last executing test programs: 6.391889021s ago: executing program 2 (id=5998): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="f800000000000000000000000700000083"], 0xf8, 0x7400}, 0x0) 6.293328612s ago: executing program 2 (id=5999): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010003904000000000000000000000005", @ANYRES32=r2, @ANYBLOB="00000000000000021c001680180001"], 0x44}}, 0x0) 6.284499505s ago: executing program 2 (id=6000): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x160, 0xa, 0x148, 0x0, 0x10, 0x3b0, 0x2a8, 0x2a8, 0x3b0, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x120, 0x160, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'macvlan0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00', 0x0}, {'pim6reg0\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "335d2565d31034fbd4bf655e219c13faa9dfed5859a72255f7c2027c2073"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4a8) (async) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) (async) getpeername(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x56, &(0x7f0000000200)={&(0x7f0000000400)=@getsa={0x1a4, 0x12, 0x0, 0x0, 0x0, {@in6=@private1}, [@replay_val={0x10}, @XFRMA_IF_ID={0x8}, @policy_type={0xa}, @coaddr={0x14, 0xe, @in6=@dev}, @algo_crypt={0x71, 0x2, {{'ctr-cast5-avx\x00'}, 0x148, "49747c506302c82f0d82921c5349841f02f8962f01d2e327a223dffe2395a11ec9fbe16efe55854ce1"}}, @tmpl={0x84, 0x5, [{{@in6=@loopback}, 0x0, @in=@multicast1}, {{@in6=@remote}, 0x0, @in=@loopback}]}, @algo_auth_trunc={0x4c, 0x14, {{'crct10dif-arm64-ce\x00'}}}]}, 0x1a4}}, 0x0) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) socket$inet6(0xa, 0x80803, 0x84) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000540)=""/109, &(0x7f00000005c0)=0x6d) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="bac8f69fe1f217", 0x7}, {&(0x7f0000000140)="e4884c15a1c9e74db6fc31f71f4d94842ef451acc8ef1624acce18676b461e86ab1424bb7e0989942e9b387cc65e18b946f0c751087c8e6726777e", 0x3b}, {&(0x7f0000000300)="e96c8679829274a95af7252e97b4345418863aa36bf39261cb0d91e5b769722e9899c8e7c6eb4d7b5170ab8dd0337702bf086b6298ea7ead29a226e7180df423d1d2e5f0ec84c9c1487ff47fc9eb1f7ba346006df2fbee80e8b4d8748107e77a8e2f11f32a81c391cfa2869a3cdb13aaddad1b19e229281f966a12047ee871a78faa1ff72000b84b4c0efdb21d37cbf4e41dbf9cec967af74f006d2d4a8c86b09b44582230337c3299d0332be74bad5804849b783b0cf86a867104cfc29825d10685367adab5b162d3a0bbe273f865592a782a3b55a56a386e8f8f3d8700de4768de0855c261", 0xe6}, {&(0x7f0000000400)="fd32012456e17aff7d83279a12b1dd06c076f3d92261f3055e52369d7fad029fad89f24423fa8824ece7b7ce3d7bf89ab653197fe354c127af23d4b5506e043bc78ee2ff3342a1ed6ff4970d52b2b2c1182d319df28ac0b89cc0eac918e7ef6be84130812a6323a9369cef00e43fd3c4fc432baa7a6a17b542c145cc96dd3d93bd62127f687712d21211e93b1be904", 0x8f}, {&(0x7f0000000180)="45581c703c17a18c917cf4687f942109c1e55d038c612a707051fe3380a1e67afd", 0x21}], 0x5}, 0x24000015) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000950095e7e8ca8ee3"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8919, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000200030000002c0004800500030001000000050003000000000005000300000000000500030080ff000005000300883ac1870800010003"], 0x50}}, 0x0) (async) r9 = socket(0x840000000002, 0x3, 0x100) connect$inet(r9, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r9, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_msfilter(r9, 0x0, 0x25, 0x0, 0x14) 6.192236626s ago: executing program 2 (id=6001): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) r1 = socket(0x10, 0x4, 0x69) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='reno\x00', 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='yeah\x00', 0x5) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mptcp_subflow_get_send\x00', r3}, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept4$llc(r4, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0xc02, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0000000000fcff001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 6.097341169s ago: executing program 2 (id=6002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 6.092086962s ago: executing program 2 (id=6003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x64, r1, 0x5, 0x0, 0x78, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}, 0x64}}, 0x0) 5.26080157s ago: executing program 3 (id=6017): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7964, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) 5.078134686s ago: executing program 3 (id=6018): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x109, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x60) 4.937246034s ago: executing program 3 (id=6021): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=ANY=[@ANYBLOB="6b0000000000000029000000020000000000000000000000000000007f000001080000000700000000000034366567f221978756640000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0014000029ad865103640000"], 0x6b}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73797a3100000000"], 0x6c}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xfffffffd}}]}}, 0x0, 0x4e}, 0x20) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) unshare(0x40030100) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f0000000000)=0x54) 1.634331375s ago: executing program 1 (id=6059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x1}, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x8, 0xd3, 0x0, 0x4, @remote, @mcast1, 0x8000, 0x8, 0xff, 0xdc6d}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x40040) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000001280)=""/187, 0x2a, 0xbb, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @exit, @exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0xd6, &(0x7f0000000100)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x12, 0x4, 0x8, 0x3}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x90, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x66e99, 0x74c4d}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x48, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x8}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xfb}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xfd}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x8}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @broadcast}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x1}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_vlan\x00'}, @IFLA_MASTER={0x8}]}, 0x90}}, 0x20000800) 1.42652399s ago: executing program 1 (id=6063): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x16, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 1.267500419s ago: executing program 1 (id=6066): r0 = socket$inet6(0xa, 0x80000, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x9}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'macsec0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000001400)=[{{&(0x7f0000000580)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000940)}}, {{&(0x7f0000000a40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000a80)}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000d40)}, {&(0x7f0000000d80)="6468980244d32b7f604e4d22fe87c74b457c5567f8d7963966669abd2dbb9175fd372d6784d1bb08adfa6e73d7b7e4c349a3450cc56fb71b00899750d76865ba0fc33128bb8943c28519c17c488f8f84c4e6625863c135998b468cd8883ec52f", 0x60}, {0x0}, {0x0}, {&(0x7f0000000f80)="9dc969133767e3fe564bbfd39cd6cd4bdd41e76c471683ba415ee0b0f5a6f74c7b894677fbad67f1c9b2cc70206980435aa168e030e0eda271e44f55aef7318ad352bca595602b0476589f96a675523914a72e4b09bff4699d34c9b812530d1f1a82", 0x62}], 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1100000000000000000000000100000000000000000000003000000000000000000000000700000044046f31441c8af1ffffffff000000020000000000010001e00000020000000838dc"], 0x48}}, {{&(0x7f0000001140)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001180)="e307ffa87ccdde244d187dd07f1b3242ec4ee4133d47e9230b18f37f7cc63d98d7eb06a83234a16db3f4cee3d0370a10a121f7fab1864462102f8ab7d757e22d1850d2022546eb691a69f4b82c110ef8d1d5067f724d5322158da6baf5c6d03229a7ac5f", 