last executing test programs: 1m38.110974735s ago: executing program 1 (id=668): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xff86, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x44, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x804, 0x10050}, [@IFLA_MAP={0x24, 0xe, {0xfb, 0x4, 0x3, 0xa2, 0x3, 0x4}}]}, 0x44}}, 0x40040) 1m26.529713874s ago: executing program 1 (id=668): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xff86, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x44, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x804, 0x10050}, [@IFLA_MAP={0x24, 0xe, {0xfb, 0x4, 0x3, 0xa2, 0x3, 0x4}}]}, 0x44}}, 0x40040) 1m16.746972534s ago: executing program 1 (id=668): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xff86, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x44, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x804, 0x10050}, [@IFLA_MAP={0x24, 0xe, {0xfb, 0x4, 0x3, 0xa2, 0x3, 0x4}}]}, 0x44}}, 0x40040) 1m6.67852989s ago: executing program 1 (id=668): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xff86, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x44, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x804, 0x10050}, [@IFLA_MAP={0x24, 0xe, {0xfb, 0x4, 0x3, 0xa2, 0x3, 0x4}}]}, 0x44}}, 0x40040) 56.735463142s ago: executing program 1 (id=668): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xff86, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x44, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x804, 0x10050}, [@IFLA_MAP={0x24, 0xe, {0xfb, 0x4, 0x3, 0xa2, 0x3, 0x4}}]}, 0x44}}, 0x40040) 6.852177393s ago: executing program 1 (id=668): socket$key(0xf, 0x3, 0x2) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xff86, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x44, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x804, 0x10050}, [@IFLA_MAP={0x24, 0xe, {0xfb, 0x4, 0x3, 0xa2, 0x3, 0x4}}]}, 0x44}}, 0x40040) 2.631398919s ago: executing program 3 (id=2082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val, @void, @eth={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv4={0x88f7, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0xa00000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x101) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8982, &(0x7f0000001180)={0x6, '\x00', {0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000000)={0x0, 'bridge_slave_1\x00'}) close(r7) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r9, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x28, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0x14, 0x5, 0x3, 0x0, 0x0, [0xf]}]}}}}}}}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r2, 0x2f, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.116139724s ago: executing program 0 (id=2088): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x18}]}, 0x18}], 0x270}, 0x20000000) 2.075829339s ago: executing program 0 (id=2090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0x4}, @NHA_FDB={0x4}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_NH4={0x8, 0x4, @remote}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1.826848444s ago: executing program 2 (id=2092): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f00000000c0)=@raw=[@cb_func], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) unshare(0x22020400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000003940), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f0000003980)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="11000000000000000000340000000e000100"], 0x58}}, 0x0) pipe(0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa}]}, 0x2c}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x50, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x4}}, 0x278, 0xea, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x3]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x30, r5, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x55}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40804) socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1.587648456s ago: executing program 3 (id=2093): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="99e4061abcab1800000000000000009a006d9ea837e9a00acc377d9728c0e47b1345a0db59bccfb8e1841c3c196b4c3ffd3ab4e2ffefff025444d54e5050930000000000000065f2b2d509bc2e6d3f5cc95512d957651713f59649bf1a1667"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r1 = socket$kcm(0x21, 0x2, 0x2) (rerun: 32) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x3, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'veth1_vlan\x00', 0x200}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.492148984s ago: executing program 2 (id=2094): syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}, "341517c1b7df60c7"}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0x19}, @exit], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.425684669s ago: executing program 2 (id=2096): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) (async) socket$tipc(0x1e, 0x5, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$kcm(0x11, 0xa, 0x300) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.240056525s ago: executing program 2 (id=2098): r0 = epoll_create1(0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) (async) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000000c0)=0x46, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000480)="ff57", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x8, @mcast1, 0x40}, 0x1c) r3 = socket$xdp(0x2c, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000d40)={0x10000000}) 1.146797482s ago: executing program 4 (id=2099): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x80000001, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xc, 0x10, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 1.084055457s ago: executing program 0 (id=2100): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001000000000000000000fc010000000000000000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ac14140000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025bd7000000000000000000000000000000000000300000006"], 0x34c}}, 0x44) 1.083556457s ago: executing program 2 (id=2101): r0 = socket(0x10, 0x3, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x60480) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000340)={0x0, 0x2, 0xcaf, 0x1}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x3, 0x80004, 0x8, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x78, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x7, 0x1a, '$.\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x10}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}]}, @IPSET_ATTR_ADT={0x4}]}, 0x78}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000047c0000040000000c0001800600060080"], 0x528}}, 0xc000) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a0001e2e29b24245e2d002b04ff0000000000007e71000000000000000000"], 0x1c}}, 0x141) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) (async) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [], 0x1, &(0x7f0000000000), 0x0, [{}]}, 0x88) (async) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async) listen(r4, 0x0) (async) syz_emit_ethernet(0x8e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "102500", 0x58, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0x2, 0x0, 0x0, 0x0, {[@mss={0x1e, 0x4, 0x88}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @timestamp={0x8, 0xa}, @fastopen={0x22, 0xe, "9800af4900035ad16d8a7a63"}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0x5, "111fad"}, @timestamp={0x8, 0xa, 0x10, 0x10001}]}}}}}}}}, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r6, 0x8983, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000300), 0x4) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000000040)={0x1, 'veth1\x00', {}, 0xfe01}) (async) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) 974.467112ms ago: executing program 4 (id=2102): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) r1 = socket(0x840000000002, 0x3, 0x7) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2c8, 0x3, 0x240, 0x140, 0x229, 0x240, 0x140, 0x4c000000, 0x238, 0x328, 0x328, 0x238, 0x328, 0x3, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bridge0\x00'}, 0x0, 0x70, 0xd8, 0x0, {0x0, 0x700}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x400, 0x71a5, 0x40, 'syz1\x00', 'syz1\x00', {0x401}}}}, {{@ip={@loopback, @empty, 0xff000000, 0xff, 'dvmrp1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x6c, 0x1, 0x21}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x40, 0x40, 0x1, 0xfffffffe, {{0x37, 0x4, 0x1, 0x4, 0xdc, 0x68, 0x0, 0xa7, 0x29, 0x0, @local, @multicast2, {[@timestamp_prespec={0x44, 0x3c, 0xce, 0x3, 0x8, [{@multicast2, 0xfffffffc}, {@remote, 0x2}, {@local, 0x86a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x74391e96}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x4b78}, {@broadcast, 0x1}, {@multicast2, 0x1}]}, @lsrr={0x83, 0x23, 0xd8, [@private=0xa010102, @local, @empty, @rand_addr=0x64010102, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @multicast2]}, @rr={0x7, 0xb, 0xab, [@rand_addr=0x64010100, @rand_addr=0x64010100]}, @lsrr={0x83, 0xb, 0xea, [@local, @private=0xa010100]}, @timestamp_prespec={0x44, 0x34, 0xdf, 0x3, 0x1, [{@local, 0x6}, {@remote, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x9}, {@multicast2, 0x4}, {@empty, 0x6}, {@remote, 0xe}]}, @generic={0x82, 0xb, "7b0d8036ff0c0021d1"}, @generic={0x86, 0x12, "2cb4d911ae26f296b41b29773e6614ae"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000240)={'tunl0\x00', 0x0, 0x20, 0x80, 0x9, 0x0, {{0x29, 0x4, 0x3, 0x0, 0xa4, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast2, @loopback, {[@cipso={0x86, 0x5d, 0x0, [{0x5, 0x6, "2e0da845"}, {0x5, 0xb, "1cdeb5ec0a9865796c"}, {0x2, 0x3, '{'}, {0x7, 0xc, "d1a53b89b0dc3757a3c0"}, {0x0, 0xe, "4ef83b5a19a9e0ff9d68a3b6"}, {0x7, 0x6, "75c355cd"}, {0x5, 0x2}, {0x2, 0xb, "e553f318c5b8e40a0e"}, {0x6, 0xc, "0162f1b511e24006838c"}, {0x2, 0xa, "440af81026775aa0"}]}, @end, @noop, @timestamp={0x44, 0x10, 0xb6, 0x0, 0xa, [0x8, 0x5, 0x7]}, @rr={0x7, 0x1f, 0x71, [@multicast2, @empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback]}, @generic={0x88, 0x2}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x10, 0x7800, 0x4, 0xb, {{0xb, 0x4, 0x0, 0x4, 0x2c, 0x66, 0x0, 0x5, 0x4, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @generic={0x94, 0xb, "93571f732f50801d9a"}, @rr={0x7, 0x7, 0x46, [@remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x5, 0x2, 0x25, @rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x7, 0xd, 0xed0}}) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f0000000100)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18eb7608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74250c14c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107008b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000ccb8771f9617aca0cc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca6cef28d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848b0ebb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a54728921621dd17d6b5a98bf7fb50a5ed93d26ad1e8e5cf8b861ffb2937ca88f129ad24e9a6ef29507e534a9cb594c9274084dcc5b3fcbc267504dcf1b7878d7dc2fe1d23903b622ed2359480c29dd3301e0e00"/2470], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r10}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r11, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000040)=@xdp={0x2c, 0x0, r12}, 0x80, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x7800, 0x80, 0x2, 0x9, {{0xa, 0x4, 0x1, 0x9, 0x28, 0x66, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, {[@timestamp={0x44, 0x10, 0xf9, 0x0, 0x9, [0xe4, 0x400, 0xa92937e1]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000005c0)={0x120, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x800}, 0x81) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 950.882972ms ago: executing program 2 (id=2103): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000d275101398c836f800"/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r3, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000004c0)={@dev={0xfe, 0x80, '\x00', 0x42}}, 0xfffffffffffffff4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x15, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x18, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20040010}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="10002abd7000ffdbdfb8576488be250700000008000200010000000800040009000000", @ANYRES32=r1, @ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x20000060) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1b, 0x8, &(0x7f0000005c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000000)={0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff94, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r7, r7, 0x8, 0x0, 0x0, 0xb, 0x81, 0x46d, 0xfff9, 0x3, 0x0, 0x8, 'syz0\x00'}) shutdown(r7, 0x1) syz_emit_ethernet(0xdc, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c33a10", 0xa6, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x3}, @empty, [{0x19, 0xf, "98084cd9b3be1047fe7b68cad2d482437115114dbd7e297a46f6e052045f1df701889352d09bf43982ab97e02476ba6978122f318c83c3abe106f8edf3e10d05a46f3efd2d76982e6565c5cf2633ac3164097562337641731d494711e560372c55ae8b2f150aa45d4c7eb40d65c953177d8abfe32cd96ae280b8a9b3"}]}}}}}}, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x4, &(0x7f00000000c0)=0x4) r9 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r9, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r9, 0x541b, &(0x7f0000000080)) 879.960681ms ago: executing program 3 (id=2104): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x41}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000002a000b0000000000000000000800000008000300040001001800018014000000f400000000000000000000010000000000"], 0x34}}, 0x8000) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0xfc0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a000000400000000000001200ffffe0000012fe8000000000000000000000000000aa84"], 0x0) socket$nl_route(0x10, 0x3, 0x0) 847.095263ms ago: executing program 0 (id=2105): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r1, 0x29, 0x5c, 0x0, 0x6, 0x8, @mcast2, @loopback, 0x40, 0x40, 0x3, 0x7}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xa9}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 827.668946ms ago: executing program 4 (id=2106): r0 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xb, &(0x7f0000001200)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYBLOB="05d7b18db14bb33b31c51cdc9b123a1c966a701fc3c285aa4aa5aa6d8bee7b6c5ce5be84964755e5651a52866325c36c0699cbae0d1332825883dd114ecf507742bd39b871ca13b7181da1b7f521ff6cf152e10f1290bf716adc3b18f06f1cb902528dbdfcaefda19a0bcdbf470f4f4f82cf30e4f11873cd72d56cf3cd"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c000000680001000000000000000000020000000400000006000700040000000c000880050005000000000008000600f200000008000500", @ANYRES32=r3], 0x3c}}, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f00000010c0)={0x1d, r3, 0x2, {0x0, 0x0, 0x4}, 0x2}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in], 0x10) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001300)="ef", 0x1}], 0x1027}}], 0x2, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000180)={0x101, 0x4, 0x1f4bf1ba, 0x0, r7}, 0x10) r8 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x260, 0x168, 0x9, 0x0, 0xb, 0x348, 0x250, 0x250, 0x348, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'nicvf0\x00'}, 0x6000000, 0x228, 0x260, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x8, 0x10, 0x0, 0x0, 0x10000000, 0x6, 0x1000, 0x0, 0x87}, {0x80000000}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x5, 0x6}, {0x3, 0x2, 0x2}, {0x3, 0x6, 0x2}, 0x6, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="8401000010001307000000000000000000000000000000000000000000000001ac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000033000000fc02000000000000f6ff0000000000010000000000000000000000000000000001000000000000000000f5ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000ab0397c3139e957ff00000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c0014007368613100"/304], 0x184}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x2b, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x100, 0x70bd27, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xfff2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000012c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0x0, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xf}, {0xc, 0xc}}}, 0x24}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f00000000c0)="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", 0x1000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000001100)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x9, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x20000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 444.08686ms ago: executing program 0 (id=2107): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2ccf3766, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r4, 0xffffffffffffffff}}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000001100000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 421.001539ms ago: executing program 4 (id=2108): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/68, 0x44}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="85000000a0000000c3ff00000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) 382.958913ms ago: executing program 3 (id=2109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000f00000005002e000000000005002d000000000008002c0000000000080003"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9c000000000201040000000000000000020000002400028014000180080001000000000008000200ac1414bb0c00028005000100000000002400038014000180080001000000000008000200ac1414000c000280050001000000000024000180140001"], 0x9c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0xac, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_ADT={0x78, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xffffffffffffffb8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000040}, 0x4040081) 232.126432ms ago: executing program 3 (id=2110): syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0x3, 0x1c5f20034c00f9c5, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast}}}}}}, 0x0) 231.690268ms ago: executing program 0 (id=2111): r0 = socket$inet(0x2, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000000000000000000000000080ff0000fe8000000000000000000000000000aa", @ANYBLOB], 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xd66}}) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x1000040, 0x4) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$kcm(0x29, 0xd, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000280)={r3}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast2={0xff, 0x5}}}) syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x0) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x80}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x4) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000180)={'TPROXY\x00'}, &(0x7f0000000240)=0x1e) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@flushpolicy={0x10, 0x1d, 0x1, 0x70bd2b, 0x25dfdbff}, 0x10}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001240)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x1, 0x0, 0x2, '\x00', {0x5, 0x6, "6f21ef", 0x37ba, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00', [], "97c7e71a450b13fc"}}}}}}}, 0x0) 184.651701ms ago: executing program 4 (id=2112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xf8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @typedef={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000350000009c00000000000000250000000000000095fbff0d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xf8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @typedef={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000350000009c00000000000000250000000000000095fbff0d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) (async) 70.545213ms ago: executing program 3 (id=2113): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x17}, @multicast1}}}], 0x20}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa}}) 0s ago: executing program 4 (id=2114): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000005180)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000100)=""/121, 0x79}], 0x6}}], 0x1, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x300f000, 0xf, 0x0, &(0x7f0000000400)="1069c2704a075e307300ac14dd46df", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xff8, 0xaf, &(0x7f0000000440)="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", &(0x7f00000000c0)=""/175, 0x1, 0x0, 0x39, 0x12, &(0x7f0000000180)="b41aadce71df88fce3950611d49e7faf90e9a732be17fb462f402a81952d8212370e8f8dc3703844e7c3ad840d2857f9de32ba4e9a4e90b757", &(0x7f00000001c0)="f43753f6c064204b8bd3e60f436912b859e7", 0x1, 0x0, 0x9}, 0x50) kernel console output (not intermixed with test programs): netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.597037][ T9585] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.614212][ T9585] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.733169][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 179.803136][ T6297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.810971][ T6297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.851802][ T9859] FAULT_INJECTION: forcing a failure. [ 179.851802][ T9859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.854145][ T9861] IPVS: Unknown mcast interface: vcan0 [ 179.876607][ T6305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.892703][ T6305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.901420][ T9859] CPU: 1 UID: 0 PID: 9859 Comm: syz.4.1132 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 179.912473][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.922552][ T9859] Call Trace: [ 179.925850][ T9859] [ 179.928809][ T9859] dump_stack_lvl+0x241/0x360 [ 179.933541][ T9859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.938769][ T9859] ? __pfx__printk+0x10/0x10 [ 179.943385][ T9859] ? __pfx_lock_release+0x10/0x10 [ 179.948439][ T9859] should_fail_ex+0x3b0/0x4e0 [ 179.953144][ T9859] _copy_from_user+0x2f/0xc0 [ 179.957763][ T9859] copy_msghdr_from_user+0xae/0x680 [ 179.962998][ T9859] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 179.968827][ T9859] ? __fget_files+0x2a/0x410 [ 179.973511][ T9859] ? __fget_files+0x2a/0x410 [ 179.978101][ T9859] __sys_sendmsg+0x209/0x350 [ 179.982685][ T9859] ? __pfx_lock_release+0x10/0x10 [ 179.987708][ T9859] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.992825][ T9859] ? __pfx_vfs_write+0x10/0x10 [ 179.997619][ T9859] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 180.003960][ T9859] ? do_syscall_64+0x100/0x230 [ 180.008727][ T9859] ? do_syscall_64+0xb6/0x230 [ 180.013405][ T9859] do_syscall_64+0xf3/0x230 [ 180.017907][ T9859] ? clear_bhb_loop+0x35/0x90 [ 180.022576][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.028474][ T9859] RIP: 0033:0x7f3a1897fed9 [ 180.032895][ T9859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.052494][ T9859] RSP: 002b:00007f3a1970f058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.060915][ T9859] RAX: ffffffffffffffda RBX: 00007f3a18b45fa0 RCX: 00007f3a1897fed9 [ 180.068887][ T9859] RDX: 0000000000044004 RSI: 0000000020000080 RDI: 0000000000000003 [ 180.076857][ T9859] RBP: 00007f3a1970f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 180.084827][ T9859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.092799][ T9859] R13: 0000000000000000 R14: 00007f3a18b45fa0 R15: 00007fffeddf2218 [ 180.100778][ T9859] [ 180.209636][ T9869] netlink: 'syz.2.1136': attribute type 29 has an invalid length. [ 180.234652][ T9869] netlink: 'syz.2.1136': attribute type 29 has an invalid length. [ 180.243496][ T9869] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1136'. [ 180.658584][ T9900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1144'. [ 180.772896][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 180.815142][ T9908] FAULT_INJECTION: forcing a failure. [ 180.815142][ T9908] name failslab, interval 1, probability 0, space 0, times 1 [ 180.843190][ T9908] CPU: 0 UID: 0 PID: 9908 Comm: syz.0.1148 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 180.853904][ T9908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 180.863977][ T9908] Call Trace: [ 180.867273][ T9908] [ 180.870228][ T9908] dump_stack_lvl+0x241/0x360 [ 180.874935][ T9908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.880146][ T9908] ? __pfx__printk+0x10/0x10 [ 180.884740][ T9908] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 180.890731][ T9908] ? __pfx___might_resched+0x10/0x10 [ 180.896021][ T9908] should_fail_ex+0x3b0/0x4e0 [ 180.900699][ T9908] should_failslab+0xac/0x100 [ 180.905377][ T9908] kmem_cache_alloc_node_noprof+0x77/0x380 [ 180.911179][ T9908] ? __alloc_skb+0x1c3/0x440 [ 180.915767][ T9908] __alloc_skb+0x1c3/0x440 [ 180.920183][ T9908] ? __pfx___alloc_skb+0x10/0x10 [ 180.925118][ T9908] ? netlink_autobind+0xd6/0x2f0 [ 180.930065][ T9908] ? netlink_autobind+0x2b0/0x2f0 [ 180.935100][ T9908] netlink_sendmsg+0x638/0xcb0 [ 180.939869][ T9908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.945150][ T9908] ? aa_sock_msg_perm+0x91/0x160 [ 180.950085][ T9908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.955364][ T9908] __sock_sendmsg+0x221/0x270 [ 180.960056][ T9908] ____sys_sendmsg+0x52a/0x7e0 [ 180.964829][ T9908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.970107][ T9908] ? __fget_files+0x2a/0x410 [ 180.974704][ T9908] ? __fget_files+0x2a/0x410 [ 180.979293][ T9908] __sys_sendmsg+0x269/0x350 [ 180.983878][ T9908] ? __pfx_lock_release+0x10/0x10 [ 180.988901][ T9908] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.994019][ T9908] ? __pfx_vfs_write+0x10/0x10 [ 180.998799][ T9908] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 181.005121][ T9908] ? do_syscall_64+0x100/0x230 [ 181.009888][ T9908] ? do_syscall_64+0xb6/0x230 [ 181.014564][ T9908] do_syscall_64+0xf3/0x230 [ 181.019065][ T9908] ? clear_bhb_loop+0x35/0x90 [ 181.023739][ T9908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.029633][ T9908] RIP: 0033:0x7f258d17fed9 [ 181.034041][ T9908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.053642][ T9908] RSP: 002b:00007f258e03b058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.062053][ T9908] RAX: ffffffffffffffda RBX: 00007f258d345fa0 RCX: 00007f258d17fed9 [ 181.070023][ T9908] RDX: 0000000000044004 RSI: 0000000020000080 RDI: 0000000000000003 [ 181.077988][ T9908] RBP: 00007f258e03b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 181.085953][ T9908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.093920][ T9908] R13: 0000000000000000 R14: 00007f258d345fa0 R15: 00007ffebdec9548 [ 181.101906][ T9908] [ 181.171641][ T9918] netlink: 'syz.0.1150': attribute type 29 has an invalid length. [ 181.185983][ T9918] netlink: 'syz.0.1150': attribute type 29 has an invalid length. [ 181.198924][ T9918] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1150'. [ 181.266941][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 181.388861][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1152'. [ 181.424149][ T6305] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.501933][ T9931] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 181.518273][ T9931] macvlan2: entered allmulticast mode [ 181.528661][ T9931] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 181.545450][ T9931] mac80211_hwsim hwsim5 wlan0: left allmulticast mode [ 181.552523][ T9931] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 181.812939][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 181.845513][ T6305] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.921156][ T6305] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.004936][ T6305] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.087710][ T6305] bridge_slave_1: left allmulticast mode [ 182.094214][ T6305] bridge_slave_1: left promiscuous mode [ 182.099846][ T6305] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.109132][ T6305] bridge_slave_0: left allmulticast mode [ 182.115194][ T6305] bridge_slave_0: left promiscuous mode [ 182.121499][ T6305] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.283630][ T9934] netlink: 'syz.2.1155': attribute type 10 has an invalid length. [ 182.291496][ T9934] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1155'. [ 182.431926][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.441077][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.452345][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.460447][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.469861][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 182.487452][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 182.677751][ T6305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.690143][ T6305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.700088][ T6305] bond0 (unregistering): Released all slaves [ 182.799558][ T9945] lo speed is unknown, defaulting to 1000 [ 182.853119][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 182.949881][ T9949] macsec1: entered promiscuous mode [ 182.965081][ T9949] gretap0: entered promiscuous mode [ 182.976911][ T9949] macsec1: entered allmulticast mode [ 183.006382][ T9949] gretap0: left promiscuous mode [ 183.292032][ T9962] netlink: 'syz.3.1162': attribute type 29 has an invalid length. [ 183.320912][ T9962] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1162'. [ 183.343706][ T9970] netlink: 'syz.3.1162': attribute type 29 has an invalid length. [ 183.456229][ T9945] chnl_net:caif_netlink_parms(): no params data found [ 183.463033][ T9976] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 183.620130][ T6305] hsr_slave_0: left promiscuous mode [ 183.643492][ T6305] hsr_slave_1: left promiscuous mode [ 183.660714][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.672948][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.689232][ T9983] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1169'. [ 183.699087][ T6305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.712874][ T6305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.766637][ T6305] veth1_macvtap: left promiscuous mode [ 183.780510][ T6305] veth0_macvtap: left promiscuous mode [ 183.788546][ T6305] veth1_vlan: left promiscuous mode [ 183.793979][ T6305] veth0_vlan: left promiscuous mode [ 183.892938][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 184.190008][ T6305] team0 (unregistering): Port device team_slave_1 removed [ 184.226632][ T6305] team0 (unregistering): Port device team_slave_0 removed [ 184.533567][ T5830] Bluetooth: hci4: command tx timeout [ 184.607113][ T9984] team0: No ports can be present during mode change [ 184.801061][ T9945] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.818835][ T9945] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.830328][ T9945] bridge_slave_0: entered allmulticast mode [ 184.847057][ T9945] bridge_slave_0: entered promiscuous mode [ 184.870575][ T9945] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.889268][ T9945] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.900452][ T9945] bridge_slave_1: entered allmulticast mode [ 184.908133][ T9945] bridge_slave_1: entered promiscuous mode [ 184.931965][T10009] FAULT_INJECTION: forcing a failure. [ 184.931965][T10009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.945191][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 184.952521][T10009] CPU: 1 UID: 0 PID: 10009 Comm: syz.0.1174 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 184.963307][T10009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 184.973375][T10009] Call Trace: [ 184.976714][T10009] [ 184.979671][T10009] dump_stack_lvl+0x241/0x360 [ 184.984387][T10009] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.989624][T10009] ? __pfx__printk+0x10/0x10 [ 184.994245][T10009] ? __pfx_lock_release+0x10/0x10 [ 184.999286][T10009] should_fail_ex+0x3b0/0x4e0 [ 185.003979][T10009] _copy_from_iter+0x21f/0x1e70 [ 185.008860][T10009] ? __virt_addr_valid+0x183/0x530 [ 185.013994][T10009] ? __pfx_lock_release+0x10/0x10 [ 185.019030][T10009] ? __alloc_skb+0x28f/0x440 [ 185.023632][T10009] ? __pfx__copy_from_iter+0x10/0x10 [ 185.028921][T10009] ? __virt_addr_valid+0x183/0x530 [ 185.031886][T10002] netlink: 'syz.2.1173': attribute type 1 has an invalid length. [ 185.034033][T10009] ? __virt_addr_valid+0x183/0x530 [ 185.034059][T10009] ? __virt_addr_valid+0x45f/0x530 [ 185.041907][T10002] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1173'. [ 185.046881][T10009] ? __check_object_size+0x48e/0x900 [ 185.046915][T10009] netlink_sendmsg+0x73d/0xcb0 [ 185.071060][T10009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.076353][T10009] ? aa_sock_msg_perm+0x91/0x160 [ 185.081289][T10009] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.086574][T10009] __sock_sendmsg+0x221/0x270 [ 185.091260][T10009] ____sys_sendmsg+0x52a/0x7e0 [ 185.096027][T10009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.101306][T10009] ? __fget_files+0x2a/0x410 [ 185.105898][T10009] ? __fget_files+0x2a/0x410 [ 185.110491][T10009] __sys_sendmsg+0x269/0x350 [ 185.115077][T10009] ? __pfx_lock_release+0x10/0x10 [ 185.120102][T10009] ? __pfx___sys_sendmsg+0x10/0x10 [ 185.125216][T10009] ? __pfx_vfs_write+0x10/0x10 [ 185.129998][T10009] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.136330][T10009] ? do_syscall_64+0x100/0x230 [ 185.141095][T10009] ? do_syscall_64+0xb6/0x230 [ 185.145778][T10009] do_syscall_64+0xf3/0x230 [ 185.150303][T10009] ? clear_bhb_loop+0x35/0x90 [ 185.154982][T10009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.160874][T10009] RIP: 0033:0x7f258d17fed9 [ 185.165286][T10009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.184902][T10009] RSP: 002b:00007f258e03b058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.193331][T10009] RAX: ffffffffffffffda RBX: 00007f258d345fa0 RCX: 00007f258d17fed9 [ 185.201300][T10009] RDX: 0000000000044004 RSI: 0000000020000080 RDI: 0000000000000003 [ 185.209268][T10009] RBP: 00007f258e03b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 185.217234][T10009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.225199][T10009] R13: 0000000000000000 R14: 00007f258d345fa0 R15: 00007ffebdec9548 [ 185.233175][T10009] [ 185.311998][ T9945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.324139][ T9945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.535840][ T9945] team0: Port device team_slave_0 added [ 185.548307][T10025] netlink: 'syz.3.1179': attribute type 29 has an invalid length. [ 185.564231][T10025] netlink: 'syz.3.1179': attribute type 29 has an invalid length. [ 185.573677][T10025] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1179'. [ 185.576235][ T9945] team0: Port device team_slave_1 added [ 185.666471][T10031] netlink: 'syz.2.1180': attribute