last executing test programs: 1m26.788236004s ago: executing program 0 (id=2144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000082c0004802800018007000100637400001c0002800800014000000001050003050000000008000240000000150900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r6, 0x3, 0x1, 0x7fff000, 0xfffffffa, 0xd67}, &(0x7f0000000140)=0x14) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, 'mM2\x00', "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000060a0b040000000000000000020000002c000480280001800b0001006c6f6f6b75700000180002800900010073797a320000000008000240000000140900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a23168ba8d71044e1a16406226b5f3e5b64ada1871e7b5c90acb7d8965e909dc730d8c979ba8a003cbd131f1e8aed62d490c468617cf445313a4982436c1e47e739760131e70b48052f3d8d0704e498f6de59e0a034f9c0c78b945848fa6d7cfa67"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r9, @ANYBLOB="d0f4e02ce95b90fd11e62805ff", @ANYBLOB="000229bd7000fedbdf252000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x2000800}, 0x40804) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x4000006, 0x3}, 0x10) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f0000000280)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) sendmmsg$inet(r10, &(0x7f0000003a80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x74, &(0x7f0000000080)={0x0, 0xfd1c, 0x10, 0x38}, &(0x7f00000010c0)=0x18) 1m25.950166879s ago: executing program 2 (id=1112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRESHEX], 0xb8}, 0x1, 0x0, 0x0, 0xacc576b68fc176c1}, 0x0) 1m11.057701302s ago: executing program 2 (id=1112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRESHEX], 0xb8}, 0x1, 0x0, 0x0, 0xacc576b68fc176c1}, 0x0) 1m10.40311074s ago: executing program 0 (id=2144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000082c0004802800018007000100637400001c0002800800014000000001050003050000000008000240000000150900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r6, 0x3, 0x1, 0x7fff000, 0xfffffffa, 0xd67}, &(0x7f0000000140)=0x14) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, 'mM2\x00', "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000060a0b040000000000000000020000002c000480280001800b0001006c6f6f6b75700000180002800900010073797a320000000008000240000000140900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a23168ba8d71044e1a16406226b5f3e5b64ada1871e7b5c90acb7d8965e909dc730d8c979ba8a003cbd131f1e8aed62d490c468617cf445313a4982436c1e47e739760131e70b48052f3d8d0704e498f6de59e0a034f9c0c78b945848fa6d7cfa67"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r9, @ANYBLOB="d0f4e02ce95b90fd11e62805ff", @ANYBLOB="000229bd7000fedbdf252000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x2000800}, 0x40804) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x4000006, 0x3}, 0x10) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f0000000280)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) sendmmsg$inet(r10, &(0x7f0000003a80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x74, &(0x7f0000000080)={0x0, 0xfd1c, 0x10, 0x38}, &(0x7f00000010c0)=0x18) 57.021708188s ago: executing program 2 (id=1112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRESHEX], 0xb8}, 0x1, 0x0, 0x0, 0xacc576b68fc176c1}, 0x0) 55.708636435s ago: executing program 0 (id=2144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000082c0004802800018007000100637400001c0002800800014000000001050003050000000008000240000000150900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r6, 0x3, 0x1, 0x7fff000, 0xfffffffa, 0xd67}, &(0x7f0000000140)=0x14) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, 'mM2\x00', "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000060a0b040000000000000000020000002c000480280001800b0001006c6f6f6b75700000180002800900010073797a320000000008000240000000140900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a23168ba8d71044e1a16406226b5f3e5b64ada1871e7b5c90acb7d8965e909dc730d8c979ba8a003cbd131f1e8aed62d490c468617cf445313a4982436c1e47e739760131e70b48052f3d8d0704e498f6de59e0a034f9c0c78b945848fa6d7cfa67"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r9, @ANYBLOB="d0f4e02ce95b90fd11e62805ff", @ANYBLOB="000229bd7000fedbdf252000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x2000800}, 0x40804) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x4000006, 0x3}, 0x10) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f0000000280)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) sendmmsg$inet(r10, &(0x7f0000003a80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x74, &(0x7f0000000080)={0x0, 0xfd1c, 0x10, 0x38}, &(0x7f00000010c0)=0x18) 40.049196813s ago: executing program 2 (id=1112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRESHEX], 0xb8}, 0x1, 0x0, 0x0, 0xacc576b68fc176c1}, 0x0) 38.44538789s ago: executing program 0 (id=2144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000082c0004802800018007000100637400001c0002800800014000000001050003050000000008000240000000150900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r6, 0x3, 0x1, 0x7fff000, 0xfffffffa, 0xd67}, &(0x7f0000000140)=0x14) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, 'mM2\x00', "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000060a0b040000000000000000020000002c000480280001800b0001006c6f6f6b75700000180002800900010073797a320000000008000240000000140900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a23168ba8d71044e1a16406226b5f3e5b64ada1871e7b5c90acb7d8965e909dc730d8c979ba8a003cbd131f1e8aed62d490c468617cf445313a4982436c1e47e739760131e70b48052f3d8d0704e498f6de59e0a034f9c0c78b945848fa6d7cfa67"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r9, @ANYBLOB="d0f4e02ce95b90fd11e62805ff", @ANYBLOB="000229bd7000fedbdf252000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x2000800}, 0x40804) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x4000006, 0x3}, 0x10) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f0000000280)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) sendmmsg$inet(r10, &(0x7f0000003a80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x74, &(0x7f0000000080)={0x0, 0xfd1c, 0x10, 0x38}, &(0x7f00000010c0)=0x18) 25.640439941s ago: executing program 2 (id=1112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRESHEX], 0xb8}, 0x1, 0x0, 0x0, 0xacc576b68fc176c1}, 0x0) 24.767434668s ago: executing program 0 (id=2144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000082c0004802800018007000100637400001c0002800800014000000001050003050000000008000240000000150900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r6, 0x3, 0x1, 0x7fff000, 0xfffffffa, 0xd67}, &(0x7f0000000140)=0x14) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, 'mM2\x00', "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000060a0b040000000000000000020000002c000480280001800b0001006c6f6f6b75700000180002800900010073797a320000000008000240000000140900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a23168ba8d71044e1a16406226b5f3e5b64ada1871e7b5c90acb7d8965e909dc730d8c979ba8a003cbd131f1e8aed62d490c468617cf445313a4982436c1e47e739760131e70b48052f3d8d0704e498f6de59e0a034f9c0c78b945848fa6d7cfa67"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r9, @ANYBLOB="d0f4e02ce95b90fd11e62805ff", @ANYBLOB="000229bd7000fedbdf252000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x2000800}, 0x40804) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x4000006, 0x3}, 0x10) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f0000000280)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) sendmmsg$inet(r10, &(0x7f0000003a80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x74, &(0x7f0000000080)={0x0, 0xfd1c, 0x10, 0x38}, &(0x7f00000010c0)=0x18) 6.666172392s ago: executing program 4 (id=3072): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001140)={'syztnl1\x00', &(0x7f0000001240)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x2, 0xfffff000, 0x10, @rand_addr=' \x01\x00', @loopback, 0x80, 0x40, 0x8, 0x7d}}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000001e0000000800010000000000"], 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x20, r5, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x240400c0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x40, r3, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x6) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000002010300000000000000000002000000240002800c000280050001000000000014000180080001"], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000082000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xe, &(0x7f0000000340)=""/222, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_crypto(0x10, 0x3, 0x15) 6.305212201s ago: executing program 4 (id=3076): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x8, &(0x7f0000000000)=[{0x6, 0x8, 0x81, 0x2}, {0x7, 0x3, 0x6, 0x9}, {0x3, 0xeb, 0x2, 0x2000}, {0x7, 0x4, 0x5, 0x6}, {0x1, 0x6, 0x7, 0x7}, {0x5, 0x0, 0x81, 0x2d}, {0x4825, 0x7f, 0x3, 0x2}, {0x5, 0x6, 0xe, 0x20}]}) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0xf5) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x40, 0x3}}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x794, 0x4) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000006ac0), 0x0, 0x12140, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'nicvf0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNGETVNETBE(r6, 0x800454df, &(0x7f0000000340)=0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000840000000000000", @ANYRES32, @ANYBLOB="0000eb8e76070000007300000000000040000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000024fc30c3ba473492cc853295cc000000850000000e00000018110000f36d93aeb20e0d23fa5461264a0328a0c91ea66000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) 5.674668216s ago: executing program 4 (id=3083): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6e}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000700)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301010000000000000000f200000008000100"], 0x1c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000080)) 5.653322618s ago: executing program 0 (id=2144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000082c0004802800018007000100637400001c0002800800014000000001050003050000000008000240000000150900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r6, 0x3, 0x1, 0x7fff000, 0xfffffffa, 0xd67}, &(0x7f0000000140)=0x14) syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, 'mM2\x00', "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan4\x00'}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a58000000060a0b040000000000000000020000002c000480280001800b0001006c6f6f6b75700000180002800900010073797a320000000008000240000000140900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a23168ba8d71044e1a16406226b5f3e5b64ada1871e7b5c90acb7d8965e909dc730d8c979ba8a003cbd131f1e8aed62d490c468617cf445313a4982436c1e47e739760131e70b48052f3d8d0704e498f6de59e0a034f9c0c78b945848fa6d7cfa67"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r9, @ANYBLOB="d0f4e02ce95b90fd11e62805ff", @ANYBLOB="000229bd7000fedbdf252000000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x2000800}, 0x40804) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x4000006, 0x3}, 0x10) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r10, &(0x7f0000000280)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) sendmmsg$inet(r10, &(0x7f0000003a80)=[{{&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f00000000c0)='K', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r10, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x74, &(0x7f0000000080)={0x0, 0xfd1c, 0x10, 0x38}, &(0x7f00000010c0)=0x18) 4.217226726s ago: executing program 2 (id=1112): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000002000000", @ANYRES32=0x0, @ANYRESHEX], 0xb8}, 0x1, 0x0, 0x0, 0xacc576b68fc176c1}, 0x0) 2.297071685s ago: executing program 4 (id=3086): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000140)=0x60, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x2, 0x0, [{@remote}, {@broadcast}]}, @rr={0x7, 0x3, 0xf6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) 2.19058804s ago: executing program 3 (id=3088): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000080)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x2c, 0x3f, 0xb, 0x70bd25, 0x0, {0x2}, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x5}, @nested={0x9, 0x1, 0x0, 0x1, [@generic="fd227a7aff"]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.982035853s ago: executing program 3 (id=3089): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3}]}, {0x0, [0x30, 0x0, 0x5f]}}, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x401}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x9, 0x10d, &(0x7f0000000940)=""/269, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x9, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000003640)={0x0, 0x4a, "d530a7fd593aeea8576257de75afc677d0aeed848fdd130ef4677633f70b4f26a51cebadbe66bde2e89ec356e967b219db1c4fe0bdf63d23782561fb12ded882b4c414d54ef1e789f749"}, &(0x7f00000036c0)=0x52) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000003700)={r3, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}}, &(0x7f00000037c0)=0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) ioctl$TUNSETGROUP(r4, 0x400454ce, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffff5fa4, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000850) r8 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000000880)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x80, 0x0}, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000380)="0b535452b75d24f226a6d4aa8a9e87ec38f1aadd2f9b1b01be85065a682e7a157833769a29890c05ee84d2b67adecd5547afd7a2f9bd60c688a2c0f8b464aa67185d2d5687065c5683df45496f8dcb3dbfe2efaca9134e64ce71688ff841590cc3c8f2dda925319f6bbd2c2029e6acf86c488c1384ab458a7d68d28c691926802bf0eb21b3522aeb983cd9b1436128e38e206f3161c2e8a0390d0563d9d24e310fe398c6cfe852c0499fa298bb6017d919fcc4b616f3b8e1cab0495c5c0aaa75ffc73722f905ab89849a322258b5605a3d70505d8f61a56452e5c16f741a33518b6db172d7f4deac633f6364b6a3f1ce54006b952d48ccecd615dbfe85074ed3281e68b88f5b61b34e896f05c5480178dd0ea70ecb8de4d0d32331f77bd517d7fd2bbae177ea5dedd781ce63660e65cd45b6867584547579900e4576adf91b281c80a6742f0197c2ff069e7552f2e940221179524a0fa6045684504f9300a174fae23ef6c51ed604af45085751ec9587ba4a5b9fd8fbdeefeadfe89f57bcbf861852b95b1cbfa24d6cfeab42141b465684cbf538a8daaac3e2af2da03a3605f38383d213c64c53ceca2a5405f3e02d2eedb4d5b6f09c9c45b97ad95f7b6185fccb09856e9029d1ab8bc21d1b7773eadb02274a9c6c13a267ea31cb3fee639afd5c34804f223e1ad51b62801d7c3a04fe6adfa76510848de50a5aee4fe45df18251ebe196f7701011fd04252f700c1c19dddbb75254f82945a2b507d806ecbdcd24cef3107af43fe087b5faff2182f4c8152a08244a0ca824eb887da6ebdf01ef1392d38fbda4cc59950a8c68e6070425482404a126ccb91ccb0e9cd8d11213f593776330b06f02cdab2b2edbee1aecda65a5bf6d92e0209589b69f7185cc020eba31e58428e500cd73bd95637d24110736f0f4b3197c852af02df65fa6be825eb4b1217c3f05312da328f99d2e0674c4d672307b2615b0213f32b94c474dedf1f6df927fdb223c0703e59a03452759f145571d0a19d6b34f145e4f86349df315cced48feee97ff3aa3c3e30ea11647281dcb65e2110adf53e320c659efcb6b14e202a6774d6245d785acf3a9b0fc370b7f15a1f88aaf51dbc2466081391b821ce014feb0570081aee0d5d75f8d6746fa3e752b8371205892c548256f1a55d48036c69ce01929b80c644eec3449ddae55f07f2700d88990a36e7008116f35db2c43b0dc94fd877f07a63b136120d38bf1043b852fbe9440d6f0dc23aab105f2e9051f863658f0cef81658190580eb9947c441a769d99e5e91dbb834435c994c2d87dd6524b5b03e85308ea2495290ffa56f2e046c8ce60987b1f3788c9dcf7a6fa61569f69afd19606748890b39ddd4a73b527e6a7aba1126e6ec85f2bf05ae7243ffb33ac9bc231f4dbfa063a27af478e1c126f0d8995ae2ead1641e45a60acaacefdf2c2e65d8a97d3726ba3a1df959c8b7b99713eaa8fe525e0c6f0a35f90315058331215c5bdd9ee062d8f523f685432bb16bc4fa676cdfab14c6c32764a22ebec44ec28bf574f44666a1a91e543f60dd2cad65a70fc366529dd1913b5fff40d1151f71e89b8ea8939f791e8c4eb808fb03318c26cc22bdad131a4edea0afc0f74b0023fd75c78beadb452da5cd08140e44d1430114ba8094ff05e581dbacd998d0640da6f7f49c68211a4a61be94518c7e8bf06ecd0a93cd67745c6585931dd35fb4dc8eb3b4b3e0ce66a78aaae0146583fbd6bb93a31607b90fd73bec8fd820d7a74f7b8784e47c4f0216d10ce46238b2cdb64fe6134c431e472225d9a929023d65f609c6fd0ae36f9224b96ae03ddd6b0641df8718db36846e07270ff0395a3795b94ff1abe4ec62529664263e5a320f9d07d5ab6f3cee669776e939c2728b29a002c3350b30c3bab5dc0a50826e94a0d659a1dfd895baa0556d153236420654790faa7f94705afc4ecdc946de15e1c9a0cec3c45ed40815d994a1a82fcd07ac5b310ed4adf8950da18194d8de24eb7bbd217c8f3a0fb059f59a012604ceb0ee5efbfb0d79086dc848e293d7cb2c0098a8ed9e496665a47a914f268d02452e207c1270767445a72e8848e75789cfa3031d491c64a391d78a806c9974b0009b9cdbeba5b4aafb2f0c3afa7182b0d07f8ab046ae0c633d18bfac9c63fe93c1c85c687df5d417a2ef8d70d722cb49d72e6fc94b009178f182700d629f2811f6a7d306035a3fee606542bd4cdcce4a42b8c5b14fca76d89869df215744d6693e0e6cd8592bf4f82edc5209126a611a83987c02395ca520dc94e1005be7d5fd714ec0ce3b314b5c10bb75da73666efaeefb9d6863b8a9d1f37cc90783c7cc5be39813ebfc2aa1633e36e10bfc8a26ec5a7f727055987ab4580c5bd1c9e637079ce93a3d4916f0838175520214ef4086e1fa5e54050abf74cca63e59844293179d421f0a91892cf1fa051e991e9dde96fe495fada3df93332159c17c66e89617801aa4261abee4f08e6d1cb82639a188be456ddfdd005f343efb35f2bcd51e5b49a1e397563ea3a8cb5f320a0d5bf8502040534dd64bff68e40964e9d65cb5e91c36e34b58feb54558bfe917970d7f3d7679a3aac296fe55f51a741af8386ba76b1a60152cd74f5b54e76cf5f2632939a2f0db2328403f413c4d23752feb148b1dc0fe730c005ab0044c2705b9c6c713dadd5401adc34a2693942a7c018257a855259156b855638dbe55ce606ba905278ef3361bc0a799dd51a5ce57f4364d9977841f74348ba3aa7713c238dc1a68a69b3dbf93df28ef853e21cbbf184625828c36746dfe849f2fcfc8f40c23cb21a8f967e2eece56e700fa0fdeb23ac6cdac9daaa490bb788c8bc82ffa43113ec7bb03fbd8c5a3a9f9f3a1e763b7b94c3e7039ada368daea7a68a10643188693a14a5ce249d135a0a4084d46f082309b5d3d7e40bd66bd4cbf450f1391acd02de5848c1f532d68bda1461de34055b10bbd80d912558f4f7640fa8502556f8b7be93b27f5cba6c4393b8c7314930959f1f7ea01fe585919fd58e131cabefb97fa34ebb98c8a49739e784b3374598aa5e2d7bdbbade4575cecb1ab8cd5527658d0cd9a601ad7e1212f2efbf79d7625a542134335fbcc9047b5a0c8b9a4aee0c25550d032f48659d1d9ab803f58131e1fb217daf45c0bfbc52a84ff41b3fb3f268641137e299fd825a75592ab98d078d3ef2705410d52df186fb92537dc1bdb3d61b3272b0f1bfa29362ce5982401c429484664a43d3922db932d7a69f3ea77a6fad2206b9701a873995e460fe060c85a19aa3f8c7becdb5b62929e0d6bdf0e200f315c86deee6046517fe19ed190f8956744669f30466dec4cad2fb43a9b668f52937bc546f2328faeab7ef5baf51145a9d732dc0b8c21e467e207eca61ea1645141172a554b2fa518653deb95b395574ce351229dd8e24828e3d10b1c8cf19824204e375e57a7ee5b42a7c500f04baec37