0x64}, {&(0x7f0000001200)="6265fb630826b77ee24fd42d36f105ca45f68bbe2f3fcf3b47ae94181242567a075a4b493689b2a1faad908c5746baac5f0e4c43b98b4517791841087b1c41e3ec349f8d640eb5237d9a6ddf3f3002bcf806ad6a65d30e8dd2c0d1f7ec5b912c64c1f7dcc41c47dd0332fe11750f318ca9cc2f761c7acf3cf9b6df1cb37d945acd28c89e11f711011644b069fabeca517e1feabf5e2e07b16c68edb42f66746ee3ba48e341", 0xa5}], 0x2, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="7f000001e0000002000000001000000000000000000000000700000014000000000000000000170001000000060000000000000011000000000000010000000000000000000000140000000000000000000000020000000300000000000000140000000000000000000000010000000700"/124], 0x90}}], 0x4, 0x24008004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a0012000200142603600e12080005007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="e4fb27540629e63a7e8d427bbdb48031f95f1ff6b631691154d6924078e1b437423dcf2f3b432757b4007dca092ef4a49b017af836a7a0a2b24ed3f50a5e825c7e9409a96904aa01d6"], 0x8) getsockopt$inet6_opts(r3, 0x29, 0x39, 0x0, &(0x7f0000000180)) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x7, 0x0, &(0x7f0000000040)) getsockopt$inet_tcp_buf(r2, 0x6, 0x0, &(0x7f00000002c0)=""/244, &(0x7f0000000080)=0xf4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f00000003c0)={0x10000000}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) ioctl$FITRIM(r6, 0x40305839, &(0x7f00000000c0)={0x0, 0x0, 0x800f003}) r7 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b80), 0xffffffffffffffff) connect$caif(r5, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000004800010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000000089ba0743d9a868754000100ff050000000000000000000000000001"], 0x38}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, r9, 0x1}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.231991151s ago: executing program 0 (id=6067): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0xd, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0x700}}]}]}}}]}, 0x64}}, 0x0) 1.122186488s ago: executing program 3 (id=6069): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0100001000130700000000fbdbdf25fe8000000000000000120000000000aa00000000000000000000ffff000000004e2200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="e00000020000000000000000000000000000000032000000acf414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000800000000000000000ff000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000600000000000000000000000a00000000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040"], 0x13c}}, 0x0) 1.078331098s ago: executing program 4 (id=6070): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 1.009704283s ago: executing program 3 (id=6071): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{0x0}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="1400000000000000010000002500000002010000000000004800000000000000080000000797dbc64107b42c556567f2219787566400007300000000000000000000000008000000ef3820f3439cb150a3651e799ef4dca1e3c32158996e4b2abde5f2ba8b679121ac0b0ad62ade31fb2c47f0bbf781eb8bd1e3064141e90e9eac25b189c0da98b676571bbeefba392c3e15a10e03dee4ae1dfe99793e51ec0c6bb5fa6d7b357d249502f5919ef251e5d0e5bed378265b8bd55fde4689cb509b14fa754813a27e72d175e8d677420e10d65108006e2ab8168b1d633b1bb9a7d4d59ebdc7083d93d35cd469deb0d81d7adee2ef7c2f058c2c262b97ecbfb32fe3e3ffcdf7b5c24d0ab0a7ae9e6be6c115c5663dd864d655a7babdcf8315dc29b6f18539abf1422502d7d53ce861d8a07dbb00c5a94e0186689f988628a0986d8f0419924348a32be8950099b4718e6109b9eed9e5b3e8ff86d22cf39479b26cc3e977df19f757432bf055090461", @ANYRES32=0x0], 0x6b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x81, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x48) 1.009366853s ago: executing program 0 (id=6072): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x1}, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x8, 0xd3, 0x0, 0x4, @remote, @mcast1, 0x8000, 0x8, 0xff, 0xdc6d}}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x40040) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, &(0x7f0000001280)=""/187, 0x2a, 0xbb, 0x1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000280)=@framed={{}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @exit, @exit, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x48}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0xd6, &(0x7f0000000100)=""/214, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x12, 0x4, 0x8, 0x3}, 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x90, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x66e99, 0x74c4d}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x48, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x8}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xfb}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xfd}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r6}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x8}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @broadcast}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x1}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_vlan\x00'}, @IFLA_MASTER={0x8}]}, 0x90}}, 0x20000800) 921.111428ms ago: executing program 3 (id=6073): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x5f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) r1 = gettid() pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = epoll_create1(0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0xb08e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee1, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0}}, 0x10) r7 = socket$kcm(0x29, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @dev, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@loopback}]}, @cipso={0x86, 0x21, 0x0, [{0x0, 0x8, "0100f2fcb6ba"}, {0x0, 0x11, "4eb8a616e1992a157e49878192645b"}, {0x0, 0x2}]}]}}}}}}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000200791048000000000069040c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x14) socket$inet6_udplite(0xa, 0x2, 0x88) r9 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050400a3ae00006110750000000000040000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x90) setsockopt$inet6_int(r9, 0x29, 0x16, &(0x7f0000000140), 0x4) sendmmsg$unix(r4, &(0x7f0000003540)=[{{&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f00000000c0)="dd1ba7", 0x3}, {&(0x7f0000000300)="c9974f053da6f9e49f4bd1aae51bae48ea9364796c122079aaa8481d1ed4b84f2b98bc65c83ed7a7b1a49c89d11ac1a5f1af0c0bd7080b31d179d9", 0x3b}, {&(0x7f0000000440)="0548c4a06939e379425855bd6b7bb73b244236717fe29e0bff5204c24f47f16aff6114cb0b741f8b8be84580ea33c7cac27777229d", 0x35}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000480)="bda8dfaf2946bf3febb5a68186bfbde0c749ee72bae486b02c649042ec3636d12d5d478c3c3498cdc1f170062620aada232a2511d7ae0618afefa7515ee4856cc501caa89ff86818235f8518fd8ca8ca", 0x50}, {&(0x7f0000004000)="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", 0x102b}, {&(0x7f0000000500)="484097f8fb16b36db93ee10cb8d650e4143598ab2ce370947f1a61abd6362847910bd1580d37591f5354a56e9f9701df28b4a29ffc64bc7020d812fea48c94338e958d32a8c28830bbf8839844ca48bdaed5ed489d26f34686d86390fb5e18bb92eade5d2e805abd1d87067e47dfa0a1baee4bb344c1", 0x76}], 0x7, 0x0, 0x0, 0x4000}}, {{&(0x7f00000007c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000840)="9cb98a3b64a1904bedab5ffe494ef89cbeca28abd320756726450bdbb8bb937557ed7ec8bc8c1471b27d6f856de472620d6934629d5df93413b497db26082de5565201b5cc8b038dd9174ad6c72af3ba457d", 0x52}, {&(0x7f00000008c0)="3d3f21709b47cf2f173d4d4a3156b435950e03cf8a74827e6c220625813df60680258d459cc1dab08e7fb5bb04c28821947b2ad6d4b084d5ecc9a263afb8b982f266296165988a", 0x47}, {&(0x7f0000000940)="1cda891c1830d4f526ae0e7dc468869bcb2b3c80f553e22aa89cdf6c3d0904a63d74c3b2bb0e55104b5f40cb9c1fbf85c7a2b6f02a6b1866563b4d114794d5143f70d86865647ea67bc1533428df47497380c52991a33efb6598eda36819c0d2574472bc06cf064b8530559c17aa82663f291c78fda23e30c66baac0f3ae6fd8bc959356b03beea830140c19e9f691c38e85439ce1d8a4537083d3649d34b03c59c1a1f306338b0fc99727a2603f99816056ea33b5eba15ee689a9d73738f0238b7d3d4a73ccf6284f5ca142bac587c0bdcacb380c97c3d2faa057f31e05b1ef6f78be5b5087dab4939e945588ac49633931", 0xf2}], 0x3, 0x0, 0x0, 