type 1 has an invalid length. [ 185.675620][T10031] netlink: 'syz.2.1180': attribute type 4 has an invalid length. [ 185.693076][T10031] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.1180'. [ 185.743001][ T9945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.757008][ T9945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.788471][ T9945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.817555][ T9945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.830330][ T9945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.867758][ T9945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.972874][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 185.993731][ T9945] hsr_slave_0: entered promiscuous mode [ 186.010336][ T9945] hsr_slave_1: entered promiscuous mode [ 186.023217][ T9945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.041065][ T9945] Cannot create hsr debugfs directory [ 186.105117][T10053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1185'. [ 186.121430][T10052] FAULT_INJECTION: forcing a failure. [ 186.121430][T10052] name failslab, interval 1, probability 0, space 0, times 0 [ 186.152174][T10052] CPU: 1 UID: 0 PID: 10052 Comm: syz.4.1186 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 186.152523][T10055] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.162950][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.162966][T10052] Call Trace: [ 186.162974][T10052] [ 186.162983][T10052] dump_stack_lvl+0x241/0x360 [ 186.163015][T10052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.163039][T10052] ? __pfx__printk+0x10/0x10 [ 186.188431][T10055] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.192614][T10052] ? __kmalloc_noprof+0xb5/0x4c0 [ 186.192649][T10052] ? __pfx___might_resched+0x10/0x10 [ 186.212082][T10055] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.215982][T10052] ? aa_get_newest_label+0xff/0x6f0 [ 186.216017][T10052] should_fail_ex+0x3b0/0x4e0 [ 186.216043][T10052] should_failslab+0xac/0x100 [ 186.216069][T10052] __kmalloc_noprof+0xdd/0x4c0 [ 186.216092][T10052] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 186.216116][T10052] ? apparmor_capable+0x13b/0x1b0 [ 186.216141][T10052] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 186.216174][T10052] genl_rcv_msg+0x802/0xec0 [ 186.216204][T10052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.225426][T10057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.230131][T10052] ? __pfx_lock_acquire+0x10/0x10 [ 186.230158][T10052] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 186.230178][T10052] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 186.230196][T10052] ? __pfx_nl80211_post_doit+0x10/0x10 [ 186.230214][T10052] ? __pfx___might_resched+0x10/0x10 [ 186.230240][T10052] netlink_rcv_skb+0x1e3/0x430 [ 186.230261][T10052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.230285][T10052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.230330][T10052] genl_rcv+0x28/0x40 [ 186.230352][T10052] netlink_unicast+0x7f6/0x990 [ 186.230385][T10052] ? __pfx_netlink_unicast+0x10/0x10 [ 186.230407][T10052] ? __virt_addr_valid+0x183/0x530 [ 186.230431][T10052] ? __check_object_size+0x48e/0x900 [ 186.236223][T10055] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 186.240271][T10052] netlink_sendmsg+0x8e4/0xcb0 [ 186.240309][T10052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.250640][T10055] geneve3: entered promiscuous mode [ 186.255938][T10052] ? aa_sock_msg_perm+0x91/0x160 [ 186.255969][T10052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.255997][T10052] __sock_sendmsg+0x221/0x270 [ 186.256026][T10052] ____sys_sendmsg+0x52a/0x7e0 [ 186.256056][T10052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.256075][T10052] ? __fget_files+0x2a/0x410 [ 186.256097][T10052] ? __fget_files+0x2a/0x410 [ 186.256124][T10052] __sys_sendmsg+0x269/0x350 [ 186.256145][T10052] ? __pfx_lock_release+0x10/0x10 [ 186.256170][T10052] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.256203][T10052] ? __pfx_vfs_write+0x10/0x10 [ 186.256252][T10052] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.256275][T10052] ? do_syscall_64+0x100/0x230 [ 186.256304][T10052] ? do_syscall_64+0xb6/0x230 [ 186.256332][T10052] do_syscall_64+0xf3/0x230 [ 186.256355][T10052] ? clear_bhb_loop+0x35/0x90 [ 186.269303][T10055] geneve3: entered allmulticast mode [ 186.271898][T10052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.271931][T10052] RIP: 0033:0x7f3a1897fed9 [ 186.469419][T10052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.489025][T10052] RSP: 002b:00007f3a1970f058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.497444][T10052] RAX: ffffffffffffffda RBX: 00007f3a18b45fa0 RCX: 00007f3a1897fed9 [ 186.505410][T10052] RDX: 0000000000044004 RSI: 0000000020000080 RDI: 0000000000000003 [ 186.513375][T10052] RBP: 00007f3a1970f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 186.521338][T10052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.529301][T10052] R13: 0000000000000000 R14: 00007f3a18b45fa0 R15: 00007fffeddf2218 [ 186.537281][T10052] [ 186.542695][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 186.548983][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 186.643051][ T5144] Bluetooth: hci4: command tx timeout [ 186.712588][T10063] sctp: [Deprecated]: syz.4.1191 (pid 10063) Use of int in max_burst socket option. [ 186.712588][T10063] Use struct sctp_assoc_value instead [ 186.772052][T10061] batadv_slave_1: entered promiscuous mode [ 186.779695][T10059] batadv_slave_1: left promiscuous mode [ 186.795546][T10072] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1193'. [ 186.946751][T10078] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1197'. [ 187.012870][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 187.069675][T10085] netlink: 'syz.4.1195': attribute type 3 has an invalid length. [ 187.079101][T10085] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1195'. [ 187.089187][T10081] macvlan0: left allmulticast mode [ 187.210547][T10088] bridge_slave_0: left promiscuous mode [ 187.229762][T10088] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.247837][T10088] bridge_slave_1: left promiscuous mode [ 187.256927][T10088] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.285655][T10088] team0: Port device team_slave_0 removed [ 187.303067][T10088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.321370][T10088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.335558][T10094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1198'. [ 187.346102][T10088] bond0: (slave bond1): Releasing backup interface [ 187.392725][T10098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1201'. [ 187.401813][ T9945] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.425980][ T9945] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.441144][T10098] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1201'. [ 187.453811][ T9945] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 187.479917][T10098] vlan3: entered allmulticast mode [ 187.511929][ T9945] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.560650][T10105] netlink: 'syz.4.1204': attribute type 29 has an invalid length. [ 187.570048][T10105] netlink: 'syz.4.1204': attribute type 29 has an invalid length. [ 187.700236][ T9945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.863845][ T9945] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.895485][ T9945] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.905930][ T9945] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.924109][ T6300] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.931229][ T6300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.953973][ T6300] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.961098][ T6300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.052947][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 188.426777][ T9945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.498559][ T9945] veth0_vlan: entered promiscuous mode [ 188.509198][ T9945] veth1_vlan: entered promiscuous mode [ 188.532191][ T9945] veth0_macvtap: entered promiscuous mode [ 188.543101][ T9945] veth1_macvtap: entered promiscuous mode [ 188.567832][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.578639][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.588796][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.599740][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.616389][ T9945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.626084][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.636604][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.646648][ T9945] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.657307][ T9945] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.668467][ T9945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.690848][T10148] netlink: 'syz.3.1216': attribute type 29 has an invalid length. [ 188.699598][ T5144] Bluetooth: hci4: command tx timeout [ 188.730095][T10154] netlink: 'syz.3.1216': attribute type 29 has an invalid length. [ 188.765100][ T9945] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.803025][ T9945] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.811743][ T9945] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.835293][ T9945] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.015853][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.047792][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.071487][T10171] netlink: 'syz.3.1223': attribute type 10 has an invalid length. [ 189.092904][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 189.119090][ T6302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.146853][ T6302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.246167][T10180] Cannot find set identified by id 0 to match [ 189.255320][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 189.285947][T10175] bridge2: entered allmulticast mode [ 189.402332][T10188] lo speed is unknown, defaulting to 1000 [ 189.415183][T10188] lo speed is unknown, defaulting to 1000 [ 189.443414][T10188] lo speed is unknown, defaulting to 1000 [ 189.468956][T10188] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 189.533269][T10188] lo speed is unknown, defaulting to 1000 [ 189.547598][T10188] lo speed is unknown, defaulting to 1000 [ 189.567961][T10188] lo speed is unknown, defaulting to 1000 [ 189.575249][T10188] lo speed is unknown, defaulting to 1000 [ 189.583483][T10188] lo speed is unknown, defaulting to 1000 [ 189.590714][T10188] lo speed is unknown, defaulting to 1000 [ 189.824543][T10211] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 33095 - 0 [ 189.852627][T10211] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 33095 - 0 [ 189.868888][T10211] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 33095 - 0 [ 189.904943][T10211] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 33095 - 0 [ 189.915248][T10211] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 55378 - 0 [ 189.925671][T10211] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 55378 - 0 [ 189.934634][T10211] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 55378 - 0 [ 189.944097][T10211] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 55378 - 0 [ 189.953062][T10211] geneve3: entered promiscuous mode [ 189.962211][T10211] geneve3: entered allmulticast mode [ 190.133007][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 190.142581][T10236] __nla_validate_parse: 6 callbacks suppressed [ 190.142597][T10236] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1240'. [ 190.172705][T10234] lo speed is unknown, defaulting to 1000 [ 190.181099][T10236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 190.233618][T10241] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1243'. [ 190.388806][T10234] lo speed is unknown, defaulting to 1000 [ 190.846768][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1248'. [ 190.890944][T10264] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 190.910115][T10264] tipc: Enabled bearer , priority 10 [ 190.953685][T10266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1250'. [ 191.023162][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 191.116910][ T6300] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.172942][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 191.293042][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 191.823111][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 192.001574][T10278] nft_compat: unsupported protocol 1 [ 192.023546][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1255'. [ 192.112488][T10287] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1254'. [ 192.212862][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 192.290206][T10294] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1258'. [ 192.422733][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.433506][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 192.441427][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 192.448346][T10305] validate_nla: 4 callbacks suppressed [ 192.448361][T10305] netlink: 'syz.2.1261': attribute type 29 has an invalid length. [ 192.456477][T10305] netlink: 'syz.2.1261': attribute type 29 has an invalid length. [ 192.474269][T10305] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1261'. [ 192.492187][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 192.500580][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 192.518408][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 192.568553][T10302] lo speed is unknown, defaulting to 1000 [ 192.636768][T10309] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1263'. [ 192.676285][T10302] lo speed is unknown, defaulting to 1000 [ 192.692007][T10310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1263'. [ 192.832353][ T6300] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.853406][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 193.001055][ T6300] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.101209][ T6300] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.198907][T10302] chnl_net:caif_netlink_parms(): no params data found [ 193.252854][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 193.394736][T10330] smc: net device bond0 applied user defined pnetid SYZ0 [ 193.418738][T10333] smc: net device bond0 erased user defined pnetid SYZ0 [ 193.476346][T10302] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.483913][T10302] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.492075][T10302] bridge_slave_0: entered allmulticast mode [ 193.500157][T10302] bridge_slave_0: entered promiscuous mode [ 193.508333][T10302] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.515674][T10302] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.523242][T10302] bridge_slave_1: entered allmulticast mode [ 193.530332][T10302] bridge_slave_1: entered promiscuous mode [ 193.551883][ T6300] bridge_slave_1: left allmulticast mode [ 193.563074][ T6300] bridge_slave_1: left promiscuous mode [ 193.569071][ T6300] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.597327][ T6300] bridge_slave_0: left allmulticast mode [ 193.605644][ T6300] bridge_slave_0: left promiscuous mode [ 193.616084][ T6300] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.893005][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 194.030918][ T6300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.042114][ T6300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.052178][ T6300] bond0 (unregistering): Released all slaves [ 194.077979][T10348] netlink: 'syz.2.1273': attribute type 29 has an invalid length. [ 194.118146][T10302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.140856][T10355] netlink: 'syz.2.1273': attribute type 29 has an invalid length. [ 194.161015][T10302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.292921][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 194.338506][T10376] batadv_slave_1: entered promiscuous mode [ 194.344838][T10376] batadv_slave_1: left allmulticast mode [ 194.355604][T10302] team0: Port device team_slave_0 added [ 194.371403][T10302] team0: Port device team_slave_1 added [ 194.379450][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.533382][ T5833] Bluetooth: hci4: command tx timeout [ 194.594250][T10302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.612228][T10302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.662046][T10302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.718108][T10302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.752913][T10302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.838645][T10302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.891048][T10402] netlink: 'syz.2.1289': attribute type 29 has an invalid length. [ 194.935511][T10404] dvmrp5: entered allmulticast mode [ 194.940838][T10402] netlink: 'syz.2.1289': attribute type 29 has an invalid length. [ 194.949016][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 195.023411][T10409] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 195.094480][T10404] dvmrp5: left allmulticast mode [ 195.149583][T10415] netlink: 'syz.2.1292': attribute type 4 has an invalid length. [ 195.205694][T10412] 8021q: adding VLAN 0 to HW filter on device bond5 [ 195.227873][T10412] bond4: (slave bond5): making interface the new active one [ 195.245256][T10412] bond4: (slave bond5): Enslaving as an active interface with an up link [ 195.262618][T10414] __nla_validate_parse: 7 