738b4c03003b9708a83e363936988ce7bb534111ff4d186f6dd15dd19ddccd6e16e91306793592c8aafcc675ecde4e6c6f1b7485db9be0f5118936b30fdc27d2e97391080572e893514e87af93b21d916b6f877291286b14c0bca05330f118afb2aab4b844f85cde1a4f95a5cddde91eee1a164d0184aca196b9c35b302becc7d5e56e005ff2d12c92d0f04ed83937bc2a4a66f6aba3143628caeeb1e19d5edbccf062b6faad8d3dc48119914a2375d23486277f6ea17e5404e1717f155b2cdc3cd2968aecd1c0a164c8539d27ba4e6f4331426ddc2c289702f4ddc294f3dc28fc057e7bb097b655e75517d4284c33dd0707175ca419fe96f00b54b713dfd55a4f9618ceda61d2e56c7aa1a6f7bc698ff9f2d7f67f43df4fdfe97776cec5a80b87db48d6b38f1296827a7d4d8b0d800c29bfa1c7ada31d277bd2426f203afbca4819f9ca0baa670baddeee5e288cd8f188fb110f1a1875d852cb15fa09e7d341d4cb1c40870c7267a06af79e6f665625a2d1f32a45628314d21fc0c787b90f66be23dad609642cfca5a1f9774da89ffe0fc88f6b82ba783a575c6df7cc073ba8003b1f84e832aea689a68c9c75b7b8815e7df212598e105b8746c125d3dea7dc1c8859b9ad17d4460aa42028f985084ed2e642a1122677b50262de6022c954f2580af0102382554287d9b2ceb495f6e1e169f4648025afb46fc46e175d8ec08a370a1b8e3b68d4d19243a51b2009091d16a4053be7d55c8ad4b819f2bb5249dcadcaabaa14b5c1ffbe9a4b619d13e9c97e3d200bc1051576753bd5a6930fdbc52e438d3fec20315a483d9b0188a27d00adbe0f6438e15e81880ddde30914c45c8cc50e214ab1212e0699044c8296df9ea515dd1b8d9f7be038fe3c856b2cd46d0ec5e86c5fd82b2e11a895bd95d6256e7232b9b671fa593e75dc64f953758b897190c094de7b4dc978defc01b9d9a8970797ada0bd53476f633a09cd9d8e676b3c0326471aa65c2a9b1cfc9f03cced95e622d56b3e49c96b0fcdff6054d64cde3440f692a3e3430a95f2a1a6995a857f3ccf019bc337b87e1d769ba46c1371b3e25410ef021d5374458955a83ac350f5005e897a2fa9cce9c313b2ca764ce535efad2ef20db876c153385531bd09b19d1de03877d64d5cc4f48c6cd065693cd5defcb8e0a3875afccb8d000df2c6dce2dc35a03149eac731659cf4aed15e0ccca6c68ce9d61bc6bafc29b4d59f7294ce5f54cb7d6519f0f1078e0fd3123a926779edfc809aa035fe6aa64bc792fb38fe1cb08d861f7d0fa7005417b5e891907d886bfcb550d8f6070d643a8d863c670484829feaad5443a0849ec8f5f98d2b7d5223d824bd3fcaf7ca5ac86933e3b41a4d2f3d6ba99dcb3e4a6be474580323abc9c108decf6b466f1cf9454d08f4d45ca6c3ac895d2c2d9a56f3fa6dbdc50295aa5c53e9ce61ee4224aa03016c14a4c031d4766a7d1268eacb16af3976e29f7d7d5a18269203ffd78df34cbc5f7e9bb82c325e3118757d89243198780b01fc19980df05c0a2b8fd49eb74b21766c5b1e4fd3513916433bcac129a46d9cb34103ece7b3ebaa2ebc69751ab814b7da6b1360abf264bf22a6ab73161c7027e94f3298fb0ee0332709af9b52ef9ce6fc040094a9f9bd95b016ab3a305cdec77eb05741a9e079a650c747d49b55906865a24e2b87d03596bf6a8e04eb4733a25a98e3d982b3da9bce724a3988db5b8cc92bc0933f3f65c4291ff3f606e033860850b2d0259b8d43d4cbdce6d0198a4a7d71a5de73777ad928a9cc4b71f2a8b2848e45ed77588af49ae596795305a437566c1a2d580d013d15c1418c2e77a09fc38fe0c3581b8110d94d03f7b7a5b306647885a052b556706b6eff958d53a192ac4cdff912c502245b80038bc5d821d2808128e8a9a9b393c2a9ad4b3a5bb744e8103d6250b2535669c7814416d1df20edb841627661e39567187f7d37e52e519d104ab09fae002d35f409d3d847d979e9765d22d172e52d8febfe2c0823550613d1e2fd5d9a9d34f0acd2284a4e4fa5a4518c9cf1db3a546d822ce4d94a36ee65324904b861a6516d7a66a7c9c0e6b63728e848a4f018e49ccf89d8496bfd961f2095be8fcfda05fa177aaa31de733ecf066d736dabab0a537bdc30fe96022beaeafa11db38d853df2fb720760f88d5299902d88d51f5df484b7a254258ff3152c3ce4e058cba40f81d9bac5497ab9453dddd0000c3c52eec07877fec3bfdc62a003246a92174b1b6da8bf8eaca6ca676f8e393959c122e41f5d707763395f6e5263b853", 0x1000}, {&(0x7f0000000000)="58204de575e4bb7dbe9a84201e8cb3f75bf449297f35058c1b06b35ab7a9d03e7854e9662c9e4349cfd553c7d1ed0b685aabf183b6c4052db66031e6b232d7d00bd648aa57729a9b1512211b64e96a0e070bb6e0bcca7db02f6a84e7440dd756910c6f747acee0211597892f5072d20d8f818ed7cb439f8dff579b1d34785234ffe3", 0x82}, {&(0x7f00000000c0)="7d642e9aa2fc54fa84d658a1ca541bb0710a5f1ef16580763d741fbc1ab5067868efe67ce391681e210cf87be5d34a267b9a1e36e0d62859c67fdc45192750300add5b85d23570d8d6b40d350fc03a28c882db3e516bdf2ab9e1799eab8ee679966867b37cfeeb5be13faad6b7315fdfb838cf124cce66aec1090bd03e87f3a0d1a6aec630f4383824dd09df6d380fccefedb8b5bca7baa2d69ec08b2c34c4a4db656bd4a360b8860c10d6f4684d413c66b76d0e9cd4e5f4210f51205ae4aee139e22e36c9eebc804e6c13fb", 0xcc}, {&(0x7f0000001380)="5012e6e81d18e947278a1ed0ab7f20f84ddabc8c8bb381ab4e62472ec7190442f2ccb4f9f2194393293174a56cd01ecc5b48da3e24652ac93462cb2b33bfc5862f01cdc56cb8d1d12da45825636fedd9c0956b64a437ba349e2ae3bbf8dfe8029b1cd7d639a074dcee388623cf214f4fe635e6fe90c46560775b55c8a93db6abe6efe33f4d8f2d1e6dd57614afadba635810fc6ecca428a1bae56986b15b6e9ecfd9b82616631d1c9ee9677c9cd12939bfd7458a68a27a563cce1ffd8f88e1dc182fc5bcdb0214d49103c8ed8ab827fd5947a833f5928da7c6de288c8103a4328863b7c80cd7c8cb4a9e582b449d27dceee3311fdd9dd50e3fb643f4", 0xfc}, {&(0x7f0000001480)="5b111a99518099814185b7d0c434488b20e00c8fa583a13907d4db817ac4f4a9a02e5267d8923e0e38551ea0c082b18030e0351683ce46e114803499ce515e53d5916176919e564cdcfb0c33d6017c6a1df9c99de2d88ed436ba97b25f311a4faaa33e459acf291fff42768075c7675363d07b3dec6ec3d0c44fc04616a45ef81b9386c2e6552ce299d9ca8f54ac6fea82294a1e7de14ae328a2432e18de04c96bd4626f1a5f31259edf2f0525a06762e706bfc03509a8cb3c3eabe1e261701b50b45af67c6a3fcad31cbb", 0xcb}, {&(0x7f00000001c0)}, {&(0x7f0000000240)="e6f68b4a8f1172ecab4611fefd4af34fc6", 0x11}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="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", 0x1000}], 0x9, 0x0, 0x0, 0x40000}, 0xc090) 1.766398204s ago: executing program 3 (id=3091): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="000086dd000311000400000000006e6ad9ba00442f0100000000000000000000ffffac1414bbff02000000000000088000000000000104"], 0x7a) 1.543583944s ago: executing program 1 (id=3092): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000200000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000080)=0x1c) (rerun: 64) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x5}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0xfe6}]}}]}, 0x48}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f00000000c0)={@private1, 0x2a, r4}) 1.444648686s ago: executing program 3 (id=3093): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003040000000000000000000003ff", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r2], 0x64}}, 0x0) 1.296330843s ago: executing program 4 (id=3094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x4}]}]}]}, 0xa4}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd32", 0xb) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000280)={'batadv_slave_1\x00', @ifru_settings={0x4, 0xcbc, @fr=&(0x7f0000000140)={0x80000000, 0x2, 0x80000000, 0x3, 0x89, 0xc, 0x6}}}}) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0xfb) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xfffffffffffffffd) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.218752249s ago: executing program 1 (id=3095): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newtfilter={0xec, 0x2c, 0xd27, 0x3, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {}, {0xb}, {0x2, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xc0, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_FLAGS={0x8, 0xb, 0x6}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0x4}}, @TCA_U32_ACT={0xa4, 0x7, [@m_ctinfo={0x6c, 0xc, 0x0, 0x0, {{0xb}, {0x4}, {0x3d, 0x6, "cef9413cba0ae837f0bf2ce4c5cda6073cd080cf44264eed28dd1b3f5e26c023358923b425910dcc0f09a307206cdbbe78afca47533aa6cb7a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0x34, 0x10, 0x0, 0x0, {{0x8}, {0x4}, {0xa, 0x6, "f778cd3b7bc7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40044000}, 0x2004c090) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000800)=ANY=[@ANYBLOB="090000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002"], 0x290) syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001914050e"], 0x18}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRESDEC=r5], 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r6, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r9, @ANYBLOB="c89904bd0000000008000d000000000034001680300001"], 0x5c}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x7, '\x00', r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000000f200000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.151822841s ago: executing program 3 (id=3096): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX], 0xb8}, 0x1, 0x0, 0x0, 0xacc576b68fc176c1}, 0x0) 985.925387ms ago: executing program 3 (id=3097): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x6e}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000700)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301010000000000000000f200000008000100"], 0x1c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000080)) 691.949152ms ago: executing program 1 (id=3098): setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) socket(0xb, 0x3, 0xe7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x4}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x82, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast1, [0xffcef3a2a9421bd, 0xff, 0xffffffff, 0xff000000], [0xffffff00, 0xff000000, 0xff000000, 0xff000000], 'vlan0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x5c, 0xf1, 0x4, 0x5c}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}}, 0x0) 464.372992ms ago: executing program 1 (id=3099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) 329.444348ms ago: executing program 1 (id=3100): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e5) syz_emit_ethernet(0x83, &(0x7f0000000140)=ANY=[@ANYBLOB="e10931d8640abbbbbbbbbbbb86dd60ea0c00004d8800fe88000000200000000000000001fe8000000000000000000000000000aa0000008dff4d90"], 0x0) 10.027659ms ago: executing program 1 (id=3101): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x10, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @info_reply={0x10, 0x0, 0x0, 0x7, 0x9}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000780)='%pI4 \x00'}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x101, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000a40)=0x0) syz_open_procfs$namespace(r10, &(0x7f0000000a80)='ns/user\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0x1e, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf66, 0x0, 0x0, 0x0, 0xc7c}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_fd={0x18, 0x8, 0x1, 0x0, r3}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x95a7, 0x0, 0x0, 0x0, 0xffff7824}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1c}}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfc, &(0x7f0000000680)=""/252, 0x40f00, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xe, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[r6, 0x1, r7, r8, 0x1, r9, r11, 0x1, 0x1], 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b00)={'wlan0\x00'}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r13], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 4 (id=3102): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x32, 0x0, 0x0, @void, @value}, 0x20) (async) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504a9}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): [T13706] bridge_slave_1: entered allmulticast mode [ 335.642896][T13706] bridge_slave_1: entered promiscuous mode [ 335.724186][T13743] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 335.739787][T13743] bond0: (slave batadv8): Enslaving as a backup interface with an up link [ 335.754604][T13746] bond0 (unregistering): (slave batadv8): Releasing backup interface [ 335.777346][T13746] bond0 (unregistering): Released all slaves [ 335.831115][T13706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.880146][T13752] tipc: Enabling of bearer rejected, already enabled [ 335.919314][T13706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.041875][T13757] can: request_module (can-proto-0) failed. [ 336.130435][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2624'. [ 336.144445][T13706] team0: Port device team_slave_0 added [ 336.163875][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 336.170899][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 336.209559][ T5847] Bluetooth: hci3: command tx timeout [ 336.229091][T13706] team0: Port device team_slave_1 added [ 336.398480][ T3473] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.608006][ T3473] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.645230][T13706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.664154][T13706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.725783][ T5847] Bluetooth: hci1: command tx timeout [ 336.748849][T13706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.831337][ T3473] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.880187][T13806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2635'. [ 336.895416][T13706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.902553][T13706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.953799][T13706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.998948][T13806] vlan4: entered promiscuous mode [ 337.030057][T13726] chnl_net:caif_netlink_parms(): no params data found [ 337.088444][ T3473] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.153044][T13814] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2637'. [ 337.203683][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 337.210696][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 337.274146][T13706] hsr_slave_0: entered promiscuous mode [ 337.304271][T13706] hsr_slave_1: entered promiscuous mode [ 337.320183][T13706] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.333833][T13706] Cannot create hsr debugfs directory [ 337.347585][T13809] lo speed is unknown, defaulting to 1000 [ 337.442233][T13812] lo speed is unknown, defaulting to 1000 [ 337.508621][T13830] netlink: 'syz.1.2640': attribute type 1 has an invalid length. [ 337.549224][T13726] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.556758][T13726] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.565765][T13726] bridge_slave_0: entered allmulticast mode [ 337.572785][T13726] bridge_slave_0: entered promiscuous mode [ 337.581857][T13726] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.589155][T13726] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.596674][T13726] bridge_slave_1: entered allmulticast mode [ 337.603879][T13726] bridge_slave_1: entered promiscuous mode [ 337.612630][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2640'. [ 337.744578][T13833] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 337.753552][T13833] bond1: (slave batadv5): Enslaving as a backup interface with an up link [ 337.776166][T13830] bond1 (unregistering): (slave batadv5): Releasing backup interface [ 337.788097][T13830] bond1 (unregistering): Released all slaves [ 338.037003][T13726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.049811][T13836] tipc: Enabling of bearer rejected, already enabled [ 338.067623][T13726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.225059][ T3473] bridge_slave_1: left allmulticast mode [ 338.230763][ T3473] bridge_slave_1: left promiscuous mode [ 338.238249][ T3473] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.245946][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 338.252987][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 338.255748][ T5847] Bluetooth: hci3: command tx timeout [ 338.285466][ T3473] bridge_slave_0: left allmulticast mode [ 338.291189][ T3473] bridge_slave_0: left promiscuous mode [ 338.325710][ T3473] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.813923][ T5847] Bluetooth: hci1: command tx timeout [ 338.823199][ T3473] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.844299][ T3473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.855824][ T3473] bond0 (unregistering): Released all slaves [ 338.884399][T13726] team0: Port device team_slave_0 added [ 338.897179][T13854] veth0_to_bridge: invalid flags given to default FDB implementation [ 339.040207][T13726] team0: Port device team_slave_1 added [ 339.113980][T13862] syz.4.2650 (13862) used greatest stack depth: 17336 bytes left [ 339.188416][T13864] tun0: tun_chr_ioctl cmd 2148553947 [ 339.209331][T13864] vlan4: entered promiscuous mode [ 339.234359][T13864] bond0: entered promiscuous mode [ 339.239463][T13864] bond_slave_0: entered promiscuous mode [ 339.246337][T13864] bond_slave_1: entered promiscuous mode [ 339.252124][T13864] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 339.266522][T13864] bond0: left promiscuous mode [ 339.271724][T13864] bond_slave_0: left promiscuous mode [ 339.277867][T13864] bond_slave_1: left promiscuous mode [ 339.283677][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 339.283769][T13864] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 339.290708][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 339.351557][T13726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.360441][T13726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.394108][T13726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.420979][T13726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.433803][T13726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.465020][T13726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.634513][ T3473] hsr_slave_0: left promiscuous mode [ 339.645100][ T3473] hsr_slave_1: left promiscuous mode [ 339.674158][ T3473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.681879][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.695276][ T3473] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.703000][ T3473] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.760991][ T3473] veth1_macvtap: left promiscuous mode [ 339.785644][ T3473] veth0_macvtap: left promiscuous mode [ 339.792059][ T3473] veth1_vlan: left promiscuous mode [ 339.798418][ T3473] veth0_vlan: left promiscuous mode [ 340.093852][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 340.328519][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 340.335006][ T5847] Bluetooth: hci3: command tx timeout [ 340.335538][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 340.876854][ T3473] team0 (unregistering): Port device team_slave_1 removed [ 340.884750][ T5847] Bluetooth: hci1: command tx timeout [ 340.937744][ T3473] team0 (unregistering): Port device team_slave_0 removed [ 341.129698][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 341.363697][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 341.370679][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 341.516923][T13874] vlan4: entered promiscuous mode [ 341.540923][T13726] hsr_slave_0: entered promiscuous mode [ 341.548934][T13726] hsr_slave_1: entered promiscuous mode [ 341.556089][T13726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.574150][T13726] Cannot