0x20004000}}, {{&(0x7f0000002b00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002cc0)=[{&(0x7f0000002b80)="6594f693ea45918f8c87bbd2a2027f1bbf938c0e13ea0cf352065027fecdf9097e2b775c1886cb26c3174549c7cfcc2ca93fab4a67b86a7337bd8cddd4e0a788cd4de6e17460eede33423a6021090d7c7b17645feb7701519301af0d0d6111949b42c73187e6ca4eebeadc56bab13099563e6b36d55026418e981c288ad12aa1f075d9a22e26fe8b2c8be815a78be29aa866bf", 0x93}, {&(0x7f0000002c40)="e74cfb122a999a3ea1e4732deb1d19e12698567ced4c91e9a72085308de255a5e91d93415e4e94687cfa7659fc17ab4993f498ab3584780fdd61027814fdd9ac20f8ae800ec747356f7c", 0x4a}, {&(0x7f0000000600)}], 0x3, &(0x7f0000002d80)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x18, 0x1, 0x1, [r7, r0]}}], 0x78, 0x8000}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002e00)="268b334d1fad4c4ed39d155b002cfe621e7af24e1a2672050bf82ad13cd6822543bbea91c088e4024b6de8a208078e34990e5301e43e1510f9a80d16033f4131c4efbe77e3c084adb787209013cb3f9bf70e474ad5067b574db22d0987ad41dad53fd23729889c5244c9c559a15fbb1547d0817860402626869b2468d6807b2a3ecc86ee43417c63a853548edf7f1faeb3d4281938239d1fe50f033e8370c3932830b7de395dc65c8cb57915c60f389a5f6faa3f430a35d256ba10d5e0023ede12dbfc56d3", 0xc5}, {&(0x7f0000002f00)="f1992c9ffa325d306e89c1b78aadd88d75c9c3a1b81d061c0f1cd12500000000000001c4be1c6f78e0aae9537a6db05d25e684c16aa28a0786", 0x39}], 0x2, &(0x7f0000003100)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r2, r8, 0xffffffffffffffff]}}], 0x60, 0x20008844}}, {{&(0x7f0000003180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003200)="5820e4310d5b8a7974f86e7a0f7c693d51f41453a87b4f445ae1ce23377fb21baa241224a61227ef27228e6f2b6bd08bf4c0d90a0d0fc322e6a623c5fb90a5d648acadc011a99d59eae148d9210d12491bdca883abcc5944d1ffc3bbf64514018eafd171b3008edbea96418b0bfd14792446d922ce76ed68cb93293fb67cadb6eeadc21428c791060eb5afa793e332d298ffd89b5d777ea8facbffb18fb70aa82cae1780a243a6050d9a5b1793f8c53480bc90257b0e9b7bbbaec58ac5424b581ae66f92b11d09b298df8f089e98b0ddfb0a4389bd3899c251a659b3fc3f719566ad9474541eaca373", 0xe9}, {&(0x7f0000003300)="f8f478ec7ba2a5904c756488d42651bd1f425e132fcb996387c7312e5dd9a8817de1f80c1396ec6a20519c07dc1d4bc309eefb88eb04c83c6de09fec633ff1d262baf076afd255c903df6fed4bb4d80784f17b09265430844a511af8f43d60339bdc93e3b55b87aa16e5b11e9fdc7b74781b40707a8a656a3a367a32bd46c8875caf631a1d9dcca29783c578192b229df3ca1a84f20df1c27649c8d5d32e27db936a06443eb01b72724ead16c879", 0xae}, {&(0x7f00000033c0)="1a98ca657f24bd8e4a1a84584b179df546a6c9d9d0a7a3f82930c37f0c38d9065778a9cb678518c738051c9d47bd0f371152905034c7f4dd6ba6c4a1ebbc76b7bc6b8a29621a9b5919e49124edda0f91a6090032f401bef4e7263b0660e1559cab4ff1c1b68cf3a2e32fc7e076488b00ea28ab746d7bd12e2450171659613df318ab3e5fdedc41435ef58bd96f89786960b9b10f180e12e294fb72d3e42f5d9d0d5bbddc6ce7a1a6ee625175427b79", 0xaf}, {&(0x7f0000003480)="fed10862977553876c0452", 0xb}], 0x4, &(0x7f0000003500), 0x0, 0x4}}], 0x5, 0x44000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r10, &(0x7f0000000100)={0x20000014}) 919.455031ms ago: executing program 4 (id=6074): socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000feffffff0009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 905.804045ms ago: executing program 1 (id=6075): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) socket$tipc(0x1e, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400b595000000fffc0000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000001000001f0ffff0000000000000000140001"], 0x54}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) read$alg(0xffffffffffffffff, 0x0, 0xffffffffffffff00) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x1, 0x7) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890b, &(0x7f0000000000)={@remote, @ipv4, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x810026, r8}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x0, 0x7, 0x8, 0x5, {{0x12, 0x4, 0x1, 0x4, 0x48, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@end, @timestamp_prespec={0x44, 0x2c, 0xf3, 0x3, 0x5, [{@loopback, 0x20}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010102, 0x1}, {@loopback, 0x2272332}, {@loopback, 0x4}]}, @rr={0x7, 0x7, 0x4d, [@private=0xa010101]}]}}}}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000d1e381df1ad34fbd87d8124fa1a2549fdba2a604327cb5242996a4e2072ea12cb3a708fb415bf219d4061bb0bc2a730eae5268aa505897e05c7aa59968c61c789d658336f2037a2f81bd579fbd5fc536", @ANYRES16=r5, @ANYBLOB="1c022bbd7000fbdbdf2502000000080005000a01010108000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080008000000000008000400ac1414bb08000700", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x1c844) r9 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c, 0x80c00) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={r10, @in={{0x2, 0x4e20, @loopback}}}, &(0x7f00000001c0)=0x84) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x20040000) unshare(0xc040480) ioctl$FS_IOC_MEASURE_VERITY(r11, 0xc0046686, 0x0) bind$isdn(r11, &(0x7f0000000400)={0x22, 0x8, 0x3, 0x73, 0x20}, 0x6) 760.082112ms ago: executing program 0 (id=6076): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000bc0)={&(0x7f0000000200), 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x48, 0xd, 0x6, 0x9b32c64eebd65652, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040004}, 0x40840) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x48005) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="180000000c140103000000000000000004000100000000008e721fa0f7af7076d4c375613f0176deb0315c30"], 0x18}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000080)) unshare(0x20000400) pselect6(0x40, &(0x7f0000000000)={0x10, 0x4, 0x80000000000, 0x3, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2], 0x18}}, 0x801) recvmsg$unix(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000400)=""/211, 0xfffffffffffffebf}, {&(0x7f0000000500)=""/224, 0xffffffffffffff97}, {&(0x7f0000000600)=""/196, 0xc4}, {&(0x7f0000000700)=""/111, 0x6f}, {&(0x7f0000000a00)=""/115, 0x6c}, {&(0x7f0000000780)=""/39, 0x27}, {&(0x7f00000007c0)=""/241, 0xf1}, {&(0x7f00000008c0)}], 0x9}, 0x40010102) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x92, 0x101, 0x11e, 0x90, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x0, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) 642.04667ms ago: executing program 4 (id=6077): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x19c}}, 0x0) 563.922318ms ago: executing program 4 (id=6078): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$inet6(0xa, 0x200000000003, 0x87) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fce6ff00000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x7}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x14, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f80)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000c0000001800018014000200697036677265300000000000000000001000ff0008000200000000009f02de3c"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_newroute={0x40, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0xfd}, [@RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0x10, 0x3, 0x0, 0x1, @LWT_BPF_PROG_NAME={0xa, 0x2, 'kfree\x00'}}}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x200000, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f00000001c0)={0x2c, 0x0, r6}, 0x10) socket$netlink(0x10, 0x3, 0x400000000000004) 447.995748ms ago: executing program 0 (id=6079): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRESOCT], 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r9}, &(0x7f0000000280), &(0x7f00000002c0)=r10}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r7) syz_init_net_socket$x25(0x9, 0x5, 0x0) 377.367647ms ago: executing program 1 (id=6080): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x9, 0x3, 0x220, 0xe0, 0xffffffff, 0xffffffff, 0xe0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'team0\x00', 'ipvlan1\x00'}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0x1000000}}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) 273.508179ms ago: executing program 0 (id=6081): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32, @ANYBLOB="00000000000000003c003780090001007866726d000000002c0002800800010002"], 0x64}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fce6ff00000000000000000000000000fe8000000000000000000000200000aa"], 0x0) 253.801429ms ago: executing program 1 (id=6082): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x24e580, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x2004c804, &(0x7f0000000080)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="091c86dd0700100000001000000060ec97000f"], 0xffe) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'macsec0\x00', 0x3300}) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x7}, 0x1c) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0xb6, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000a8000000000021907800000000ffffffff0500907800000000430000000000000000000000ac1e0001ac141401071300e000000200000000ffffffffffffffff23442000000000000000000000000000000000000000000000000000000000000083030044240001ac1414aa0000000000000000000000000000000000040000ac1414bb00000004861a00000000000e82ee46f3c317e9defd568c5c00068e281690000200e7a897ceea67b52a720e0d84b820ffcbe2774fb46c9bc8fd0ab314de7359aab295a0402470b3d9884dd6a726b13fc5d008321869283148db2962016b73"], 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)="0322f1fde6d84309e82f6c5b4d9860376e95cf9a50b6726d57", 0x19}], 0x1, 0x0, 0x0, 0x4008945}, 0x0) recvmmsg(r5, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="00020201", @ANYRES64=r6, @ANYRES8], 0x18) sendmmsg$inet6(r6, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000300)='Y', 0x1}], 0x1}}], 0x1, 0x40) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) 109.162731ms ago: executing program 0 (id=6083): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 91.072735ms ago: executing program 4 (id=6084): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) 0s ago: executing program 4 (id=6085): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305000000000074000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e00", @ANYRES32, @ANYBLOB="08000400e9108dc1"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): tribute type 8 has an invalid length. [ 390.241885][T17676] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 390.320497][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 390.503069][T17695] __nla_validate_parse: 25 callbacks suppressed [ 390.503089][T17695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4315'. [ 390.541341][T17698] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4320'. [ 390.753779][T17714] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4327'. [ 390.889235][T17722] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 390.908462][ T5141] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 390.954680][T17724] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 391.236043][T17738] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.4339'. [ 391.348985][T17745] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4340'. [ 391.388684][T17745] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 391.680053][ T5141] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 391.710642][T17767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4349'. [ 391.887509][T17781] (unnamed net_device) (uninitialized): (slave tunl0): Device is not bonding slave [ 391.921916][T17781] (unnamed net_device) (uninitialized): option active_slave: invalid value (tunl0) [ 392.134443][T17799] IPv6: sit1: Disabled Multicast RS [ 392.389975][T17820] netlink: 'syz.4.4364': attribute type 10 has an invalid length. [ 392.417612][T17817] tc_dump_action: action bad kind [ 392.424247][T17820] netlink: 'syz.4.4364': attribute type 10 has an invalid length. [ 392.440485][ T5141] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 392.461587][T17816] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 392.618368][T17829] netlink: 'syz.3.4368': attribute type 10 has an invalid length. [ 392.660545][T17834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4370'. [ 392.743871][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4371'. [ 392.825235][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4374'. [ 392.869924][T17841] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4374'. [ 392.990299][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 393.223782][T17873] Dead loop on virtual device ipvlan1, fix it urgently! [ 393.262059][T17869] Dead loop on virtual device ipvlan1, fix it urgently! [ 393.380035][T17881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.658820][T17950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.561948][T18008] __nla_validate_parse: 10 callbacks suppressed [ 395.561968][T18008] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4430'. [ 395.611579][T18009] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4429'. [ 395.718105][T18016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.794018][T18016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4433'. [ 395.878980][T18026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4436'. [ 395.891123][T18028] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4435'. [ 396.127371][T18038] lo speed is unknown, defaulting to 1000 [ 396.172040][T18042] netlink: 'syz.2.4445': attribute type 11 has an invalid length. [ 396.208646][T18041] bridge0: entered promiscuous mode [ 396.226423][T18045] netlink: 'syz.2.4445': attribute type 11 has an invalid length. [ 396.272682][T18041] bond0: entered promiscuous mode [ 396.277949][T18041] bond_slave_0: entered promiscuous mode [ 396.340162][T18041] bond_slave_1: entered promiscuous mode [ 396.378643][T18041] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 396.400181][T18041] Cannot create hsr debugfs directory [ 396.437770][T18045] debugfs: Directory 'netdev:' with parent 'phy46' already present! [ 396.601372][T18056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4449'. [ 396.641898][T18062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4449'. [ 396.803476][T18074] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4454'. [ 396.926599][T18038] lo speed is unknown, defaulting to 1000 [ 397.177037][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4460'. [ 397.405379][T18101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4465'. [ 397.600821][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 397.901901][T18136] openvswitch: netlink: Key 24 has unexpected len 2 expected 4 [ 398.274367][T18159] netlink: 'syz.1.4480': attribute type 10 has an invalid length. [ 398.709945][T18168] IPVS: persistence engine module ip_vs_pe_À not found [ 399.256724][T18201] netlink: 'syz.0.4495': attribute type 2 has an invalid length. [ 399.286567][T18204] netlink: 'syz.0.4495': attribute type 2 has an invalid length. [ 399.883817][T18224] IPVS: persistence engine module ip_vs_pe_À not found [ 400.702148][T18262] __nla_validate_parse: 16 callbacks suppressed [ 400.702175][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4513'. [ 400.740385][T18266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4515'. [ 400.749401][T18266] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4515'. [ 401.153504][T18276] syzkaller0: entered promiscuous mode [ 401.160938][T18276] syzkaller0: entered allmulticast mode [ 401.179003][T18286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4520'. [ 401.511998][ T5103] Bluetooth: hci0: link tx timeout [ 401.518741][ T5103] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 403.442314][T18296] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4523'. [ 403.607220][ T5094] Bluetooth: hci0: command 0x0406 tx timeout [ 403.635917][T18316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4530'. [ 403.732525][T18325] netlink: 'syz.2.4527': attribute type 10 has an invalid length. [ 404.022281][T18340] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4536'. [ 404.052488][T18342] netlink: 'syz.0.4537': attribute type 1 has an invalid length. [ 404.256080][T18358] netlink: 'syz.0.4541': attribute type 4 has an invalid length. [ 404.292027][T18364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4542'. [ 404.328587][T18364] IPVS: Error joining to the multicast group [ 404.538056][T18379] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4551'. [ 404.598185][T18385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4552'. [ 404.981176][ T5141] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 405.024627][T18410] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 405.148706][T18416] netlink: 'syz.1.4561': attribute type 4 has an invalid length. [ 