f1c85cfa3008a2a4970"}, {&(0x7f0000004140)="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"}, {&(0x7f0000002e80)="41b4372501e82a7a8cd1f47c6cd18f7a1d4d5dc9f921192d0441442dfdabddac584c7d2d90ec394f"}], 0x0, &(0x7f0000002f80)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0x6}}, @ip_ttl={{0x0, 0x0, 0x2, 0x3}}]}}, {{&(0x7f0000002fc0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, &(0x7f0000003080)=[{&(0x7f0000003000)="b3d93c62d7befdc93e8a8884f0ad17e09b26ff4a17a7adf110cf22fa2a75068baf872abc48e40ae72bf47031db7e5f1eb83ab64e9b5cf5f23faf9ee0ac7a2e4cb88640b2eed39e5d6a3e1e86d84f020d7523905f4a22c59ca46d2a554cb525"}, {&(0x7f0000005140)="0a34f4b439550905f4433ebbd4da73d439136f8530a5f183af6cd403e9a8a73724a70d6f771c945f9b3678bc0a9ac944684b5c7bca4b0f5515c730a72e7556614b0d1d61eea0a3e9e69071fd1ad9d8a284ad03ebe53ec45f95bb04442e2fd88eb25f071c96201b5347a7579ac73a119094afbee12dc8b1c6be93df79134652d69c92cddb7ce161b5cdce0e3e607224c69cfbe8e9a41fdc2f630d3fd0bdb8ff4c4382"}], 0x0, &(0x7f0000005200)=[@ip_retopts={{0x0, 0x0, 0x7, {[@ssrr={0x89, 0x0, 0xab, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @rr={0x7, 0x0, 0xac, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty, @rand_addr=0x64010101, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ra={0x94, 0x0, 0x1}, @timestamp_addr={0x44, 0x0, 0x8d, 0x1, 0x2, [{@remote, 0x10000}, {@private=0xa010101, 0x26ad}]}, @end, @cipso={0x86, 0x0, 0x0, [{0x5, 0x0, "3239209fa7b3735fe22f82ef"}]}, @timestamp={0x44, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}, @ssrr={0x89, 0x0, 0x97, [@empty, @empty]}, @timestamp={0x44, 0x0, 0xee, 0x0, 0x2, [0x8, 0x3, 0x1, 0x8001]}]}}}, @ip_retopts={{0x0, 0x0, 0x7, {[@noop, @rr={0x7, 0x0, 0xb5, [@dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010100, @local, @loopback]}, @ssrr={0x89, 0x0, 0x0, [@multicast2, @private=0xa010100, @empty, @loopback, @private=0xa010100, @empty, @multicast2]}, @cipso={0x86, 0x0, 0x3, [{0x2, 0x0, "91987476"}, {0x2, 0x0, "bca941345aa0beeeff"}]}, @timestamp_addr={0x44, 0x0, 0x7b, 0x1, 0x3}, @rr={0x7, 0x0, 0x6a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}, @ip_pktinfo={{0x0, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}, @ip_retopts={{0x0, 0x0, 0x7, {[@ssrr={0x89, 0x0, 0x8f, [@multicast1, @empty, @multicast1, @rand_addr=0x64010100, @empty]}, @timestamp={0x44, 0x0, 0xef, 0x0, 0x1, [0x0, 0x5, 0x5, 0x0]}, @ssrr={0x89, 0x0, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x0, 0x3c, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @private=0xa010101]}]}}}, @ip_tos_int]}}, {{&(0x7f00000030c0)={0x2, 0x0, @loopback}, 0x0, &(0x7f00000054c0)=[{&(0x7f0000005400)="d427e721aa674a51787ca2cd2b6df443eef19557c7b318aef67291575c5a75826da8a85dd69b78483626d7810537f3892e76ae9fa37a534a343ff929dfb775ff74d068322eecf61b110cd112cfc65fa31838e30a479f438490108233a7fd29b36c7d85cc3f4303c29ea65ff5d75b95f3772a24d4472a1feea5f077d4633f55c3a0754f0f007e8091e9560b880da043ee2e4631b919bf8792ec6c"}], 0x0, &(0x7f0000005500)=[@ip_retopts={{0x0, 0x0, 0x7, {[@timestamp={0x44, 0x0, 0xba, 0x0, 0x9, [0x1000]}, @end, @timestamp_prespec={0x44, 0x0, 0x76, 0x3, 0xb, [{@local, 0x7e29}, {@local, 0x9}, {@local, 0x4}, {@rand_addr=0x64010102, 0x7}, {@loopback, 0xfffffffd}, {@remote, 0xffffff01}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010102, 0x1ded56a6}]}]}}}]}}], 0x3fffdcb, 0x0) sendto$inet(r6, &(0x7f0000000000)='o', 0x1, 0x60ffffffffff, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x0) recvmsg$kcm(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000300)=""/97, 0x61}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f0000000240)=""/54, 0x36}, {&(0x7f0000000380)=""/29, 0x1d}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/102, 0x66}, {&(0x7f0000000440)=""/109, 0x6d}, {&(0x7f0000001600)=""/97, 0x61}, {&(0x7f00000004c0)=""/28, 0x1c}], 0x9, &(0x7f0000001740)=""/22, 0x16}, 0x40000000) 21.571965268s ago: executing program 1 (id=1196): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x200, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 21.419965142s ago: executing program 1 (id=1199): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x1e}}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000d22a6900040000000000000000000000000000000000000000000000000000002000000000000000000800"/84], 0xb8}, 0x1, 0x0, 0x0, 0x801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) unshare(0x28000600) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x15, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000145e6164208223c07020000000000000000000000b7080000000000007b8af8ff000000090000007b8af0ff00000000bfa100000000000007010080f8ffffffbfa400000000000007040000f0ffffffb702000008bc000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000078203000600000085100000020000001800000009000000000000000100000085000000c00000"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0x500, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0200000005000000000000000000766574683098c76f5f7465616d00000064756d6d79300000000000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffff7fff00000000000000087000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000001b700000000000010000000000000000000000000000000ffffffff0000"]}, 0x27e) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003b0007010000000000000000027c00000400ff000c000180060017"], 0x24}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r4], 0x34}}, 0x0) 4.121958631s ago: executing program 3 (id=1284): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000740)=@raw=[@jmp={0x5, 0x0, 0x7, 0x8, 0x4, 0xffffffffffffffff, 0x1}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x5}, @exit, @call={0x85, 0x0, 0x0, 0x1c}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x6}, @map_idx_val={0x18, 0x10, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xd}], &(0x7f0000000180)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x7e) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipv6_newaddrlabel={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x37}, [@IFAL_ADDRESS={0x14, 0x5, @remote}, @IFAL_ADDRESS={0x14, 0x1, @mcast2={0xff, 0x7}}]}, 0x44}}, 0x0) 3.936045422s ago: executing program 3 (id=1285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000426bd7000fcdbdf25630000000c009900b30000004800000057cca9e2aa67320048bde7f05ad5e4d788b45ddabdcd458ae0f8801901ff7bd8aa0ba2ecae391f6f7c11e7e0cd7dfb14"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4080) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{0x0}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000029dfb0c995f59d2714000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r7 = socket$inet(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000005c0)={0x2, 0x4e20, @remote}, 0x10) 3.840175318s ago: executing program 3 (id=1286): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newneigh={0x28, 0x1c, 0x1, 0x7000000, 0x0, {0x7, 0x0, 0x0, r1, 0x40, 0xa2}, [@NDA_LLADDR={0xa, 0x2, @remote}]}, 0x28}}, 0x0) 3.661215932s ago: executing program 3 (id=1288): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000600), 0x42) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x4c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x1}, [@remote]}}}]}, 0x4c}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000140)={'wlan1\x00'}) socket$inet6_udp(0xa, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100000e000000000000000000000005000600000000000a0000000000000000000000000000000000000000000005000500000000000a00090000000000fe8800000000000000000000000000010000000000000036020013000300000000000000000000009b00000000"], 0x70}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'}) recvmsg$can_bcm(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/148, 0x94}, {0x0}], 0x2}, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000580)={0x0, 0x7ab0715dca68fed7, 0x0, {0x77359400}, {}, {}, 0x4, @canfd={{}, 0x1, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}}, 0x0) 3.410016163s ago: executing program 0 (id=1291): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x4300, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 3.265502455s ago: executing program 0 (id=1292): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x3c, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000), 0xe) listen(r4, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x76, @fixed, 0x0, 0x2}, 0xe) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a0000002000018008000100", @ANYRES32=r3, @ANYBLOB="140002"], 0x34}}, 0x20004000) 3.084267189s ago: executing program 0 (id=1294): r0 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0xdc03, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 2.780396253s ago: executing program 4 (id=1297): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000240)={0x18, 0x0, {0x0, @link_local}}, 0x1e) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0xc00, @local, 'bond_slave_0\x00'}}, 0x1e) 2.765672286s ago: executing program 0 (id=1298): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xce0, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f086dd", 0x0, 0xfeffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.719276659s ago: executing program 3 (id=1299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000040)="18000000010001", 0x7) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x3, 0x9d, [0xffffffffffffff01, 0xd3, 0xfff, 0x4, 0x7, 0xd05d], 0x9, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400)=""/157}, &(0x7f0000000180)=0x78) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3, 0x0, 0x3}, {}, {}, {0x6}]}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4a) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)}], 0x1}, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$sock(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000680)="490454cc5bb6fff252cba0a2cb8d8779458274ba739d86b71e76849c92d7deb9f4afe04705b0e0ae29c2706048d6a26aedd58a0746daa3544be619bb33393c7f98b4efe93fecdf136b0d385f0b6bb5f2cc1650ea270495317b7002bd6741a071c17aa96e1324d48e84f2101e4dbace9a69af2555bd1934f12003ca9a1c7b65acda4bd19183ab05b711ab26b5dfe219e3be13c576d709bc005c98414e70dd916f9ca99e9e7b7900210e75eb587b5e", 0xffffff94}, {&(0x7f00000003c0)="61376c4626295aaea4f4266b00c80f2d2491208378e493fb82e112e2ee9344", 0x1f}, {&(0x7f0000000940)="507f627fbc5712cf60b360c6717116a83d37404e607789318b99f639dac995f1fbc2105701764213daef1ec7d8aaec594c664b559e72e7bb723d8658315546ec55664e6fbba8a63111a12fe789dd7e2ebb8921271c3a337bac3cc57a817401cb3a76d9c017a607e8c395d54055651b57f88bfab581734b8f5ef22f38c80be7832cde247e2de662d6d47744598e50944ff59ebe3326d7091a9e6c17aac71cf910f5889ad42c6a8cd4af26108866001d8408b2f384bbdf7cddeab42e0db5067d16305851d28341af9479750b8036f331cab26b64ff4162f09cf4fde716178d6c915ca349572ca38b6ff6cee1e1f8c9f73e", 0xf0}], 0x4}, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) r6 = socket(0xa, 0x0, 0xffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(r5, &(0x7f00000000c0), 0x10) recvmmsg(r5, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000008340)=[{&(0x7f0000004780)=""/31, 0x46}], 0x1, 0x0, 0xffffffffffffff92}}], 0x1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x0, 0x0, {{}, {}, {0xd, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'wg1\x00'}}}}}, 0x30}}, 0x0) 2.668201885s ago: executing program 4 (id=1300): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x2, 0x80805, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16=r5], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r8, r7, 0x0, 0x100000002) listen(r3, 0x80080400) r11 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r11, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r11, 0x10d, 0xe8, &(0x7f0000000000), &(0x7f0000000080)=0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r12, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r10, @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf25030000000800030003000000080003000900000008000200050000000800020002000000050005000b0000000800030006000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2000c000) 1.855933079s ago: executing program 0 (id=1301): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0xfff0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 1.832571286s ago: executing program 2 (id=713): pipe(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) socket$pptp(0x18, 0x1, 0x2) socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback={0x3000000000000}}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '*\x00'}]}, 0x4c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), r1) bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10) r3 = socket(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x4}, 0x8) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000140)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x80}}, 0x10, 0x0}, 0x44840) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000040001"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 887.734111ms ago: executing program 0 (id=1302): r0 = socket(0x10, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005253afafafbd0700010000000000000000001c0000000800"], 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x20, 0x700, 0x8, 0x0, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x68, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="04002cbd7000fbdbdf25090000000800040001000000040001800500050002000000050005001f00000008000300070000003800018005000200fc000000080006000000000014000400fe80000000000000000000000000002b060005004e2200000800030064010100140001800600010002000000050002002200000008000400000000005800018008000700", @ANYRES32=r5, @ANYBLOB="0800060002000000080e0700", @ANYRES32=0x0, @ANYBLOB="14000400fe800000000000000000000000000019140004000000000000000000000000000000000114000400fe8000000000000000000000000000bb"], 0xe4}, 0x1, 0x0, 0x0, 0x4048000}, 0x10) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x104, 0xec, 0xe, 0x1, 0x7, @broadcast}, 0x10) select(0x40, &(0x7f0000000180)={0x6, 0xa055, 0x10000000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000200)={0x2}, &(0x7f0000000240)={0x0, 0xea60}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300), 0x208e24b) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="20400000881c", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf25590000000c0099000500000062000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000840}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 871.400879ms ago: executing program 3 (id=1303): r0 = socket(0x10, 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005253afafafbd0700010000000000000000001c0000000800"], 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001"], 0xa0}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x20, 0x700, 0x8, 0x0, {{0x5, 0x4, 0x2, 0x3, 0x14, 0x68, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast2}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="04002cbd7000fbdbdf25090000000800040001000000040001800500050002000000050005001f00000008000300070000003800018005000200fc000000080006000000000014000400fe80000000000000000000000000002b060005004e2200000800030064010100140001800600010002000000050002002200000008000400000000005800018008000700", @ANYRES32=r5, @ANYBLOB="0800060002000000080e0700", @ANYRES32=0x0, @ANYBLOB="14000400fe800000000000000000000000000019140004000000000000000000000000000000000114000400fe8000000000000000000000000000bb"], 0xe4}, 0x1, 0x0, 0x0, 0x4048000}, 0x10) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x104, 0xec, 0xe, 0x1, 0x7, @broadcast}, 0x10) select(0x40, &(0x7f0000000180)={0x6, 0xa055, 0x10000000000, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000200)={0x2}, &(0x7f0000000240)={0x0, 0xea60}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300), 0x208e24b) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="20400000881c", @ANYRES16=0x0, @ANYBLOB="08002abd7000fbdbdf25590000000c0099000500000062000000"], 0x20}, 0x1, 0x0, 0x0, 0x24000840}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) writev(r7, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r7, &(0x7f0000003e40)=[{{&(0x7f0000000100)=@phonet, 0x80, 0x0, 0x0, &(0x7f00000024c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1, 0x15d}}, {{&(0x7f00000036c0)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0xfffffd07}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{&(0x7f00000038c0)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000003bc0)=[{0x0}, {&(0x7f0000003a00)=""/190, 0xbe}, {&(0x7f0000003ac0)=""/131, 0x83}, {0x0}], 0x4, &(0x7f0000003c00)=""/73, 0x49}, 0x10000000}, {{&(0x7f0000003c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="44b6888bd5e1040700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005002d000000000006000900fdff0000"], 0x44}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$pppoe(0x18, 0x1, 0x0) 868.03006ms ago: executing program 4 (id=1304): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delneigh={0x30, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x141}, [@NDA_VLAN={0x6, 0x5, 0x3}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}]}]}, 0x30}}, 0x0) 729.589814ms ago: executing program 4 (id=1305): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbf9}, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422f00000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 448.214049ms ago: executing program 4 (id=1306): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$MRT(r0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x4c}}, 0x0) listen(r1, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x5c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x17, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x5, "03c0ab"}, @window={0x3, 0x3, 0xfc}, @mss={0x1e, 0x4}, @sack_perm={0x4, 0x2}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @generic={0x0, 0xd, "3816eb47eb1bad12f07e50"}, @fastopen={0x22, 0x2}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0x8, "111fad2ea743"}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @local}, 0x10) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000fc0)={r4, 0x1, 0x6, @multicast}, 0x10) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000fc0)={r4, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000080)={r4, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x88c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r6, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="08cc6c9ce466c22e1eec39a0ce755f74315fd0835e6dac41295fc8e6bcc815dcfa29479b2b85976c9d8cd311449bf8cb6724fbdc02665d0ff70a5f3affa2f0737435237283ee4d418ae2086ef14d21326c10298dacc6632cc901ba1a62d76beaf4cea7bb50f11e5b8effb91f090f53aed39b5ab90457e50cb46c", 0x7a}], 0x1}}], 0x7ffffff8, 0x0) (async) sendmmsg$inet(r6, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="08cc6c9ce466c22e1eec39a0ce755f74315fd0835e6dac41295fc8e6bcc815dcfa29479b2b85976c9d8cd311449bf8cb6724fbdc02665d0ff70a5f3affa2f0737435237283ee4d418ae2086ef14d21326c10298dacc6632cc901ba1a62d76beaf4cea7bb50f11e5b8effb91f090f53aed39b5ab90457e50cb46c", 0x7a}], 0x1}}], 0x7ffffff8, 0x0) 91.333593ms ago: executing program 4 (id=1307): r0 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x1d, 0x2, 0x6) pipe(&(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0xdc03, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 0s ago: executing program 1 (id=1235): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x60}, 0x1, 0x7}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'team0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000340)) shutdown(r3, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000800)={r6, 0x0, 0x20}, &(0x7f0000000840)=0x18) ioctl$BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000000680)={{r3}, "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"}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001780)=ANY=[@ANYBLOB="80010000", @ANYRES16=r2, @ANYBLOB="010100000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x180}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f00000021c0)=0x95) unshare(0xc040480) ppoll(&(0x7f00000000c0)=[{r7, 0x112}], 0x1, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) kernel console output (not intermixed with test programs): tered allmulticast mode [ 127.596570][ T6747] hsr0: entered promiscuous mode [ 127.603726][ T6747] bridge0: port 3(hsr0) entered blocking state [ 127.610212][ T6747] bridge0: port 3(hsr0) entered forwarding state [ 127.702921][ T6753] x_tables: duplicate underflow at hook 1 [ 127.809149][ T6758] sctp: [Deprecated]: syz.0.500 (pid 6758) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.809149][ T6758] Use struct sctp_sack_info instead [ 128.018953][ T6762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.502'. [ 128.044450][ T6760] netlink: 44 bytes leftover after parsing attributes in process `syz.3.501'. [ 128.064207][ T6763] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 128.308242][ T6775] netlink: 'syz.4.504': attribute type 2 has an invalid length. [ 128.588306][ T6782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.507'. [ 128.692951][ T6743] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 128.978820][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.512'. [ 128.989606][ T6796] netlink: 'syz.4.513': attribute type 1 has an invalid length. [ 129.104448][ T6796] bond1: entered promiscuous mode [ 129.170072][ T6797] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 129.276925][ T6797] bond1: (slave bridge1): making interface the new active one [ 129.300671][ T6797] bridge1: entered promiscuous mode [ 129.310945][ T6797] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 129.326471][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'. [ 129.413267][ T6798] bond1 (unregistering): (slave bridge1): Releasing active interface [ 129.448556][ T6798] bridge1: left promiscuous mode [ 129.518171][ T6798] bond1 (unregistering): Released all slaves [ 129.940476][ T6818] netlink: 44 bytes leftover after parsing attributes in process `syz.2.519'. [ 130.102098][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.519'. [ 130.164704][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.519'. [ 130.645889][ T6843] netlink: 44 bytes leftover after parsing attributes in process `syz.0.526'. [ 130.742422][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.526'. [ 131.932645][ T6866] trusted_key: syz.4.533 sent an empty control message without MSG_MORE. [ 133.954891][ T6892] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 134.322724][ T6939] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 134.374371][ T6938] __nla_validate_parse: 10 callbacks suppressed [ 134.374395][ T6938] netlink: 44 bytes leftover after parsing attributes in process `syz.4.558'. [ 134.405364][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.1.559'. [ 134.443027][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 134.566847][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.558'. [ 134.968508][ T6960] warning: `syz.4.567' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.141942][ T6969] netlink: 44 bytes leftover after parsing attributes in process `syz.1.568'. [ 135.180704][ T6969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.568'. [ 135.232545][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 135.797066][ T6988] netlink: 44 bytes leftover after parsing attributes in process `syz.0.576'. [ 135.834072][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 135.861239][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 136.096758][ T6997] netlink: 'syz.4.577': attribute type 29 has an invalid length. [ 136.118418][ T6997] netlink: 'syz.4.577': attribute type 29 has an invalid length. [ 136.138223][ T6997] netlink: 'syz.4.577': attribute type 29 has an invalid length. [ 136.276118][ T6999] bond0: entered promiscuous mode [ 136.295613][ T6999] bond_slave_0: entered promiscuous mode [ 136.319458][ T6999] bond_slave_1: entered promiscuous mode [ 136.339216][ T6999] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.367207][ T6999] bond0: left promiscuous mode [ 136.377236][ T6999] bond_slave_0: left promiscuous mode [ 136.394941][ T6999] bond_slave_1: left promiscuous mode [ 137.180805][ T7041] x_tables: duplicate underflow at hook 2 [ 137.471927][ T7050] bridge0: port 3(vlan2) entered blocking state [ 137.502255][ T7050] bridge0: port 3(vlan2) entered disabled state [ 137.523188][ T7050] vlan2: entered allmulticast mode [ 137.542376][ T7050] vlan2: left allmulticast mode [ 137.769612][ T7062] FAULT_INJECTION: forcing a failure. [ 137.769612][ T7062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.786490][ T7062] CPU: 1 PID: 7062 Comm: syz.3.601 Not tainted 6.10.0-rc6-syzkaller-01414-g58f9416d413a #0 [ 137.797521][ T7062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 137.808499][ T7062] Call Trace: [ 137.812292][ T7062] [ 137.815540][ T7062] dump_stack_lvl+0x241/0x360 [ 137.821521][ T7062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.828527][ T7062] ? __pfx__printk+0x10/0x10 [ 137.833365][ T7062] should_fail_ex+0x3b0/0x4e0 [ 137.838251][ T7062] _copy_to_user+0x2f/0xb0 [ 137.842828][ T7062] simple_read_from_buffer+0xca/0x150 [ 137.848279][ T7062] proc_fail_nth_read+0x1e9/0x250 [ 137.853551][ T7062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.859759][ T7062] ? rw_verify_area+0x520/0x6b0 [ 137.865656][ T7062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.872144][ T7062] vfs_read+0x204/0xbc0 [ 137.876369][ T7062] ? __pfx_lock_release+0x10/0x10 [ 137.882247][ T7062] ? do_sock_setsockopt+0x3e2/0x720 [ 137.887607][ T7062] ? __pfx_vfs_read+0x10/0x10 [ 137.892349][ T7062] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 137.897970][ T7062] ? __fget_files+0x29/0x470 [ 137.903749][ T7062] ? __fget_files+0x3f6/0x470 [ 137.908776][ T7062] ksys_read+0x1a0/0x2c0 [ 137.913310][ T7062] ? __pfx_ksys_read+0x10/0x10 [ 137.919356][ T7062] ? do_syscall_64+0x100/0x230 [ 137.924389][ T7062] ? do_syscall_64+0xb6/0x230 [ 137.929662][ T7062] do_syscall_64+0xf3/0x230 [ 137.934511][ T7062] ? clear_bhb_loop+0x35/0x90 [ 137.939256][ T7062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.945215][ T7062] RIP: 0033:0x7fb535f746bc [ 137.949863][ T7062] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 137.969877][ T7062] RSP: 002b:00007fb5359ff040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 137.979231][ T7062] RAX: ffffffffffffffda RBX: 00007fb536103f60 RCX: 00007fb535f746bc [ 137.988101][ T7062] RDX: 000000000000000f RSI: 00007fb5359ff0b0 RDI: 0000000000000004 [ 137.996228][ T7062] RBP: 00007fb5359ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 138.004256][ T7062] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 138.012546][ T7062] R13: 000000000000000b R14: 00007fb536103f60 R15: 00007ffdbe50d0c8 [ 138.020769][ T7062] [ 138.168305][ T7071] tipc: Started in network mode [ 138.173977][ T7071] tipc: Node identity ffffffff, cluster identity 4711 [ 138.195418][ T7071] tipc: Node number set to 4294967295 [ 138.279478][ T7073] vlan2: entered promiscuous mode [ 138.349928][ T7077] bond0: entered promiscuous mode [ 138.377490][ T7077] bond_slave_0: entered promiscuous mode [ 138.411468][ T7077] bond_slave_1: entered promiscuous mode [ 138.428744][ T7079] macsec2: entered promiscuous mode [ 138.438381][ T7079] bond0: entered promiscuous mode [ 138.444518][ T7079] bond_slave_0: entered promiscuous mode [ 138.456568][ T7079] bond_slave_1: entered promiscuous mode [ 138.464642][ T7079] macsec2: entered allmulticast mode [ 138.471690][ T7079] bond0: entered allmulticast mode [ 138.477067][ T7079] bond_slave_0: entered allmulticast mode [ 138.483726][ T7079] bond_slave_1: entered allmulticast mode [ 138.493037][ T7079] bond0: left allmulticast mode [ 138.504670][ T7079] bond_slave_0: left allmulticast mode [ 138.513834][ T7079] bond_slave_1: left allmulticast mode [ 138.520671][ T7079] bond0: left promiscuous mode [ 138.527023][ T7079] bond_slave_0: left promiscuous mode [ 138.534806][ T7079] bond_slave_1: left promiscuous mode [ 138.736413][ T7092] bond0: left promiscuous mode [ 138.746887][ T7092] bond_slave_0: left promiscuous mode [ 138.763579][ T7092] bond_slave_1: left promiscuous mode [ 139.151807][ T7101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 139.815253][ T7139] netlink: 'syz.2.626': attribute type 7 has an invalid length. [ 140.668359][ T7158] __nla_validate_parse: 4 callbacks suppressed [ 140.668385][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.633'. [ 141.371997][ T7178] netlink: 44 bytes leftover after parsing attributes in process `syz.0.641'. [ 141.450469][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 141.488257][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'. [ 141.796840][ T7200] macsec1: entered promiscuous mode [ 141.804135][ T7200] bond0: entered promiscuous mode [ 141.817595][ T7200] bond_slave_0: entered promiscuous mode [ 141.824996][ T7200] bond_slave_1: entered promiscuous mode [ 141.831833][ T7200] macsec1: entered allmulticast mode [ 141.837787][ T7200] bond0: entered allmulticast mode [ 141.844097][ T7200] bond_slave_0: entered allmulticast mode [ 141.851327][ T7200] bond_slave_1: entered allmulticast mode [ 141.873807][ T7200] bond0: left allmulticast mode [ 141.881201][ T7200] bond_slave_0: left allmulticast mode [ 141.887787][ T7200] bond_slave_1: left allmulticast mode [ 141.907030][ T7200] bond0: left promiscuous mode [ 141.951609][ T7200] bond_slave_0: left promiscuous mode [ 141.959240][ T7200] bond_slave_1: left promiscuous mode [ 142.010488][ T7172] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 142.363150][ T7219] netlink: 'syz.3.652': attribute type 3 has an invalid length. [ 142.979776][ T7249] netlink: 48 bytes leftover after parsing attributes in process `syz.1.662'. [ 143.137202][ T7254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.664'. [ 143.323853][ T7263] netlink: 'syz.4.668': attribute type 10 has an invalid length. [ 143.392444][ T7268] netlink: 'syz.4.668': attribute type 10 has an invalid length. [ 143.434489][ T7268] team0: Port device netdevsim0 removed [ 143.463416][ T7268] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 143.835682][ T7291] netlink: 'syz.4.674': attribute type 4 has an invalid length. [ 143.884713][ T7291] netlink: 128116 bytes leftover after parsing attributes in process `syz.4.674'. [ 144.528348][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 145.534649][ T7348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.809605][ T7365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.697'. [ 146.505748][ T7367] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 147.131475][ T7402] netlink: 44 bytes leftover after parsing attributes in process `syz.1.705'. [ 147.203813][ T7402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.705'. [ 147.256020][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.705'. [ 147.282765][ T7409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.709'. [ 147.511509][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.712'. [ 147.603788][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.766620][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.012363][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.157582][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.195535][ T7432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.718'. [ 148.218103][ T7432] netlink: 28 bytes leftover after parsing attributes in process `syz.0.718'. [ 148.351820][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 148.386946][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 148.396460][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 148.410636][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 148.420967][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 148.428935][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 148.615894][ T7453] Bluetooth: MGMT ver 1.22 [ 148.848300][ T7458] netlink: 140 bytes leftover after parsing attributes in process `syz.1.728'. [ 148.878263][ T11] hsr0: left allmulticast mode [ 148.883924][ T11] hsr_slave_0: left allmulticast mode [ 148.901812][ T11] hsr_slave_1: left allmulticast mode [ 148.918193][ T11] hsr0: left promiscuous mode [ 148.930130][ T11] bridge0: port 3(hsr0) entered disabled state [ 148.991260][ T11] bridge_slave_1: left allmulticast mode [ 149.005694][ T11] bridge_slave_1: left promiscuous mode [ 149.048988][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.115637][ T11] bridge_slave_0: left allmulticast mode [ 149.134685][ T11] bridge_slave_0: left promiscuous mode [ 149.161086][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.506925][ T7494] netlink: 44 bytes leftover after parsing attributes in process `syz.3.732'. [ 149.895253][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.928366][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.942881][ T11] bond0 (unregistering): Released all slaves [ 150.230532][ T11] tipc: Left network mode [ 150.266502][ T7496] netlink: 'syz.0.736': attribute type 1 has an invalid length. [ 150.353332][ T7439] chnl_net:caif_netlink_parms(): no params data found [ 150.540151][ T5101] Bluetooth: hci0: command tx timeout [ 150.578288][ T7515] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 150.608417][ T7515] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 150.825421][ T7527] IPv6: addrconf: prefix option has invalid lifetime [ 150.972996][ T7532] netlink: 'syz.3.746': attribute type 1 has an invalid length. [ 150.983239][ T7532] __nla_validate_parse: 6 callbacks suppressed [ 150.983262][ T7532] netlink: 616 bytes leftover after parsing attributes in process `syz.3.746'. [ 151.002681][ T7529] netlink: 'syz.3.746': attribute type 10 has an invalid length. [ 151.029719][ T7529] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 151.042720][ T7529] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 151.056222][ T7529] team0: Port device netdevsim0 added [ 151.063767][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.073727][ T7439] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.085240][ T7439] bridge_slave_0: entered allmulticast mode [ 151.094670][ T7439] bridge_slave_0: entered promiscuous