create hsr debugfs directory [ 341.585535][T13882] tipc: Enabling of bearer rejected, already enabled [ 341.608005][T13885] lo speed is unknown, defaulting to 1000 [ 342.407103][ T5847] Bluetooth: hci3: command tx timeout [ 342.450899][T13706] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.465999][T13706] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.517431][T13706] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.620297][T13706] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.798072][T13920] __nla_validate_parse: 9 callbacks suppressed [ 342.798091][T13920] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2674'. [ 342.818322][T13706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.920728][T13925] set match dimension is over the limit! [ 342.975873][T13706] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.005467][T13726] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 343.037423][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.044654][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.106666][T13726] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 343.113817][T13934] netlink: 'syz.4.2678': attribute type 1 has an invalid length. [ 343.144790][T13726] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 343.169992][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.177207][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.191364][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2678'. [ 343.243659][T13726] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 343.270455][T13940] net_ratelimit: 5 callbacks suppressed [ 343.270476][T13940] netlink: del zone limit has 8 unknown bytes [ 343.291868][T13936] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 343.301307][T13936] bond0: (slave batadv9): Enslaving as a backup interface with an up link [ 343.316635][T13934] bond0 (unregistering): (slave batadv9): Releasing backup interface [ 343.351151][T13934] bond0 (unregistering): Released all slaves [ 343.443767][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.450807][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 343.468950][T13948] tipc: Enabling of bearer rejected, already enabled [ 343.621795][T13954] netlink: 'syz.4.2685': attribute type 1 has an invalid length. [ 343.686791][T13726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.775565][T13726] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.812480][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.819763][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.846462][T13960] lo speed is unknown, defaulting to 1000 [ 343.866532][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.873783][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.942397][T13706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.134830][T13975] netlink: del zone limit has 8 unknown bytes [ 344.158071][T13706] veth0_vlan: entered promiscuous mode [ 344.216396][T13706] veth1_vlan: entered promiscuous mode [ 344.243787][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 344.286481][T13979] --map-set only usable from mangle table [ 344.374802][T13706] veth0_macvtap: entered promiscuous mode [ 344.405488][T13706] veth1_macvtap: entered promiscuous mode [ 344.472029][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.483948][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 344.490945][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 344.523982][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.555083][T13706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.597084][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.634753][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.653920][T13706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.684245][T13706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.737357][T13706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.764539][T13706] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.783902][T13706] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.792879][T13706] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.809293][T13706] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.832421][T14000] geneve2: entered promiscuous mode [ 344.843944][T14000] geneve2: entered allmulticast mode [ 344.893332][T13726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.985201][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2699'. [ 345.118846][T14011] FAULT_INJECTION: forcing a failure. [ 345.118846][T14011] name failslab, interval 1, probability 0, space 0, times 0 [ 345.132049][T14011] CPU: 0 UID: 0 PID: 14011 Comm: syz.4.2700 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 345.142861][T14011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 345.152931][T14011] Call Trace: [ 345.156214][T14011] [ 345.159146][T14011] dump_stack_lvl+0x241/0x360 [ 345.163828][T14011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.169038][T14011] ? __pfx__printk+0x10/0x10 [ 345.173628][T14011] ? ref_tracker_alloc+0x332/0x490 [ 345.178737][T14011] should_fail_ex+0x3b0/0x4e0 [ 345.183413][T14011] ? skb_clone+0x20c/0x390 [ 345.187837][T14011] should_failslab+0xac/0x100 [ 345.192521][T14011] ? skb_clone+0x20c/0x390 [ 345.196938][T14011] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 345.202313][T14011] skb_clone+0x20c/0x390 [ 345.206559][T14011] __netlink_deliver_tap+0x3cc/0x7f0 [ 345.211859][T14011] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.217148][T14011] netlink_deliver_tap+0x19d/0x1b0 [ 345.222351][T14011] netlink_unicast+0x7c4/0x990 [ 345.227124][T14011] ? __pfx_netlink_unicast+0x10/0x10 [ 345.232417][T14011] ? __virt_addr_valid+0x183/0x530 [ 345.237537][T14011] ? __check_object_size+0x48e/0x900 [ 345.242831][T14011] netlink_sendmsg+0x8e4/0xcb0 [ 345.247606][T14011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.252981][T14011] ? aa_sock_msg_perm+0x91/0x160 [ 345.257928][T14011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.263214][T14011] __sock_sendmsg+0x221/0x270 [ 345.267916][T14011] ____sys_sendmsg+0x52a/0x7e0 [ 345.272691][T14011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.278019][T14011] __sys_sendmsg+0x292/0x380 [ 345.282635][T14011] ? __pfx___sys_sendmsg+0x10/0x10 [ 345.284152][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.287753][T14011] ? __pfx_vfs_write+0x10/0x10 [ 345.299495][T14011] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 345.305855][T14011] ? do_syscall_64+0x100/0x230 [ 345.310821][T14011] ? do_syscall_64+0xb6/0x230 [ 345.315514][T14011] do_syscall_64+0xf3/0x230 [ 345.320030][T14011] ? clear_bhb_loop+0x35/0x90 [ 345.324708][T14011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.330597][T14011] RIP: 0033:0x7fe71bd7e719 [ 345.335010][T14011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.354640][T14011] RSP: 002b:00007fe71cb49038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.363053][T14011] RAX: ffffffffffffffda RBX: 00007fe71bf35f80 RCX: 00007fe71bd7e719 [ 345.371018][T14011] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 345.378988][T14011] RBP: 00007fe71cb49090 R08: 0000000000000000 R09: 0000000000000000 [ 345.386956][T14011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.394926][T14011] R13: 0000000000000000 R14: 00007fe71bf35f80 R15: 00007ffe79358688 [ 345.402908][T14011] [ 345.483529][T13726] veth0_vlan: entered promiscuous mode [ 345.501252][T13726] veth1_vlan: entered promiscuous mode [ 345.522691][T13726] veth0_macvtap: entered promiscuous mode [ 345.528679][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.535773][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 345.548640][T13726] veth1_macvtap: entered promiscuous mode [ 345.564028][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.574688][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.584665][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.595295][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.606564][T13726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.675521][T14017] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 345.705219][T14018] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 345.727918][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.738812][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.754914][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.791136][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.832691][T13726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.851102][T13726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.879060][T13726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.909067][T13726] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.918485][T14020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2703'. [ 345.939111][T13726] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.948133][T13726] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.957118][T13726] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.013863][T12578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.022131][T12578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.068584][T14038] sctp: [Deprecated]: syz.1.2707 (pid 14038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.068584][T14038] Use struct sctp_sack_info instead [ 346.099874][T14038] sctp: [Deprecated]: syz.1.2707 (pid 14038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 346.099874][T14038] Use struct sctp_sack_info instead [ 346.219682][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.228412][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.241856][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.250896][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.396344][T14042] lo speed is unknown, defaulting to 1000 [ 346.426572][T12578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.445333][T12578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.780126][T14050] netlink: 'syz.3.2711': attribute type 1 has an invalid length. [ 346.846154][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2713'. [ 346.853762][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2713'. [ 346.909347][T14054] xt_l2tp: invalid flags combination: 0 [ 346.924049][T14053] xt_l2tp: invalid flags combination: 0 [ 346.950628][T14057] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2714'. [ 347.129533][T14061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2715'. [ 347.191486][T14061] vlan7: entered promiscuous mode [ 347.238030][T14067] FAULT_INJECTION: forcing a failure. [ 347.238030][T14067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.252927][T14067] CPU: 0 UID: 0 PID: 14067 Comm: syz.3.2719 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 347.263742][T14067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 347.273832][T14067] Call Trace: [ 347.277133][T14067] [ 347.280076][T14067] dump_stack_lvl+0x241/0x360 [ 347.284801][T14067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.290036][T14067] ? __pfx__printk+0x10/0x10 [ 347.294673][T14067] ? snprintf+0xda/0x120 [ 347.299053][T14067] should_fail_ex+0x3b0/0x4e0 [ 347.304109][T14067] _copy_to_user+0x31/0xb0 [ 347.308649][T14067] simple_read_from_buffer+0xca/0x150 [ 347.314072][T14067] proc_fail_nth_read+0x1e9/0x250 [ 347.319133][T14067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.324708][T14067] ? rw_verify_area+0x55e/0x6f0 [ 347.329587][T14067] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.335173][T14067] vfs_read+0x1fc/0xb70 [ 347.339359][T14067] ? fdget_pos+0x24e/0x320 [ 347.343800][T14067] ? __pfx_vfs_read+0x10/0x10 [ 347.348700][T14067] ? __fget_files+0x3f3/0x470 [ 347.353421][T14067] ? fdget_pos+0x24e/0x320 [ 347.357872][T14067] ksys_read+0x183/0x2b0 [ 347.362143][T14067] ? __pfx_ksys_read+0x10/0x10 [ 347.366926][T14067] ? do_syscall_64+0x100/0x230 [ 347.371719][T14067] ? do_syscall_64+0xb6/0x230 [ 347.376420][T14067] do_syscall_64+0xf3/0x230 [ 347.380947][T14067] ? clear_bhb_loop+0x35/0x90 [ 347.385644][T14067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.391557][T14067] RIP: 0033:0x7fa1c077d15c [ 347.396005][T14067] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 347.415648][T14067] RSP: 002b:00007fa1bebf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 347.424104][T14067] RAX: ffffffffffffffda RBX: 00007fa1c0935f80 RCX: 00007fa1c077d15c [ 347.432962][T14067] RDX: 000000000000000f RSI: 00007fa1bebf60a0 RDI: 0000000000000007 [ 347.441988][T14067] RBP: 00007fa1bebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 347.450308][T14067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.458811][T14067] R13: 0000000000000000 R14: 00007fa1c0935f80 R15: 00007ffd61df8d98 [ 347.467362][T14067] [ 347.745467][ T65] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.977015][ T65] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.998643][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 348.010639][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 348.019684][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 348.029504][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 348.038645][ T5156] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 348.053750][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 348.095178][ T65] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.127662][T14072] lo speed is unknown, defaulting to 1000 [ 348.180364][ T65] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.306378][T14072] chnl_net:caif_netlink_parms(): no params data found [ 348.458537][ T65] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.483855][ C1] net_ratelimit: 6 callbacks suppressed [ 348.483875][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 348.592159][T14072] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.616135][T14072] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.623477][T14072] bridge_slave_0: entered allmulticast mode [ 348.643767][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 348.650764][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 348.655887][T14072] bridge_slave_0: entered promiscuous mode [ 348.727369][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2721'. [ 348.769132][ T65] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.804894][T14072] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.815550][T14072] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.825097][T14072] bridge_slave_1: entered allmulticast mode [ 348.833248][T14072] bridge_slave_1: entered promiscuous mode [ 348.931838][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.943390][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.954002][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.969297][ T65] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.032975][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 349.115165][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 349.124674][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.335929][T14072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.401791][ T65] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.433420][T14072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.519345][T14072] team0: Port device team_slave_0 added [ 349.525573][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.538562][T14121] macsec0: entered promiscuous mode [ 349.553073][T14072] team0: Port device team_slave_1 added [ 349.560382][T14121] macsec0: left promiscuous mode [ 349.574055][T14096] lo speed is unknown, defaulting to 1000 [ 349.614613][T14072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.621912][T14072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.659293][T14072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.683727][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.686670][T14072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.690897][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 349.698142][T14072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.738840][T14072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.786560][T14128] --map-set only usable from mangle table [ 349.853504][ T65] bridge_slave_1: left allmulticast mode [ 349.859842][ T65] bridge_slave_1: left promiscuous mode [ 349.866072][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.895462][ T65] bridge_slave_0: left allmulticast mode [ 349.901277][ T65] bridge_slave_0: left promiscuous mode [ 349.907315][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.939387][ T65] bridge_slave_1: left allmulticast mode [ 349.954084][ T65] bridge_slave_1: left promiscuous mode [ 349.970997][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.998279][ T65] bridge_slave_0: left allmulticast mode [ 350.004595][ T65] bridge_slave_0: left promiscuous mode [ 350.016368][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.084971][ T5847] Bluetooth: hci1: command tx timeout [ 350.576413][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 350.723811][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 350.730846][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 351.137195][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.151014][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.162464][ T65] bond0 (unregistering): Released all slaves [ 351.209805][ T5847] Bluetooth: hci3: command tx timeout [ 351.333353][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.346099][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.357108][ T65] bond0 (unregistering): Released all slaves [ 351.375237][T14072] hsr_slave_0: entered promiscuous mode [ 351.381715][T14072] hsr_slave_1: entered promiscuous mode [ 351.388430][T14072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.404558][T14072] Cannot create hsr debugfs directory [ 351.560394][T14163] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2746'. [ 351.603777][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 351.686350][T14168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2744'. [ 351.819491][T14172] tipc: Enabling of bearer rejected, already enabled [ 352.090286][T14178] netlink: 'syz.3.2749': attribute type 30 has an invalid length. [ 352.174780][ T5847] Bluetooth: hci1: command tx timeout [ 352.467326][T14096] chnl_net:caif_netlink_parms(): no params data found [ 352.576244][T14196] tun1: tun_chr_ioctl cmd 1074025677 [ 352.581747][T14196] tun1: linktype set to 773 [ 352.644176][ T65] hsr_slave_0: left promiscuous mode [ 352.655644][ T65] hsr_slave_1: left promiscuous mode [ 