405.215287][T18416] infiniband syz1: set down [ 405.270311][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 405.290074][ T5141] lo speed is unknown, defaulting to 1000 [ 405.311558][T18420] lo speed is unknown, defaulting to 1000 [ 405.360693][ T9] lo speed is unknown, defaulting to 1000 [ 405.584074][T18444] syz_tun: entered promiscuous mode [ 405.615752][T18445] netlink: 'syz.2.4570': attribute type 10 has an invalid length. [ 405.676867][T18445] syz_tun: entered promiscuous mode [ 406.137864][T18473] __nla_validate_parse: 1 callbacks suppressed [ 406.137883][T18473] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4582'. [ 406.190231][T18473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4582'. [ 406.257971][T18420] lo speed is unknown, defaulting to 1000 [ 406.266530][T18474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4581'. [ 406.354704][T18486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4581'. [ 406.424725][T18468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4581'. [ 406.677065][T18504] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 406.728996][T18507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4588'. [ 406.900834][T18515] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4594'. [ 406.930369][T18517] netlink: 'syz.2.4595': attribute type 11 has an invalid length. [ 406.960944][T18517] netlink: 'syz.2.4595': attribute type 11 has an invalid length. [ 406.974004][T18517] debugfs: Directory 'netdev:' with parent 'phy46' already present! [ 407.232974][T18532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4600'. [ 407.417850][T18540] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4603'. [ 407.634163][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4608'. [ 408.780315][T18594] netlink: 'syz.0.4623': attribute type 10 has an invalid length. [ 408.820231][T18594] netlink: 'syz.0.4623': attribute type 10 has an invalid length. [ 408.920087][ T5094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 408.953811][ T5094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 408.976448][ T5094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 408.995371][ T5094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.007952][ T5094] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 409.018625][ T5094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 409.254180][ T1101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.333743][T18598] lo speed is unknown, defaulting to 1000 [ 409.476215][ T1101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.553848][T18617] bridge0: entered promiscuous mode [ 409.590952][T18617] bond0: entered promiscuous mode [ 409.609817][T18617] bond_slave_0: entered promiscuous mode [ 409.644950][T18617] bond_slave_1: entered promiscuous mode [ 409.671451][T18617] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 409.686683][T18617] Cannot create hsr debugfs directory [ 409.758233][T18623] veth19: entered allmulticast mode [ 409.827601][ T1101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.871751][T18624] veth19 (unregistering): left allmulticast mode [ 409.910282][T18598] lo speed is unknown, defaulting to 1000 [ 410.101902][T18648] netlink: 'syz.2.4640': attribute type 3 has an invalid length. [ 410.103310][ T1101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.343183][T18645] dvmrp0: entered allmulticast mode [ 410.563901][ T1101] bridge_slave_1: left allmulticast mode [ 410.585480][ T1101] bridge_slave_1: left promiscuous mode [ 410.620125][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.681384][ T1101] bridge_slave_0: left allmulticast mode [ 410.730075][ T1101] bridge_slave_0: left promiscuous mode [ 410.735883][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.120130][ T5094] Bluetooth: hci1: command tx timeout [ 411.251456][T18688] __nla_validate_parse: 7 callbacks suppressed [ 411.251475][T18688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4650'. [ 411.741845][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.754689][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.769187][ T1101] bond0 (unregistering): Released all slaves [ 411.809010][T18684] netlink: 'syz.1.4648': attribute type 10 has an invalid length. [ 411.823192][T18684] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 411.839957][ T5094] Bluetooth: hci5: command 0x0405 tx timeout [ 411.882244][T18689] team0: entered promiscuous mode [ 411.897692][T18689] team_slave_1: entered promiscuous mode [ 411.958865][T18687] team0: left promiscuous mode [ 411.964914][T18687] team_slave_1: left promiscuous mode [ 412.165355][T18702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4655'. [ 412.210477][T18702] geneve2: entered promiscuous mode [ 412.587273][T18706] syzkaller0: entered promiscuous mode [ 412.594018][T18706] syzkaller0: entered allmulticast mode [ 412.631636][T18723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4661'. [ 412.720566][T18723] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4661'. [ 412.747984][T18723] netlink: 'syz.3.4661': attribute type 1 has an invalid length. [ 412.983653][T18732] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4664'. [ 413.201283][ T5103] Bluetooth: hci1: command tx timeout [ 415.280433][ T5103] Bluetooth: hci1: command tx timeout [ 415.470176][T18737] IPVS: Error joining to the multicast group [ 415.581326][ T1101] hsr_slave_0: left promiscuous mode [ 415.590239][T18743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4670'. [ 415.607988][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4669'. [ 415.622106][ T1101] hsr_slave_1: left promiscuous mode [ 415.644034][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.651796][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.688403][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.702357][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.786974][ T1101] veth1_macvtap: left promiscuous mode [ 415.800989][ T1101] veth0_macvtap: left promiscuous mode [ 415.811183][ T1101] veth1_vlan: left promiscuous mode [ 415.818132][ T1101] veth0_vlan: left promiscuous mode [ 416.694247][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 416.773407][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 417.365032][ T5103] Bluetooth: hci1: command tx timeout [ 417.384565][T18752] netlink: 'syz.2.4673': attribute type 4 has an invalid length. [ 417.400535][T18758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4675'. [ 417.455485][T18769] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4679'. [ 417.484930][T18767] ip6gre1: entered allmulticast mode [ 417.551722][T18771] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4680'. [ 417.570437][T18771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4680'. [ 417.643438][T18774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4682'. [ 417.756540][T18598] chnl_net:caif_netlink_parms(): no params data found [ 418.005399][T18811] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4691'. [ 418.062552][T18815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4692'. [ 418.082312][T18815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4692'. [ 418.102913][T18598] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.122560][T18598] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.140307][T18598] bridge_slave_0: entered allmulticast mode [ 418.156207][T18598] bridge_slave_0: entered promiscuous mode [ 418.191630][T18598] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.199354][T18598] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.211120][T18598] bridge_slave_1: entered allmulticast mode [ 418.222332][T18598] bridge_slave_1: entered promiscuous mode [ 418.254607][T18825] netlink: 'syz.1.4694': attribute type 10 has an invalid length. [ 418.263610][T18825] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4694'. [ 418.275234][T18825] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 418.364130][T18828] x_tables: duplicate underflow at hook 3 [ 418.390036][T18598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.405921][T18598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.458967][T18832] openvswitch: netlink: Key type 116 is out of range max 32 [ 418.528341][T18830] ipvlan0: entered