mode [ 151.128581][ T7533] netlink: 'syz.4.747': attribute type 1 has an invalid length. [ 151.150184][ T7533] netlink: 'syz.4.747': attribute type 2 has an invalid length. [ 151.204686][ T7439] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.220233][ T7439] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.227769][ T7439] bridge_slave_1: entered allmulticast mode [ 151.237028][ T7439] bridge_slave_1: entered promiscuous mode [ 151.343239][ T11] hsr_slave_0: left promiscuous mode [ 151.367210][ T11] hsr_slave_1: left promiscuous mode [ 151.408263][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.434013][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.473445][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.516053][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.611811][ T11] team0: left allmulticast mode [ 151.617074][ T11] team_slave_0: left allmulticast mode [ 151.623801][ T11] team_slave_1: left allmulticast mode [ 151.630735][ T11] team0: left promiscuous mode [ 151.637116][ T11] team_slave_0: left promiscuous mode [ 151.643896][ T11] team_slave_1: left promiscuous mode [ 151.650771][ T11] veth1_macvtap: left promiscuous mode [ 151.676779][ T11] veth0_macvtap: left promiscuous mode [ 151.693016][ T11] veth1_vlan: left promiscuous mode [ 151.712679][ T11] veth0_vlan: left promiscuous mode [ 151.955658][ T7562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.755'. [ 152.620907][ T5101] Bluetooth: hci0: command tx timeout [ 152.749294][ T11] team0 (unregistering): Port device team_slave_1 removed [ 152.795784][ T7570] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 152.812126][ T11] team0 (unregistering): Port device team_slave_0 removed [ 153.373208][ T7556] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 153.450367][ T7439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.540940][ T7439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.748951][ T7439] team0: Port device team_slave_0 added [ 153.800060][ T7439] team0: Port device team_slave_1 added [ 154.103283][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 154.126108][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.144099][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.171707][ T7439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.198568][ T7584] bridge0: entered promiscuous mode [ 154.207796][ T7584] macsec1: entered promiscuous mode [ 154.222637][ T7584] macsec1: entered allmulticast mode [ 154.234504][ T7584] bridge0: entered allmulticast mode [ 154.255551][ T7584] bridge0: left allmulticast mode [ 154.264100][ T7584] bridge0: left promiscuous mode [ 154.329165][ T7439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.336829][ T7439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.367871][ T7439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.383660][ T7576] netlink: 'syz.0.758': attribute type 4 has an invalid length. [ 154.392291][ T7576] netlink: 17 bytes leftover after parsing attributes in process `syz.0.758'. [ 154.656411][ T7439] hsr_slave_0: entered promiscuous mode [ 154.679928][ T7439] hsr_slave_1: entered promiscuous mode [ 154.686697][ T7439] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.695418][ T7439] Cannot create hsr debugfs directory [ 154.698133][ T5101] Bluetooth: hci0: command tx timeout [ 155.396257][ T7608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'. [ 155.447360][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 155.647236][ T5098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.659971][ T5098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.686580][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.706536][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.718412][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.726400][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.751979][ T7618] netlink: 'syz.0.769': attribute type 1 has an invalid length. [ 155.771414][ T7618] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 156.025019][ T1108] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.165855][ T1108] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.194489][ T7439] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 156.214735][ T7439] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 156.246873][ T7439] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 156.291344][ T1108] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.322946][ T7439] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 156.391967][ T1108] bond0: (slave netdevsim0): Releasing backup interface [ 156.410561][ T1108] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.760903][ T7612] chnl_net:caif_netlink_parms(): no params data found [ 156.778030][ T5098] Bluetooth: hci0: command tx timeout [ 156.942440][ T1108] bridge_slave_1: left allmulticast mode [ 156.957907][ T1108] bridge_slave_1: left promiscuous mode [ 156.963845][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.000099][ T1108] bridge_slave_0: left allmulticast mode [ 157.005848][ T1108] bridge_slave_0: left promiscuous mode [ 157.028966][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.137461][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 157.602148][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.617666][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.634396][ T1108] bond0 (unregistering): Released all slaves [ 157.673742][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.781'. [ 157.700951][ T7668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.785'. [ 157.818207][ T5098] Bluetooth: hci2: command tx timeout [ 158.031428][ T7612] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.114475][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.153415][ T7612] bridge_slave_0: entered allmulticast mode [ 158.176243][ T7612] bridge_slave_0: entered promiscuous mode [ 158.196396][ T7612] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.204302][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.211845][ T7612] bridge_slave_1: entered allmulticast mode [ 158.220062][ T7612] bridge_slave_1: entered promiscuous mode [ 158.235000][ T7439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.429463][ T7612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.492852][ T7612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.567097][ T7439] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.622209][ T7612] team0: Port device team_slave_0 added [ 158.651664][ T1108] hsr_slave_0: left promiscuous mode [ 158.668620][ T1108] hsr_slave_1: left promiscuous mode [ 158.685823][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.694631][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.716040][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.727504][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.783759][ T1108] veth1_macvtap: left promiscuous mode [ 158.789759][ T1108] veth0_macvtap: left promiscuous mode [ 158.795620][ T1108] veth1_vlan: left promiscuous mode [ 158.801236][ T1108] veth0_vlan: left promiscuous mode [ 158.947668][ T7702] netlink: 'syz.1.796': attribute type 1 has an invalid length. [ 158.970315][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.796'. [ 159.701415][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 159.776803][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 159.908321][ T5098] Bluetooth: hci2: command tx timeout [ 160.425630][ T7612] team0: Port device team_slave_1 added [ 160.463424][ T7709] team_slave_0: entered promiscuous mode [ 160.469342][ T7709] team_slave_1: entered promiscuous mode [ 160.483804][ T7709] macsec1: entered promiscuous mode [ 160.492959][ T7709] team0: entered promiscuous mode [ 160.505480][ T7709] macsec1: entered allmulticast mode [ 160.519018][ T7709] team0: entered allmulticast mode [ 160.524365][ T7709] team_slave_0: entered allmulticast mode [ 160.531573][ T7709] team_slave_1: entered allmulticast mode [ 160.547930][ T7709] team0: left allmulticast mode [ 160.554096][ T7709] team_slave_0: left allmulticast mode [ 160.561127][ T7709] team_slave_1: left allmulticast mode [ 160.572355][ T7709] team0: left promiscuous mode [ 160.578411][ T7709] team_slave_0: left promiscuous mode [ 160.584024][ T7709] team_slave_1: left promiscuous mode [ 160.636567][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.801'. [ 160.727544][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.735062][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.775170][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.782624][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.831507][ T7727] netlink: 'syz.1.804': attribute type 12 has an invalid length. [ 160.839632][ T7727] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.804'. [ 160.890793][ T7729] netlink: 76 bytes leftover after parsing attributes in process `syz.3.805'. [ 160.903522][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.924854][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.988014][ T7612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.022382][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.037944][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.080322][ T7612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.367527][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'. [ 161.380068][ T7612] hsr_slave_0: entered promiscuous mode [ 161.385949][ T7739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.809'. [ 161.396435][ T7612] hsr_slave_1: entered promiscuous mode [ 161.403935][ T7612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.412396][ T7612] Cannot create hsr debugfs directory [ 161.462112][ T7741] netlink: 'syz.0.810': attribute type 2 has an invalid length. [ 161.715585][ T7750] macsec2: entered promiscuous mode [ 161.721801][ T7750] bond0: entered promiscuous mode [ 161.727139][ T7750] bond_slave_0: entered promiscuous mode [ 161.745435][ T7750] bond_slave_1: entered promiscuous mode [ 161.754269][ T7750] macsec2: entered allmulticast mode [ 161.764931][ T7750] bond0: entered allmulticast mode [ 161.772481][ T7750] bond_slave_0: entered allmulticast mode [ 161.785600][ T7750] bond_slave_1: entered allmulticast mode [ 161.797760][ T7750] bond0: left allmulticast mode [ 161.803926][ T7750] bond_slave_0: left allmulticast mode [ 161.815875][ T7750] bond_slave_1: left allmulticast mode [ 161.821848][ T7750] bond0: left promiscuous mode [ 161.832023][ T7750] bond_slave_0: left promiscuous mode [ 161.843710][ T7750] bond_slave_1: left promiscuous mode [ 161.982075][ T5098] Bluetooth: hci2: command tx timeout [ 162.493939][ T7439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.562830][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 162.601580][ T7779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.817'. [ 162.787521][ T7439] veth0_vlan: entered promiscuous mode [ 162.829071][ T7439] veth1_vlan: entered promiscuous mode [ 163.066756][ T7612] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.113647][ T7612] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.154291][ T7439] veth0_macvtap: entered promiscuous mode [ 163.168713][ T7612] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.194092][ T7612] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 163.226431][ T7439] veth1_macvtap: entered promiscuous mode [ 163.323081][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.345251][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.363199][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.374246][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.394745][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.407594][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.436129][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.438091][ T7807] netlink: 'syz.0.826': attribute type 1 has an invalid length. [ 163.462162][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.477423][ T7439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.594780][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.611105][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.637896][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.659496][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.678092][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.709788][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.738220][ T7439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.775645][ T7439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.804874][ T7439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.903929][ T7439] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.927120][ T7439] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.938436][ T7804] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 163.948742][ T7439] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.957609][ T7439] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.058779][ T5098] Bluetooth: hci2: command tx timeout [ 164.169269][ T7821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.831'. [ 164.244478][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.831'. [ 164.536748][ T7612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.559764][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.575435][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.658413][ T7834] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 164.677745][ T7612] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.706498][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.721066][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.729909][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.739636][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.780414][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.787636][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.930318][ T7838] netlink: 105108 bytes leftover after parsing attributes in process `syz.0.838'. [ 164.946702][ T7612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.970581][ T7838] netlink: 'syz.0.838': attribute type 1 has an invalid length. [ 164.989201][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'. [ 165.230594][ T7844] IPVS: Error connecting to the multicast addr [ 165.453846][ T7612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.701212][ T1108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.886193][ T1108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.081617][ T1108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.307645][ T1108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.320522][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.333322][ T5101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.344438][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 166.348647][ T5101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.368647][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.381360][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 166.393597][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.412116][ T7892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'. [ 166.586609][ T7896] FAULT_INJECTION: forcing a failure. [ 166.586609][ T7896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 166.610175][ T7896] CPU: 1 PID: 7896 Comm: syz.3.850 Not tainted 6.10.0-rc6-syzkaller-01414-g58f9416d413a #0 [ 166.620268][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 166.624611][ T7612] veth0_vlan: entered promiscuous mode [ 166.630369][ T7896] Call Trace: [ 166.630453][ T7896] [ 166.642217][ T7896] dump_stack_lvl+0x241/0x360 [ 166.647051][ T7896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.648863][ T7612] veth1_vlan: entered promiscuous mode [ 166.652304][ T7896] ? __pfx__printk+0x10/0x10 [ 166.662462][ T7896] should_fail_ex+0x3b0/0x4e0 [ 166.667237][ T7896] prepare_alloc_pages+0x1da/0x5d0 [ 166.672521][ T7896] __alloc_pages_noprof+0x166/0x6c0 [ 166.677786][ T7896] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 166.683596][ T7896] ? validate_chain+0x11e/0x5900 [ 166.688615][ T7896] ? 