352.668679][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.693768][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.702433][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.710255][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.723375][ T65] hsr_slave_0: left promiscuous mode [ 352.731997][ T65] hsr_slave_1: left promiscuous mode [ 352.738483][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.746814][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.756093][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.763887][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.812668][ T65] veth1_macvtap: left promiscuous mode [ 352.818753][ T65] veth0_macvtap: left promiscuous mode [ 352.824674][ T65] veth1_vlan: left promiscuous mode [ 352.830205][ T65] veth0_vlan: left promiscuous mode [ 352.837706][ T65] veth1_macvtap: left promiscuous mode [ 352.843517][ T65] veth0_macvtap: left promiscuous mode [ 352.850662][ T65] veth1_vlan: left promiscuous mode [ 352.856479][ T65] veth0_vlan: left promiscuous mode [ 353.284942][ T5847] Bluetooth: hci3: command tx timeout [ 353.619817][ T65] team0 (unregistering): Port device team_slave_1 removed [ 353.675138][ T65] team0 (unregistering): Port device team_slave_0 removed [ 353.684060][ C1] net_ratelimit: 6 callbacks suppressed [ 353.684080][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 353.843696][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 353.850670][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.244033][ T5847] Bluetooth: hci1: command tx timeout [ 354.723785][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.823408][ T65] team0 (unregistering): Port device team_slave_1 removed [ 354.879235][ T65] team0 (unregistering): Port device team_slave_0 removed [ 354.886643][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 354.886717][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 355.364462][ T5847] Bluetooth: hci3: command tx timeout [ 355.700012][T14096] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.723974][T14096] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.731291][T14096] bridge_slave_0: entered allmulticast mode [ 355.764424][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 355.767503][T14096] bridge_slave_0: entered promiscuous mode [ 355.794187][T14096] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.812654][T14096] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.848685][T14096] bridge_slave_1: entered allmulticast mode [ 355.856915][T14213] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2759'. [ 355.865009][T14096] bridge_slave_1: entered promiscuous mode [ 355.923775][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 355.930920][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 355.990216][T14217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2760'. [ 356.028253][T14096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.075159][T14096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.103451][T14072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 356.183879][T14072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 356.220944][T14072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 356.272951][T14096] team0: Port device team_slave_0 added [ 356.281853][T14096] team0: Port device team_slave_1 added [ 356.327010][ T5847] Bluetooth: hci1: command tx timeout [ 356.335746][T14072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 356.413554][T14096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.431545][T14096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.537450][T14096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.605808][T14246] FAULT_INJECTION: forcing a failure. [ 356.605808][T14246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.619492][T14246] CPU: 1 UID: 0 PID: 14246 Comm: syz.4.2772 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 356.630295][T14246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 356.640357][T14246] Call Trace: [ 356.643645][T14246] [ 356.646590][T14246] dump_stack_lvl+0x241/0x360 [ 356.651279][T14246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.656479][T14246] ? __pfx__printk+0x10/0x10 [ 356.661081][T14246] ? snprintf+0xda/0x120 [ 356.666199][T14246] should_fail_ex+0x3b0/0x4e0 [ 356.670898][T14246] _copy_to_user+0x31/0xb0 [ 356.675322][T14246] simple_read_from_buffer+0xca/0x150 [ 356.680706][T14246] proc_fail_nth_read+0x1e9/0x250 [ 356.685737][T14246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 356.691292][T14246] ? rw_verify_area+0x55e/0x6f0 [ 356.696155][T14246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 356.701703][T14246] vfs_read+0x1fc/0xb70 [ 356.705863][T14246] ? fdget_pos+0x24e/0x320 [ 356.710277][T14246] ? __pfx_vfs_read+0x10/0x10 [ 356.714961][T14246] ? __fget_files+0x3f3/0x470 [ 356.719647][T14246] ? fdget_pos+0x24e/0x320 [ 356.724064][T14246] ksys_read+0x183/0x2b0 [ 356.728308][T14246] ? __pfx_ksys_read+0x10/0x10 [ 356.733066][T14246] ? do_syscall_64+0x100/0x230 [ 356.737836][T14246] ? do_syscall_64+0xb6/0x230 [ 356.742511][T14246] do_syscall_64+0xf3/0x230 [ 356.747013][T14246] ? clear_bhb_loop+0x35/0x90 [ 356.751689][T14246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.757581][T14246] RIP: 0033:0x7fe71bd7d15c [ 356.761992][T14246] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 356.781599][T14246] RSP: 002b:00007fe71cb49030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 356.790024][T14246] RAX: ffffffffffffffda RBX: 00007fe71bf35f80 RCX: 00007fe71bd7d15c [ 356.797997][T14246] RDX: 000000000000000f RSI: 00007fe71cb490a0 RDI: 0000000000000003 [ 356.805964][T14246] RBP: 00007fe71cb49090 R08: 0000000000000000 R09: 0000000000000000 [ 356.813955][T14246] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 356.821937][T14246] R13: 0000000000000000 R14: 00007fe71bf35f80 R15: 00007ffe79358688 [ 356.830406][T14246] [ 356.834731][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 356.916507][T14096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.929917][T14096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.963262][T14096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.022468][T14241] lo speed is unknown, defaulting to 1000 [ 357.305138][T14096] hsr_slave_0: entered promiscuous mode [ 357.375251][T14096] hsr_slave_1: entered promiscuous mode [ 357.392837][T14096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.409097][T14096] Cannot create hsr debugfs directory [ 357.449100][ T5847] Bluetooth: hci3: command tx timeout [ 357.513421][T14263] netlink: 'syz.3.2776': attribute type 1 has an invalid length. [ 357.584208][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2776'. [ 357.729434][T14263] bond18 (unregistering): Released all slaves [ 357.919033][T14072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.057414][T14072] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.138162][T14285] --map-set only usable from mangle table [ 358.146695][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.153878][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.205351][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.212512][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.315690][T14293] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2785'. [ 358.349088][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2783'. [ 358.664490][T14300] tap0: tun_chr_ioctl cmd 1074025677 [ 358.670166][T14300] tap0: linktype set to 805 [ 358.699382][T14305] net_ratelimit: 5 callbacks suppressed [ 358.699402][T14305] dccp_v4_rcv: dropped packet with invalid checksum [ 358.769743][T14096] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 358.815003][T14096] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 358.854633][T14096] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 358.870579][T14096] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 358.884125][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 358.906063][T14072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.945464][T14312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2791'. [ 358.977223][T14312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.001412][T14312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.012447][T14312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.030795][T14312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.043762][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 359.050985][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 359.166318][T14322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2794'. [ 359.225780][T14072] veth0_vlan: entered promiscuous mode [ 359.267507][T14072] veth1_vlan: entered promiscuous mode [ 359.298537][T14096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.380789][T14096] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.396548][T14072] veth0_macvtap: entered promiscuous mode [ 359.407985][T14072] veth1_macvtap: entered promiscuous mode [ 359.445225][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.452417][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.485412][T14072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.503474][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.510671][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.587035][T14072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.614407][T14072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.642183][T14072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.714803][T14072] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.723553][T14072] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.777838][T14072] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.797067][T14072] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.923803][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.033685][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.051814][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.083725][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.090919][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.134612][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.158111][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.225659][T14349] dccp_v4_rcv: dropped packet with invalid checksum [ 360.256919][T14096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.367236][T14096] veth0_vlan: entered promiscuous mode [ 360.376931][T14351] tipc: Enabling of bearer rejected, already enabled [ 360.459294][T14096] veth1_vlan: entered promiscuous mode [ 360.487703][T14096] veth0_macvtap: entered promiscuous mode [ 360.497306][T14096] veth1_macvtap: entered promiscuous mode [ 360.720428][T14096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.754135][T14096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.766245][T14096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.792472][T14096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.820912][T14096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.832157][T14096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.843085][T14096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.876458][T14096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.915490][T14096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.953795][T14096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.962560][T14096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.973915][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 360.985452][T14096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.031088][T14369] netlink: 'syz.4.2809': attribute type 1 has an invalid length. [ 361.097705][T14371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2809'. [ 361.123975][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 361.313691][T14374] bond0 (unregistering): Released all slaves [ 361.371309][ T1100] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.463310][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.467126][T14376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2810'. [ 361.490442][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.514438][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.522458][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.689056][ T1100] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.922487][ T1100] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.021726][ T1100] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.149048][ T1100] bridge_slave_1: left allmulticast mode [ 362.155034][ T1100] bridge_slave_1: left promiscuous mode [ 362.160766][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.170361][ T1100] bridge_slave_0: left allmulticast mode [ 362.177202][ T1100] bridge_slave_0: left promiscuous mode [ 362.183235][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.775587][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 362.791684][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 362.811856][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 362.844380][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 362.852146][ T5156] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 362.874328][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 362.944229][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.967626][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.978778][ T1100] bond0 (unregistering): Released all slaves [ 363.015610][T14383] lo speed is unknown, defaulting to 1000 [ 363.216630][T14383] chnl_net:caif_netlink_parms(): no params data found [ 363.405626][T14397] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2811'. [ 363.426670][T14383] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.434524][T14383] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.441928][T14383] bridge_slave_0: entered allmulticast mode [ 363.449432][T14383] bridge_slave_0: entered promiscuous mode [ 363.503796][ T1100] hsr_slave_0: left promiscuous mode [ 363.542900][ T1100] hsr_slave_1: left promiscuous mode [ 363.573945][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.581449][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.595226][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.611269][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.671801][ T1100] veth1_macvtap: left promiscuous mode [ 363.685793][ T1100] veth0_macvtap: left promiscuous mode [ 363.697669][ T1100] veth1_vlan: left promiscuous mode [ 363.710060][ T1100] veth0_vlan: left promiscuous mode [ 363.768740][ T5156] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.779193][ T5156] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.788117][ T5156] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.798332][ T5156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.807024][ T5156] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 363.814755][ T5156] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.093685][ C1] net_ratelimit: 7 callbacks suppressed [ 364.093707][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 364.132882][T14419] FAULT_INJECTION: forcing a failure. [ 364.132882][T14419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.146943][T14419] CPU: 1 UID: 0 PID: 14419 Comm: syz.3.2820 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 364.157752][T14419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 364.167847][T14419] Call Trace: [ 364.171144][T14419] [ 364.174086][T14419] dump_stack_lvl+0x241/0x360 [ 364.178791][T14419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.184013][T14419] ? __pfx__printk+0x10/0x10 [ 364.188632][T14419] ? snprintf+0xda/0x120 [ 364.192895][T14419] should_fail_ex+0x3b0/0x4e0 [ 364.197593][T14419] _copy_to_user+0x31/0xb0 [ 364.202032][T14419] simple_read_from_buffer+0xca/0x150 [ 364.207432][T14419] proc_fail_nth_read+0x1e9/0x250 [ 364.212484][T14419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 364.218060][T14419] ? rw_verify_area+0x55e/0x6f0 [ 364.222932][T14419] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 364.228500][T14419] vfs_read+0x1fc/0xb70 [ 364.232701][T14419] ? fdget_pos+0x24e/0x320 [ 364.237148][T14419] ? __pfx_vfs_read+0x10/0x10 [ 364.241861][T14419] ? __fget_files+0x3f3/0x470 [ 364.243903][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 364.246546][T14419] ? fdget_pos+0x24e/0x320 [ 364.253501][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 364.257780][T14419] ksys_read+0x183/0x2b0 [ 364.257805][T14419] ? __pfx_ksys_read+0x10/0x10 [ 364.257829][T14419] ? do_syscall_64+0x100/0x230 [ 364.278461][T14419] ? do_syscall_64+0xb6/0x230 [ 364.283167][T14419] do_syscall_64+0xf3/0x230 [ 364.287688][T14419] ? clear_bhb_loop+0x35/0x90 [ 364.292387][T14419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.298297][T14419] RIP: 0033:0x7fa1c077d15c [ 364.302727][T14419] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 364.322450][T14419] RSP: 002b:00007fa1bebf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 364.330902][T14419] RAX: ffffffffffffffda RBX: 00007fa1c0935f80 RCX: 00007fa1c077d15c [ 364.338903][T14419] RDX: 000000000000000f RSI: 00007fa1bebf60a0 RDI: 0000000000000003 [ 364.346898][T14419] RBP: 00007fa1bebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 364.354899][T14419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.362890][T14419] R13: 0000000000000000 R14: 00007fa1c0935f80 R15: 00007ffd61df8d98 [ 364.370902][T14419] [ 364.546832][T14423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2821'. [ 364.581591][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2821'. [ 364.601146][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2821'. [ 364.644879][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2822'. [ 364.673475][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2821'. [ 364.683978][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2821'. [ 364.828914][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2821'. [ 364.976720][ T5847] Bluetooth: hci1: command tx timeout [ 364.995855][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 365.071556][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 365.125851][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.283777][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.290855][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 365.756993][T14383] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.774073][T14383] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.782184][T14383] bridge_slave_1: entered allmulticast mode [ 365.789455][T14383] bridge_slave_1: entered promiscuous mode [ 365.853832][ T5847] Bluetooth: hci3: command tx timeout [ 365.863241][T14437] set match dimension is over the limit! [ 365.950077][T14383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.026580][T14383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.144275][T14409] lo speed is unknown, defaulting to 1000 [ 366.163862][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 366.216489][T14437] pim6reg: entered allmulticast mode [ 366.253890][T14438] pim6reg: left allmulticast mode [ 366.324549][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 366.331587][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 366.349235][T14383] team0: Port device team_slave_0 added [ 366.388632][T14383] team0: Port device team_slave_1 added [ 366.581425][T14383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.590006][T14383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.617409][T14383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.644535][T14383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.651555][T14383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.677702][T14383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.830999][T14409] chnl_net:caif_netlink_parms(): no params data found [ 366.857297][T14383] hsr_slave_0: entered promiscuous mode [ 366.874221][T14383] hsr_slave_1: entered promiscuous mode [ 366.880695][T14383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.889171][T14383] Cannot create hsr debugfs directory [ 367.051117][ T5847] Bluetooth: hci1: command tx timeout [ 367.076488][ T1100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.122482][T14473] bridge0: entered promiscuous mode [ 367.133972][T14473] bridge0: left promiscuous mode [ 367.212816][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 367.227061][ T1100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.275196][T14409] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.282466][T14409] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.304378][T14409] bridge_slave_0: entered allmulticast mode [ 367.314309][T14409] bridge_slave_0: entered promiscuous mode [ 367.386955][ T1100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.419983][T14409] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.437972][T14409] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.458404][T14409] bridge_slave_1: entered allmulticast mode [ 367.464835][T14482] __nla_validate_parse: 1 callbacks suppressed [ 367.464853][T14482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2835'. [ 367.469368][T14409] bridge_slave_1: entered promiscuous mode [ 367.589888][ T1100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.698750][T14486] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2836'. [ 367.731673][T14409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.755330][T14409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.868667][T14409] team0: Port device team_slave_0 added [ 367.894639][T14409] team0: Port device team_slave_1 added [ 367.924178][ T5847] Bluetooth: hci3: command tx timeout [ 368.081048][T14409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.089146][T14501] netlink: 'syz.3.2842': attribute type 1 has an invalid length. [ 368.089211][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.125246][T14409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.264950][T14503] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2843'. [ 368.483155][T14509] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2846'. [ 368.498222][T14509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2846'. [ 368.679346][T14517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2847'. [ 369.124279][ T5847] Bluetooth: hci1: command tx timeout [ 369.283719][ C1] net_ratelimit: 5 callbacks suppressed [ 369.283742][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 369.451529][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 369.458593][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 370.004916][ T5847] Bluetooth: hci3: command tx timeout [ 370.326730][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 370.483748][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 370.490750][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 371.204305][ T5847] Bluetooth: hci1: command tx timeout [ 371.364251][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 371.373134][T14409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.380370][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.407383][T14409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.440081][T14518] lo speed is unknown, defaulting to 1000 [ 371.452940][ T1100] bridge_slave_1: left allmulticast mode [ 371.464225][ T1100] bridge_slave_1: left promiscuous mode [ 371.470081][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.502553][ T1100] bridge_slave_0: left allmulticast mode [ 371.516731][ T1100] bridge_slave_0: left promiscuous mode [ 371.522518][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.523785][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 371.536783][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 371.557673][T14524] --map-set only usable from mangle table [ 371.570237][T14525] xt_l2tp: v2 doesn't support IP mode [ 371.671355][T14528] xt_limit: Overflow, try lower: 65536/2147483648 [ 372.093746][ T5847] Bluetooth: hci3: command tx timeout [ 372.100100][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.112133][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.124001][ T1100] bond0 (unregistering): Released all slaves [ 372.153332][T14528] netlink: 'syz.1.2849': attribute type 13 has an invalid length. [ 372.168562][T14530] bridge0: port 6(vlan1) entered blocking state [ 372.185521][T14530] bridge0: port 6(vlan1) entered disabled state [ 372.201751][T14530] vlan1: entered allmulticast mode [ 372.207185][T14530] bond0: entered allmulticast mode [ 372.223940][T14530] bond_slave_0: entered allmulticast mode [ 372.234525][T14530] bond_slave_1: entered allmulticast mode [ 372.251613][T14530] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 372.272640][T14530] vlan1: entered promiscuous mode [ 372.280343][T14530] bond0: entered promiscuous mode [ 372.303948][T14530] bond_slave_0: entered promiscuous mode [ 372.309803][T14530] bond_slave_1: entered promiscuous mode [ 372.333906][T14530] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 372.342236][T14530] bridge0: port 6(vlan1) entered blocking state [ 372.348751][T14530] bridge0: port 6(vlan1) entered forwarding state [ 372.403938][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 372.649280][T14409] hsr_slave_0: entered promiscuous mode [ 372.657817][T14409] hsr_slave_1: entered promiscuous mode [ 372.674425][T14409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.682051][T14409] Cannot create hsr debugfs directory [ 372.841112][T14383] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.851305][T14383] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 372.862587][T14383] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 372.873259][T14383] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 372.972588][ T1100] hsr_slave_0: left promiscuous mode [ 372.984315][ T1100] hsr_slave_1: left promiscuous mode [ 372.990747][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.999709][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.008469][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 373.016971][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.051749][ T1100] veth1_macvtap: left promiscuous mode [ 373.064330][ T1100] veth0_macvtap: left promiscuous mode [ 373.076747][ T1100] veth1_vlan: left promiscuous mode [ 373.092125][ T1100] veth0_vlan: left promiscuous mode [ 373.748798][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 373.803497][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 374.483929][ C1] net_ratelimit: 5 callbacks suppressed [ 374.483949][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.532574][T14555] netlink: 'syz.1.2860': attribute type 1 has an invalid length. [ 374.624388][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2860'. [ 374.643696][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.650769][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 374.736162][T14559] bond1 (unregistering): Released all slaves [ 374.861871][T14383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.956252][T14565] netlink: 'syz.3.2865': attribute type 1 has an invalid length. [ 375.035872][T14383] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.048012][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.055386][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.087158][T12578] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.093896][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2865'. [ 375.094356][T12578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.121142][T14565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.132591][T14565] bond18: (slave batadv0): Enslaving as a backup interface with an up link [ 375.147180][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2864'. [ 375.204592][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2864'. [ 375.223268][T14383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.235109][T14568] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2864'. [ 375.298173][ T5847] block nbd0: Receive control failed (result -107) [ 375.319052][T14565] bond18 (unregistering): (slave batadv0): Releasing backup interface [ 375.330112][T14568] nbd0: detected capacity change from 0 to 256 [ 375.364801][T14565] bond18 (unregistering): Released all slaves [ 375.523775][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 375.570523][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2868'. [ 375.683868][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 375.690990][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 375.820626][T14591] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 375.861421][T14584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2869'. [ 375.882705][T14383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.923191][T14409] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 375.973165][T14409] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 376.047929][T14409] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 376.054766][T14598] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2871'. [ 376.096442][T14409] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 376.216521][T14383] veth0_vlan: entered promiscuous mode [ 376.248530][T14383] veth1_vlan: entered promiscuous mode [ 376.364659][T14383] veth0_macvtap: entered promiscuous mode [ 376.405617][T14409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.425966][T14613] veth0_vlan: left promiscuous mode [ 376.563754][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.590655][T14383] veth1_macvtap: entered promiscuous mode [ 376.679649][T14383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.715447][T14409] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.723689][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.730753][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 376.745457][T14605] delete_channel: no stack [ 376.806123][T14383] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.817187][T14383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.854666][T14383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.881015][T14383] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.913996][T14383] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.942515][T14383] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.953900][T14383] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.027683][T14629] bridge0: entered promiscuous mode [ 377.064751][T14629] bridge0: left promiscuous mode [ 377.142088][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.149313][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.167127][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.174339][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.259462][T14632] tipc: Enabling of bearer rejected, already enabled [ 377.420873][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.442079][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.495201][T14639] xt_l2tp: missing protocol rule (udp|l2tpip) [ 377.514263][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.522150][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.613848][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 377.644628][T14649] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2890'. [ 377.850027][T14409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.927225][T14409] veth0_vlan: entered promiscuous mode [ 377.949934][T14662] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2895'. [ 377.961924][T14409] veth1_vlan: entered promiscuous mode [ 378.017226][T14409] veth0_macvtap: entered promiscuous mode [ 378.055222][T14409] veth1_macvtap: entered promiscuous mode [ 378.105119][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.116822][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.139545][T14409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.184362][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.204805][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.236872][T14409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.268575][T14409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.300525][T14409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.440693][T12578] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.484153][T14667] lo speed is unknown, defaulting to 1000 [ 378.507437][T14409] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.516866][T14409] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.527121][T14409] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.536231][T14409] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.664700][T12578] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.758772][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.768762][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.814200][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.822137][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.949461][T12578] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.966784][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.035884][T12578] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.155042][T12578] bridge_slave_1: left allmulticast mode [ 379.160725][T12578] bridge_slave_1: left promiscuous mode [ 379.184165][T12578] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.195796][T12578] bridge_slave_0: left allmulticast mode [ 379.201498][T12578] bridge_slave_0: left promiscuous mode [ 379.224097][T12578] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.683743][ C1] net_ratelimit: 5 callbacks suppressed [ 379.683766][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 379.843766][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 379.850797][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 379.926781][T12578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.936656][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 379.950701][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 379.964100][T12578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.972865][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 379.981071][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 379.989024][ T5156] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 379.996576][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 380.010247][T12578] bond0 (unregistering): Released all slaves [ 380.072342][T14676] lo speed is unknown, defaulting to 1000 [ 380.262001][T14676] chnl_net:caif_netlink_parms(): no params data found [ 380.331916][T12578] hsr_slave_0: left promiscuous mode [ 380.338431][T12578] hsr_slave_1: left promiscuous mode [ 380.345817][T12578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.353364][T12578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.361468][T12578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.370482][T12578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.394909][T12578] veth1_macvtap: left promiscuous mode [ 380.400479][T12578] veth0_macvtap: left promiscuous mode [ 380.406386][T12578] veth1_vlan: left promiscuous mode [ 380.411720][T12578] veth0_vlan: left promiscuous mode [ 380.729852][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 380.883773][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 380.890947][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.162521][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 381.185299][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.202765][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.236471][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 381.247514][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 381.256010][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 381.443481][T12578] team0 (unregistering): Port device team_slave_1 removed [ 381.512173][T12578] team0 (unregistering): Port device team_slave_0 removed [ 381.773732][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.923829][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 381.930824][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.085020][ T5156] Bluetooth: hci1: command tx timeout [ 382.239755][T14702] bridge0: entered promiscuous mode [ 382.285414][T14702] bridge0: left promiscuous mode [ 382.414906][T14707] tipc: Enabling of bearer rejected, already enabled [ 382.447836][T14700] lo speed is unknown, defaulting to 1000 [ 382.467183][T14676] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.486127][T14676] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.493845][T14676] bridge_slave_0: entered allmulticast mode [ 382.501036][T14676] bridge_slave_0: entered promiscuous mode [ 382.527300][T14676] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.560073][T14676] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.611688][T14676] bridge_slave_1: entered allmulticast mode [ 382.653349][T14676] bridge_slave_1: entered promiscuous mode [ 382.694406][T14721] tipc: Enabled bearer , priority 1 [ 382.803768][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 382.856186][T14676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.934602][T14676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.108971][T14676] team0: Port device team_slave_0 added [ 383.127987][T14745] __nla_validate_parse: 