promiscuous mode [ 418.540929][T18830] ipvlan0: entered allmulticast mode [ 418.549098][T18830] team0: entered allmulticast mode [ 418.555062][T18830] team_slave_1: entered allmulticast mode [ 418.563552][T18830] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 418.616953][T18598] team0: Port device team_slave_0 added [ 418.658623][T18598] team0: Port device team_slave_1 added [ 418.760607][T18838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4701'. [ 418.771102][T18598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.778170][T18598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.805230][T18598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.844961][T18598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.867260][T18598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.906506][T18598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.971081][ T50] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 418.975120][T18842] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 418.999267][ T1101] bridge_slave_1: left allmulticast mode [ 419.007481][ T1101] bridge_slave_1: left promiscuous mode [ 419.033729][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.065547][ T1101] bridge_slave_0: left allmulticast mode [ 419.101674][ T1101] bridge_slave_0: left promiscuous mode [ 419.120495][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.284304][T18858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.307736][T18858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.785975][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.799495][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.814186][ T1101] bond0 (unregistering): Released all slaves [ 419.870212][T18860] netlink: 'syz.1.4709': attribute type 12 has an invalid length. [ 420.015190][ T50] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 420.049197][T18598] hsr_slave_0: entered promiscuous mode [ 420.090186][T18598] hsr_slave_1: entered promiscuous mode [ 420.106752][T18598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.124357][T18598] Cannot create hsr debugfs directory [ 420.281974][T18871] lo speed is unknown, defaulting to 1000 [ 420.891826][T18871] lo speed is unknown, defaulting to 1000 [ 421.466793][T18928] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 421.612786][T18931] openvswitch: netlink: Key type 29 is not supported [ 421.873260][T18943] lo speed is unknown, defaulting to 1000 [ 422.048050][T18598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 422.114683][T18598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 422.150946][T18598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 422.177246][T18598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 422.552097][ T1101] hsr_slave_0: left promiscuous mode [ 422.571135][ T1101] hsr_slave_1: left promiscuous mode [ 422.584547][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.601050][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.609550][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.617754][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.651053][ T1101] veth1_macvtap: left promiscuous mode [ 422.656802][ T1101] veth0_macvtap: left promiscuous mode [ 422.662623][ T1101] veth1_vlan: left promiscuous mode [ 422.668048][ T1101] @ÿ: left promiscuous mode [ 422.837790][ T1101] team0 (unregistering): Port device batadv2 removed [ 422.868176][ T1101] veth3 (unregistering): left allmulticast mode [ 422.895846][ T1101] team0 (unregistering): Port device batadv1 removed [ 423.502456][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 423.563155][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 423.846475][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 423.992145][ T1101] team0 (unregistering): Port device dummy0 removed [ 424.216461][T18971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 424.408197][T18990] __nla_validate_parse: 19 callbacks suppressed [ 424.408217][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4759'. [ 424.503185][T18990] IPVS: Error joining to the multicast group [ 424.602954][T18598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.697053][T18598] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.902119][ T931] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.909396][ T931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.088461][T19008] FAULT_INJECTION: forcing a failure. [ 425.088461][T19008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.170391][T19008] CPU: 0 PID: 19008 Comm: syz.1.4763 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 425.180694][T19008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 425.187877][T19001] syzkaller0: entered promiscuous mode [ 425.190926][T19008] Call Trace: [ 425.190944][T19008] [ 425.190954][T19008] dump_stack_lvl+0x241/0x360 [ 425.190985][T19008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.191004][T19008] ? __pfx__printk+0x10/0x10 [ 425.191024][T19008] ? __pfx_lock_release+0x10/0x10 [ 425.196711][T19001] syzkaller0: entered allmulticast mode [ 425.199978][T19008] should_fail_ex+0x3b0/0x4e0 [ 425.200033][T19008] _copy_from_user+0x2f/0xe0 [ 425.200055][T19008] sk_setsockopt+0x2e0/0x3390 [ 425.200080][T19008] ? __pfx___might_resched+0x10/0x10 [ 425.200108][T19008] ? __pfx_sk_setsockopt+0x10/0x10 [ 425.200130][T19008] ? aa_sk_perm+0x967/0xab0 [ 425.200159][T19008] ? __pfx_aa_sk_perm+0x10/0x10 [ 425.261947][T19008] ? __pfx_lock_acquire+0x10/0x10 [ 425.267025][T19008] ? aa_sock_opt_perm+0x79/0x120 [ 425.272093][T19008] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 425.277647][T19008] ? security_socket_setsockopt+0x87/0xb0 [ 425.283374][T19008] do_sock_setsockopt+0x2fb/0x720 [ 425.288495][T19008] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 425.294047][T19008] ? __fget_files+0x29/0x470 [ 425.298750][T19008] ? __fget_files+0x3f6/0x470 [ 425.303462][T19008] __sys_setsockopt+0x1ae/0x250 [ 425.308330][T19008] __x64_sys_setsockopt+0xb5/0xd0 [ 425.313362][T19008] do_syscall_64+0xf3/0x230 [ 425.317858][T19008] ? clear_bhb_loop+0x35/0x90 [ 425.322559][T19008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.328470][T19008] RIP: 0033:0x7f493e775bd9 [ 425.332885][T19008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.352492][T19008] RSP: 002b:00007f493e1ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 425.360906][T19008] RAX: ffffffffffffffda RBX: 00007f493e904110 RCX: 00007f493e775bd9 [ 425.368869][T19008] RDX: 0000000000000025 RSI: 0000000000000001 RDI: 0000000000000006 [ 425.377466][T19008] RBP: 00007f493e1ff0a0 R08: 0000000000000004 R09: 0000000000000000 [ 425.386045][T19008] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 425.394217][T19008] R13: 000000000000006e R14: 00007f493e904110 R15: 00007ffe43e9d578 [ 425.402316][T19008] [ 425.421613][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.429059][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.772407][T19014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.293989][T18598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.316863][T19045] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4775'. [ 428.891111][T19076] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4784'. [ 429.045052][T18598] veth0_vlan: entered promiscuous mode [ 429.100557][T19086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4789'. [ 429.140461][T19087] netlink: 'syz.1.4787': attribute type 4 has an invalid length. [ 429.187169][T18598] veth1_vlan: entered promiscuous mode [ 429.248656][T19095] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4790'. [ 429.270043][T19095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4790'. [ 429.346469][T18598] veth0_macvtap: entered promiscuous mode [ 429.385688][T18598] veth1_macvtap: entered promiscuous mode [ 429.399288][T19106] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4794'. [ 429.425184][T19109] team0: entered promiscuous mode [ 429.431005][T19107] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4796'. [ 429.433379][T19109] team_slave_1: entered promiscuous mode [ 429.451728][T19109] dummy0: entered promiscuous mode [ 429.470896][T19108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.478204][T19108] IPv6: NLM_F_CREATE