0xffffffffa0002088 [ 166.692827][ T7896] alloc_pages_mpol_noprof+0x3e8/0x680 [ 166.698367][ T7896] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 166.704427][ T7896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.710562][ T7896] ? arch_stack_walk+0x16d/0x1b0 [ 166.715571][ T7896] ? alloc_pages_noprof+0xef/0x170 [ 166.715796][ T7612] veth0_macvtap: entered promiscuous mode [ 166.720730][ T7896] pte_alloc_one+0x88/0x5d0 [ 166.720778][ T7896] ? __pfx_pte_alloc_one+0x10/0x10 [ 166.720806][ T7896] ? mark_lock+0x9a/0x350 [ 166.720838][ T7896] ? __lock_acquire+0x1346/0x1fd0 [ 166.720862][ T7896] ? cgroup_rstat_updated+0x13b/0xc60 [ 166.737692][ T7612] veth1_macvtap: entered promiscuous mode [ 166.740960][ T7896] __pte_alloc+0x79/0x3a0 [ 166.741007][ T7896] ? __pfx___pte_alloc+0x10/0x10 [ 166.741047][ T7896] handle_pte_fault+0x5531/0x7090 [ 166.771906][ T7896] ? __pfx_handle_pte_fault+0x10/0x10 [ 166.777352][ T7896] ? __pfx_lock_acquire+0x10/0x10 [ 166.782453][ T7896] ? __pmd_alloc+0x50b/0x630 [ 166.787105][ T7896] ? __pfx_lock_release+0x10/0x10 [ 166.792185][ T7896] ? do_raw_spin_lock+0x14f/0x370 [ 166.797297][ T7896] ? do_raw_spin_unlock+0x13c/0x8b0 [ 166.802593][ T7896] ? _raw_spin_unlock+0x28/0x50 [ 166.807559][ T7896] ? __pmd_alloc+0x50b/0x630 [ 166.812380][ T7896] ? __pfx___pmd_alloc+0x10/0x10 [ 166.817436][ T7896] ? __pfx_lock_release+0x10/0x10 [ 166.822529][ T7896] handle_mm_fault+0x10df/0x1ba0 [ 166.827637][ T7896] ? __pfx_handle_mm_fault+0x10/0x10 [ 166.833015][ T7896] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 166.839414][ T7896] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 166.844776][ T7896] exc_page_fault+0x2b9/0x8c0 [ 166.849629][ T7896] asm_exc_page_fault+0x26/0x30 [ 166.854675][ T7896] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 166.860980][ T7896] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 166.880694][ T7896] RSP: 0018:ffffc90009947930 EFLAGS: 00050206 [ 166.886823][ T7896] RAX: ffffffff84af4201 RBX: 00000000200000b8 RCX: 0000000000000038 [ 166.894937][ T7896] RDX: 0000000000000001 RSI: 0000000020000080 RDI: ffffc900099479c0 [ 166.903190][ T7896] RBP: ffffc90009947a70 R08: ffffc900099479f7 R09: 1ffff92001328f3e [ 166.911306][ T7896] R10: dffffc0000000000 R11: fffff52001328f3f R12: 0000000020000080 [ 166.919328][ T7896] R13: dffffc0000000000 R14: ffffc900099479c0 R15: 0000000000000038 [ 166.927373][ T7896] ? rcuref_put_slowpath+0x321/0x340 [ 166.932728][ T7896] _copy_from_user+0x8c/0xe0 [ 166.937481][ T7896] copy_msghdr_from_user+0xae/0x680 [ 166.942749][ T7896] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 166.948659][ T7896] do_recvmmsg+0x40f/0xae0 [ 166.953139][ T7896] ? __pfx_lock_release+0x10/0x10 [ 166.958232][ T7896] ? __pfx_do_recvmmsg+0x10/0x10 [ 166.963245][ T7896] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 166.969375][ T7896] ? ksys_write+0x23e/0x2c0 [ 166.973935][ T7896] ? __pfx_lock_release+0x10/0x10 [ 166.979028][ T7896] ? vfs_write+0x7c4/0xc90 [ 166.983516][ T7896] ? __mutex_unlock_slowpath+0x21d/0x750 [ 166.989321][ T7896] ? __fget_files+0x3f6/0x470 [ 166.994076][ T7896] __x64_sys_recvmmsg+0x199/0x250 [ 166.999254][ T7896] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 167.004990][ T7896] ? do_syscall_64+0x100/0x230 [ 167.009832][ T7896] ? do_syscall_64+0xb6/0x230 [ 167.014578][ T7896] do_syscall_64+0xf3/0x230 [ 167.019265][ T7896] ? clear_bhb_loop+0x35/0x90 [ 167.023995][ T7896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.029951][ T7896] RIP: 0033:0x7fb535f75bd9 [ 167.034410][ T7896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.054066][ T7896] RSP: 002b:00007fb5359ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 167.062541][ T7896] RAX: ffffffffffffffda RBX: 00007fb536103f60 RCX: 00007fb535f75bd9 [ 167.070565][ T7896] RDX: 000000000000072a RSI: 0000000020000080 RDI: 0000000000000004 [ 167.078584][ T7896] RBP: 00007fb5359ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 167.086597][ T7896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.094610][ T7896] R13: 000000000000000b R14: 00007fb536103f60 R15: 00007ffdbe50d0c8 [ 167.102649][ T7896] [ 167.335121][ T1108] bridge_slave_1: left allmulticast mode [ 167.353738][ T1108] bridge_slave_1: left promiscuous mode [ 167.377146][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.400345][ T1108] bridge_slave_0: left allmulticast mode [ 167.418574][ T1108] bridge_slave_0: left promiscuous mode [ 167.424627][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.529333][ T7912] netlink: 'syz.3.856': attribute type 75 has an invalid length. [ 167.627498][ T7921] netlink: 'syz.3.859': attribute type 29 has an invalid length. [ 167.983538][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.004078][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.016505][ T1108] bond0 (unregistering): Released all slaves [ 168.033057][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.043995][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.055573][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.070194][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.080294][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.092407][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.102491][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.113081][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.123053][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.133614][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.146397][ T7612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.199763][ T7918] ip6gretap0: entered promiscuous mode [ 168.214044][ T7918] macsec2: entered promiscuous mode [ 168.228684][ T7918] macsec2: entered allmulticast mode [ 168.236868][ T7918] ip6gretap0: entered allmulticast mode [ 168.261116][ T7918] ip6gretap0: left allmulticast mode [ 168.267007][ T7918] ip6gretap0: left promiscuous mode [ 168.321773][ T7921] netlink: 'syz.3.859': attribute type 29 has an invalid length. [ 168.395789][ T7923] netlink: 'syz.3.859': attribute type 29 has an invalid length. [ 168.415001][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.439062][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.459651][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.467719][ T5098] Bluetooth: hci0: command tx timeout [ 168.472477][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.537771][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.558913][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 168.561404][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.586964][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.595246][ T7934] Bluetooth: MGMT ver 1.22 [ 168.597962][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.615165][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.626909][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.636354][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.860'. [ 168.640005][ T7612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.711188][ T7612] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.720717][ T7612] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.729573][ T7612] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.738756][ T7612] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.030194][ T1108] hsr_slave_0: left promiscuous mode [ 169.068597][ T1108] hsr_slave_1: left promiscuous mode [ 169.099956][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.114450][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.147764][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.187237][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.289742][ T1108] veth1_macvtap: left promiscuous mode [ 169.295594][ T1108] veth0_macvtap: left promiscuous mode [ 169.339904][ T1108] veth1_vlan: left promiscuous mode [ 169.345549][ T1108] veth0_vlan: left promiscuous mode [ 170.538779][ T5098] Bluetooth: hci0: command tx timeout [ 170.636725][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 170.688187][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 171.262727][ T7934] syz.1.861 (7934) used greatest stack depth: 17784 bytes left [ 171.292377][ T7969] ip6gretap0: entered promiscuous mode [ 171.326916][ T7969] macsec1: entered promiscuous mode [ 171.337200][ T7969] macsec1: entered allmulticast mode [ 171.357966][ T7969] ip6gretap0: entered allmulticast mode [ 171.380775][ T7969] ip6gretap0: left allmulticast mode [ 171.386481][ T7969] ip6gretap0: left promiscuous mode [ 171.515867][ T7972] tipc: Started in network mode [ 171.538070][ T7972] tipc: Node identity ffffffff, cluster identity 4711 [ 171.559820][ T7972] tipc: Node number set to 4294967295 [ 171.568706][ T7973] netlink: 'syz.3.872': attribute type 10 has an invalid length. [ 171.644601][ T7973] team0: Device ipvlan1 failed to register rx_handler [ 171.865497][ T2861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.895169][ T2861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.983938][ T7989] netlink: 168 bytes leftover after parsing attributes in process `syz.3.875'. [ 172.006606][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.035345][ T7887] chnl_net:caif_netlink_parms(): no params data found [ 172.037077][ T7989] netlink: 'syz.3.875': attribute type 2 has an invalid length. [ 172.057928][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.058959][ T7989] netlink: 60 bytes leftover after parsing attributes in process `syz.3.875'. [ 172.127131][ T7992] netlink: 'syz.1.877': attribute type 1 has an invalid length. [ 172.158105][ T7992] netlink: 9364 bytes leftover after parsing attributes in process `syz.1.877'. [ 172.167642][ T7992] netlink: 'syz.1.877': attribute type 1 has an invalid length. [ 172.355857][ T8006] netlink: 80 bytes leftover after parsing attributes in process `syz.0.879'. [ 172.373762][ T8005] vlan2: entered promiscuous mode [ 172.384198][ T8005] batadv0: entered promiscuous mode [ 172.397728][ T8005] batadv0: left promiscuous mode [ 172.516806][ T7887] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.547446][ T7887] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.569818][ T7887] bridge_slave_0: entered allmulticast mode [ 172.589328][ T7887] bridge_slave_0: entered promiscuous mode [ 172.618897][ T5098] Bluetooth: hci0: command tx timeout [ 172.628383][ T7887] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.635659][ T7887] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.644417][ T7887] bridge_slave_1: entered allmulticast mode [ 172.653123][ T7887] bridge_slave_1: entered promiscuous mode [ 172.727095][ T7887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.766744][ T7887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.801016][ T8019] netlink: 88 bytes leftover after parsing attributes in process `syz.3.885'. [ 172.815814][ T8018] netlink: 88 bytes leftover after parsing attributes in process `syz.3.885'. [ 172.932073][ T7887] team0: Port device team_slave_0 added [ 172.953942][ T7887] team0: Port device team_slave_1 added [ 173.035156][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.050765][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.083370][ T7887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.102719][ T7887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.112454][ T7887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.152623][ T7887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.506799][ T7887] hsr_slave_0: entered promiscuous mode [ 173.528832][ T7887] hsr_slave_1: entered promiscuous mode [ 173.543335][ T7887] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.552227][ T7887] Cannot create hsr debugfs directory [ 173.595711][ T8050] bridge0: port 3(hsr0) entered disabled state [ 173.603043][ T8050] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.612497][ T8050] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.737590][ T8055] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.048610][ T8065] netlink: 9 bytes leftover after parsing attributes in process `syz.4.902'. [ 174.060429][ T8065] 0·: renamed from hsr_slave_1 (while UP) [ 174.070777][ T8065] 0·: entered allmulticast mode [ 174.076473][ T8065] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 174.510037][ T7887] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.536540][ T7887] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.573605][ T7887] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.613385][ T7887] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.697976][ T5098] Bluetooth: hci0: command tx timeout [ 174.785460][ T8086] netlink: 60 bytes leftover after parsing attributes in process `syz.3.909'. [ 174.796744][ T8086] netlink: 60 bytes leftover after parsing attributes in process `syz.3.909'. [ 174.925500][ T7887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.975163][ T7887] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.010158][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.017921][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.070014][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.077404][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.144501][ T8091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 175.175123][ T8091] netlink: 60 bytes leftover after parsing attributes in process `syz.1.911'. [ 175.740113][ T7887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.839295][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.921'. [ 175.917278][ T7887] veth0_vlan: entered promiscuous mode [ 175.932010][ T8137] netlink: 9 bytes leftover after parsing attributes in process `syz.4.922'. [ 175.959331][ T8137] 1·: renamed from c0· (while UP) [ 175.967541][ T8137] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 176.025589][ T7887] veth1_vlan: entered promiscuous mode [ 176.136078][ T7887] veth0_macvtap: entered promiscuous mode [ 176.176858][ T7887] veth1_macvtap: entered promiscuous mode [ 176.219492][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.239743][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.259083][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.290546][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.317143][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.347905][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.375374][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.388581][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.399607][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.412132][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.432938][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.464336][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.495701][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.516016][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.547914][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.573559][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.614808][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.645420][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.677598][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.709164][ T7887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.727883][ T7887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.753176][ T7887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.766652][ T5101] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.791057][ T5101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 176.808114][ T5101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 176.819039][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 176.827000][ T5101] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 176.834923][ T5101] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.009604][ T7887] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.051606][ T7887] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.078239][ T7887] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.087259][ T7887] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.526743][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.556363][ T8176] team_slave_0: entered promiscuous mode [ 177.562241][ T8176] team_slave_1: entered promiscuous mode [ 177.582280][ T8176] macsec1: entered promiscuous mode [ 177.597035][ T8176] team0: entered promiscuous mode [ 177.603326][ T8176] macsec1: entered allmulticast mode [ 177.620145][ T8176] team0: entered allmulticast mode [ 177.625486][ T8176] team_slave_0: entered allmulticast mode [ 177.636776][ T8176] team_slave_1: entered allmulticast mode [ 177.647145][ T8176] team0: left allmulticast mode [ 177.652738][ T8176] team_slave_0: left allmulticast mode [ 177.661845][ T8176] team_slave_1: left allmulticast mode [ 177.667442][ T8176] team0: left promiscuous mode [ 177.678715][ T8176] team_slave_0: left promiscuous mode [ 177.684429][ T8176] team_slave_1: left promiscuous mode [ 177.829009][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.867223][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 177.877730][ T8182] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 177.924671][ T8177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.989525][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.035291][ T2861] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.048243][ T2861] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.131056][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.176206][ T2861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.187233][ T2861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.494312][ T8153] chnl_net:caif_netlink_parms(): no params data found [ 178.526382][ T61] hsr0: left allmulticast mode [ 178.531843][ T61] hsr_slave_0: left allmulticast mode [ 178.545224][ T61] hsr_slave_1: left allmulticast mode [ 178.554122][ T61] hsr0: left promiscuous mode [ 178.565649][ T61] bridge0: port 3(hsr0) entered disabled state [ 178.586203][ T61] bridge_slave_1: left allmulticast mode [ 178.597903][ T61] bridge_slave_1: left promiscuous mode [ 178.603761][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.633595][ T61] bridge_slave_0: left allmulticast mode [ 178.648696][ T61] bridge_slave_0: left promiscuous mode [ 178.654577][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.925006][ T8209] netlink: 80 bytes leftover after parsing attributes in process `syz.4.943'. [ 178.937694][ T8208] netlink: 48 bytes leftover after parsing attributes in process `syz.0.945'. [ 178.950399][ T5098] Bluetooth: hci3: command tx timeout [ 179.425591][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.438493][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.453433][ T61] bond0 (unregistering): Released all slaves [ 179.656936][ T61] tipc: Left network mode [ 179.991273][ T8226] netlink: 'syz.4.949': attribute type 4 has an invalid length. [ 180.017958][ T8226] __nla_validate_parse: 1 callbacks suppressed [ 180.017981][ T8226] netlink: 16 bytes leftover after parsing attributes in process `syz.4.949'. [ 180.139515][ T8153] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.157234][ T8153] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.164783][ T8153] bridge_slave_0: entered allmulticast mode [ 180.188888][ T8153] bridge_slave_0: entered promiscuous mode [ 180.210589][ T8153] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.226200][ T8153] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.234217][ T8153] bridge_slave_1: entered allmulticast mode [ 180.254053][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.254917][ T8153] bridge_slave_1: entered promiscuous mode [ 180.269114][ T5101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.281502][ T5101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.287589][ T8231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.302957][ T8231] team0: Port device bond0 added [ 180.314292][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.324643][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 180.335446][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.360403][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.952'. [ 180.490587][ T8237] team0: Port device team_slave_0 removed [ 180.497272][ T8237] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 180.594166][ T8153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.626796][ T61] hsr_slave_0: left promiscuous mode [ 180.640950][ T61] hsr_slave_1: left promiscuous mode [ 180.658137][ T61] batman_adv: batadv0: Removing interface: team0 [ 180.677731][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.695163][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.713952][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.721841][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.754549][ T61] team0: left allmulticast mode [ 180.760496][ T61] team_slave_0: left allmulticast mode [ 180.766197][ T61] team_slave_1: left allmulticast mode [ 180.772802][ T61] team0: left promiscuous mode [ 180.778130][ T61] team_slave_0: left promiscuous mode [ 180.783854][ T61] team_slave_1: left promiscuous mode [ 180.792283][ T61] veth1_macvtap: left promiscuous mode [ 180.798092][ T61] veth0_macvtap: left promiscuous mode [ 180.804320][ T61] veth1_vlan: left promiscuous mode [ 180.810361][ T61] veth0_vlan: left promiscuous mode [ 181.018851][ T5101] Bluetooth: hci3: command tx timeout [ 181.504761][ T61] team0 (unregistering): Port device team_slave_1 removed [ 181.565839][ T61] team0 (unregistering): Port device team_slave_0 removed [ 182.240761][ T8153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.308944][ T8258] netlink: 'syz.0.958': attribute type 4 has an invalid length. [ 182.374462][ T8153] team0: Port device team_slave_0 added [ 182.401777][ T8153] team0: Port device team_slave_1 added [ 182.461065][ T5101] Bluetooth: hci0: command tx timeout [ 182.576063][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.593809][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.623168][ T8153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.642493][ T8153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.650181][ T8153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.677467][ T8153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.793190][ T8273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.961'. [ 182.970969][ T8153] hsr_slave_0: entered promiscuous mode [ 182.984427][ T8153] hsr_slave_1: entered promiscuous mode [ 182.998523][ T8153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.006307][ T8153] Cannot create hsr debugfs directory [ 183.104616][ T5101] Bluetooth: hci3: command tx timeout [ 183.528855][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.582674][ T8299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.970'. [ 183.612636][ T8239] chnl_net:caif_netlink_parms(): no params data found [ 183.649628][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 183.686910][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.970'. [ 183.742690][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.938673][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.331025][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.454999][ T8317] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 184.473606][ T8239] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.492788][ T8239] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.506585][ T8239] bridge_slave_0: entered allmulticast mode [ 184.522096][ T8239] bridge_slave_0: entered promiscuous mode [ 184.538037][ T5101] Bluetooth: hci0: command tx timeout [ 184.603460][ T8239] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.614557][ T8239] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.628536][ T8239] bridge_slave_1: entered allmulticast mode [ 184.637436][ T8239] bridge_slave_1: entered promiscuous mode [ 184.859174][ T8239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.999456][ T8239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.133633][ T61] bridge_slave_1: left allmulticast mode [ 185.143494][ T61] bridge_slave_1: left promiscuous mode [ 185.153088][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.163162][ T8343] FAULT_INJECTION: forcing a failure. [ 185.163162][ T8343] name failslab, interval 1, probability 0, space 0, times 0 [ 185.178642][ T5101] Bluetooth: hci3: command tx timeout [ 185.187559][ T8343] CPU: 1 PID: 8343 Comm: syz.4.982 Not tainted 6.10.0-rc6-syzkaller-01414-g58f9416d413a #0 [ 185.193770][ T8345] xt_l2tp: missing protocol rule (udp|l2tpip) [ 185.197606][ T8343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 185.197690][ T8343] Call Trace: [ 185.197704][ T8343] [ 185.220207][ T8343] dump_stack_lvl+0x241/0x360 [ 185.224959][ T8343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.230233][ T8343] ? __pfx__printk+0x10/0x10 [ 185.235002][ T8343] should_fail_ex+0x3b0/0x4e0 [ 185.239841][ T8343] ? sctp_add_bind_addr+0x89/0x3a0 [ 185.245058][ T8343] should_failslab+0x9/0x20 [ 185.249640][ T8343] kmalloc_trace_noprof+0x6c/0x2c0 [ 185.254850][ T8343] sctp_add_bind_addr+0x89/0x3a0 [ 185.259964][ T8343] sctp_copy_local_addr_list+0x311/0x500 [ 185.265682][ T8343] ? sctp_copy_local_addr_list+0xab/0x500 [ 185.271652][ T8343] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 185.277893][ T8343] ? sctp_v6_is_any+0x60/0x70 [ 185.282638][ T8343] sctp_bind_addr_copy+0xad/0x3b0 [ 185.287980][ T8343] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 185.294647][ T8343] sctp_connect_new_asoc+0x2f3/0x6c0 [ 185.300085][ T8343] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 185.306021][ T8343] ? sctp_sendmsg+0xbb9/0x3520 [ 185.310864][ T8343] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 185.316446][ T8343] ? security_sctp_bind_connect+0x90/0xb0 [ 185.322214][ T8343] sctp_sendmsg+0x219a/0x3520 [ 185.326951][ T8343] ? __pfx_sctp_sendmsg+0x10/0x10 [ 185.332021][ T8343] ? __pfx_aa_sk_perm+0x10/0x10 [ 185.336924][ T8343] ? inet_sendmsg+0x330/0x390 [ 185.341646][ T8343] __sock_sendmsg+0x1a6/0x270 [ 185.346415][ T8343] __sys_sendto+0x3a4/0x4f0 [ 185.350982][ T8343] ? __pfx___sys_sendto+0x10/0x10 [ 185.356102][ T8343] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 185.362218][ T8343] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.368759][ T8343] __x64_sys_sendto+0xde/0x100 [ 185.373586][ T8343] do_syscall_64+0xf3/0x230 [ 185.378579][ T8343] ? clear_bhb_loop+0x35/0x90 [ 185.383307][ T8343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.389264][ T8343] RIP: 0033:0x7fe865575bd9 [ 185.393788][ T8343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.413659][ T8343] RSP: 002b:00007fe8662de048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 185.422138][ T8343] RAX: ffffffffffffffda RBX: 00007fe865704038 RCX: 00007fe865575bd9 [ 185.430501][ T8343] RDX: 0000000000034000 RSI: 0000000020847fff RDI: 0000000000000009 [ 185.438724][ T8343] RBP: 00007fe8662de0a0 R08: 000000002005ffe4 R09: 000000000000001c [ 185.446875][ T8343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.455790][ T8343] R13: 000000000000006e R14: 00007fe865704038 R15: 00007fff1bf12b08 [ 185.464117][ T8343] [ 185.471513][ T61] bridge_slave_0: left allmulticast mode [ 185.479678][ T61] bridge_slave_0: left promiscuous mode [ 185.488691][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.997000][ T8357] netlink: 'syz.4.987': attribute type 12 has an invalid length. [ 186.006791][ T8357] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.987'. [ 186.147714][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.160967][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.174245][ T61] bond0 (unregistering): Released all slaves [ 186.197434][ T8239] team0: Port device team_slave_0 added [ 186.227155][ T8353] netlink: 'syz.3.986': attribute type 4 has an invalid length. [ 186.235949][ T8352] netlink: 'syz.3.986': attribute type 4 has an invalid length. [ 186.261447][ T8239] team0: Port device team_slave_1 added [ 186.550973][ T8239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.567878][ T8239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.603071][ T8239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.618595][ T5101] Bluetooth: hci0: command tx timeout [ 186.677441][ T8239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.693795][ T8239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.721720][ T8239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.743753][ T8153] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 186.785982][ T8153] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 186.807182][ T8375] netlink: 12 bytes leftover after parsing attributes in process `syz.3.993'. [ 186.851450][ T8153] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 186.946072][ T8153] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.139852][ T8239] hsr_slave_0: entered promiscuous mode [ 187.150711][ T8239] hsr_slave_1: entered promiscuous mode [ 187.158780][ T8239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.165581][ T8379] netlink: 300 bytes leftover after parsing attributes in process `syz.4.994'. [ 187.168650][ T8239] Cannot create hsr debugfs directory [ 187.210725][ T8379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 187.220157][ T61] hsr_slave_0: left promiscuous mode [ 187.229156][ T61] hsr_slave_1: left promiscuous mode [ 187.247678][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.253921][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 187.259516][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.283389][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.301826][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.340448][ T61] veth1_macvtap: left promiscuous mode [ 187.357712][ T61] veth0_macvtap: left promiscuous mode [ 187.366814][ T61] veth1_vlan: left promiscuous mode [ 187.377771][ T61] veth0_vlan: left promiscuous mode [ 188.698054][ T5101] Bluetooth: hci0: command tx timeout [ 188.714948][ T61] team0 (unregistering): Port device team_slave_1 removed [ 188.792485][ T61] team0 (unregistering): Port device team_slave_0 removed [ 188.931260][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1004'. [ 189.920634][ T8423] bond_slave_0: entered promiscuous mode [ 189.926416][ T8423] bond_slave_1: entered promiscuous mode [ 190.104719][ T8153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.115758][ T8422] bond_slave_0: left promiscuous mode [ 190.121820][ T8422] bond_slave_1: left promiscuous mode [ 190.194324][ T8153] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.265579][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.272876][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.334299][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.341616][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.486915][ T8153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.617148][ T8443] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1013'. [ 190.658004][ T8443] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1013'. [ 190.741669][ T8239] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 190.781885][ T8239] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.865310][ T8239] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.910021][ T8239] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 191.056287][ T8153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.084886][ T8456] tipc: Can't bind to reserved service type 1 [ 191.338630][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1019'. [ 191.565337][ T8153] veth0_vlan: entered promiscuous mode [ 191.606991][ T8239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.681463][ T8153] veth1_vlan: entered promiscuous mode [ 191.782627][ T8239] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.877306][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.884616][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.009085][ T8153] veth0_macvtap: entered promiscuous mode [ 192.020131][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.027598][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.090600][ T8153] veth1_macvtap: entered promiscuous mode [ 192.187135][ T8463] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 192.232563][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.262969][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.287959][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.318710][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.339141][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.378123][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.401298][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.427962][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.450559][ T8153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.504180][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.528481][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.547613][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.578071][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.597859][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.620265][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.641348][ T8153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.656170][ T8153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.670825][ T8153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.809109][ T8153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.820637][ T8153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.834357][ T8153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.843903][ T8153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.860177][ T8491] netlink: 'syz.4.1026': attribute type 4 has an invalid length. [ 192.920672][ T8492] netlink: 'syz.4.1026': attribute type 4 has an invalid length. [ 193.153716][ T8496] tipc: Started in network mode [ 193.161422][ T8496] tipc: Node identity ffffffff, cluster identity 4711 [ 193.169160][ T8496] tipc: Node number set to 4294967295 [ 193.222535][ T8496] netlink: 'syz.4.1027': attribute type 10 has an invalid length. [ 193.306625][ T8496] team0: Device ipvlan1 failed to register rx_handler [ 193.462264][ T8508] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1030'. [ 193.495313][ T8508] 0·: renamed from hsr_slave_1 (while UP) [ 193.519430][ T8508] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 193.578248][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1031'. [ 193.580236][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.602082][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.633692][ T8239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.716705][ T2861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.730426][ T2861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.895288][ T8239] veth0_vlan: entered promiscuous mode [ 193.946651][ T8239] veth1_vlan: entered promiscuous mode [ 194.077491][ T8239] veth0_macvtap: entered promiscuous mode [ 194.123358][ T8239] veth1_macvtap: entered promiscuous mode [ 194.196181][ T8525] netlink: 'syz.1.1036': attribute type 4 has an invalid length. [ 