callbacks suppressed [ 195.262634][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1293'. [ 195.290027][ T6300] hsr_slave_0: left promiscuous mode [ 195.346669][T10426] netlink: 'syz.3.1296': attribute type 24 has an invalid length. [ 195.356137][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 195.368627][T10426] netlink: 'syz.3.1296': attribute type 24 has an invalid length. [ 195.378956][ T6300] hsr_slave_1: left promiscuous mode [ 195.403751][ T6300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.405565][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 195.411148][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.429243][ T6300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.465080][ T6300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.546709][ T6300] veth1_macvtap: left promiscuous mode [ 195.552254][ T6300] veth0_macvtap: left promiscuous mode [ 195.601588][ T6300] veth1_vlan: left promiscuous mode [ 195.623200][ T6300] veth0_vlan: left promiscuous mode [ 195.697591][T10433] ebt_among: src integrity fail: 100 [ 196.127020][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1299'. [ 196.373300][ C1] net_ratelimit: 2 callbacks suppressed [ 196.373321][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 196.474652][ T6300] team0 (unregistering): Port device team_slave_1 removed [ 196.511472][ T6300] team0 (unregistering): Port device team_slave_0 removed [ 196.628266][ T5833] Bluetooth: hci4: command tx timeout [ 196.861547][T10302] hsr_slave_0: entered promiscuous mode [ 196.868412][T10302] hsr_slave_1: entered promiscuous mode [ 196.875862][T10302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.883540][T10302] Cannot create hsr debugfs directory [ 196.906943][T10455] syz_tun (unregistering): left promiscuous mode [ 196.948651][T10467] ip6gre0: left allmulticast mode [ 197.012908][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 197.113815][T10480] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1309'. [ 197.491535][T10498] veth4: entered allmulticast mode [ 197.725534][T10302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.740418][T10302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.762252][T10302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.784149][T10302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.930114][T10302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.975577][T10302] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.003407][ T6280] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.010549][ T6280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.039321][ T6280] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.046465][ T6280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.054062][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 198.075589][T10532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.088630][T10532] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1325'. [ 198.139605][T10532] validate_nla: 1 callbacks suppressed [ 198.139622][T10532] netlink: 'syz.0.1325': attribute type 10 has an invalid length. [ 198.181487][T10533] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1326'. [ 198.299099][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1328'. [ 198.318492][T10550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1328'. [ 198.330712][T10550] tc_dump_action: action bad kind [ 198.579431][T10573] netlink: 'syz.4.1331': attribute type 26 has an invalid length. [ 198.699420][ T5833] Bluetooth: hci4: command tx timeout [ 198.782710][T10302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.844396][T10589] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1333'. [ 198.918388][T10302] veth0_vlan: entered promiscuous mode [ 199.081861][T10302] veth1_vlan: entered promiscuous mode [ 199.093179][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 199.195676][T10302] veth0_macvtap: entered promiscuous mode [ 199.221462][T10302] veth1_macvtap: entered promiscuous mode [ 199.317768][T10604] netlink: 'syz.3.1333': attribute type 2 has an invalid length. [ 199.354141][T10302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.373011][T10302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.387049][T10302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.397784][T10302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.411448][T10302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.424573][T10608] netlink: 'syz.0.1335': attribute type 1 has an invalid length. [ 199.485668][T10302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.498219][T10302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.509827][T10302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.520478][T10302] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.529908][T10302] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.539251][T10302] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.548715][T10302] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.664864][ T6280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.692986][ T6280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.716137][ T6302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.724478][ T6302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.764761][T10626] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 200.142960][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 200.455280][T10647] dvmrp0: entered allmulticast mode [ 200.506066][ T9] hid-generic 0005:04F3:0058.0002: item fetching failed at offset 0/1 [ 200.515020][ T9] hid-generic 0005:04F3:0058.0002: probe with driver hid-generic failed with error -22 [ 200.665414][T10661] __nla_validate_parse: 10 callbacks suppressed [ 200.665433][T10661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1351'. [ 200.703874][T10665] vlan5: entered promiscuous mode [ 200.717083][T10665] vlan5: entered allmulticast mode [ 200.829083][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1354'. [ 200.871691][T10674] netlink: 'syz.2.1353': attribute type 10 has an invalid length. [ 200.883156][T10674] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1353'. [ 200.978894][T10646] dvmrp0: left allmulticast mode [ 201.061620][T10687] pim6reg: entered allmulticast mode [ 201.172943][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 201.223738][ T6276] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.280031][T10692] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.1360'. [ 202.158545][T10701] netlink: 'syz.2.1361': attribute type 3 has an invalid length. [ 202.182926][T10701] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1361'. [ 202.214060][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 202.504300][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 202.516770][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 202.530686][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 202.547418][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 202.560595][ T5144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 202.570913][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 202.623767][ T6276] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.637664][T10704] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.645181][T10704] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.655080][T10725] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1367'. [ 202.673174][T10704] bridge0: entered allmulticast mode [ 202.685910][T10709] bridge_slave_1: left allmulticast mode [ 202.713543][T10709] bridge_slave_1: left promiscuous mode [ 202.733202][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.748113][T10709] bridge_slave_0: left promiscuous mode [ 202.754855][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.852979][T10735] IPVS: length: 60 != 8 [ 202.901634][ T6276] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.932057][T10719] lo speed is unknown, defaulting to 1000 [ 203.004835][ T6276] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.052402][T10737] netlink: 'syz.4.1369': attribute type 6 has an invalid length. [ 203.099059][T10737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1369'. [ 203.103862][T10719] lo speed is unknown, defaulting to 1000 [ 203.117969][T10737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1369'. [ 203.131358][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1369'. [ 203.140826][T10739] ip6t_REJECT: ECHOREPLY is not supported [ 203.227716][ T6276] bridge_slave_1: left allmulticast mode [ 203.245593][ T6276] bridge_slave_1: left promiscuous mode [ 203.251782][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.259314][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 203.292191][ T6276] bridge_slave_0: left allmulticast mode [ 203.304726][ T6276] bridge_slave_0: left promiscuous mode [ 203.310431][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.916574][ T6276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.934947][ T6276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.948013][ T6276] bond0 (unregistering): Released all slaves [ 204.144658][T10778] veth0_to_batadv: left allmulticast mode [ 204.177595][T10781] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1380'. [ 204.186662][T10781] netem: unknown loss type 13 [ 204.191651][T10781] netem: change failed [ 204.292897][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 204.458084][T10789] batman_adv: batadv0: Adding interface: dummy0 [ 204.490045][T10789] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.523145][T10789] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 204.591390][T10719] chnl_net:caif_netlink_parms(): no params data found [ 204.620373][ T5144] Bluetooth: hci4: command tx timeout [ 204.851981][ T6276] hsr_slave_0: left promiscuous mode [ 204.882313][ T6276] hsr_slave_1: left promiscuous mode [ 204.921817][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.929390][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.944059][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.972883][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.034521][ T6276] veth1_macvtap: left promiscuous mode [ 205.040225][ T6276] veth0_macvtap: left promiscuous mode [ 205.046137][ T6276] veth1_vlan: left promiscuous mode [ 205.051596][ T6276] veth0_vlan: left promiscuous mode [ 205.333113][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 205.624157][ T6276] team0 (unregistering): Port device team_slave_1 removed [ 205.713124][ T6276] team0 (unregistering): Port device team_slave_0 removed [ 205.801111][T10813] __nla_validate_parse: 1 callbacks suppressed [ 205.801130][T10813] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1388'. [ 206.084733][T10797] vlan3: entered promiscuous mode [ 206.089817][T10797] vlan3: entered allmulticast mode [ 206.106691][T10811] netlink: 'syz.4.1388': attribute type 29 has an invalid length. [ 206.156559][T10812] netlink: 'syz.4.1388': attribute type 29 has an invalid length. [ 206.313825][T10719] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.372964][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 206.380368][T10719] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.388238][T10719] bridge_slave_0: entered allmulticast mode [ 206.413895][T10719] bridge_slave_0: entered promiscuous mode [ 206.423233][T10719] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.430404][T10719] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.480941][T10719] bridge_slave_1: entered allmulticast mode [ 206.494115][T10719] bridge_slave_1: entered promiscuous mode [ 206.599151][T10719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.631491][T10719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.696346][ T5144] Bluetooth: hci4: command tx timeout [ 206.823005][T10719] team0: Port device team_slave_0 added [ 206.843205][T10854] netlink: 'syz.2.1400': attribute type 29 has an invalid length. [ 206.864258][T10719] team0: Port device team_slave_1 added [ 206.899545][T10855] netlink: 'syz.2.1400': attribute type 29 has an invalid length. [ 206.905928][T10854] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1400'. [ 206.913448][T10719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.932877][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.990416][T10719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.014484][T10719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.033040][T10719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.072876][T10719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.151341][T10719] hsr_slave_0: entered promiscuous mode [ 207.163667][T10719] hsr_slave_1: entered promiscuous mode [ 207.169793][T10719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.193593][T10719] Cannot create hsr debugfs directory [ 207.376196][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1404'. [ 207.422915][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 207.471864][T10874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1407'. [ 207.534924][T10874] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 207.615105][T10883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.643982][T10883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.675095][T10886] netlink: 'syz.3.1411': attribute type 29 has an invalid length. [ 207.693914][T10886] netlink: 'syz.3.1411': attribute type 29 has an invalid length. [ 207.703160][T10886] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1411'. [ 207.868597][T10894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'. [ 208.049988][T10909] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1418'. [ 208.178457][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1420'. [ 208.199795][T10719] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 208.220410][T10719] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 208.232562][T10719] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 208.245598][T10719] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 208.329638][T10922] netlink: 'syz.3.1422': attribute type 1 has an invalid length. [ 208.348703][T10922] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1422'. [ 208.387659][T10719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.424975][T10927] netlink: 'syz.4.1424': attribute type 29 has an invalid length. [ 208.453302][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 208.457690][T10719] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.496653][T10927] netlink: 'syz.4.1424': attribute type 29 has an invalid length. [ 208.502073][T10931] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1424'. [ 208.569089][ T6276] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.576249][ T6276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.585120][ T6276] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.592225][ T6276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.773863][ T5144] Bluetooth: hci4: command tx timeout [ 208.890518][T10940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.900101][T10940] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 208.984624][T10719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.036201][T10719] veth0_vlan: entered promiscuous mode [ 209.051952][T10719] veth1_vlan: entered promiscuous mode [ 209.090797][T10719] veth0_macvtap: entered promiscuous mode [ 209.102677][T10719] veth1_macvtap: entered promiscuous mode [ 209.112325][T10948] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 209.171318][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.198778][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.225494][T10719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.235922][T10719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.256399][T10719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.274178][T10719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.307308][T10950] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 209.378652][T10719] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.398442][T10719] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.407481][T10719] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.417330][T10719] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.493224][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 209.614999][ T6280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.632973][ T6280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.724385][ T6280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.762250][ T6280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.763922][T10969] netlink: 'syz.4.1436': attribute type 29 has an invalid length. [ 210.542863][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 210.747662][T11007] netlink: 'syz.0.1446': attribute type 11 has an invalid length. [ 211.232583][T11017] xt_TPROXY: Can be used only with -p tcp or -p udp [ 211.245542][ T6276] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.572861][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 212.158891][ T6276] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.251649][ T6276] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.389384][ T6276] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.401658][T11044] __nla_validate_parse: 6 callbacks suppressed [ 212.401675][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1454'. [ 212.584843][ T6276] bridge_slave_1: left allmulticast mode [ 212.590538][ T6276] bridge_slave_1: left promiscuous mode [ 212.612881][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 212.645760][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.682595][ T6276] bridge_slave_0: left allmulticast mode [ 212.690727][ T6276] bridge_slave_0: left promiscuous mode [ 212.717035][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.899930][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.910158][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.921379][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.932271][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.953202][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.968058][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.070034][T11071] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1463'. [ 213.290205][ T6276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.301090][ T6276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.311779][ T6276] bond0 (unregistering): Released all slaves [ 213.325686][T11069] validate_nla: 3 callbacks suppressed [ 213.325701][T11069] netlink: 'syz.0.1463': attribute type 29 has an invalid length. [ 213.351878][T11058] lo speed is unknown, defaulting to 1000 [ 213.357755][T11070] netlink: 'syz.0.1463': attribute type 29 has an invalid length. [ 213.411680][T11066] lo speed is unknown, defaulting to 1000 [ 213.588493][T11077] tipc: Enabling of bearer rejected, already enabled [ 213.604967][T11058] lo speed is unknown, defaulting to 1000 [ 213.605513][T11077] hsr0: entered promiscuous mode [ 213.652902][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 213.803130][T11066] lo speed is unknown, defaulting to 1000 [ 213.921528][T11091] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1469'. [ 214.098548][ T6276] hsr_slave_0: left promiscuous mode [ 214.107264][ T6276] hsr_slave_1: left promiscuous mode [ 214.114348][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.121754][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.130270][ T6276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.153009][ T6276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.185811][ T6276] veth1_macvtap: left promiscuous mode [ 214.191336][ T6276] veth0_macvtap: left promiscuous mode [ 214.213258][ T6276] veth1_vlan: left promiscuous mode [ 214.218523][ T6276] veth0_vlan: left promiscuous mode [ 214.426876][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1470'. [ 214.679890][ T6276] team0 (unregistering): Port device team_slave_1 removed [ 214.702872][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 214.716215][ T6276] team0 (unregistering): Port device team_slave_0 removed [ 215.024516][ T5144] Bluetooth: hci4: command tx timeout [ 215.100843][T11106] lo: left allmulticast mode [ 215.133051][T11106] tunl0: left allmulticast mode [ 215.138072][T11106] gre0: left allmulticast mode [ 215.163292][T11106] gretap0: left allmulticast mode [ 215.168623][T11106] erspan0: left allmulticast mode [ 215.174113][T11106] ip_vti0: left allmulticast mode [ 215.179528][T11106] ip6_vti0: left allmulticast mode [ 215.185737][T11106] sit0: left allmulticast mode [ 215.190683][T11106] ip6tnl0: left allmulticast mode [ 215.196896][T11106] ip6gre0: left allmulticast mode [ 215.216175][T11106] ip6gretap0: left allmulticast mode [ 215.221721][T11106] bridge0: left allmulticast mode [ 215.231879][T11106] vcan0: left allmulticast mode [ 215.240220][T11106] bond0: left allmulticast mode [ 215.250994][T11106] team0: left allmulticast mode [ 215.258415][T11106] wg2: left allmulticast mode [ 215.273454][T11110] dvmrp0: entered allmulticast mode [ 215.381863][T11114] netlink: 'syz.2.1475': attribute type 29 has an invalid length. [ 215.396146][T11114] netlink: 'syz.2.1475': attribute type 29 has an invalid length. [ 215.405254][T11114] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1475'. [ 215.446176][T11066] chnl_net:caif_netlink_parms(): no params data found [ 215.478339][T11119] netlink: 'syz.0.1474': attribute type 5 has an invalid length. [ 215.648729][T11066] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.678897][T11066] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.712219][T11066] bridge_slave_0: entered allmulticast mode [ 215.732914][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 215.751254][T11066] bridge_slave_0: entered promiscuous mode [ 215.775047][T11066] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.793113][T11066] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.800324][T11066] bridge_slave_1: entered allmulticast mode [ 215.828511][T11066] bridge_slave_1: entered promiscuous mode [ 215.853076][T11139] netlink: 'syz.4.1480': attribute type 10 has an invalid length. [ 216.020942][T11139] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 216.134672][T11066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.165257][T11066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.324867][T11142] dvmrp0: left allmulticast mode [ 216.350432][T11066] team0: Port device team_slave_0 added [ 216.358857][T11154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1485'. [ 216.371016][T11153] netlink: 'syz.0.1486': attribute type 29 has an invalid length. [ 216.384819][T11156] netlink: 'syz.0.1486': attribute type 29 has an invalid length. [ 216.403227][T11066] team0: Port device team_slave_1 added [ 216.409796][T11153] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1486'. [ 216.438795][T11066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.461633][T11066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.531033][T11066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.545862][T11164] sctp: [Deprecated]: syz.4.1487 (pid 11164) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.545862][T11164] Use struct sctp_sack_info instead [ 216.573986][T11066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.580952][T11066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.692369][T11066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.772928][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 216.797764][T11180] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 1, id = 0 [ 216.929335][T11066] hsr_slave_0: entered promiscuous mode [ 216.966812][T11066] hsr_slave_1: entered promiscuous mode [ 216.983526][T11066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.002279][T11066] Cannot create hsr debugfs directory [ 217.008376][T11189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1491'. [ 217.093448][ T5144] Bluetooth: hci4: command tx timeout [ 217.321703][T11204] netlink: 'syz.4.1494': attribute type 39 has an invalid length. [ 217.368036][T11205] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 217.766266][T11066] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.796604][T11066] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.814099][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 217.835359][T11066] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.856505][T11066] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 218.006519][T11226] netlink: 'syz.4.1498': attribute type 29 has an invalid length. [ 218.044779][T11226] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1498'. [ 218.234423][T11066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.284555][T11066] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.314734][T11066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.325346][T11066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.338276][T11246] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 218.353065][T11246] team0: Device netdevsim0 is of different type [ 218.379048][ T6302] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.386236][ T6302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.395265][ T6302] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.402367][ T6302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.785796][T11066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.852889][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 218.918860][T11066] veth0_vlan: entered promiscuous mode [ 218.964942][T11066] veth1_vlan: entered promiscuous mode [ 219.027764][T11066] veth0_macvtap: entered promiscuous mode [ 219.046725][T11066] veth1_macvtap: entered promiscuous mode [ 219.079622][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.098362][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.114450][T11066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.173437][ T5144] Bluetooth: hci4: command tx timeout [ 219.293132][T11066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.304659][T11066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.323881][T11066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.347701][T11066] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.553456][T11066] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.562198][T11066] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.571016][T11066] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.686172][ T6299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.715364][ T6299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.777730][ T6297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.787066][ T6297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.892969][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 219.911901][T11293] validate_nla: 2 callbacks suppressed [ 219.911917][T11293] netlink: 'syz.3.1511': attribute type 29 has an invalid length. [ 219.927282][T11293] netlink: 'syz.3.1511': attribute type 29 has an invalid length. [ 219.937686][T11293] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1511'. [ 220.158082][T11301] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1515'. [ 220.505873][T11311] siw: device registration error -23 [ 220.616812][T11313] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 220.625340][T11313] macvlan0: entered allmulticast mode [ 220.635562][T11313] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 220.818091][T11322] lo speed is unknown, defaulting to 1000 [ 220.910479][T11327] netlink: 'syz.0.1523': attribute type 29 has an invalid length. [ 220.930728][T11327] netlink: 'syz.0.1523': attribute type 29 has an invalid length. [ 220.942898][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 220.961614][T11327] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1523'. [ 221.070137][T11322] lo speed is unknown, defaulting to 1000 [ 221.159430][T11331] lo speed is unknown, defaulting to 1000 [ 221.256268][ T5833] Bluetooth: hci4: command tx timeout [ 221.418878][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1528'. [ 221.462620][T11331] lo speed is unknown, defaulting to 1000 [ 221.690140][T11322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1521'. [ 221.694538][T11353] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1531'. [ 221.782743][T11353] tipc: Enabling of bearer rejected, failed to enable media [ 221.794055][T11360] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.1534'. [ 221.850307][T11360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.905887][T11362] netlink: 'syz.4.1536': attribute type 1 has an invalid length. [ 221.972849][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 222.638646][T11406] tipc: Enabling of bearer rejected, already enabled [ 222.657413][T11406] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.968486][T11418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1552'. [ 222.993929][T11425] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1553'. [ 223.020345][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 223.355574][T11439] netlink: 'syz.0.1558': attribute type 12 has an invalid length. [ 223.507049][T11446] netlink: 'syz.0.1560': attribute type 4 has an invalid length. [ 223.855854][T11465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1567'. [ 223.866163][T11467] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1569'. [ 223.882515][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 223.978341][ T6302] wlan1: Trigger new scan to find an IBSS to join [ 224.052925][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 224.115235][T11482] lo speed is unknown, defaulting to 1000 [ 224.216154][T11490] netlink: 'syz.2.1575': attribute type 2 has an invalid length. [ 224.400015][T11482] lo speed is unknown, defaulting to 1000 [ 224.411512][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1578'. [ 224.468044][T11495] netlink: 'syz.4.1578': attribute type 10 has an invalid length. [ 224.482961][T11495] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1578'. [ 224.525886][T11495] team0: entered promiscuous mode [ 224.530940][T11495] wg2: entered promiscuous mode [ 224.544653][T11495] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.092950][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 225.154258][T11525] ip6gre3: entered allmulticast mode [ 225.284884][T11531] netlink: 'syz.4.1588': attribute type 6 has an invalid length. [ 225.301101][T11531] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1588'. [ 225.383731][T11533] netlink: 'syz.2.1589': attribute type 1 has an invalid length. [ 225.408301][T11533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.426249][T11533] bond2: (slave bridge3): making interface the new active one [ 225.435067][T11533] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 225.606375][T11545] bridge3: entered promiscuous mode [ 225.626222][T11545] macsec1: entered promiscuous mode [ 225.631459][T11545] bond2: entered promiscuous mode [ 225.653178][T11545] macsec1: entered allmulticast mode [ 225.658659][T11545] bond2: entered allmulticast mode [ 225.665387][T11545] bridge3: entered allmulticast mode [ 225.708613][T11549] veth2: entered allmulticast mode [ 225.983161][T11562] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1598'. [ 226.132877][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 226.293527][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 226.517515][T11576] IPVS: set_ctl: invalid protocol: 59 100.1.1.2:20001 [ 226.704843][T11584] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1606'. [ 226.757247][T11583] netlink: set zone limit has 8 unknown bytes [ 226.917438][T11590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1608'. [ 227.013786][ T6271] wlan1: Trigger new scan to find an IBSS to join [ 227.024079][T11591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1608'. [ 227.172896][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 227.477918][T11608] netlink: 'syz.4.1613': attribute type 13 has an invalid length. [ 227.487022][T11608] gretap0: refused to change device tx_queue_len [ 227.493581][T11608] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 227.786209][T11634] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 227.855099][T11642] syz.2.1622[11642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.855189][T11642] syz.2.1622[11642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.876032][T11641] syz.2.1622[11641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.895120][T11641] syz.2.1622[11641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.907306][T11642] syz.2.1622[11642] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.922426][T11641] syz.2.1622[11641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.973848][T11641] x_tables: duplicate underflow at hook 2 [ 228.171378][T11653] lo: left allmulticast mode [ 228.212935][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 228.426447][T11662] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 228.507084][T11671] delete_channel: no stack [ 228.948141][T11698] __nla_validate_parse: 7 callbacks suppressed [ 228.948160][T11698] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1639'. [ 229.009455][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1639'. [ 229.056554][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1640'. [ 229.065615][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1640'. [ 229.200618][T11707] netlink: 'syz.0.1641': attribute type 25 has an invalid length. [ 229.252927][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 229.283304][T11707] lo speed is unknown, defaulting to 1000 [ 229.405598][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1642'. [ 229.426643][T11711] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 229.797855][T11733] dvmrp8: entered allmulticast mode [ 229.872533][T11733] dvmrp8: left allmulticast mode [ 229.973022][ T6271] wlan1: Trigger new scan to find an IBSS to join [ 230.214246][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 230.231993][T11758] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1652'. [ 230.276977][T11750] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1652'. [ 230.292892][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 230.444430][T11767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1656'. [ 230.455509][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1657'. [ 230.475983][T11767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 230.483271][T11767] IPv6: NLM_F_CREATE should be set when creating new route [ 230.490566][T11767] IPv6: NLM_F_CREATE should be set when creating new route [ 230.502492][T11771] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.512501][T11771] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.521560][T11771] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.530818][T11771] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.566146][T11772] tipc: Enabled bearer , priority 0 [ 230.595429][T11772] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 230.623434][T11772] tipc: Resetting bearer [ 230.875926][ T6297] wlan1: Creating new IBSS network, BSSID 46:1e:2e:22:cb:1c [ 230.887761][T11800] sctp: [Deprecated]: syz.0.1666 (pid 11800) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.887761][T11800] Use struct sctp_sack_info instead [ 230.913565][ T6271] tipc: Resetting bearer [ 231.031254][T11812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1667'. [ 231.042123][T11812] netlink: 'syz.0.1667': attribute type 10 has an invalid length. [ 231.051567][T11812] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 231.332933][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 231.691839][T11829] bond0: (slave batadv0): Releasing backup interface [ 231.745586][T11829] batadv0: left promiscuous mode [ 231.756863][T11829] bridge_slave_0: left promiscuous mode [ 231.781483][T11829] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.806211][T11829] bridge_slave_1: left promiscuous mode [ 231.823192][T11829] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.852017][T11829] bond0: (slave bond_slave_0): Releasing backup interface [ 231.878982][T11829] bond_slave_0: left promiscuous mode [ 231.908633][T11829] bond0: (slave bond_slave_1): Releasing backup interface [ 231.918939][T11829] bond_slave_1: left promiscuous mode [ 231.946457][T11829] team0: Port device team_slave_0 removed [ 231.980630][T11829] team0: Port device team_slave_1 removed [ 231.996697][T11829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.014364][T11829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.018303][T11836] GUP no longer grows the stack in syz.2.1677 (11836): 20006000-2000a000 (20005000) [ 232.048852][T11839] netlink: 'syz.4.1678': attribute type 1 has an invalid length. [ 232.062481][T11836] CPU: 0 UID: 0 PID: 11836 Comm: syz.2.1677 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 232.073271][T11836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 232.083346][T11836] Call Trace: [ 232.086647][T11836] [ 232.089596][T11836] dump_stack_lvl+0x241/0x360 [ 232.094312][T11836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.099544][T11836] ? __pfx__printk+0x10/0x10 [ 232.104162][T11836] ? find_vma+0xf9/0x170 [ 232.108443][T11836] ? vma_is_secretmem+0xd/0x50 [ 232.113235][T11836] ? check_vma_flags+0x52b/0x5a0 [ 232.118204][T11836] __get_user_pages+0x4385/0x49e0 [ 232.123251][T11836] ? 