1 callbacks suppressed [ 383.128005][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2918'. [ 383.150293][T14676] team0: Port device team_slave_1 added [ 383.161127][T14700] chnl_net:caif_netlink_parms(): no params data found [ 383.243990][T14676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.256009][T14676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.286588][ T5156] Bluetooth: hci3: command tx timeout [ 383.293362][T14676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.306996][T14676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.314346][T14676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.340618][T14676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.355740][T14745] ipvlan3: entered allmulticast mode [ 383.368913][T14741] lo speed is unknown, defaulting to 1000 [ 383.602025][T14676] hsr_slave_0: entered promiscuous mode [ 383.616106][T14676] hsr_slave_1: entered promiscuous mode [ 383.622605][T14676] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.630736][T14676] Cannot create hsr debugfs directory [ 383.770927][T12578] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.926920][T12578] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.011426][T14768] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2924'. [ 384.024920][T14700] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.032621][T14700] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.043761][T14700] bridge_slave_0: entered allmulticast mode [ 384.059073][T14700] bridge_slave_0: entered promiscuous mode [ 384.138145][T12578] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.164574][ T5156] Bluetooth: hci1: command tx timeout [ 384.213788][T14700] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.220965][T14700] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.255736][T14700] bridge_slave_1: entered allmulticast mode [ 384.285255][T14700] bridge_slave_1: entered promiscuous mode [ 384.456065][T12578] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.646364][T14700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.658312][T14780] netlink: 'syz.1.2928': attribute type 1 has an invalid length. [ 384.667412][T14780] netlink: 'syz.1.2928': attribute type 1 has an invalid length. [ 384.675522][T14780] netlink: 'syz.1.2928': attribute type 1 has an invalid length. [ 384.683457][T14780] netlink: 'syz.1.2928': attribute type 2 has an invalid length. [ 384.702592][T14780] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2928'. [ 384.721038][T14700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.836519][T14786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2929'. [ 384.884887][ C1] net_ratelimit: 357 callbacks suppressed [ 384.884913][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 385.043687][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 385.051445][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 385.091146][T14700] team0: Port device team_slave_0 added [ 385.116353][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'. [ 385.121190][T14700] team0: Port device team_slave_1 added [ 385.144990][T14790] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2931'. [ 385.157594][T14790] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2931'. [ 385.367181][ T5156] Bluetooth: hci3: command tx timeout [ 385.375662][T14700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.382666][T14700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.415443][T14700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.442466][T14700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.466930][T14700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.514700][T14700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.599263][T14809] vlan0: entered promiscuous mode [ 385.670499][T12578] bridge_slave_1: left allmulticast mode [ 385.678725][T12578] bridge_slave_1: left promiscuous mode [ 385.689536][T12578] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.757046][T12578] bridge_slave_0: left allmulticast mode [ 385.764200][T12578] bridge_slave_0: left promiscuous mode [ 385.774494][T12578] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.774770][T14812] netlink: 'syz.3.2938': attribute type 18 has an invalid length. [ 385.923953][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.083810][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.090887][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.244150][ T5156] Bluetooth: hci1: command tx timeout [ 386.450016][T12578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.463394][T12578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.475860][T12578] bond0 (unregistering): Released all slaves [ 386.492360][T14700] hsr_slave_0: entered promiscuous mode [ 386.500339][T14700] hsr_slave_1: entered promiscuous mode [ 386.512178][T14700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.521376][T14700] Cannot create hsr debugfs directory [ 386.527326][T14804] lo speed is unknown, defaulting to 1000 [ 386.549879][T14812] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.559528][T14812] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.568681][T14812] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.577640][T14812] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.963758][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 386.964613][T14822] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2942'. [ 387.092202][T14822] vlan0: entered promiscuous mode [ 387.126820][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 387.134013][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 387.141877][T14676] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 387.162853][T14676] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 387.205554][T12578] hsr_slave_0: left promiscuous mode [ 387.216889][T12578] hsr_slave_1: left promiscuous mode [ 387.225487][T12578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.233896][T12578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.245873][T12578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.253863][T12578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.293116][T12578] veth1_macvtap: left promiscuous mode [ 387.298954][T12578] veth0_macvtap: left promiscuous mode [ 387.307939][T12578] veth1_vlan: left promiscuous mode [ 387.323998][T12578] veth0_vlan: left promiscuous mode [ 387.454015][ T5156] Bluetooth: hci3: command tx timeout [ 388.008741][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 388.058108][T12578] team0 (unregistering): Port device team_slave_1 removed [ 388.118502][T12578] team0 (unregistering): Port device team_slave_0 removed [ 388.324517][ T5156] Bluetooth: hci1: command tx timeout [ 388.737433][T14676] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 388.757558][T14676] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 389.049853][T14844] tipc: Enabling of bearer rejected, already enabled [ 389.349324][T14676] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.397484][T14676] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.425455][T14850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2952'. [ 389.457322][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.464487][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.503304][ T3473] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.503795][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2953'. [ 389.510509][ T3473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.529076][ T5156] Bluetooth: hci3: command tx timeout [ 389.603840][T14863] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2954'. [ 389.689483][T14867] --map-set only usable from mangle table [ 389.759538][T14700] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 390.019882][T14700] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 390.046855][T14700] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 390.083737][ C1] net_ratelimit: 5 callbacks suppressed [ 390.083757][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 390.128510][T14883] netlink: 'syz.4.2961': attribute type 1 has an invalid length. [ 390.141567][T14700] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 390.200641][T14886] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2961'. [ 390.243921][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 390.250978][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 390.261546][T14886] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 390.313991][T14886] bond0: (slave batadv10): Enslaving as a backup interface with an up link [ 390.338874][T14892] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2962'. [ 390.375048][T14883] bond0 (unregistering): (slave batadv10): Releasing backup interface [ 390.391852][T14883] bond0 (unregistering): Released all slaves [ 390.432987][T14676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.562713][T14676] veth0_vlan: entered promiscuous mode [ 390.592274][T14676] veth1_vlan: entered promiscuous mode [ 390.648302][T14700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.671018][T14676] veth0_macvtap: entered promiscuous mode [ 390.701885][T14700] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.730362][T14676] veth1_macvtap: entered promiscuous mode [ 390.753188][T14908] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2970'. [ 390.770334][T14676] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.783507][ T3473] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.790726][ T3473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.813837][T14906] netlink: 'syz.3.2969': attribute type 1 has an invalid length. [ 390.825604][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.832829][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.895886][T14676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.921465][T14676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.956134][T14676] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.003921][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2971'. [ 391.025416][T14913] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2971'. [ 391.049473][T14917] --map-set only usable from mangle table [ 391.056079][T14676] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.083803][T14676] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.093916][T14676] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.115228][T14676] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.135933][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 391.150418][T14916] macvtap1: entered promiscuous mode [ 391.156346][T14916] batadv0: entered promiscuous mode [ 391.176688][T14916] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 391.203516][T14916] batadv0: left promiscuous mode [ 391.283691][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 391.290705][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 391.352835][T14930] netlink: 'syz.3.2971': attribute type 4 has an invalid length. [ 391.411586][T14933] ip6t_srh: unknown srh invflags 4000 [ 391.527746][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.546549][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.598420][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.609850][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.715770][T14941] tipc: Enabling of bearer rejected, already enabled [ 391.858539][T14700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.911720][T14700] veth0_vlan: entered promiscuous mode [ 391.922560][T14700] veth1_vlan: entered promiscuous mode [ 391.944848][T14700] veth0_macvtap: entered promiscuous mode [ 391.976371][T14700] veth1_macvtap: entered promiscuous mode [ 392.023418][T14700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 392.048831][T14700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.061375][T14950] netlink: 'syz.3.2981': attribute type 1 has an invalid length. [ 392.070880][T14700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.078364][T14950] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2981'. [ 392.099825][T14700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.112599][T14700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.123059][T14700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.163900][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.173162][T14700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.194584][T14700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.202070][T14950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2981'. [ 392.236531][T14700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.257605][T14700] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.283668][T14700] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.292676][T14700] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.323821][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.330934][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 392.541906][T14961] ebtables: ebtables: counters copy to user failed while replacing table [ 392.733768][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.741638][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.770716][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.779858][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.893379][ T135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.280465][ T135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.538006][ T135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.656208][ T135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.699699][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.710394][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.719088][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.739791][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.748952][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 393.764982][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.824343][ T135] bridge_slave_1: left allmulticast mode [ 393.830059][ T135] bridge_slave_1: left promiscuous mode [ 393.836880][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.847622][ T135] bridge_slave_0: left allmulticast mode [ 393.853324][ T135] bridge_slave_0: left promiscuous mode [ 393.859850][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.385963][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.414231][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.436170][ T135] bond0 (unregistering): Released all slaves [ 394.488425][T14975] lo speed is unknown, defaulting to 1000 [ 394.504149][T14983] netlink: 'syz.1.2986': attribute type 1 has an invalid length. [ 394.630413][T14983] __nla_validate_parse: 1 callbacks suppressed [ 394.630436][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2986'. [ 394.752228][T14989] bond1 (unregistering): Released all slaves [ 394.840013][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 394.846431][T14997] bridge0: entered promiscuous mode [ 394.869815][T14997] bridge0: left promiscuous mode [ 394.875821][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 394.888459][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 394.896714][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 394.906527][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 394.921699][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 395.129776][T15005] macvtap1: entered promiscuous mode [ 395.140246][T15005] batadv0: entered promiscuous mode [ 395.146925][T15005] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 395.156860][T15005] batadv0: left promiscuous mode [ 395.202120][T14998] lo speed is unknown, defaulting to 1000 [ 395.271285][ T135] hsr_slave_0: left promiscuous mode [ 395.283719][ C1] net_ratelimit: 6 callbacks suppressed [ 395.283740][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 395.306728][ T135] hsr_slave_1: left promiscuous mode [ 395.313157][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.321424][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.330136][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.338009][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.366615][ T135] veth1_macvtap: left promiscuous mode [ 395.372290][ T135] veth0_macvtap: left promiscuous mode [ 395.378726][ T135] veth1_vlan: left promiscuous mode [ 395.384315][ T135] veth0_vlan: left promiscuous mode [ 395.443717][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 395.450824][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 395.846682][ T5156] Bluetooth: hci1: command tx timeout [ 396.110763][ T135] team0 (unregistering): Port device team_slave_1 removed [ 396.171332][ T135] team0 (unregistering): Port device team_slave_0 removed [ 396.334024][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.483785][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.490791][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 396.969669][ T5156] Bluetooth: hci3: command tx timeout [ 397.363677][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.523751][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.530947][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 397.925718][ T5156] Bluetooth: hci1: command tx timeout [ 398.413727][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 399.050400][ T5156] Bluetooth: hci3: command tx timeout [ 399.710118][T14975] chnl_net:caif_netlink_parms(): no params data found [ 399.746601][T15026] macvtap1: entered promiscuous mode [ 399.764232][T15026] batadv0: entered promiscuous mode [ 399.809316][T15026] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 399.855734][T15026] batadv0: left promiscuous mode [ 400.014232][ T5156] Bluetooth: hci1: command tx timeout [ 400.109107][T15040] netlink: 'syz.3.3003': attribute type 1 has an invalid length. [ 400.256453][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3003'. [ 400.434445][T14998] chnl_net:caif_netlink_parms(): no params data found [ 400.454173][T14975] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.461841][T14975] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.470562][T14975] bridge_slave_0: entered allmulticast mode [ 400.478106][T14975] bridge_slave_0: entered promiscuous mode [ 400.491792][T15051] 8021q: adding VLAN 0 to HW filter on device batadv14 [ 400.493830][ C1] net_ratelimit: 5 callbacks suppressed [ 400.493847][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.503498][T15051] bond18: (slave batadv14): Enslaving as a backup interface with an up link [ 400.530363][T15040] bond18 (unregistering): (slave batadv14): Releasing