should be set when creating new route [ 429.485570][T19108] IPv6: NLM_F_CREATE should be set when creating new route [ 429.492900][T19108] IPv6: NLM_F_CREATE should be set when creating new route [ 429.543214][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.559727][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.590569][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.632210][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.635836][T19117] x_tables: duplicate underflow at hook 3 [ 429.642541][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.659167][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.669447][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.690508][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.708609][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.721451][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.732390][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.745219][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.755370][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.767999][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.783852][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.799046][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.810268][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.821840][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.832131][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.844280][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.858363][T18598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.931727][T19100] team0: left promiscuous mode [ 429.942301][T19100] team_slave_1: left promiscuous mode [ 429.960337][T19100] dummy0: left promiscuous mode [ 429.969247][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.992770][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.029674][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.059998][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.080922][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.109924][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.130302][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.160170][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.179132][T19132] netlink: 'syz.1.4804': attribute type 9 has an invalid length. [ 430.181259][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.187204][T19132] netlink: 'syz.1.4804': attribute type 7 has an invalid length. [ 430.208633][T19132] netlink: 'syz.1.4804': attribute type 8 has an invalid length. [ 430.220292][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.232572][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.245555][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 430.253201][T19114] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 430.292019][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.337773][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.354992][T19135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4805'. [ 430.364340][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.377207][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.390459][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.404005][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.421674][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.432050][T18598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.444081][T18598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.458092][T18598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.559225][T19141] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 430.578644][T19141] team0: Port device batadv2 added [ 430.594856][T18598] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.621471][T18598] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.638729][T18598] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.657842][T18598] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.924219][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.932629][T19155] sctp: [Deprecated]: syz.0.4810 (pid 19155) Use of int in maxseg socket option. [ 430.932629][T19155] Use struct sctp_assoc_value instead [ 430.946166][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.007781][T19164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4814'. [ 431.027599][T10712] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.041735][T10712] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.060123][T19165] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.067499][T19165] IPv6: NLM_F_CREATE should be set when creating new route [ 431.074894][T19165] IPv6: NLM_F_CREATE should be set when creating new route [ 431.082175][T19165] IPv6: NLM_F_CREATE should be set when creating new route [ 431.374332][T19176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4819'. [ 431.498310][T19182] netlink: 'syz.3.4822': attribute type 12 has an invalid length. [ 431.525052][T19182] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4822'. [ 431.654751][T19188] lo speed is unknown, defaulting to 1000 [ 431.725505][T19191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.787959][T19191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.838346][T19165] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 432.093936][T19209] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4832'. [ 432.112086][T19188] lo speed is unknown, defaulting to 1000 [ 432.133484][T19209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4832'. [ 432.717477][T19236] netlink: 'syz.2.4842': attribute type 9 has an invalid length. [ 432.751476][T19236] netlink: 'syz.2.4842': attribute type 7 has an invalid length. [ 432.772930][T19236] netlink: 'syz.2.4842': attribute type 8 has an invalid length. [ 432.971943][T19245] geneve0: invalid flags given to default FDB implementation [ 433.002864][T19251] netlink: 'syz.0.4847': attribute type 8 has an invalid length. [ 433.010947][T19253] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4848'. [ 433.196016][T19245] netlink: 'syz.2.4845': attribute type 1 has an invalid length. [ 433.227252][T19245] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4845'. [ 433.750506][T19288] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4859'. [ 433.935737][T19290] bridge0: port 3(vlan0) entered blocking state [ 433.953334][T19290] bridge0: port 3(vlan0) entered disabled state [ 433.970080][T19290] vlan0: entered allmulticast mode [ 433.983721][T19290] veth0_vlan: entered allmulticast mode [ 434.011154][T19290] vlan0: entered promiscuous mode [ 434.031134][T19290] bridge0: port 3(vlan0) entered blocking state [ 434.037732][T19290] bridge0: port 3(vlan0) entered forwarding state [ 434.070205][T19290] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 434.241912][T19299] validate_nla: 3 callbacks suppressed [ 434.241934][T19299] netlink: 'syz.4.4865': attribute type 5 has an invalid length. [ 434.447667][T19312] netlink: 'syz.3.4867': attribute type 9 has an invalid length. [ 434.488086][T19312] netlink: 'syz.3.4867': attribute type 7 has an invalid length. [ 434.505529][T19312] netlink: 'syz.3.4867': attribute type 8 has an invalid length. [ 434.680655][T19330] __nla_validate_parse: 2 callbacks suppressed [ 434.680676][T19330] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4877'. [ 434.742694][T19328] netlink: 31 bytes leftover after parsing attributes in process `syz.2.4876'. [ 434.818237][T19337] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 435.032686][T19351] IPVS: Error joining to the multicast group [ 435.129232][T19356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4889'. [ 435.162203][T19354] xt_bpf: check failed: parse error [ 435.170080][T19360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4891'. [ 435.225039][T19354] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4888'. [ 435.254790][T19362] Dead loop on virtual device ipvlan1, fix it urgently! [ 435.281830][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4893'. [ 435.564880][T19371] syzkaller0: entered promiscuous mode [ 435.603350][T19371] syzkaller0: entered allmulticast mode [ 438.583920][T19404] netlink: 'syz.3.4903': attribute type 10 has an invalid length. [ 438.600115][T19404] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 