0xffffffffa00007c8 [ 232.127472][T11836] ? __pfx___get_user_pages+0x10/0x10 [ 232.132896][T11836] __gup_longterm_locked+0x49a/0x17f0 [ 232.138298][T11836] ? __pfx___might_resched+0x10/0x10 [ 232.143626][T11836] ? __pfx___gup_longterm_locked+0x10/0x10 [ 232.149455][T11836] ? down_read+0x82b/0xa40 [ 232.153907][T11836] ? is_valid_gup_args+0x124/0x200 [ 232.159036][T11836] pin_user_pages+0x137/0x1f0 [ 232.163741][T11836] ? __pfx_pin_user_pages+0x10/0x10 [ 232.168963][T11836] ? trace_kmalloc+0x1f/0xd0 [ 232.173593][T11836] xdp_umem_create+0x978/0xf30 [ 232.178409][T11836] xsk_setsockopt+0x732/0x950 [ 232.183122][T11836] ? __pfx_xsk_setsockopt+0x10/0x10 [ 232.188354][T11836] ? __pfx_lock_acquire+0x10/0x10 [ 232.193413][T11836] ? aa_sock_opt_perm+0x79/0x120 [ 232.198381][T11836] ? __pfx_xsk_setsockopt+0x10/0x10 [ 232.203606][T11836] do_sock_setsockopt+0x3af/0x720 [ 232.208661][T11836] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 232.214237][T11836] ? __fget_files+0x395/0x410 [ 232.218941][T11836] ? __fget_files+0x2a/0x410 [ 232.223560][T11836] __x64_sys_setsockopt+0x1ee/0x280 [ 232.228787][T11836] do_syscall_64+0xf3/0x230 [ 232.233315][T11836] ? clear_bhb_loop+0x35/0x90 [ 232.238014][T11836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.243936][T11836] RIP: 0033:0x7fd96ed7fed9 [ 232.248370][T11836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.267998][T11836] RSP: 002b:00007fd96cbf6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 232.276418][T11836] RAX: ffffffffffffffda RBX: 00007fd96ef45fa0 RCX: 00007fd96ed7fed9 [ 232.284387][T11836] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000008 [ 232.292359][T11836] RBP: 00007fd96edf3cc8 R08: 0000000000000020 R09: 0000000000000000 [ 232.300333][T11836] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 232.308305][T11836] R13: 0000000000000000 R14: 00007fd96ef45fa0 R15: 00007ffc34c47fe8 [ 232.316290][T11836] [ 232.348150][T11839] 8021q: adding VLAN 0 to HW filter on device bond6 [ 232.372926][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 232.438441][T11838] bond6: (slave bridge0): making interface the new active one [ 232.447012][T11838] bond6: (slave bridge0): Enslaving as an active interface with an up link [ 233.409857][T11895] ax25_connect(): syz.3.1694 uses autobind, please contact jreuter@yaina.de [ 233.421146][T11894] x_tables: duplicate underflow at hook 2 [ 233.423520][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 233.444048][T11895] netlink: 'syz.3.1694': attribute type 1 has an invalid length. [ 233.455615][T11899] Cannot find del_set index 2 as target [ 233.783965][T11902] bond0 (unregistering): Released all slaves [ 233.886086][T11908] bridge0: left allmulticast mode [ 233.906419][T11906] lo speed is unknown, defaulting to 1000 [ 234.136161][T11926] netlink: 'syz.0.1704': attribute type 10 has an invalid length. [ 234.174455][T11926] batman_adv: batadv0: Adding interface: wlan0 [ 234.186297][T11926] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.217706][T11926] batman_adv: batadv0: Interface activated: wlan0 [ 234.233821][T11930] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 234.248865][T11926] nbd: couldn't find device at index -1 [ 234.452910][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 234.471601][T11934] veth0_virt_wifi: entered promiscuous mode [ 234.487084][T11934] veth0_virt_wifi: left promiscuous mode [ 234.761038][T11950] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 235.095908][T11967] rdma_rxe: rxe_newlink: failed to add lo [ 235.266339][T11982] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 235.290427][T11982] __nla_validate_parse: 5 callbacks suppressed [ 235.290444][T11982] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1720'. [ 235.290918][T11984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1721'. [ 235.326321][T11984] dvmrp5: entered allmulticast mode [ 235.341239][T11983] dvmrp5: left allmulticast mode [ 235.476193][T11989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1723'. [ 235.502961][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 235.578171][T11992] IPv6: sit2: Disabled Multicast RS [ 235.696221][T11999] sch_fq: defrate 511 ignored. [ 235.916659][T12014] netlink: 'syz.4.1731': attribute type 8 has an invalid length. [ 235.937802][T12015] netlink: 'syz.4.1731': attribute type 8 has an invalid length. [ 236.120706][T12021] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 236.136435][T12021] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 236.146710][T12021] tipc: Resetting bearer [ 236.172703][T12025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1732'. [ 236.191165][T12025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1732'. [ 236.217281][T12025] ip6gre2: entered allmulticast mode [ 236.251928][T12027] netlink: 'syz.2.1735': attribute type 1 has an invalid length. [ 236.279448][T12027] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.324967][T12027] 8021q: adding VLAN 0 to HW filter on device bond3 [ 236.340733][T12027] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 236.355769][T12027] bond3: (slave vcan0): Error -95 calling set_mac_address [ 236.387665][T12034] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 236.397273][T12034] bond3: (slave batadv2): making interface the new active one [ 236.406187][T12034] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 236.416976][T12036] netlink: 'syz.4.1738': attribute type 1 has an invalid length. [ 236.441208][T12036] netlink: 'syz.4.1738': attribute type 1 has an invalid length. [ 236.542848][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 236.697012][T12051] Cannot find add_set index 832 as target [ 236.775875][T12054] netlink: 'syz.3.1745': attribute type 1 has an invalid length. [ 236.851074][T12057] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1746'. [ 236.920609][T12062] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1747'. [ 236.940018][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1747'. [ 236.977215][T12064] ax25_connect(): syz.3.1748 uses autobind, please contact jreuter@yaina.de [ 237.015097][T12066] netlink: 'syz.0.1749': attribute type 1 has an invalid length. [ 237.023115][T12066] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1749'. [ 237.422183][T12081] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 237.582867][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 237.777221][T12106] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 237.786315][T12106] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 237.901433][T12111] sctp: [Deprecated]: syz.4.1759 (pid 12111) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.901433][T12111] Use struct sctp_sack_info instead [ 237.936110][T12113] netlink: 'syz.3.1760': attribute type 2 has an invalid length. [ 237.964363][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1760'. [ 238.317152][T12125] tipc: Started in network mode [ 238.322071][T12125] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 238.343089][T12125] tipc: Enabled bearer , priority 10 [ 238.492446][T12135] syzkaller0: entered allmulticast mode [ 238.606990][T12150] syz_tun: entered promiscuous mode [ 238.612939][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 238.684392][T12150] syz_tun: left promiscuous mode [ 238.720244][T12148] netlink: 'syz.3.1768': attribute type 10 has an invalid length. [ 238.740417][T12148] dummy0: left allmulticast mode [ 238.749975][T12148] dummy0: entered allmulticast mode [ 238.759224][T12148] team0: Port device dummy0 added [ 238.913129][T12161] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 238.971241][T12161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.173837][T12183] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 0, id = 0 [ 239.266809][T12185] xt_TCPMSS: Only works on TCP SYN packets [ 239.473571][ T5881] tipc: Node number set to 15444650 [ 239.652977][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 240.079856][T12228] vlan1: entered allmulticast mode [ 240.641535][T12251] netlink: 'syz.2.1802': attribute type 10 has an invalid length. [ 240.650496][T12251] team0: left allmulticast mode [ 240.656157][T12251] netlink: 'syz.2.1802': attribute type 10 has an invalid length. [ 240.675682][T12251] bridge0: port 1(team0) entered blocking state [ 240.682102][T12251] bridge0: port 1(team0) entered disabled state [ 240.692244][T12251] team0: entered allmulticast mode [ 240.702956][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 240.709132][T12254] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 240.732507][T12251] team0: entered promiscuous mode [ 240.742514][T12251] tipc: MTU too low for tipc bearer [ 240.758912][T12251] __nla_validate_parse: 17 callbacks suppressed [ 240.758928][T12251] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1802'. [ 240.759575][T12258] netlink: 'syz.0.1805': attribute type 1 has an invalid length. [ 240.865004][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1805'. [ 240.918778][T12258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.938945][T12258] bond0: (slave bond2): making interface the new active one [ 240.947136][T12258] bond0: (slave bond2): Enslaving as an active interface with an up link [ 240.997799][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1808'. [ 241.207948][T12272] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 241.718318][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 241.732926][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 241.750177][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 241.872669][T12323] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 241.929421][T12324] veth0_vlan: left promiscuous mode [ 241.950083][T12324] veth0_vlan: entered promiscuous mode [ 242.105155][T12329] netlink: 'syz.4.1822': attribute type 29 has an invalid length. [ 242.115074][T12329] netlink: 'syz.4.1822': attribute type 29 has an invalid length. [ 242.124431][T12329] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1822'. [ 242.241652][T12340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1826'. [ 242.260774][T12340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1826'. [ 242.270029][T12340] netlink: 'syz.3.1826': attribute type 11 has an invalid length. [ 242.386511][T12346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1827'. [ 242.526990][T12356] netlink: 'syz.2.1831': attribute type 10 has an invalid length. [ 242.535522][T12356] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 242.581703][T12358] netlink: 'syz.3.1830': attribute type 10 has an invalid length. [ 242.600422][T12358] ieee802154 phy0 wpan0: entered promiscuous mode [ 242.620156][T12358] bond0: (slave wpan0): Enslaving as an active interface with an up link [ 242.637605][T12358] netlink: 'syz.3.1830': attribute type 10 has an invalid length. [ 242.652671][T12358] netlink: 'syz.3.1830': attribute type 10 has an invalid length. [ 242.671024][T12358] netlink: 'syz.3.1830': attribute type 10 has an invalid length. [ 242.680195][T12358] netlink: 'syz.3.1830': attribute type 10 has an invalid length. [ 242.701288][T12358] netlink: 'syz.3.1830': attribute type 10 has an invalid length. [ 242.772917][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 242.958634][T12383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 243.021609][T12386] openvswitch: netlink: Flow actions attr not present in new flow. [ 243.812967][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.387434][T12446] IPVS: set_ctl: invalid protocol: 12 172.20.20.65:20001 [ 244.449050][T12450] lo speed is unknown, defaulting to 1000 [ 244.852899][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 245.294447][T12478] dvmrp5: entered allmulticast mode [ 245.304360][T12482] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 245.311288][T12485] dvmrp5: left allmulticast mode [ 245.793990][T12521] __nla_validate_parse: 4 callbacks suppressed [ 245.794010][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1877'. [ 245.809448][T12521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1877'. [ 245.819202][T12523] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1876'. [ 245.892918][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 245.998253][T12534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1881'. [ 246.151772][T12543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1883'. [ 246.161205][T12534] Dead loop on virtual device ipvlan1, fix it urgently! [ 246.701686][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1890'. [ 246.894400][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1893'. [ 246.932710][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1893'. [ 246.942882][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 246.992632][T12534] syz.0.1881 (12534) used greatest stack depth: 7384 bytes left [ 247.294539][T12599] SET target dimension over the limit! [ 247.338704][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1898'. [ 247.349634][T12599] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1898'. [ 247.891040][T12630] lo speed is unknown, defaulting to 1000 [ 247.972954][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 248.446519][T12661] ipvlan1: left allmulticast mode [ 249.013343][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 249.831461][T12723] validate_nla: 62 callbacks suppressed [ 249.831480][T12723] netlink: 'syz.4.1931': attribute type 1 has an invalid length. [ 250.053198][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 250.641134][T12747] macvlan0: entered allmulticast mode [ 250.666024][T12747] macvlan0 (unregistering): left allmulticast mode [ 250.936588][T12767] __nla_validate_parse: 6 callbacks suppressed [ 250.936608][T12767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1945'. [ 250.962893][T12767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1945'. [ 250.985660][T12767] gretap0: entered promiscuous mode [ 251.049107][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1946'. [ 251.093037][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 251.122945][T12779] netlink: 'syz.3.1949': attribute type 8 has an invalid length. [ 251.231130][T12782] veth1_to_hsr: left allmulticast mode [ 251.253896][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1950'. [ 251.273485][T12782] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 251.299206][T12790] netlink: 'syz.0.1952': attribute type 30 has an invalid length. [ 251.574165][T12802] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1956'. [ 251.594810][T12804] netlink: 'syz.3.1957': attribute type 2 has an invalid length. [ 251.613123][T12804] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1957'. [ 251.684798][T12802] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1956'. [ 251.833585][T12820] netlink: 'syz.2.1962': attribute type 10 has an invalid length. [ 251.850676][T12820] batadv0: left allmulticast mode [ 252.132964][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 252.261124][T12850] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1971'. [ 252.271978][T12850] openvswitch: netlink: Message has 44053 unknown bytes. [ 252.379313][T12853] xt_CT: No such helper "netbios-ns" [ 252.563365][T12876] netlink: 'syz.2.1977': attribute type 29 has an invalid length. [ 252.584059][T12876] netlink: 