backup interface [ 400.547795][T15040] bond18 (unregistering): Released all slaves [ 400.632122][T14975] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.643836][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.650891][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 400.693865][T14975] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.713964][T14975] bridge_slave_1: entered allmulticast mode [ 400.722107][T14975] bridge_slave_1: entered promiscuous mode [ 400.827545][T15060] tc_dump_action: action bad kind [ 400.838603][T15065] lo speed is unknown, defaulting to 1000 [ 400.937660][T14975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.023510][T15073] macsec0: entered allmulticast mode [ 401.056721][T15073] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 401.096608][T14975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.123875][ T5156] Bluetooth: hci3: command tx timeout [ 401.194836][T14998] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.213879][T14998] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.221439][T14998] bridge_slave_0: entered allmulticast mode [ 401.239161][T14998] bridge_slave_0: entered promiscuous mode [ 401.253051][T14998] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.270780][T14998] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.281108][T15080] netlink: del zone limit has 8 unknown bytes [ 401.292970][T14998] bridge_slave_1: entered allmulticast mode [ 401.318066][T14998] bridge_slave_1: entered promiscuous mode [ 401.412085][T14975] team0: Port device team_slave_0 added [ 401.470203][T14975] team0: Port device team_slave_1 added [ 401.483187][T15082] raw_sendmsg: syz.1.3011 forgot to set AF_INET. Fix it! [ 401.523707][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.604731][T14998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.617176][T14998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.628099][T14975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.635837][T14975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.636252][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3012'. [ 401.683713][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.683842][T14975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.691345][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 401.704046][T14975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.716321][T14975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.743282][T14975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.798224][T15087] siw: device registration error -23 [ 401.909122][ T135] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.955050][T15091] netlink: del zone limit has 8 unknown bytes [ 401.961236][T15091] FAULT_INJECTION: forcing a failure. [ 401.961236][T15091] name failslab, interval 1, probability 0, space 0, times 0 [ 402.003947][T15091] CPU: 0 UID: 0 PID: 15091 Comm: syz.1.3014 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 402.014783][T15091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 402.025024][T15091] Call Trace: [ 402.028746][T15091] [ 402.031689][T15091] dump_stack_lvl+0x241/0x360 [ 402.036398][T15091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.041690][T15091] ? __pfx__printk+0x10/0x10 [ 402.046285][T15091] ? ref_tracker_alloc+0x332/0x490 [ 402.051394][T15091] should_fail_ex+0x3b0/0x4e0 [ 402.056212][T15091] ? skb_clone+0x20c/0x390 [ 402.060807][T15091] should_failslab+0xac/0x100 [ 402.065508][T15091] ? skb_clone+0x20c/0x390 [ 402.069940][T15091] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 402.075431][T15091] skb_clone+0x20c/0x390 [ 402.079701][T15091] __netlink_deliver_tap+0x3cc/0x7f0 [ 402.085020][T15091] ? netlink_deliver_tap+0x2e/0x1b0 [ 402.090256][T15091] netlink_deliver_tap+0x19d/0x1b0 [ 402.095395][T15091] netlink_sendskb+0x68/0x140 [ 402.100088][T15091] netlink_unicast+0x39d/0x990 [ 402.104898][T15091] ? __pfx_netlink_unicast+0x10/0x10 [ 402.110237][T15091] ? genlmsg_put+0x145/0x2e0 [ 402.113735][ T5156] Bluetooth: hci1: command tx timeout [ 402.114935][T15091] ovs_ct_limit_cmd_del+0x636/0x790 [ 402.126698][T15091] genl_rcv_msg+0xb14/0xec0 [ 402.131244][T15091] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.136344][T15091] ? __pfx_lock_acquire+0x10/0x10 [ 402.141412][T15091] ? __pfx_ovs_ct_limit_cmd_del+0x10/0x10 [ 402.147190][T15091] ? __pfx___might_resched+0x10/0x10 [ 402.152527][T15091] netlink_rcv_skb+0x1e3/0x430 [ 402.157329][T15091] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.162388][T15091] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 402.167729][T15091] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 402.173250][T15091] genl_rcv+0x28/0x40 [ 402.177267][T15091] netlink_unicast+0x7f6/0x990 [ 402.182092][T15091] ? __pfx_netlink_unicast+0x10/0x10 [ 402.187404][T15091] ? __virt_addr_valid+0x183/0x530 [ 402.192544][T15091] ? __check_object_size+0x48e/0x900 [ 402.198469][T15091] netlink_sendmsg+0x8e4/0xcb0 [ 402.203698][T15091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.209030][T15091] ? aa_sock_msg_perm+0x91/0x160 [ 402.214004][T15091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.219329][T15091] __sock_sendmsg+0x221/0x270 [ 402.224126][T15091] ____sys_sendmsg+0x52a/0x7e0 [ 402.229031][T15091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.234383][T15091] __sys_sendmsg+0x292/0x380 [ 402.239017][T15091] ? __pfx___sys_sendmsg+0x10/0x10 [ 402.244184][T15091] ? __pfx_vfs_write+0x10/0x10 [ 402.248977][T15091] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 402.255340][T15091] ? do_syscall_64+0x100/0x230 [ 402.260138][T15091] ? do_syscall_64+0xb6/0x230 [ 402.264929][T15091] do_syscall_64+0xf3/0x230 [ 402.269465][T15091] ? clear_bhb_loop+0x35/0x90 [ 402.274175][T15091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.280086][T15091] RIP: 0033:0x7f882637e719 [ 402.284609][T15091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.304275][T15091] RSP: 002b:00007f8827245038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.312729][T15091] RAX: ffffffffffffffda RBX: 00007f8826535f80 RCX: 00007f882637e719 [ 402.320735][T15091] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 402.328732][T15091] RBP: 00007f8827245090 R08: 0000000000000000 R09: 0000000000000000 [ 402.336726][T15091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 402.344726][T15091] R13: 0000000000000000 R14: 00007f8826535f80 R15: 00007ffffaa06038 [ 402.352907][T15091] [ 402.444091][T15094] macvtap1: entered promiscuous mode [ 402.459867][T15094] batadv0: entered promiscuous mode [ 402.475028][T15094] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 402.494886][T15094] batadv0: left promiscuous mode [ 402.573848][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 402.578006][T14998] team0: Port device team_slave_0 added [ 402.624772][ T135] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.666115][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3017'. [ 402.697853][T15100] ipip0: entered promiscuous mode [ 402.737530][T14998] team0: Port device team_slave_1 added [ 402.825888][T15107] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3018'. [ 402.846554][ T135] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.922280][T14975] hsr_slave_0: entered promiscuous mode [ 402.946088][T14975] hsr_slave_1: entered promiscuous mode [ 402.952613][T14975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 402.974066][T14975] Cannot create hsr debugfs directory [ 403.029734][ T135] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.052300][T14998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.063968][T14998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.091085][T14998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.116828][T15111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3020'. [ 403.129091][T15109] netlink: 'syz.4.3019': attribute type 2 has an invalid length. [ 403.137949][T14998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.146398][T14998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.173805][T14998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.210636][ T5156] Bluetooth: hci3: command tx timeout [ 403.248009][T15118] hsr0: entered promiscuous mode [ 403.253261][T15118] macsec1: entered allmulticast mode [ 403.273839][T15118] hsr0: entered allmulticast mode [ 403.288496][T15118] hsr_slave_0: entered allmulticast mode [ 403.342267][T15118] hsr_slave_1: entered allmulticast mode [ 403.383943][T15118] hsr0: left allmulticast mode [ 403.388949][T15118] hsr_slave_0: left allmulticast mode [ 403.401177][T15118] hsr_slave_1: left allmulticast mode [ 403.476191][T14998] hsr_slave_0: entered promiscuous mode [ 403.483174][T14998] hsr_slave_1: entered promiscuous mode [ 403.491916][T14998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.499954][T14998] Cannot create hsr debugfs directory [ 403.728388][T15138] netlink: 'syz.1.3027': attribute type 1 has an invalid length. [ 403.789052][T15137] macvtap1: entered promiscuous mode [ 403.794671][T15137] batadv0: entered promiscuous mode [ 403.801918][T15137] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 403.810958][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3027'. [ 403.822747][T15137] batadv0: left promiscuous mode [ 403.964326][T15141] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 403.981728][T15141] bond1: (slave batadv6): Enslaving as a backup interface with an up link [ 404.008663][T15142] bond1 (unregistering): (slave batadv6): Releasing backup interface [ 404.043533][T15142] bond1 (unregistering): Released all slaves [ 404.158033][T15149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3030'. [ 404.314535][ T135] bridge_slave_1: left allmulticast mode [ 404.323799][ T135] bridge_slave_1: left promiscuous mode [ 404.329561][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.388527][ T135] bridge_slave_0: left allmulticast mode [ 404.404717][ T135] bridge_slave_0: left promiscuous mode [ 404.420767][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.576794][T15166] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 404.987233][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.006590][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.020026][ T135] bond0 (unregistering): Released all slaves [ 405.300277][T15172] ip6gretap1: entered promiscuous mode [ 405.306371][T15172] ip6gretap1: entered allmulticast mode [ 405.611082][T15183] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3039'. [ 405.683824][ C1] net_ratelimit: 9 callbacks suppressed [ 405.683846][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 405.789336][T15196] netlink: 'syz.1.3043': attribute type 1 has an invalid length. [ 405.826506][ T135] hsr_slave_0: left promiscuous mode [ 405.832880][ T135] hsr_slave_1: left promiscuous mode [ 405.840794][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.849375][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 405.849557][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 405.894538][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.913461][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.944212][ T135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.984814][ T135] veth1_macvtap: left promiscuous mode [ 405.994089][ T135] veth0_macvtap: left promiscuous mode [ 406.000457][ T135] veth1_vlan: left promiscuous mode [ 406.006370][ T135] veth0_vlan: left promiscuous mode [ 406.733750][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.887458][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.894536][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 406.909036][ T135] team0 (unregistering): Port device team_slave_1 removed [ 406.995310][ T135] team0 (unregistering): Port device team_slave_0 removed [ 407.615005][T15196] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 407.619591][T15191] lo speed is unknown, defaulting to 1000 [ 407.763806][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.923748][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.930836][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 407.957207][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3045'. [ 408.049106][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3046'. [ 408.222914][T15223] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3048'. [ 408.255399][T15225] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 408.276716][T15226] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 408.482201][T14998] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 408.525786][T14998] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 408.712924][T14998] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 408.746276][T14998] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 408.813714][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 408.846489][T14975] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 408.880648][T14975] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 408.896795][T14975] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 408.951586][T14975] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 409.187091][T14998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.229586][T14975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.276876][T14975] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.335764][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.342923][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.346635][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3057'. [ 409.411584][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.418783][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.476448][T14998] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.526861][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.534062][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.577009][T12578] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.584199][T12578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.628450][T15271] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3062'. [ 409.636108][T14975] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.663821][T14975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.759731][T14998] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.768286][T15277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3064'. [ 409.784612][T14998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 410.008662][T14975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.117068][T14975] veth0_vlan: entered promiscuous mode [ 410.150550][T14975] veth1_vlan: entered promiscuous mode [ 410.239752][T14975] veth0_macvtap: entered promiscuous mode [ 410.261451][T14975] veth1_macvtap: entered promiscuous mode [ 410.281211][T14998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.316199][T14975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.332974][T14975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.344302][T14975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.356298][T14975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.367798][T14975] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.379765][T14975] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.389083][T14975] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.398122][T14975] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.453254][T14998] veth0_vlan: entered promiscuous mode [ 410.478881][T14998] veth1_vlan: entered promiscuous mode [ 410.511282][T14998] veth0_macvtap: entered promiscuous mode [ 410.520353][T14998] veth1_macvtap: entered promiscuous mode [ 410.602737][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 410.614241][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.625397][T14998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.636085][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.646995][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.657011][T14998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 410.667536][T14998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 410.678445][T14998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.688455][T14998] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.697408][T14998] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.706245][T14998] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.715024][T14998] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.832343][T15301] bridge_slave_0: left allmulticast mode [ 410.873845][T15301] bridge_slave_0: left promiscuous mode [ 410.879644][T15301] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.893970][ C1] net_ratelimit: 5 callbacks suppressed [ 410.893992][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 410.909051][T15303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3070'. [ 410.924565][T15301] bridge_slave_1: left allmulticast mode [ 410.930259][T15301] bridge_slave_1: left promiscuous mode [ 410.954876][T15301] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.961208][T15305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3069'. [ 410.975797][T15301] bond0: (slave bond_slave_0): Releasing backup interface [ 411.015515][T15301] bond0: (slave bond_slave_1): Releasing backup interface [ 411.044045][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 411.051063][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 411.107553][T15301] team0: Port device team_slave_0 removed [ 411.146087][T15301] team0: Port device team_slave_1 removed [ 411.191599][T15301] bond0: (slave wlan1): Releasing backup interface [ 411.245909][T15301] vlan2: left allmulticast mode [ 411.256212][T15301] veth0: left allmulticast mode [ 411.261766][T15301] vlan2: left promiscuous mode [ 411.267682][T15301] veth0: left promiscuous mode [ 411.276635][T15301] bridge0: port 3(vlan2) entered disabled state [ 411.298595][T15301] xfrm0: left allmulticast mode [ 411.305369][T15301] xfrm0: left promiscuous mode [ 411.318760][T15301] team0: Port device vlan3 removed [ 411.408149][T15304] team0: Port device wg2 added [ 411.426833][T15303] vlan0: entered promiscuous mode [ 411.464825][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.495027][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.554473][T15306] lo speed is unknown, defaulting to 1000 [ 411.599247][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.609759][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.615702][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.637728][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.757600][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3072'. [ 