194.280886][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.308949][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.320293][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.333302][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.343666][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.354691][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.364885][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.377003][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.391495][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.405005][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.422388][ T8239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.430805][ T8531] netlink: 'syz.1.1036': attribute type 4 has an invalid length. [ 194.449351][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1038'. [ 194.491434][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1038'. [ 194.515941][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.547050][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.588270][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.607986][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.624876][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.636670][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.649404][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.660634][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.668257][ T8544] netlink: 'syz.1.1042': attribute type 1 has an invalid length. [ 194.671576][ T8239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.690130][ T8239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.692631][ T8544] netlink: 5276 bytes leftover after parsing attributes in process `syz.1.1042'. [ 194.716999][ T8239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.734024][ T8544] netlink: 'syz.1.1042': attribute type 1 has an invalid length. [ 194.743073][ T8544] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.1042'. [ 194.794043][ T8239] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.815070][ T8239] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.852475][ T8239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.882603][ T8239] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.006397][ T8552] bridge0: port 3(hsr0) entered blocking state [ 195.032283][ T8552] bridge0: port 3(hsr0) entered disabled state [ 195.064408][ T8552] hsr0: entered allmulticast mode [ 195.078191][ T8552] hsr_slave_0: entered allmulticast mode [ 195.084524][ T8552] hsr_slave_1: entered allmulticast mode [ 195.132590][ T8552] hsr0: entered promiscuous mode [ 195.139466][ T8552] bridge0: port 3(hsr0) entered blocking state [ 195.145907][ T8552] bridge0: port 3(hsr0) entered forwarding state [ 195.313020][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.333321][ T8562] netlink: 'syz.3.1047': attribute type 4 has an invalid length. [ 195.354794][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.494316][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.525940][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.596641][ T8566] netlink: 'syz.1.1049': attribute type 1 has an invalid length. [ 195.629185][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'. [ 195.683236][ T8572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'. [ 195.722032][ T8574] netlink: 'syz.3.1051': attribute type 12 has an invalid length. [ 195.742285][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1049'. [ 195.762724][ T8574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.586586][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.625916][ T8607] ebt_among: dst integrity fail: 100 [ 197.057464][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.221394][ T8613] tipc: Started in network mode [ 197.228668][ T8613] tipc: Node identity ffffffff, cluster identity 4711 [ 197.237167][ T8613] tipc: Node number set to 4294967295 [ 197.286868][ T8613] team0: Device ipvlan1 failed to register rx_handler [ 197.288423][ T8616] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1064'. [ 197.354314][ T8619] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1061'. [ 197.417505][ T8619] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1061'. [ 197.544538][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1061'. [ 197.598535][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'. [ 197.641444][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.832982][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.853225][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.861119][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'. [ 197.871451][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.883189][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.893746][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.896038][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1065'. [ 197.912907][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 197.925825][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.995344][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1065'. [ 198.252312][ T8618] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 198.293357][ T8640] ip6gretap0: entered promiscuous mode [ 198.318235][ T8640] macsec1: entered promiscuous mode [ 198.323867][ T8640] macsec1: entered allmulticast mode [ 198.344504][ T8640] ip6gretap0: entered allmulticast mode [ 198.356747][ T8640] ip6gretap0: left allmulticast mode [ 198.363672][ T8640] ip6gretap0: left promiscuous mode [ 198.438168][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'. [ 198.665150][ T8651] bridge0: entered promiscuous mode [ 198.681062][ T8651] macsec2: entered promiscuous mode [ 198.702610][ T8651] macsec2: entered allmulticast mode [ 198.718003][ T8651] bridge0: entered allmulticast mode [ 198.732247][ T8651] bridge0: left allmulticast mode [ 198.737672][ T8651] bridge0: left promiscuous mode [ 198.822504][ T61] bridge_slave_1: left allmulticast mode [ 198.831762][ T61] bridge_slave_1: left promiscuous mode [ 198.837557][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.847234][ T61] bridge_slave_0: left allmulticast mode [ 198.853758][ T61] bridge_slave_0: left promiscuous mode [ 198.863282][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.521430][ T8676] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 199.614654][ T8675] ebtables: ebtables: counters copy to user failed while replacing table [ 199.678319][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.690805][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.702634][ T61] bond0 (unregistering): Released all slaves [ 199.925103][ T8680] validate_nla: 3 callbacks suppressed [ 199.925126][ T8680] netlink: 'syz.0.1079': attribute type 1 has an invalid length. [ 199.975502][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1079'. [ 199.986159][ T5101] Bluetooth: hci0: command tx timeout [ 200.613365][ T61] hsr_slave_0: left promiscuous mode [ 200.637708][ T61] hsr_slave_1: left promiscuous mode [ 200.649559][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.659294][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.667883][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.675692][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.704760][ T8712] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 200.715133][ T61] veth1_macvtap: left promiscuous mode [ 200.721571][ T61] veth0_macvtap: left promiscuous mode [ 200.727552][ T61] veth1_vlan: left promiscuous mode [ 200.733464][ T61] veth0_vlan: left promiscuous mode [ 201.427156][ T61] team0 (unregistering): Port device team_slave_1 removed [ 201.488340][ T61] team0 (unregistering): Port device team_slave_0 removed [ 201.904159][ T5101] Bluetooth: hci4: command 0x0406 tx timeout [ 202.057980][ T5098] Bluetooth: hci0: command tx timeout [ 202.112586][ T8631] chnl_net:caif_netlink_parms(): no params data found [ 202.486648][ T8631] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.508167][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.515666][ T8631] bridge_slave_0: entered allmulticast mode [ 202.526815][ T8631] bridge_slave_0: entered promiscuous mode [ 202.549118][ T8631] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.565037][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.573158][ T8631] bridge_slave_1: entered allmulticast mode [ 202.581483][ T8631] bridge_slave_1: entered promiscuous mode [ 202.627187][ T8728] __nla_validate_parse: 3 callbacks suppressed [ 202.627225][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'. [ 202.645412][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'. [ 202.660472][ T8631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.670070][ T8728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'. [ 202.689742][ T8631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.797574][ T8631] team0: Port device team_slave_0 added [ 202.821854][ T8631] team0: Port device team_slave_1 added [ 202.906146][ T8631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.920320][ T8631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.988229][ T8631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.013875][ T8631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.033537][ T8631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.084076][ T8631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.180325][ T8734] netlink: 'syz.0.1092': attribute type 29 has an invalid length. [ 203.296039][ T8734] netlink: 'syz.0.1092': attribute type 29 has an invalid length. [ 203.309265][ T8741] netlink: 'syz.4.1093': attribute type 1 has an invalid length. [ 203.319757][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 203.348419][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1093'. [ 203.416401][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 203.456774][ T8631] hsr_slave_0: entered promiscuous mode [ 203.467699][ T8735] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1093'. [ 203.479966][ T8631] hsr_slave_1: entered promiscuous mode [ 203.486807][ T8631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.495286][ T8631] Cannot create hsr debugfs directory [ 204.148092][ T5098] Bluetooth: hci0: command tx timeout [ 204.618594][ T8775] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1105'. [ 204.667634][ T8775] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1105'. [ 204.733515][ T8765] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 204.876550][ T8761] ebtables: ebtables: counters copy to user failed while replacing table [ 204.894309][ T8631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.942839][ T8771] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 204.965759][ T8631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.069849][ T8631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.377556][ T8631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 205.577257][ T8802] netlink: 'syz.3.1111': attribute type 1 has an invalid length. [ 205.624699][ T8802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1111'. [ 205.899736][ T8809] ip6gretap0: entered promiscuous mode [ 205.916130][ T8809] macsec1: entered promiscuous mode [ 205.926746][ T8809] macsec1: entered allmulticast mode [ 205.944739][ T8809] ip6gretap0: entered allmulticast mode [ 205.983421][ T8809] ip6gretap0: left allmulticast mode [ 206.006566][ T8809] ip6gretap0: left promiscuous mode [ 206.164516][ T8631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.219351][ T5098] Bluetooth: hci0: command tx timeout [ 206.419939][ T8827] netlink: 'syz.0.1120': attribute type 4 has an invalid length. [ 206.533286][ T8631] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.597384][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.604712][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.747139][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.754468][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.985527][ T8631] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 206.996638][ T8631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.397656][ T8631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.495872][ T8631] veth0_vlan: entered promiscuous mode [ 207.514030][ T8836] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 207.550484][ T8631] veth1_vlan: entered promiscuous mode [ 207.631163][ T8631] veth0_macvtap: entered promiscuous mode [ 207.666517][ T8631] veth1_macvtap: entered promiscuous mode [ 207.884914][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.905899][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.929811][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.952505][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.976450][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.014074][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.037706][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.054489][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.067948][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.079374][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.102867][ T8631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.140825][ T8870] bridge0: port 3(hsr0) entered disabled state [ 208.147333][ T8870] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.156515][ T8870] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.244886][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.275182][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.295889][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.317302][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.342562][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.355000][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.377373][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.397883][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.410531][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.430248][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.456484][ T8631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.529448][ T8879] bridge0: port 3(hsr0) entered disabled state [ 208.633562][ T8879] hsr0 (unregistering): left allmulticast mode [ 208.655403][ T8879] bridge0: port 3(hsr0) entered disabled state [ 208.689619][ T8631] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.699142][ T8631] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.708143][ T8631] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.717526][ T8631] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.793713][ T8894] __nla_validate_parse: 8 callbacks suppressed [ 208.793741][ T8894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1141'. [ 209.019489][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.062980][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.274312][ T2861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.299749][ T2861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.686910][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1150'. [ 209.805874][ T8904] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 210.306357][ T8932] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1152'. [ 210.562427][ T8941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1154'. [ 210.761010][ T2861] bridge_slave_1: left allmulticast mode [ 210.766904][ T2861] bridge_slave_1: left promiscuous mode [ 210.773664][ T2861] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.828406][ T8947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1156'. [ 210.846144][ T2861] bridge_slave_0: left allmulticast mode [ 210.867909][ T2861] bridge_slave_0: left promiscuous mode [ 210.873808][ T2861] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.084865][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1160'. [ 211.537386][ T2861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.554933][ T2861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.567625][ T2861] bond0 (unregistering): Released all slaves [ 211.854337][ T8962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1161'. [ 212.258068][ T8976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.395255][ T2861] hsr_slave_0: left promiscuous mode [ 212.412773][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.423793][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.435476][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.440479][ T2861] hsr_slave_1: left promiscuous mode [ 212.459249][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.476799][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.484531][ T2861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.493730][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.536167][ T2861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.555881][ T2861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.622991][ T2861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.694742][ T2861] veth1_macvtap: left promiscuous mode [ 212.696678][ T8991] netlink: 'syz.4.1169': attribute type 7 has an invalid length. [ 212.702358][ T2861] veth0_macvtap: left promiscuous mode [ 212.715990][ T2861] veth1_vlan: left promiscuous