'syz.2.1977': attribute type 29 has an invalid length. [ 252.592356][T12876] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1977'. [ 252.677158][T12880] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 252.746084][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1979'. [ 252.820327][T12890] ksmbd: Unknown IPC event: 4, ignore. [ 252.836336][T12890] ksmbd: Unknown IPC event: 4, ignore. [ 252.847818][T12890] ksmbd: Unknown IPC event: 4, ignore. [ 252.860404][T12890] ksmbd: Unknown IPC event: 4, ignore. [ 252.879672][T12890] ksmbd: Unknown IPC event: 4, ignore. [ 252.982545][T12898] netlink: 'syz.4.1983': attribute type 3 has an invalid length. [ 253.061898][T12902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.173088][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 253.237620][T12911] netlink: 'syz.3.1988': attribute type 4 has an invalid length. [ 253.262497][T12908] netlink: 'syz.3.1988': attribute type 4 has an invalid length. [ 253.797618][T12942] x_tables: duplicate underflow at hook 2 [ 254.222927][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 254.235209][T12974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.399923][T12978] IPv6: sit1: Disabled Multicast RS [ 255.252858][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 255.310770][T13032] lo: left allmulticast mode [ 255.322973][T13032] tunl0: left allmulticast mode [ 255.327972][T13032] gre0: left allmulticast mode [ 255.343111][T13032] gretap0: left allmulticast mode [ 255.348257][T13032] erspan0: left allmulticast mode [ 255.367429][T13032] ip_vti0: left allmulticast mode [ 255.376791][T13032] ip6_vti0: left allmulticast mode [ 255.382105][T13032] sit0: left promiscuous mode [ 255.393028][T13032] ip6tnl0: left allmulticast mode [ 255.402759][T13032] ip6gretap0: left allmulticast mode [ 255.419975][T13032] bridge0: left allmulticast mode [ 255.425514][T13032] bond0: left promiscuous mode [ 255.440841][T13032] team0: left allmulticast mode [ 255.448194][T13032] dummy0: left allmulticast mode [ 255.467092][T13032] nlmon0: left allmulticast mode [ 255.482748][T13032] caif0: left allmulticast mode [ 255.492641][T13032] vxcan0: left allmulticast mode [ 255.503182][T13032] vxcan1: left allmulticast mode [ 255.513108][T13032] veth0: left allmulticast mode [ 255.518178][T13032] veth1: left allmulticast mode [ 255.526171][T13032] wg1: left allmulticast mode [ 255.533093][T13032] wg2: left allmulticast mode [ 255.539841][T13032] veth0_to_bridge: left allmulticast mode [ 255.545894][T13032] bridge_slave_0: left allmulticast mode [ 255.551765][T13032] veth1_to_bridge: left allmulticast mode [ 255.561839][T13032] bridge_slave_1: left allmulticast mode [ 255.567832][T13032] veth0_to_bond: left allmulticast mode [ 255.578811][T13032] bond_slave_0: left allmulticast mode [ 255.584672][T13032] veth1_to_bond: left allmulticast mode [ 255.590447][T13032] bond_slave_1: left allmulticast mode [ 255.608741][T13032] veth0_to_team: left allmulticast mode [ 255.614698][T13032] team_slave_0: left allmulticast mode [ 255.622003][T13032] veth1_to_team: left allmulticast mode [ 255.630997][T13032] team_slave_1: left allmulticast mode [ 255.639389][T13032] batadv_slave_0: left allmulticast mode [ 255.652945][T13032] veth1_to_batadv: left allmulticast mode [ 255.663367][T13032] batadv_slave_1: left allmulticast mode [ 255.673060][T13032] xfrm0: left allmulticast mode [ 255.678100][T13032] veth0_to_hsr: left allmulticast mode [ 255.691298][T13032] veth1_to_hsr: left allmulticast mode [ 255.697146][T13032] hsr0: left allmulticast mode [ 255.702045][T13032] hsr_slave_0: left allmulticast mode [ 255.715385][T13032] hsr_slave_1: left allmulticast mode [ 255.720976][T13032] veth1_virt_wifi: left allmulticast mode [ 255.733066][T13032] veth0_virt_wifi: left allmulticast mode [ 255.739891][T13032] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 255.752978][T13032] veth1_vlan: left allmulticast mode [ 255.761115][T13032] vlan0: left allmulticast mode [ 255.766396][T13032] vlan1: left allmulticast mode [ 255.773109][T13032] macvlan1: left allmulticast mode [ 255.783110][T13032] ipvlan0: left allmulticast mode [ 255.788265][T13032] ipvlan1: left allmulticast mode [ 255.802525][T13032] veth0_vlan: left allmulticast mode [ 255.808136][T13032] veth1_macvtap: left allmulticast mode [ 255.832982][T13032] veth0_macvtap: left allmulticast mode [ 255.838691][T13032] macvtap0: left allmulticast mode [ 255.863208][T13032] macsec0: left allmulticast mode [ 255.868323][T13032] geneve0: left allmulticast mode [ 255.882922][T13032] geneve1: left allmulticast mode [ 255.888050][T13032] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 255.913224][T13032] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 255.920469][T13032] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 255.953617][T13032] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 255.960879][T13032] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 255.992203][T13032] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 256.025390][T13032] vlan2: left allmulticast mode [ 256.043117][T13032] bridge1: left allmulticast mode [ 256.083022][T13032] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 256.133120][T13032] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 256.142105][T13032] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 256.193020][T13032] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 256.249653][T13032] bond1: left promiscuous mode [ 256.254800][T13032] bond1: left allmulticast mode [ 256.280522][T13032] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.289949][T13032] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.299113][T13032] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.302863][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 256.308067][T13032] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 256.342539][T13032] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 256.351756][T13032] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 256.361067][T13032] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 256.370174][T13032] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 256.383417][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 256.402903][T13032] geneve3: left promiscuous mode [ 256.407997][T13032] geneve3: left allmulticast mode [ 256.415169][T13032] ieee802154 phy0 wpan0: left promiscuous mode [ 256.424497][T13032] ip6gre2: left allmulticast mode [ 256.432494][T13032] gretap0: left promiscuous mode [ 256.704972][T13044] tipc: Enabling of bearer rejected, failed to enable media [ 256.880462][T13068] validate_nla: 7 callbacks suppressed [ 256.880481][T13068] netlink: 'syz.3.2030': attribute type 10 has an invalid length. [ 256.905272][T13068] ieee802154 phy0 wpan0: entered promiscuous mode [ 257.121194][T13080] sctp: [Deprecated]: syz.3.2033 (pid 13080) Use of struct sctp_assoc_value in delayed_ack socket option. [ 257.121194][T13080] Use struct sctp_sack_info instead [ 257.332868][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 258.140742][T13103] netlink: 'syz.0.2039': attribute type 1 has an invalid length. [ 258.374904][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 259.251578][T13086] tunl0: left allmulticast mode [ 259.256881][T13086] gre0: left allmulticast mode [ 259.261723][T13086] gretap0: left allmulticast mode [ 259.267088][T13086] erspan0: left allmulticast mode [ 259.272175][T13086] ip_vti0: left allmulticast mode [ 259.277643][T13086] ip6_vti0: left allmulticast mode [ 259.284529][T13086] sit0: left allmulticast mode [ 259.289423][T13086] ip6tnl0: left allmulticast mode [ 259.309660][T13086] ip6gre0: left allmulticast mode [ 259.317254][T13086] ip6gretap0: left allmulticast mode [ 259.323061][T13086] dummy0: left allmulticast mode [ 259.328697][T13086] nlmon0: left allmulticast mode [ 259.334626][T13086] caif0: left allmulticast mode [ 259.339803][T13086] vxcan0: left allmulticast mode [ 259.345442][T13086] vxcan1: left allmulticast mode [ 259.350481][T13086] veth0: left allmulticast mode [ 259.355687][T13086] veth1: left allmulticast mode [ 259.360661][T13086] wg0: left allmulticast mode [ 259.366676][T13086] wg1: left allmulticast mode [ 259.371602][T13086] wg2: left allmulticast mode [ 259.381733][T13086] veth0_to_bridge: left allmulticast mode [ 259.393265][T13086] bridge_slave_0: left allmulticast mode [ 259.410877][T13086] veth1_to_bridge: left allmulticast mode [ 259.420449][T13086] bridge_slave_1: left allmulticast mode [ 259.422853][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 259.427244][T13086] veth0_to_bond: left allmulticast mode [ 259.438477][T13108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.448356][T13086] bond_slave_0: left allmulticast mode [ 259.457527][T13086] veth1_to_bond: left allmulticast mode [ 259.471109][T13086] bond_slave_1: left allmulticast mode [ 259.480255][T13086] veth0_to_team: left allmulticast mode [ 259.500736][T13086] team_slave_0: left allmulticast mode [ 259.511850][T13086] veth0_to_batadv: left allmulticast mode [ 259.529534][T13086] veth1_to_batadv: left allmulticast mode [ 259.539596][T13086] batadv_slave_1: left promiscuous mode [ 259.551835][T13086] xfrm0: left allmulticast mode [ 259.557719][T13086] veth0_to_hsr: left allmulticast mode [ 259.564853][T13086] veth1_to_hsr: left allmulticast mode [ 259.570448][T13086] hsr0: left allmulticast mode [ 259.575674][T13086] hsr_slave_0: left allmulticast mode [ 259.581064][T13086] hsr_slave_1: left allmulticast mode [ 259.587989][T13086] veth1_virt_wifi: left allmulticast mode [ 259.593914][T13086] veth0_virt_wifi: left allmulticast mode [ 259.599824][T13086] veth1_vlan: left allmulticast mode [ 259.613534][T13086] vlan0: left allmulticast mode [ 259.618525][T13086] macvlan1: left allmulticast mode [ 259.623958][T13086] ipvlan0: left allmulticast mode [ 259.629005][T13086] veth0_vlan: left allmulticast mode [ 259.634671][T13086] veth1_macvtap: left allmulticast mode [ 259.640807][T13086] veth0_macvtap: left allmulticast mode [ 259.646528][T13086] macvtap0: left allmulticast mode [ 259.651699][T13086] macsec0: left allmulticast mode [ 259.657085][T13086] geneve0: left allmulticast mode [ 259.662285][T13086] geneve1: left allmulticast mode [ 259.668128][T13086] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 259.675460][T13086] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 259.682664][T13086] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 259.689925][T13086] netdevsim netdevsim2 netdevsim3: left allmulticast mode [ 259.697416][T13086] vlan2: left allmulticast mode [ 259.702404][T13086] bridge1: left allmulticast mode [ 259.707605][T13086] macvlan2: left allmulticast mode [ 259.712907][T13086] ip6tnl1: left allmulticast mode [ 259.718031][T13086] veth2: left allmulticast mode [ 259.723080][T13086] veth3: left allmulticast mode [ 259.728045][T13086] bond0: left allmulticast mode [ 259.733149][T13086] bond1: left allmulticast mode [ 259.738464][T13086] vxlan0: left allmulticast mode [ 259.744065][T13086] ip6gre1: left allmulticast mode [ 259.758181][T13086] hsr1: left allmulticast mode [ 259.763044][T13086] batadv_slave_0: left allmulticast mode [ 259.772714][T13086] tipc: Resetting bearer [ 259.798084][T13086] ip6gre3: left allmulticast mode [ 259.822027][T13086] bond2: left allmulticast mode [ 259.830324][T13086] bridge3: left allmulticast mode [ 259.835476][T13086] bond2: left promiscuous mode [ 259.840939][T13086] bridge3: left promiscuous mode [ 259.850061][T13086] macsec1: left promiscuous mode [ 259.855315][T13086] macsec1: left allmulticast mode [ 259.872623][T13102] netlink: 'syz.0.2039': attribute type 14 has an invalid length. [ 259.966481][T13103] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.991426][T13104] bond4: (slave gretap2): making interface the new active one [ 260.001521][T13104] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 260.010861][T13114] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 260.452925][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 260.487416][T13155] syz.0.2055: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 260.517046][T13155] CPU: 0 UID: 0 PID: 13155 Comm: syz.0.2055 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 260.527846][T13155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 260.537939][T13155] Call Trace: [ 260.541244][T13155] [ 260.544197][T13155] dump_stack_lvl+0x241/0x360 [ 260.548920][T13155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.554153][T13155] ? __pfx__printk+0x10/0x10 [ 260.558783][T13155] ? __rcu_read_unlock+0xa1/0x110 [ 260.563807][T13155] warn_alloc+0x278/0x410 [ 260.568141][T13155] ? stack_depot_save_flags+0x29/0x830 [ 260.573627][T13155] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 260.579683][T13155] ? __pfx_warn_alloc+0x10/0x10 [ 260.584525][T13155] ? kasan_save_track+0x3f/0x80 [ 260.589365][T13155] ? __kasan_kmalloc+0x98/0xb0 [ 260.594124][T13155] ? xsk_setsockopt+0x4ea/0x950 [ 260.598969][T13155] ? do_sock_setsockopt+0x3af/0x720 [ 260.604156][T13155] ? __x64_sys_setsockopt+0x1ee/0x280 [ 260.609533][T13155] ? do_syscall_64+0xf3/0x230 [ 260.614231][T13155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.620302][T13155] __vmalloc_node_range_noprof+0x126/0x1380 [ 260.626214][T13155] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 260.632562][T13155] ? __kasan_kmalloc+0x98/0xb0 [ 260.637331][T13155] vmalloc_user_noprof+0x74/0x80 [ 260.642266][T13155] ? xskq_create+0xb6/0x170 [ 260.646763][T13155] xskq_create+0xb6/0x170 [ 260.651084][T13155] xsk_init_queue+0xa1/0x100 [ 260.655669][T13155] xsk_setsockopt+0x4ea/0x950 [ 260.660345][T13155] ? __pfx_xsk_setsockopt+0x10/0x10 [ 260.665539][T13155] ? __pfx_aa_sk_perm+0x10/0x10 [ 260.670405][T13155] ? aa_sock_opt_perm+0x79/0x120 [ 260.675340][T13155] ? __pfx_xsk_setsockopt+0x10/0x10 [ 260.680534][T13155] do_sock_setsockopt+0x3af/0x720 [ 260.685574][T13155] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 260.691154][T13155] ? __fget_files+0x395/0x410 [ 260.695842][T13155] ? __fget_files+0x2a/0x410 [ 260.700431][T13155] __x64_sys_setsockopt+0x1ee/0x280 [ 260.705629][T13155] do_syscall_64+0xf3/0x230 [ 260.710126][T13155] ? clear_bhb_loop+0x35/0x90 [ 260.714794][T13155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.720684][T13155] RIP: 0033:0x7f258d17fed9 [ 260.725095][T13155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.744693][T13155] RSP: 002b:00007f258e03b058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 260.753099][T13155] RAX: ffffffffffffffda RBX: 00007f258d345fa0 RCX: 00007f258d17fed9 [ 260.761063][T13155] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 260.769028][T13155] RBP: 00007f258d1f3cc8 R08: 0000000000000004 R09: 0000000000000000 [ 260.776994][T13155] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.784959][T13155] R13: 0000000000000000 R14: 00007f258d345fa0 R15: 00007ffebdec9548 [ 260.792932][T13155] [ 260.808197][T13155] Mem-Info: [ 260.811342][T13155] active_anon:8148 inactive_anon:0 isolated_anon:0 [ 260.811342][T13155] active_file:1520 inactive_file:38284 isolated_file:0 [ 260.811342][T13155] unevictable:768 dirty:199 writeback:0 [ 260.811342][T13155] slab_reclaimable:10821 slab_unreclaimable:113444 [ 260.811342][T13155] mapped:28498 shmem:1432 pagetables:639 [ 260.811342][T13155] sec_pagetables:0 bounce:0 [ 260.811342][T13155] kernel_misc_reclaimable:0 [ 260.811342][T13155] free:1308334 free_pcp:373 free_cma:0 [ 260.856811][T13155] Node 0 active_anon:32592kB inactive_anon:0kB active_file:6080kB inactive_file:153064kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113992kB dirty:796kB writeback:0kB shmem:4192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12988kB pagetables:2556kB sec_pagetables:0kB all_unreclaimable? no [ 260.889542][T13155] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 260.953031][T13155] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 260.982866][T13155] lowmem_reserve[]: 0 2465 2466 0 0 [ 260.988528][T13155] Node 0 DMA32 free:1309296kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:31864kB inactive_anon:0kB active_file:6080kB inactive_file:152240kB unevictable:1536kB writepending:796kB present:3129332kB managed:2552844kB mlocked:0kB bounce:0kB free_pcp:2684kB local_pcp:1304kB free_cma:0kB [ 261.072723][T13155] lowmem_reserve[]: 0 0 0 [ 261.077622][ T6280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.094442][T13155] 0 0 [ 261.097272][T13155] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 261.129546][T13155] lowmem_reserve[]: 0 0 0 0 0 [ 261.183029][T13155] Node 1 Normal free:3908232kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.245084][ T6280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.255698][T13155] lowmem_reserve[]: 0 0 0 0 0 [ 261.262632][T13155] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 261.287562][T13155] Node 0 DMA32: 1704*4kB (UME) 612*8kB (UME) 737*16kB (UME) 964*32kB (UME) 1885*64kB (UME) 287*128kB (UME) 130*256kB (UM) 322*512kB (UME) 151*1024kB (UM) 9*2048kB (UME) 183*4096kB (UM) = 1332496kB [ 261.312897][T13155] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 261.338835][T13155] Node 1 Normal: 216*4kB (UME) 43*8kB (UME) 39*16kB (UME) 235*32kB (UME) 86*64kB (UME) 31*128kB (UME) 15*256kB (UME) 5*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3908232kB [ 261.361313][ T6280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.384683][T13155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.402669][T13155] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.412446][T13155] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 