411.779230][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.813828][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.821390][T15322] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3075'. [ 411.923753][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.083770][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.090874][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 412.114748][T15327] netlink: zone id is out of range [ 412.244687][T15335] tipc: Enabling of bearer rejected, already enabled [ 412.422479][T15341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3082'. [ 412.432975][T15341] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3082'. [ 412.810678][ T1100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.973844][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 413.123832][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 413.130973][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 413.146274][ T1100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.248118][ T1100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.349888][ T1100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.455618][ T1100] bridge_slave_1: left allmulticast mode [ 413.461331][ T1100] bridge_slave_1: left promiscuous mode [ 413.467270][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.476748][ T1100] bridge_slave_0: left allmulticast mode [ 413.482451][ T1100] bridge_slave_0: left promiscuous mode [ 413.488558][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.945627][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.958132][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.969401][ T1100] bond0 (unregistering): Released all slaves [ 414.239125][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.249086][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 414.257545][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 414.276511][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 414.305037][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 414.312543][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 414.330883][ T1100] hsr_slave_0: left promiscuous mode [ 414.344485][ T1100] hsr_slave_1: left promiscuous mode [ 414.350477][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.358421][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.371477][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.379115][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.406033][ T1100] veth1_macvtap: left promiscuous mode [ 414.411705][ T1100] veth0_macvtap: left promiscuous mode [ 414.422085][ T1100] veth1_vlan: left promiscuous mode [ 414.427741][ T1100] veth0_vlan: left promiscuous mode [ 415.025974][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 415.085523][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 415.667652][T15353] lo speed is unknown, defaulting to 1000 [ 415.920132][T15353] chnl_net:caif_netlink_parms(): no params data found [ 416.025413][T15363] dvmrp0: entered allmulticast mode [ 416.083800][ C1] net_ratelimit: 6 callbacks suppressed [ 416.083828][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.115461][T15367] netlink: del zone limit has 8 unknown bytes [ 416.233517][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 416.244384][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.251410][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 416.260125][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 416.270105][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 416.271325][T15353] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.285177][T15353] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.292581][T15353] bridge_slave_0: entered allmulticast mode [ 416.309884][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 416.320047][ T5854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 416.327465][T15353] bridge_slave_0: entered promiscuous mode [ 416.336884][T15353] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.344392][T15353] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.351657][T15353] bridge_slave_1: entered allmulticast mode [ 416.358381][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 416.368488][T15353] bridge_slave_1: entered promiscuous mode [ 416.403924][ T5847] Bluetooth: hci1: command tx timeout [ 416.470956][ T135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.521445][T15378] bridge0: entered promiscuous mode [ 416.536263][T15378] bridge0: left promiscuous mode [ 416.594502][T15353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.609064][T15353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.720103][ T135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.815236][T15390] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3093'. [ 416.851361][T15372] lo speed is unknown, defaulting to 1000 [ 416.893108][ T135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.916715][T15392] netlink: 'syz.4.3094': attribute type 2 has an invalid length. [ 416.926481][T15353] team0: Port device team_slave_0 added [ 416.941035][T15390] vlan0: entered promiscuous mode [ 416.968655][T15353] team0: Port device team_slave_1 added [ 417.037514][ T135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.104975][T15395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3095'. [ 417.123824][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.167829][T15353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.175661][T15353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.234012][T15353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.274188][T15353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.281203][T15353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.307391][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.307466][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 417.366019][T15353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.388496][T15395] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 417.406889][T15395] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3095'. [ 417.425597][T15395] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 417.594114][T15353] hsr_slave_0: entered promiscuous mode [ 417.610190][T15353] hsr_slave_1: entered promiscuous mode [ 417.627778][T15353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.645419][T15353] Cannot create hsr debugfs directory [ 417.794830][ T135] bridge_slave_1: left allmulticast mode [ 417.801583][ T135] bridge_slave_1: left promiscuous mode [ 417.807921][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.829896][ T135] bridge_slave_0: left allmulticast mode [ 417.836229][ T135] bridge_slave_0: left promiscuous mode [ 417.854654][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.168838][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 418.323716][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 418.334824][T15417] ------------[ cut here ]------------ [ 418.340740][T15417] WARNING: CPU: 1 PID: 15417 at net/core/skbuff.c:1219 sk_skb_reason_drop+0x87/0x380 [ 418.350345][T15417] Modules linked in: [ 418.354308][T15417] CPU: 1 UID: 0 PID: 15417 Comm: syz.1.3101 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 418.365149][T15417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 418.375278][T15417] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 418.381045][T15417] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 8a b1 08 f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 3a ad 08 f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 68 b1 08 f8 85 ed 0f 8e 49 [ 418.402314][T15417] RSP: 0018:ffffc90002e9f078 EFLAGS: 00010287 [ 418.408467][T15417] RAX: ffffffff898c2d26 RBX: 00000000fffbffea RCX: 0000000000040000 [ 418.416532][T15417] RDX: ffffc9000b8c2000 RSI: 0000000000000a70 RDI: 0000000000000a71 [ 418.424578][T15417] RBP: dffffc0000000000 R08: ffffffff898c2d16 R09: 1ffff11006193b34 [ 418.432597][T15417] R10: dffffc0000000000 R11: ffffed1006193b35 R12: dffffc0000000000 [ 418.440652][T15417] R13: ffff888030c9d8c0 R14: 00000000ffffffea R15: 0000000000000000 [ 418.448724][T15417] FS: 00007f88272246c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 418.457745][T15417] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 418.464396][T15417] CR2: 00007f8827223f98 CR3: 000000005c31a000 CR4: 00000000003526f0 [ 418.472408][T15417] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 418.480467][T15417] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 418.488519][T15417] Call Trace: [ 418.491821][T15417] [ 418.494808][T15417] ? __warn+0x168/0x4e0 [ 418.498991][T15417] ? sk_skb_reason_drop+0x87/0x380 [ 418.504175][T15417] ? report_bug+0x2b3/0x500 [ 418.508718][T15417] ? sk_skb_reason_drop+0x87/0x380 [ 418.513903][T15417] ? handle_bug+0x60/0x90 [ 418.518268][T15417] ? exc_invalid_op+0x1a/0x50 [ 418.522980][T15417] ? asm_exc_invalid_op+0x1a/0x20 [ 418.528089][T15417] ? sk_skb_reason_drop+0x76/0x380 [ 418.533341][T15417] ? sk_skb_reason_drop+0x86/0x380 [ 418.538557][T15417] ? sk_skb_reason_drop+0x87/0x380 [ 418.543740][T15417] ? sk_skb_reason_drop+0x86/0x380 [ 418.548973][T15417] ? ip_rcv_finish_core+0x129f/0x1b50 [ 418.554445][T15417] ip_rcv_finish_core+0xfde/0x1b50 [ 418.559697][T15417] ip_sublist_rcv+0x3b1/0xab0 [ 418.564456][T15417] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 418.569690][T15417] ? skb_orphan+0xae/0xd0 [ 418.574093][T15417] ? __pfx_ip_rcv_finish+0x10/0x10 [ 418.579238][T15417] ip_list_rcv+0x42b/0x480 [ 418.583724][T15417] ? __pfx_ip_list_rcv+0x10/0x10 [ 418.588705][T15417] ? __pfx_ip_list_rcv+0x10/0x10 [ 418.593715][T15417] __netif_receive_skb_list_core+0x94e/0x980 [ 418.599749][T15417] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 418.606409][T15417] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 418.612944][T15417] ? read_tsc+0x9/0x20 [ 418.617100][T15417] ? timekeeping_get_ns+0x2c0/0x420 [ 418.622344][T15417] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 418.628769][T15417] netif_receive_skb_list_internal+0xa51/0xe30 [ 418.635011][T15417] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 418.641378][T15417] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 418.648144][T15417] ? __pfx_eth_type_trans+0x10/0x10 [ 418.653384][T15417] ? __phys_addr+0xba/0x170 [ 418.657955][T15417] ? build_skb_around+0x111/0x260 [ 418.663042][T15417] ? __xdp_build_skb_from_frame+0x313/0x650 [ 418.669014][T15417] netif_receive_skb_list+0x55/0x4b0 [ 418.674366][T15417] bpf_test_run_xdp_live+0x1b5e/0x21b0 [ 418.679879][T15417] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 418.685877][T15417] ? bpf_test_run_xdp_live+0x5d6/0x21b0 [ 418.691471][T15417] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 418.697784][T15417] ? synchronize_rcu+0x11b/0x360 [ 418.702751][T15417] ? __pfx_synchronize_rcu+0x10/0x10 [ 418.708130][T15417] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 418.714467][T15417] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 418.720420][T15417] ? _copy_from_user+0x99/0xc0 [ 418.725264][T15417] ? bpf_test_init+0x15a/0x180 [ 418.730067][T15417] ? xdp_convert_md_to_buff+0x5b/0x330 [ 418.735606][T15417] bpf_prog_test_run_xdp+0x805/0x11e0 [ 418.741024][T15417] ? __pfx_lock_release+0x10/0x10 [ 418.746136][T15417] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 418.752085][T15417] ? __fget_files+0x29/0x470 [ 418.756764][T15417] ? fput+0x1a8/0x230 [ 418.761304][T15417] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 418.767203][T15417] bpf_prog_test_run+0x2e4/0x360 [ 418.772180][T15417] __sys_bpf+0x48d/0x810 [ 418.776494][T15417] ? __pfx___sys_bpf+0x10/0x10 [ 418.781341][T15417] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 418.787402][T15417] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.793797][T15417] ? do_syscall_64+0x100/0x230 [ 418.798594][T15417] __x64_sys_bpf+0x7c/0x90 [ 418.803044][T15417] do_syscall_64+0xf3/0x230 [ 418.807619][T15417] ? clear_bhb_loop+0x35/0x90 [ 418.812329][T15417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.818310][T15417] RIP: 0033:0x7f882637e719 [ 418.823047][T15417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.842738][T15417] RSP: 002b:00007f8827224038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 418.851229][T15417] RAX: ffffffffffffffda RBX: 00007f8826536058 RCX: 00007f882637e719 [ 418.859259][T15417] RDX: 0000000000000069 RSI: 0000000020000600 RDI: 000000000000000a [ 418.867295][T15417] RBP: 00007f88263f175e R08: 0000000000000000 R09: 0000000000000000 [ 418.875340][T15417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.883348][T15417] R13: 0000000000000000 R14: 00007f8826536058 R15: 00007ffffaa06038 [ 418.891420][T15417] [ 418.894510][T15417] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 418.901808][T15417] CPU: 1 UID: 0 PID: 15417 Comm: syz.1.3101 Not tainted 6.12.0-rc6-syzkaller-01562-g3d12862b216d #0 [ 418.912594][T15417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 418.922686][T15417] Call Trace: [ 418.925989][T15417] [ 418.928935][T15417] dump_stack_lvl+0x241/0x360 [ 418.933643][T15417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.938869][T15417] ? __pfx__printk+0x10/0x10 [ 418.943483][T15417] ? _printk+0xd5/0x120 [ 418.947666][T15417] ? __init_begin+0x41000/0x41000 [ 418.952717][T15417] ? vscnprintf+0x5d/0x90 [ 418.957077][T15417] panic+0x349/0x880 [ 418.960997][T15417] ? __warn+0x177/0x4e0 [ 418.965179][T15417] ? __pfx_panic+0x10/0x10 [ 418.969626][T15417] ? show_trace_log_lvl+0x3b2/0x410 [ 418.974874][T15417] __warn+0x34b/0x4e0 [ 418.978884][T15417] ? sk_skb_reason_drop+0x87/0x380 [ 418.984029][T15417] report_bug+0x2b3/0x500 [ 418.988386][T15417] ? sk_skb_reason_drop+0x87/0x380 [ 418.993527][T15417] handle_bug+0x60/0x90 [ 418.997706][T15417] exc_invalid_op+0x1a/0x50 [ 419.002233][T15417] asm_exc_invalid_op+0x1a/0x20 [ 419.007105][T15417] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 419.012987][T15417] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 8a b1 08 f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 3a ad 08 f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 68 b1 08 f8 85 ed 0f 8e 49 [ 419.032619][T15417] RSP: 0018:ffffc90002e9f078 EFLAGS: 00010287 [ 419.038702][T15417] RAX: ffffffff898c2d26 RBX: 00000000fffbffea RCX: 0000000000040000 [ 419.046678][T15417] RDX: ffffc9000b8c2000 RSI: 0000000000000a70 RDI: 0000000000000a71 [ 419.054660][T15417] RBP: dffffc0000000000 R08: ffffffff898c2d16 R09: 1ffff11006193b34 [ 419.062635][T15417] R10: dffffc0000000000 R11: ffffed1006193b35 R12: dffffc0000000000 [ 419.070602][T15417] R13: ffff888030c9d8c0 R14: 00000000ffffffea R15: 0000000000000000 [ 419.078579][T15417] ? sk_skb_reason_drop+0x76/0x380 [ 419.083703][T15417] ? sk_skb_reason_drop+0x86/0x380 [ 419.088822][T15417] ? sk_skb_reason_drop+0x86/0x380 [ 419.093932][T15417] ? ip_rcv_finish_core+0x129f/0x1b50 [ 419.099303][T15417] ip_rcv_finish_core+0xfde/0x1b50 [ 419.104417][T15417] ip_sublist_rcv+0x3b1/0xab0 [ 419.109102][T15417] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 419.114320][T15417] ? skb_orphan+0xae/0xd0 [ 419.118666][T15417] ? __pfx_ip_rcv_finish+0x10/0x10 [ 419.123794][T15417] ip_list_rcv+0x42b/0x480 [ 419.128223][T15417] ? __pfx_ip_list_rcv+0x10/0x10 [ 419.133248][T15417] ? __pfx_ip_list_rcv+0x10/0x10 [ 419.138208][T15417] __netif_receive_skb_list_core+0x94e/0x980 [ 419.144193][T15417] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 419.150800][T15417] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 419.157314][T15417] ? read_tsc+0x9/0x20 [ 419.161379][T15417] ? timekeeping_get_ns+0x2c0/0x420 [ 419.166592][T15417] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 419.172924][T15417] netif_receive_skb_list_internal+0xa51/0xe30 [ 419.179087][T15417] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 419.185418][T15417] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 419.192094][T15417] ? __pfx_eth_type_trans+0x10/0x10 [ 419.197292][T15417] ? __phys_addr+0xba/0x170 [ 419.201790][T15417] ? build_skb_around+0x111/0x260 [ 419.206839][T15417] ? __xdp_build_skb_from_frame+0x313/0x650 [ 419.212753][T15417] netif_receive_skb_list+0x55/0x4b0 [ 419.218067][T15417] bpf_test_run_xdp_live+0x1b5e/0x21b0 [ 419.223549][T15417] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 419.229496][T15417] ? bpf_test_run_xdp_live+0x5d6/0x21b0 [ 419.235068][T15417] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 419.240901][T15417] ? synchronize_rcu+0x11b/0x360 [ 419.245865][T15417] ? __pfx_synchronize_rcu+0x10/0x10 [ 419.251209][T15417] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 419.257481][T15417] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 419.263428][T15417] ? _copy_from_user+0x99/0xc0 [ 419.268197][T15417] ? bpf_test_init+0x15a/0x180 [ 419.272975][T15417] ? xdp_convert_md_to_buff+0x5b/0x330 [ 419.278441][T15417] bpf_prog_test_run_xdp+0x805/0x11e0 [ 419.283998][T15417] ? __pfx_lock_release+0x10/0x10 [ 419.289049][T15417] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 419.295246][T15417] ? __fget_files+0x29/0x470 [ 419.300235][T15417] ? fput+0x1a8/0x230 [ 419.304231][T15417] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 419.310050][T15417] bpf_prog_test_run+0x2e4/0x360 [ 419.314994][T15417] __sys_bpf+0x48d/0x810 [ 419.319239][T15417] ? __pfx___sys_bpf+0x10/0x10 [ 419.324042][T15417] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 419.330051][T15417] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 419.336396][T15417] ? do_syscall_64+0x100/0x230 [ 419.341163][T15417] __x64_sys_bpf+0x7c/0x90 [ 419.345606][T15417] do_syscall_64+0xf3/0x230 [ 419.350126][T15417] ? clear_bhb_loop+0x35/0x90 [ 419.354913][T15417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.360898][T15417] RIP: 0033:0x7f882637e719 [ 419.365403][T15417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.385027][T15417] RSP: 002b:00007f8827224038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 419.393446][T15417] RAX: ffffffffffffffda RBX: 00007f8826536058 RCX: 00007f882637e719 [ 419.401415][T15417] RDX: 0000000000000069 RSI: 0000000020000600 RDI: 000000000000000a [ 419.409379][T15417] RBP: 00007f88263f175e R08: 0000000000000000 R09: 0000000000000000 [ 419.417347][T15417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.425315][T15417] R13: 0000000000000000 R14: 00007f8826536058 R15: 00007ffffaa06038 [ 419.433315][T15417] [ 419.437650][T15417] Kernel Offset: disabled [ 419.441966][T15417] Rebooting in 86400 seconds..