mode [ 212.724960][ T2861] veth0_vlan: left promiscuous mode [ 212.768747][ T8994] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1170'. [ 212.780026][ T8990] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 213.104457][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'. [ 213.464169][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'. [ 213.715688][ T2861] team0 (unregistering): Port device team_slave_1 removed [ 213.780260][ T2861] team0 (unregistering): Port device team_slave_0 removed [ 214.371923][ T8984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1169'. [ 214.397337][ T8997] bridge0: entered promiscuous mode [ 214.405314][ T8997] macsec2: entered promiscuous mode [ 214.411370][ T8997] macsec2: entered allmulticast mode [ 214.416957][ T8997] bridge0: entered allmulticast mode [ 214.425937][ T8997] bridge0: left allmulticast mode [ 214.431724][ T8997] bridge0: left promiscuous mode [ 214.544018][ T5101] Bluetooth: hci0: command tx timeout [ 214.934859][ T9024] bridge0: entered promiscuous mode [ 214.947566][ T9024] macsec1: entered promiscuous mode [ 214.953901][ T9024] macsec1: entered allmulticast mode [ 214.962995][ T9024] bridge0: entered allmulticast mode [ 214.975873][ T9024] bridge0: left allmulticast mode [ 214.981808][ T9024] bridge0: left promiscuous mode [ 215.444903][ T2861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.467461][ T9039] Cannot find del_set index 2048 as target [ 215.518225][ T8977] chnl_net:caif_netlink_parms(): no params data found [ 215.673739][ T2861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.897433][ T9054] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1190'. [ 215.939649][ T2861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.103271][ T9066] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 216.103387][ T2861] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.289201][ T8977] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.306903][ T8977] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.324751][ T8977] bridge_slave_0: entered allmulticast mode [ 216.347606][ T8977] bridge_slave_0: entered promiscuous mode [ 216.375461][ T8977] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.390117][ T8977] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.397513][ T8977] bridge_slave_1: entered allmulticast mode [ 216.429665][ T8977] bridge_slave_1: entered promiscuous mode [ 216.611820][ T8977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.622270][ T5101] Bluetooth: hci0: command tx timeout [ 216.781663][ T8977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.854107][ T9080] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1198'. [ 216.940734][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 216.999263][ T8977] team0: Port device team_slave_0 added [ 217.054791][ T8977] team0: Port device team_slave_1 added [ 217.063620][ T2861] bridge_slave_1: left allmulticast mode [ 217.070512][ T2861] bridge_slave_1: left promiscuous mode [ 217.076755][ T2861] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.103593][ T2861] bridge_slave_0: left allmulticast mode [ 217.110819][ T2861] bridge_slave_0: left promiscuous mode [ 217.121282][ T2861] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.301942][ T9098] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1205'. [ 217.325544][ T9095] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 217.348156][ T9098] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1205'. [ 218.172182][ T2861] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.178508][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1212'. [ 218.212593][ T2861] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.248275][ T2861] bond0 (unregistering): Released all slaves [ 218.465977][ T8977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.475186][ T8977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.502947][ T8977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.596498][ T8977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.612135][ T8977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.653609][ T8977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.909505][ T8977] hsr_slave_0: entered promiscuous mode [ 218.930795][ T8977] hsr_slave_1: entered promiscuous mode [ 218.956406][ T2861] hsr_slave_0: left promiscuous mode [ 218.963417][ T2861] hsr_slave_1: left promiscuous mode [ 218.970409][ T2861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.978891][ T2861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.988170][ T2861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.996052][ T2861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.031436][ T2861] veth1_macvtap: left promiscuous mode [ 219.037533][ T2861] veth0_macvtap: left promiscuous mode [ 219.043584][ T2861] veth1_vlan: left promiscuous mode [ 219.049481][ T2861] veth0_vlan: left promiscuous mode [ 219.231296][ T9134] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 219.684788][ T9158] netlink: 'syz.4.1225': attribute type 20 has an invalid length. [ 220.022608][ T2861] team0 (unregistering): Port device team_slave_1 removed [ 220.083270][ T2861] team0 (unregistering): Port device team_slave_0 removed [ 220.735690][ T9150] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1223'. [ 221.299161][ T9181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1232'. [ 222.000150][ T8977] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.021276][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.040391][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.050463][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.060279][ T8977] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.074722][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.083671][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.092095][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.110970][ T8977] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.138012][ T8977] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.345298][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.427165][ T9198] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.569622][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.737377][ T9214] netlink: 'syz.4.1242': attribute type 1 has an invalid length. [ 222.738706][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.765661][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 222.816015][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 222.857674][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'. [ 222.873083][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.925911][ T9224] FAULT_INJECTION: forcing a failure. [ 222.925911][ T9224] name failslab, interval 1, probability 0, space 0, times 0 [ 222.938984][ T9224] CPU: 1 PID: 9224 Comm: syz.3.1246 Not tainted 6.10.0-rc6-syzkaller-01414-g58f9416d413a #0 [ 222.949203][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 222.959485][ T9224] Call Trace: [ 222.962800][ T9224] [ 222.965764][ T9224] dump_stack_lvl+0x241/0x360 [ 222.970519][ T9224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.975765][ T9224] ? __pfx__printk+0x10/0x10 [ 222.980499][ T9224] ? __pfx___might_resched+0x10/0x10 [ 222.985844][ T9224] should_fail_ex+0x3b0/0x4e0 [ 222.990586][ T9224] should_failslab+0x9/0x20 [ 222.995119][ T9224] kmalloc_node_track_caller_noprof+0xda/0x440 [ 223.001309][ T9224] ? xfrm_do_migrate+0x8c4/0xba0 [ 223.006291][ T9224] ? stack_depot_save_flags+0x29/0x830 [ 223.011976][ T9224] kmemdup_noprof+0x2a/0x60 [ 223.016619][ T9224] xfrm_do_migrate+0x8c4/0xba0 [ 223.021420][ T9224] ? kasan_save_track+0x3f/0x80 [ 223.026365][ T9224] ? __pfx_xfrm_do_migrate+0x10/0x10 [ 223.031745][ T9224] ? __nla_parse+0x40/0x60 [ 223.036239][ T9224] xfrm_user_rcv_msg+0x75d/0xa80 [ 223.041303][ T9224] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 223.046920][ T9224] ? __mutex_trylock_common+0x183/0x2e0 [ 223.052506][ T9224] ? __pfx___might_resched+0x10/0x10 [ 223.057846][ T9224] netlink_rcv_skb+0x1e3/0x430 [ 223.062658][ T9224] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 223.068425][ T9224] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.074047][ T9224] xfrm_netlink_rcv+0x79/0x90 [ 223.078948][ T9224] netlink_unicast+0x7f0/0x990 [ 223.083792][ T9224] ? __pfx_netlink_unicast+0x10/0x10 [ 223.089236][ T9224] ? __virt_addr_valid+0x183/0x520 [ 223.094449][ T9224] ? __check_object_size+0x49c/0x900 [ 223.099869][ T9224] ? bpf_lsm_netlink_send+0x9/0x10 [ 223.105020][ T9224] netlink_sendmsg+0x8e4/0xcb0 [ 223.109883][ T9224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.115417][ T9224] ? __import_iovec+0x536/0x820 [ 223.120406][ T9224] ? aa_sock_msg_perm+0x91/0x160 [ 223.125389][ T9224] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 223.130797][ T9224] ? security_socket_sendmsg+0x87/0xb0 [ 223.136306][ T9224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.141714][ T9224] __sock_sendmsg+0x221/0x270 [ 223.146618][ T9224] ____sys_sendmsg+0x525/0x7d0 [ 223.151454][ T9224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.156887][ T9224] __sys_sendmsg+0x2b0/0x3a0 [ 223.161519][ T9224] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.166675][ T9224] ? vfs_write+0x7c4/0xc90 [ 223.171172][ T9224] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.177543][ T9224] ? do_syscall_64+0x100/0x230 [ 223.182348][ T9224] ? do_syscall_64+0xb6/0x230 [ 223.187180][ T9224] do_syscall_64+0xf3/0x230 [ 223.191724][ T9224] ? clear_bhb_loop+0x35/0x90 [ 223.196444][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.202468][ T9224] RIP: 0033:0x7fb535f75bd9 [ 223.206906][ T9224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.226739][ T9224] RSP: 002b:00007fb5359ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.235506][ T9224] RAX: ffffffffffffffda RBX: 00007fb536103f60 RCX: 00007fb535f75bd9 [ 223.243880][ T9224] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 223.251970][ T9224] RBP: 00007fb5359ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 223.260068][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.268070][ T9224] R13: 000000000000004d R14: 00007fb536103f60 R15: 00007ffdbe50d0c8 [ 223.276120][ T9224] [ 223.656747][ T9186] chnl_net:caif_netlink_parms(): no params data found [ 223.681475][ T8977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.735677][ T51] hsr0: left allmulticast mode [ 223.740963][ T51] hsr_slave_0: left allmulticast mode [ 223.746598][ T51] hsr_slave_1: left allmulticast mode [ 223.752479][ T51] hsr0: left promiscuous mode [ 223.757707][ T51] bridge0: port 3(hsr0) entered disabled state [ 223.767693][ T51] bridge_slave_1: left allmulticast mode [ 223.773585][ T51] bridge_slave_1: left promiscuous mode [ 223.779831][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.795662][ T51] bridge_slave_0: left allmulticast mode [ 223.804358][ T51] bridge_slave_0: left promiscuous mode [ 223.810302][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.139385][ T5101] Bluetooth: hci1: command tx timeout [ 224.530205][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.550963][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.586977][ T51] bond0 (unregistering): Released all slaves [ 225.022426][ T9251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.241214][ T9256] netlink: 'syz.3.1257': attribute type 1 has an invalid length. [ 225.250480][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 225.264467][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1257'. [ 225.289411][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1257'. [ 225.660508][ T9263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1259'. [ 226.218396][ T5098] Bluetooth: hci1: command tx timeout [ 227.333882][ T51] tipc: Left network mode [ 227.452518][ T9186] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.460062][ T9186] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.467659][ T9186] bridge_slave_0: entered allmulticast mode [ 227.477631][ T9186] bridge_slave_0: entered promiscuous mode [ 227.490300][ T9186] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.498990][ T9186] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.506405][ T9186] bridge_slave_1: entered allmulticast mode [ 227.513270][ T5098] Bluetooth: hci5: command 0x0406 tx timeout [ 227.522179][ T9186] bridge_slave_1: entered promiscuous mode [ 227.542621][ T8977] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.598238][ T9271] x_tables: duplicate underflow at hook 1 [ 227.610111][ T9276] netlink: 'syz.3.1264': attribute type 29 has an invalid length. [ 227.664156][ T9276] netlink: 'syz.3.1264': attribute type 29 has an invalid length. [ 227.678247][ T9271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 227.693999][ T9271] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1262'. [ 227.764668][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.772021][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.841183][ T9279] netlink: 'syz.3.1264': attribute type 29 has an invalid length. [ 227.869529][ T9186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.944131][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.951466][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.968892][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 228.008912][ T9282] netlink: 'syz.0.1266': attribute type 1 has an invalid length. [ 228.029294][ T9282] netlink: 'syz.0.1266': attribute type 2 has an invalid length. [ 228.059696][ T9186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.298190][ T5101] Bluetooth: hci1: command tx timeout [ 228.330386][ T51] hsr_slave_0: left promiscuous mode [ 228.342856][ T51] hsr_slave_1: left promiscuous mode [ 228.361810][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.387891][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.411273][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.437995][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.480977][ T51] veth1_macvtap: left promiscuous mode [ 228.486822][ T51] veth0_macvtap: left promiscuous mode [ 228.493292][ T51] veth1_vlan: left promiscuous mode [ 228.503340][ T51] veth0_vlan: left promiscuous mode [ 229.300553][ T51] team0 (unregistering): Port device team_slave_1 removed [ 229.354481][ T51] team0 (unregistering): Port device team_slave_0 removed [ 229.566157][ T9299] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 229.977667][ T9186] team0: Port device team_slave_0 added [ 230.003353][ T9186] team0: Port device team_slave_1 added [ 230.108033][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1271'. [ 230.120826][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1272'. [ 230.385454][ T5101] Bluetooth: hci1: command tx timeout [ 230.472211][ T9307] netlink: 'syz.4.1273': attribute type 1 has an invalid length. [ 230.487709][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 230.509343][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1273'. [ 230.527215][ T9307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1273'. [ 232.655601][ T9186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.688927][ T9186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.728022][ T9186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.768217][ T9186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.776884][ T9186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.816947][ T9186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.873487][ T9314] netlink: 'syz.4.1275': attribute type 10 has an invalid length. [ 232.890844][ T9314] team0: Device ipvlan1 failed to register rx_handler [ 233.112326][ T9186] hsr_slave_0: entered promiscuous mode [ 233.132089][ T9186] hsr_slave_1: entered promiscuous mode [ 233.148064][ T9186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.165529][ T9186] Cannot create hsr debugfs directory [ 233.222082][ T9325] netlink: 'syz.4.1278': attribute type 1 has an invalid length. [ 233.247977][ T9325] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1278'. [ 233.379607][ T9332] netlink: 'syz.3.1279': attribute type 3 has an invalid length. [ 233.552445][ T8977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.762245][ T8977] veth0_vlan: entered promiscuous mode [ 233.779107][ T9338] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1283'. [ 233.887357][ T8977] veth1_vlan: entered promiscuous mode [ 234.031906][ T8977] veth0_macvtap: entered promiscuous mode [ 234.071936][ T8977] veth1_macvtap: entered promiscuous mode [ 234.192919][ T9346] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 234.209669][ T9186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 234.249139][ T9186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 234.303289][ T9186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 234.323942][ T9186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 234.344383][ T8977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.361821][ T8977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.374937][ T8977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.397064][ T8977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.407323][ T8977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.424440][ T8977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.436649][ T8977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.471759][ T8977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.486558][ T8977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.501253][ T8977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.515970][ T8977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.544281][ T9361] netlink: 'syz.4.1290': attribute type 3 has an invalid length. [ 234.546129][ T8977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.577585][ T8977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.590194][ T8977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.656793][ T8977] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.678691][ T8977] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.687679][ T8977] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.702647][ T8977] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.962429][ T9372] ip6gretap0: entered promiscuous mode [ 234.971814][ T9372] macsec1: entered promiscuous mode [ 234.977350][ T9372] macsec1: entered allmulticast mode [ 234.983214][ T9372] ip6gretap0: entered allmulticast mode [ 235.008358][ T9372] ip6gretap0: left allmulticast mode [ 235.013905][ T9372] ip6gretap0: left promiscuous mode [ 235.098293][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.106243][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.252161][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.290890][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.326009][ T9386] Bluetooth: MGMT ver 1.22 [ 235.341348][ T9186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.459991][ T9186] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.521510][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.528795][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.555448][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.562760][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.280244][ T2432] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.551051][ T9186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.613465][ T9186] veth0_vlan: entered promiscuous mode [ 236.630209][ T9186] veth1_vlan: entered promiscuous mode [ 236.684294][ T2432] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.715490][ T9186] veth0_macvtap: entered promiscuous mode [ 236.727428][ T9186] veth1_macvtap: entered promiscuous mode [ 236.752010][ T9186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.763671][ T9186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.773631][ T9186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.784660][ T9186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.795943][ T9186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.806849][ T9186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.816842][ T9186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.827961][ T9186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.840227][ T9186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.858946][ T9186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.870300][ T9186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.880413][ T9186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.891062][ T9186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.902531][ T9186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.913612][ T9186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.923811][ T9186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.934455][ T9186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.948430][ T9186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.962014][ T9186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.971985][ T9186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.982844][ T9186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.992127][ T9186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.053609][ T2432] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.162370][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 237.180810][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1302'. [ 237.233464][ T2432] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.449668][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.457562][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.558958][ T9410] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 237.569742][ T9410] TCP: tcp_parse_options: Illegal window scaling value 252 > 14 received [ 237.640649][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.666334][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.682086][ T9410] batadv_slave_1: entered promiscuous mode [ 237.685187][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.705584][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.718318][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.728880][ T9409] batadv_slave_1: left promiscuous mode [ 237.738800][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.758627][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 237.773015][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.789363][ T2432] bridge_slave_1: left allmulticast mode [ 237.795185][ T2432] bridge_slave_1: left promiscuous mode [ 237.876365][ T2432] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.913204][ T2432] bridge_slave_0: left allmulticast mode [ 237.939345][ T2432] bridge_slave_0: left promiscuous mode [ 237.974559][ T2432] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.685819][ T2432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.700885][ C0] ------------[ cut here ]------------ [ 238.707100][ C0] WARNING: CPU: 0 PID: 0 at net/ipv4/route.c:1241 ip_rt_bug+0x2c/0x110 [ 238.715530][ C0] Modules linked in: [ 238.719496][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.10.0-rc6-syzkaller-01414-g58f9416d413a #0 [ 238.729298][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 238.739529][ C0] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 238.744503][ C0] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 4b d5 b0 f7 66 90 e8 44 d5 b0 f7 31 ff 48 89 de ba 02 00 00 00 e8 a5 b1 6b ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 238.764187][ C0] RSP: 0018:ffffc90000007680 EFLAGS: 00010286 [ 238.770325][ C0] RAX: 410fb98517455600 RBX: ffff88807e28db40 RCX: ffffffff8172d99a [ 238.778429][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c1ff880 [ 238.786541][ C0] RBP: 0000000000000001 R08: ffffffff92fbd617 R09: 1ffffffff25f7ac2 [ 238.794832][ C0] R10: dffffc0000000000 R11: fffffbfff25f7ac3 R12: dffffc0000000000 [ 238.803017][ C0] R13: dffffc0000000000 R14: ffff888060eb0000 R15: ffff8880177b8d00 [ 238.811191][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 238.820291][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.826965][ C0] CR2: 0000001b32312ff8 CR3: 0000000063e02000 CR4: 00000000003506f0 [ 238.835055][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 238.843217][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 238.851342][ C0] Call Trace: [ 238.854665][ C0] [ 238.857587][ C0] ? __warn+0x163/0x4e0 [ 238.861875][ C0] ? ip_rt_bug+0x2c/0x110 [ 238.866315][ C0] ? report_bug+0x2b3/0x500 [ 238.870945][ C0] ? ip_rt_bug+0x2c/0x110 [ 238.875379][ C0] ? handle_bug+0x3e/0x70 [ 238.879816][ C0] ? exc_invalid_op+0x1a/0x50 [ 238.884523][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 238.889662][ C0] ? mark_lock+0x9a/0x350 [ 238.894204][ C0] ? ip_rt_bug+0x2c/0x110 [ 238.898765][ C0] ip_push_pending_frames+0xbf/0x150 [ 238.904283][ C0] __icmp_send+0xf89/0x14e0 [ 238.908910][ C0] ? __icmp_send+0x59c/0x14e0 [ 238.913677][ C0] ? __pfx___icmp_send+0x10/0x10 [ 238.918687][ C0] ? validate_chain+0x11e/0x5900 [ 238.923746][ C0] ? mark_lock+0x9a/0x350 [ 238.928158][ C0] ? look_up_lock_class+0x77/0x160 [ 238.933332][ C0] ? mark_lock+0x9a/0x350 [ 238.937866][ C0] ipv4_link_failure+0x62f/0xa10 [ 238.942900][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 238.948436][ C0] ? do_raw_write_lock+0x148/0x4f0 [ 238.953602][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 238.959131][ C0] arp_error_report+0x114/0x160 [ 238.964046][ C0] neigh_invalidate+0x244/0x470 [ 238.968974][ C0] neigh_timer_handler+0x8a5/0xfd0 [ 238.974123][ C0] call_timer_fn+0x18e/0x650 [ 238.978802][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 238.984465][ C0] ? call_timer_fn+0xc0/0x650 [ 238.989196][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 238.994974][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 239.000312][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 239.006149][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 239.011915][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 239.017668][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.022948][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 239.028232][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 239.033921][ C0] __run_timer_base+0x66a/0x8e0 [ 239.038849][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 239.044288][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.050700][ C0] run_timer_softirq+0xb7/0x170 [ 239.055603][ C0] handle_softirqs+0x2c4/0x970 [ 239.060483][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 239.065329][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 239.070711][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 239.075971][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 239.080670][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 239.085928][ C0] irq_exit_rcu+0x9/0x30 [ 239.090324][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 239.096027][ C0] [ 239.099102][ C0] [ 239.102057][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 239.108123][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 239.113470][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d5 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d f5 4c 9f 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 239.134201][ C0] RSP: 0018:ffffffff8e007ca8 EFLAGS: 00000246 [ 239.140519][ C0] RAX: ffffffff8e094680 RBX: ffff88801b6d1864 RCX: 0000000000045061 [ 239.148582][ C0] RDX: 0000000000000001 RSI: ffff88801b6d1800 RDI: ffff88801b6d1864 [ 239.156596][ C0] RBP: 000000000003a538 R08: ffff8880b9437c9b R09: 1ffff11017286f93 [ 239.164855][ C0] R10: dffffc0000000000 R11: ffffffff8b8a38c0 R12: ffff88801a702800 [ 239.172919][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eaceca0 [ 239.181065][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 239.186414][ C0] acpi_idle_enter+0xe4/0x140 [ 239.191189][ C0] cpuidle_enter_state+0x112/0x480 [ 239.196335][ C0] ? __pfx_menu_select+0x10/0x10 [ 239.201468][ C0] cpuidle_enter+0x5d/0xa0 [ 239.205944][ C0] do_idle+0x375/0x5d0 [ 239.210101][ C0] ? __pfx_do_idle+0x10/0x10 [ 239.214741][ C0] ? poll_idle+0xb0/0xb0 [ 239.219069][ C0] ? rest_init+0x31/0x300 [ 239.223461][ C0] cpu_startup_entry+0x42/0x60 [ 239.228290][ C0] rest_init+0x2dc/0x300 [ 239.232596][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 239.238297][ C0] start_kernel+0x47a/0x500 [ 239.242891][ C0] x86_64_start_reservations+0x2a/0x30 [ 239.248460][ C0] x86_64_start_kernel+0x99/0xa0 [ 239.253518][ C0] common_startup_64+0x13e/0x147 [ 239.258548][ C0] [ 239.261636][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 239.268955][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.10.0-rc6-syzkaller-01414-g58f9416d413a #0 [ 239.279077][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 239.289244][ C0] Call Trace: [ 239.292548][ C0] [ 239.295400][ C0] dump_stack_lvl+0x241/0x360 [ 239.300130][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.305352][ C0] ? __pfx__printk+0x10/0x10 [ 239.310181][ C0] ? vscnprintf+0x5d/0x90 [ 239.314536][ C0] panic+0x349/0x860 [ 239.318524][ C0] ? __warn+0x172/0x4e0 [ 239.323434][ C0] ? __pfx_panic+0x10/0x10 [ 239.327903][ C0] ? common_startup_64+0x13e/0x147 [ 239.333221][ C0] __warn+0x346/0x4e0 [ 239.337237][ C0] ? ip_rt_bug+0x2c/0x110 [ 239.341604][ C0] report_bug+0x2b3/0x500 [ 239.346077][ C0] ? ip_rt_bug+0x2c/0x110 [ 239.350454][ C0] handle_bug+0x3e/0x70 [ 239.354781][ C0] exc_invalid_op+0x1a/0x50 [ 239.359523][ C0] asm_exc_invalid_op+0x1a/0x20 [ 239.364446][ C0] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 239.369457][ C0] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 4b d5 b0 f7 66 90 e8 44 d5 b0 f7 31 ff 48 89 de ba 02 00 00 00 e8 a5 b1 6b ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 239.389293][ C0] RSP: 0018:ffffc90000007680 EFLAGS: 00010286 [ 239.395410][ C0] RAX: 410fb98517455600 RBX: ffff88807e28db40 RCX: ffffffff8172d99a [ 239.403426][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: ffffffff8c1ff880 [ 239.411519][ C0] RBP: 0000000000000001 R08: ffffffff92fbd617 R09: 1ffffffff25f7ac2 [ 239.419636][ C0] R10: dffffc0000000000 R11: fffffbfff25f7ac3 R12: dffffc0000000000 [ 239.427665][ C0] R13: dffffc0000000000 R14: ffff888060eb0000 R15: ffff8880177b8d00 [ 239.435789][ C0] ? mark_lock+0x9a/0x350 [ 239.440164][ C0] ip_push_pending_frames+0xbf/0x150 [ 239.445520][ C0] __icmp_send+0xf89/0x14e0 [ 239.450175][ C0] ? __icmp_send+0x59c/0x14e0 [ 239.454884][ C0] ? __pfx___icmp_send+0x10/0x10 [ 239.459843][ C0] ? validate_chain+0x11e/0x5900 [ 239.464925][ C0] ? mark_lock+0x9a/0x350 [ 239.469341][ C0] ? look_up_lock_class+0x77/0x160 [ 239.474673][ C0] ? mark_lock+0x9a/0x350 [ 239.479090][ C0] ipv4_link_failure+0x62f/0xa10 [ 239.484104][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 239.489620][ C0] ? do_raw_write_lock+0x148/0x4f0 [ 239.494771][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 239.500298][ C0] arp_error_report+0x114/0x160 [ 239.505321][ C0] neigh_invalidate+0x244/0x470 [ 239.510293][ C0] neigh_timer_handler+0x8a5/0xfd0 [ 239.515531][ C0] call_timer_fn+0x18e/0x650 [ 239.520170][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 239.525929][ C0] ? call_timer_fn+0xc0/0x650 [ 239.530660][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 239.536360][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 239.541532][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 239.547199][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 239.552858][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 239.558514][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 239.563737][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 239.568967][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 239.574877][ C0] __run_timer_base+0x66a/0x8e0 [ 239.579784][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 239.585196][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.591570][ C0] run_timer_softirq+0xb7/0x170 [ 239.596446][ C0] handle_softirqs+0x2c4/0x970 [ 239.601237][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 239.606024][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 239.611350][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 239.616691][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 239.621340][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 239.626657][ C0] irq_exit_rcu+0x9/0x30 [ 239.630961][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 239.636648][ C0] [ 239.639698][ C0] [ 239.642640][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 239.648669][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 239.653994][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d5 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d f5 4c 9f 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 239.674255][ C0] RSP: 0018:ffffffff8e007ca8 EFLAGS: 00000246 [ 239.680960][ C0] RAX: ffffffff8e094680 RBX: ffff88801b6d1864 RCX: 0000000000045061 [ 239.688965][ C0] RDX: 0000000000000001 RSI: ffff88801b6d1800 RDI: ffff88801b6d1864 [ 239.697071][ C0] RBP: 000000000003a538 R08: ffff8880b9437c9b R09: 1ffff11017286f93 [ 239.705066][ C0] R10: dffffc0000000000 R11: ffffffff8b8a38c0 R12: ffff88801a702800 [ 239.713324][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eaceca0 [ 239.722116][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 239.727727][ C0] acpi_idle_enter+0xe4/0x140 [ 239.732579][ C0] cpuidle_enter_state+0x112/0x480 [ 239.737769][ C0] ? __pfx_menu_select+0x10/0x10 [ 239.742793][ C0] cpuidle_enter+0x5d/0xa0 [ 239.747381][ C0] do_idle+0x375/0x5d0 [ 239.751741][ C0] ? __pfx_do_idle+0x10/0x10 [ 239.756365][ C0] ? poll_idle+0xb0/0xb0 [ 239.760768][ C0] ? rest_init+0x31/0x300 [ 239.765165][ C0] cpu_startup_entry+0x42/0x60 [ 239.769967][ C0] rest_init+0x2dc/0x300 [ 239.774333][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 239.779973][ C0] start_kernel+0x47a/0x500 [ 239.784586][ C0] x86_64_start_reservations+0x2a/0x30 [ 239.790100][ C0] x86_64_start_kernel+0x99/0xa0 [ 239.795124][ C0] common_startup_64+0x13e/0x147 [ 239.800138][ C0] [ 239.803682][ C0] Kernel Offset: disabled [ 239.808243][ C0] Rebooting in 86400 seconds..