261.422417][T13155] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 261.431889][T13155] 41239 total pagecache pages [ 261.461697][ T6280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.483039][T13155] 0 pages in swap cache [ 261.487219][T13155] Free swap = 124996kB [ 261.491377][T13155] Total swap = 124996kB [ 261.495608][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 261.512925][T13155] 2097051 pages RAM [ 261.516804][T13155] 0 pages HighMem/MovableOnly [ 261.521498][T13155] 426990 pages reserved [ 261.525790][T13155] 0 pages cma reserved [ 261.633774][ T6280] bridge_slave_1: left allmulticast mode [ 261.639444][ T6280] bridge_slave_1: left promiscuous mode [ 261.656758][ T6280] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.672761][ T6280] bridge_slave_0: left allmulticast mode [ 261.682262][ T6280] bridge_slave_0: left promiscuous mode [ 261.689223][ T6280] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.992398][ T6280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.003234][ T6280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.013571][ T6280] bond0 (unregistering): Released all slaves [ 262.270899][ T6280] hsr_slave_0: left promiscuous mode [ 262.532885][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 262.542608][T13180] __nla_validate_parse: 11 callbacks suppressed [ 262.542625][T13180] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2057'. [ 262.573002][ T6280] hsr_slave_1: left promiscuous mode [ 262.581389][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 262.591803][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 262.595231][T13183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2058'. [ 262.609377][T13182] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 262.618826][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.626749][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.635928][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 262.643923][ T6280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.652458][ T6280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.652598][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 262.668286][ T5833] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 262.676143][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.714070][ T6280] veth1_macvtap: left promiscuous mode [ 262.719613][ T6280] veth0_macvtap: left promiscuous mode [ 262.725359][ T6280] veth1_vlan: left promiscuous mode [ 262.730671][ T6280] veth0_vlan: left promiscuous mode [ 262.799868][T13192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2063'. [ 262.809259][T13192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2063'. [ 262.852310][T13194] netlink: 732 bytes leftover after parsing attributes in process `syz.3.2063'. [ 262.878635][T13194] netlink: 732 bytes leftover after parsing attributes in process `syz.3.2063'. [ 263.406033][ T6280] team0 (unregistering): Port device team_slave_1 removed [ 263.444994][ T6280] team0 (unregistering): Port device team_slave_0 removed [ 263.503580][ T6302] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 263.582866][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 263.818077][T13171] netlink: 'syz.0.2057': attribute type 29 has an invalid length. [ 263.869488][T13192] team0: entered promiscuous mode [ 263.893923][T13192] dummy0: entered promiscuous mode [ 263.909565][T13192] ip6gretap0: entered promiscuous mode [ 263.916136][T13192] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 263.929923][T13192] Cannot create hsr debugfs directory [ 263.935592][T13192] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 263.947631][T13192] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 263.978470][T13201] bridge6: entered promiscuous mode [ 263.983997][T13201] bridge6: entered allmulticast mode [ 263.989592][T13201] team0: Device bridge6 is of different type [ 264.102462][T13206] netlink: 'syz.4.2065': attribute type 10 has an invalid length. [ 264.123615][T13178] lo speed is unknown, defaulting to 1000 [ 264.129671][T13206] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 264.464308][T13227] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2070'. [ 264.571006][T13232] netlink: 'syz.4.2074': attribute type 29 has an invalid length. [ 264.581654][T13232] netlink: 'syz.4.2074': attribute type 29 has an invalid length. [ 264.591338][T13232] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2074'. [ 264.612875][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 264.773508][T13178] chnl_net:caif_netlink_parms(): no params data found [ 264.785661][ T5833] Bluetooth: hci4: command tx timeout [ 264.902236][T13178] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.909555][T13178] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.917166][T13178] bridge_slave_0: entered allmulticast mode [ 264.924653][T13178] bridge_slave_0: entered promiscuous mode [ 264.932399][T13178] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.947993][T13178] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.955389][T13178] bridge_slave_1: entered allmulticast mode [ 264.963215][T13178] bridge_slave_1: entered promiscuous mode [ 265.008281][T13178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.032983][T13178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.097609][T13178] team0: Port device team_slave_0 added [ 265.115196][T13178] team0: Port device team_slave_1 added [ 265.198106][T13178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.213212][T13178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.263085][T13178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.327540][T13279] ipt_rpfilter: unknown options [ 265.366300][T13178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.379913][T13178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.393876][T13285] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2085'. [ 265.478249][T13178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.502003][T13290] Cannot find del_set index 4 as target [ 265.510329][T13290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2087'. [ 265.575837][T13274] netlink: 'syz.2.2085': attribute type 29 has an invalid length. [ 265.589889][T13283] syzkaller1: entered promiscuous mode [ 265.595687][T13283] syzkaller1: entered allmulticast mode [ 265.608048][T13282] netlink: 'syz.2.2085': attribute type 29 has an invalid length. [ 265.652870][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 265.691336][T13178] hsr_slave_0: entered promiscuous mode [ 265.703714][T13178] hsr_slave_1: entered promiscuous mode [ 265.710174][T13178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.717877][T13178] Cannot create hsr debugfs directory [ 266.260182][T13178] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.294897][T13178] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.325816][T13178] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.356414][T13178] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.518095][T13178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.557237][T13178] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.595599][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.602719][ T6298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.657814][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.664993][ T6298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.692927][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 266.801088][T13341] netlink: 'syz.0.2100': attribute type 29 has an invalid length. [ 266.855266][ T5833] Bluetooth: hci4: command tx timeout [ 266.876722][T13341] netlink: 'syz.0.2100': attribute type 29 has an invalid length. [ 266.983110][T13353] netlink: 'syz.3.2104': attribute type 1 has an invalid length. [ 266.995915][T13178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.021392][T13353] netlink: 'syz.3.2104': attribute type 1 has an invalid length. [ 267.030047][T13178] veth0_vlan: entered promiscuous mode [ 267.040143][T13178] veth1_vlan: entered promiscuous mode [ 267.060755][T13178] veth0_macvtap: entered promiscuous mode [ 267.070846][T13178] veth1_macvtap: entered promiscuous mode [ 267.087085][T13178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.097995][T13178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.109952][T13178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.119409][T13178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.129995][T13178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.140985][T13178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.150658][T13178] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.159649][T13178] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.168522][T13178] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.177337][T13178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.207114][T13361] xt_hashlimit: max too large, truncated to 1048576 [ 267.371491][T13178] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 267.403026][T13178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.448443][ T6280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.472820][ T6280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.537668][T13264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.572262][T13264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.732918][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 267.777905][T13380] ================================================================== [ 267.785996][T13380] BUG: KASAN: null-ptr-deref in mac802154_header_create+0x13f/0xa50 [ 267.788803][ T5833] Bluetooth: hci3: link tx timeout [ 267.793982][T13380] Write of size 4 at addr 000000000000004c by task syz.3.2113/13380 [ 267.794003][T13380] [ 267.794011][T13380] CPU: 0 UID: 0 PID: 13380 Comm: syz.3.2113 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 267.794034][T13380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 267.794046][T13380] Call Trace: [ 267.794053][T13380] [ 267.799930][ T5833] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 267.807285][T13380] dump_stack_lvl+0x241/0x360 [ 267.807316][T13380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.807340][T13380] ? __pfx__printk+0x10/0x10 [ 267.812492][ T5833] Bluetooth: hci3: link tx timeout [ 267.820500][T13380] ? _printk+0xd5/0x120 [ 267.820529][T13380] print_report+0xe8/0x550 [ 267.820552][T13380] ? __virt_addr_valid+0x58/0x530 [ 267.831393][ T5833] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 267.833846][T13380] ? mac802154_header_create+0x13f/0xa50 [ 267.833876][T13380] kasan_report+0x143/0x180 [ 267.833899][T13380] ? mac802154_header_create+0x13f/0xa50 [ 267.833926][T13380] kasan_check_range+0x282/0x290 [ 267.833950][T13380] mac802154_header_create+0x13f/0xa50 [ 267.833976][T13380] ? __pfx_mac802154_header_create+0x10/0x10 [ 267.834006][T13380] ? neigh_connected_output+0x1d5/0x450 [ 267.834027][T13380] ? read_seqbegin+0x157/0x2b0 [ 267.834047][T13380] ? lockdep_hardirqs_on+0x99/0x150 [ 267.834070][T13380] ? read_seqbegin+0x208/0x2b0 [ 267.834097][T13380] ? __pfx_mac802154_header_create+0x10/0x10 [ 267.834121][T13380] neigh_connected_output+0x27f/0x450 [ 267.834147][T13380] ? ip_finish_output2+0x45f/0x1390 [ 267.834166][T13380] ? ip_finish_output2+0x45f/0x1390 [ 267.834184][T13380] ip_finish_output2+0xe70/0x1390 [ 267.834204][T13380] ? nf_hook+0x9e/0x450 [ 267.834219][T13380] ? ip_finish_output2+0x45f/0x1390 [ 267.834240][T13380] ? __pfx_ip_finish_output2+0x10/0x10 [ 267.834257][T13380] ? ip_setup_cork+0x4e0/0x9c0 [ 267.834275][T13380] ? ip_fast_csum+0x1f4/0x2b0 [ 267.834295][T13380] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 267.834312][T13380] ? __ip_finish_output+0x349/0x400 [ 267.834332][T13380] ip_push_pending_frames+0xbf/0x150 [ 267.834351][T13380] raw_sendmsg+0x1aad/0x2430 [ 267.834386][T13380] ? __pfx_raw_sendmsg+0x10/0x10 [ 267.834415][T13380] ? aa_sk_perm+0x96d/0xab0 [ 267.834449][T13380] ? __pfx_aa_sk_perm+0x10/0x10 [ 267.834474][T13380] ? inet_sendmsg+0x330/0x390 [ 267.834495][T13380] __sock_sendmsg+0x1a6/0x270 [ 267.834520][T13380] ____sys_sendmsg+0x52a/0x7e0 [ 267.834543][T13380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.834560][T13380] ? __fget_files+0x2a/0x410 [ 268.046430][T13380] ? __fget_files+0x2a/0x410 [ 268.051016][T13380] __sys_sendmsg+0x269/0x350 [ 268.055600][T13380] ? __pfx___sys_sendmsg+0x10/0x10 [ 268.060716][T13380] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 268.067033][T13380] ? do_syscall_64+0x100/0x230 [ 268.071788][T13380] ? do_syscall_64+0xb6/0x230 [ 268.076455][T13380] do_syscall_64+0xf3/0x230 [ 268.080952][T13380] ? clear_bhb_loop+0x35/0x90 [ 268.085619][T13380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.091509][T13380] RIP: 0033:0x7f2ff3b7fed9 [ 268.095912][T13380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.115506][T13380] RSP: 002b:00007f2ff498b058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.123910][T13380] RAX: ffffffffffffffda RBX: 00007f2ff3d45fa0 RCX: 00007f2ff3b7fed9 [ 268.131868][T13380] RDX: 0000000000000000 RSI: 0000000020001640 RDI: 0000000000000004 [ 268.139831][T13380] RBP: 00007f2ff3bf3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 268.147796][T13380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.155757][T13380] R13: 0000000000000000 R14: 00007f2ff3d45fa0 R15: 00007ffcb5a46468 [ 268.163726][T13380] [ 268.166730][T13380] ================================================================== [ 268.196454][T13380] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 268.203673][T13380] CPU: 1 UID: 0 PID: 13380 Comm: syz.3.2113 Not tainted 6.13.0-rc1-syzkaller-00236-g51db5c894300 #0 [ 268.214443][T13380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 268.224506][T13380] Call Trace: [ 268.227785][T13380] [ 268.230726][T13380] dump_stack_lvl+0x241/0x360 [ 268.235430][T13380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.240646][T13380] ? __pfx__printk+0x10/0x10 [ 268.245253][T13380] ? preempt_schedule+0xe1/0xf0 [ 268.250120][T13380] ? vscnprintf+0x5d/0x90 [ 268.254462][T13380] panic+0x349/0x880 [ 268.258372][T13380] ? check_panic_on_warn+0x21/0xb0 [ 268.263504][T13380] ? __pfx_panic+0x10/0x10 [ 268.267933][T13380] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 268.273925][T13380] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 268.280266][T13380] ? print_report+0xe8/0x550 [ 268.284873][T13380] check_panic_on_warn+0x86/0xb0 [ 268.289838][T13380] ? mac802154_header_create+0x13f/0xa50 [ 268.295494][T13380] end_report+0x77/0x160 [ 268.299747][T13380] kasan_report+0x154/0x180 [ 268.304255][T13380] ? mac802154_header_create+0x13f/0xa50 [ 268.309897][T13380] kasan_check_range+0x282/0x290 [ 268.314834][T13380] mac802154_header_create+0x13f/0xa50 [ 268.320345][T13380] ? __pfx_mac802154_header_create+0x10/0x10 [ 268.326340][T13380] ? neigh_connected_output+0x1d5/0x450 [ 268.331892][T13380] ? read_seqbegin+0x157/0x2b0 [ 268.336660][T13380] ? lockdep_hardirqs_on+0x99/0x150 [ 268.341869][T13380] ? read_seqbegin+0x208/0x2b0 [ 268.346641][T13380] ? __pfx_mac802154_header_create+0x10/0x10 [ 268.352639][T13380] neigh_connected_output+0x27f/0x450 [ 268.358033][T13380] ? ip_finish_output2+0x45f/0x1390 [ 268.363245][T13380] ? ip_finish_output2+0x45f/0x1390 [ 268.368464][T13380] ip_finish_output2+0xe70/0x1390 [ 268.373509][T13380] ? nf_hook+0x9e/0x450 [ 268.377671][T13380] ? ip_finish_output2+0x45f/0x1390 [ 268.382888][T13380] ? __pfx_ip_finish_output2+0x10/0x10 [ 268.388348][T13380] ? ip_setup_cork+0x4e0/0x9c0 [ 268.393104][T13380] ? ip_fast_csum+0x1f4/0x2b0 [ 268.397792][T13380] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 268.402659][T13380] ? __ip_finish_output+0x349/0x400 [ 268.407870][T13380] ip_push_pending_frames+0xbf/0x150 [ 268.413167][T13380] raw_sendmsg+0x1aad/0x2430 [ 268.417789][T13380] ? __pfx_raw_sendmsg+0x10/0x10 [ 268.422746][T13380] ? aa_sk_perm+0x96d/0xab0 [ 268.427271][T13380] ? __pfx_aa_sk_perm+0x10/0x10 [ 268.432140][T13380] ? inet_sendmsg+0x330/0x390 [ 268.436830][T13380] __sock_sendmsg+0x1a6/0x270 [ 268.441526][T13380] ____sys_sendmsg+0x52a/0x7e0 [ 268.446305][T13380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.451606][T13380] ? __fget_files+0x2a/0x410 [ 268.456216][T13380] ? __fget_files+0x2a/0x410 [ 268.460819][T13380] __sys_sendmsg+0x269/0x350 [ 268.465427][T13380] ? __pfx___sys_sendmsg+0x10/0x10 [ 268.470573][T13380] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 268.476920][T13380] ? do_syscall_64+0x100/0x230 [ 268.481704][T13380] ? do_syscall_64+0xb6/0x230 [ 268.486399][T13380] do_syscall_64+0xf3/0x230 [ 268.490913][T13380] ? clear_bhb_loop+0x35/0x90 [ 268.495603][T13380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.501516][T13380] RIP: 0033:0x7f2ff3b7fed9 [ 268.505938][T13380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.525558][T13380] RSP: 002b:00007f2ff498b058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.533992][T13380] RAX: ffffffffffffffda RBX: 00007f2ff3d45fa0 RCX: 00007f2ff3b7fed9 [ 268.541974][T13380] RDX: 0000000000000000 RSI: 0000000020001640 RDI: 0000000000000004 [ 268.549961][T13380] RBP: 00007f2ff3bf3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 268.557945][T13380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.565926][T13380] R13: 0000000000000000 R14: 00007f2ff3d45fa0 R15: 00007ffcb5a46468 [ 268.573923][T13380] [ 268.577210][T13380] Kernel Offset: disabled [ 268.581524][T13380] Rebooting in 86400 seconds..