438.613379][T19411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4906'. [ 438.810586][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4909'. [ 438.840546][T19432] netlink: 'syz.2.4911': attribute type 39 has an invalid length. [ 438.979865][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4916'. [ 439.103467][T19446] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4918'. [ 439.283093][T19459] FAULT_INJECTION: forcing a failure. [ 439.283093][T19459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.310682][T19464] netlink: 'syz.0.4923': attribute type 10 has an invalid length. [ 439.319930][T19459] CPU: 1 PID: 19459 Comm: syz.2.4925 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 439.329409][T19457] netlink: 'syz.1.4924': attribute type 3 has an invalid length. [ 439.330374][T19459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 439.330390][T19459] Call Trace: [ 439.330398][T19459] [ 439.330406][T19459] dump_stack_lvl+0x241/0x360 [ 439.330433][T19459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.330453][T19459] ? __pfx__printk+0x10/0x10 [ 439.330480][T19459] should_fail_ex+0x3b0/0x4e0 [ 439.330510][T19459] _copy_from_user+0x2f/0xe0 [ 439.330533][T19459] move_addr_to_kernel+0x82/0x150 [ 439.330555][T19459] copy_msghdr_from_user+0x43e/0x680 [ 439.330577][T19459] ? _parse_integer_limit+0x1b5/0x200 [ 439.330604][T19459] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 439.330641][T19459] __sys_sendmmsg+0x374/0x740 [ 439.330674][T19459] ? __pfx___sys_sendmmsg+0x10/0x10 [ 439.330736][T19459] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 439.330760][T19459] ? ksys_write+0x23e/0x2c0 [ 439.330783][T19459] ? __pfx_lock_release+0x10/0x10 [ 439.330812][T19459] ? vfs_write+0x7c4/0xc90 [ 439.330839][T19459] ? __mutex_unlock_slowpath+0x21d/0x750 [ 439.330864][T19459] ? __pfx_vfs_write+0x10/0x10 [ 439.330908][T19459] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 439.330929][T19459] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 439.330948][T19459] ? do_syscall_64+0x100/0x230 [ 439.330971][T19459] __x64_sys_sendmmsg+0xa0/0xb0 [ 439.330997][T19459] do_syscall_64+0xf3/0x230 [ 439.331017][T19459] ? clear_bhb_loop+0x35/0x90 [ 439.345343][T19457] netlink: 'syz.1.4924': attribute type 11 has an invalid length. [ 439.348895][T19459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.361486][T19464] bridge0: port 3(batadv0) entered blocking state [ 439.365042][T19459] RIP: 0033:0x7f72e2d75bd9 [ 439.365071][T19459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.365086][T19459] RSP: 002b:00007f72e3ab0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 439.525792][T19459] RAX: ffffffffffffffda RBX: 00007f72e2f03f60 RCX: 00007f72e2d75bd9 [ 439.533759][T19459] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 0000000000000004 [ 439.541748][T19459] RBP: 00007f72e3ab00a0 R08: 0000000000000000 R09: 0000000000000000 [ 439.550004][T19459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.557985][T19459] R13: 000000000000000b R14: 00007f72e2f03f60 R15: 00007fff144c5aa8 [ 439.565967][T19459] [ 439.604129][T19464] bridge0: port 3(batadv0) entered disabled state [ 439.611080][T19464] batadv0: entered allmulticast mode [ 439.620560][T19464] batadv0: entered promiscuous mode [ 439.626976][T19464] bridge0: port 3(batadv0) entered blocking state [ 439.633611][T19464] bridge0: port 3(batadv0) entered forwarding state [ 439.703918][T10712] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 439.714145][T10712] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 439.727282][ T8] Dead loop on virtual device ipvlan1, fix it urgently! [ 440.003618][T18984] Dead loop on virtual device ipvlan1, fix it urgently! [ 440.185711][T19509] __nla_validate_parse: 5 callbacks suppressed [ 440.185731][T19509] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.4935'. [ 440.265082][T19514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4937'. [ 440.319361][T19517] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.4939'. [ 440.563834][T19533] FAULT_INJECTION: forcing a failure. [ 440.563834][T19533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.590673][T19529] netlink: 'syz.4.4943': attribute type 5 has an invalid length. [ 440.623589][T19533] CPU: 1 PID: 19533 Comm: syz.2.4945 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 440.633795][T19533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 440.643879][T19533] Call Trace: [ 440.647189][T19533] [ 440.650146][T19533] dump_stack_lvl+0x241/0x360 [ 440.654854][T19533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.660063][T19533] ? __pfx__printk+0x10/0x10 [ 440.664656][T19533] ? __pfx_lock_release+0x10/0x10 [ 440.669691][T19533] should_fail_ex+0x3b0/0x4e0 [ 440.674373][T19533] _copy_from_iter+0x1f6/0x1960 [ 440.679217][T19533] ? __virt_addr_valid+0x183/0x520 [ 440.684703][T19533] ? __pfx_lock_release+0x10/0x10 [ 440.689752][T19533] ? __alloc_skb+0x28f/0x440 [ 440.694434][T19533] ? __pfx__copy_from_iter+0x10/0x10 [ 440.699766][T19533] ? __virt_addr_valid+0x183/0x520 [ 440.704880][T19533] ? __virt_addr_valid+0x183/0x520 [ 440.710004][T19533] ? __virt_addr_valid+0x44e/0x520 [ 440.715215][T19533] ? __check_object_size+0x49c/0x900 [ 440.720511][T19533] netlink_sendmsg+0x73d/0xcb0 [ 440.725280][T19533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.730657][T19533] ? __import_iovec+0x536/0x820 [ 440.735528][T19533] ? aa_sock_msg_perm+0x91/0x160 [ 440.740578][T19533] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 440.745897][T19533] ? security_socket_sendmsg+0x87/0xb0 [ 440.751368][T19533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.756648][T19533] __sock_sendmsg+0x221/0x270 [ 440.761327][T19533] ____sys_sendmsg+0x525/0x7d0 [ 440.766225][T19533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.771679][T19533] __sys_sendmsg+0x2b0/0x3a0 [ 440.776290][T19533] ? __pfx___sys_sendmsg+0x10/0x10 [ 440.781405][T19533] ? vfs_write+0x7c4/0xc90 [ 440.785848][T19533] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 440.792256][T19533] ? do_syscall_64+0x100/0x230 [ 440.797016][T19533] ? do_syscall_64+0xb6/0x230 [ 440.801688][T19533] do_syscall_64+0xf3/0x230 [ 440.806184][T19533] ? clear_bhb_loop+0x35/0x90 [ 440.811032][T19533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.817077][T19533] RIP: 0033:0x7f72e2d75bd9 [ 440.821584][T19533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.841238][T19533] RSP: 002b:00007f72e3ab0048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.849767][T19533] RAX: ffffffffffffffda RBX: 00007f72e2f03f60 RCX: 00007f72e2d75bd9 [ 440.857747][T19533] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 440.865803][T19533] RBP: 00007f72e3ab00a0 R08: 0000000000000000 R09: 0000000000000000 [ 440.873766][T19533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.881729][T19533] R13: 000000000000000b R14: 00007f72e2f03f60 R15: 00007fff144c5aa8 [ 440.889717][T19533] [ 441.024600][T19541] netlink: 'syz.3.4948': attribute type 10 has an invalid length. [ 441.131176][T19547] netlink: 'syz.3.4951': attribute type 12 has an invalid length. [ 441.139050][T19547] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4951'. [ 441.176662][T19545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4949'. [ 441.506000][T19572] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4960'. [ 441.543916][T19576] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4960'. [ 441.560338][T19562] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4955'. [ 441.673298][T19583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4963'. [ 441.703666][T19585] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4964'. [ 441.976854][T19602] netlink: 'syz.1.4972': attribute type 2 has an invalid length. [ 442.163860][T19619] FAULT_INJECTION: forcing a failure. [ 442.163860][T19619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.211677][T19619] CPU: 1 PID: 19619 Comm: syz.1.4977 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 442.215777][T19621] ebt_limit: overflow, try lower: 570423552/2483027968 [ 442.221868][T19619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 442.221888][T19619] Call Trace: [ 442.221898][T19619] [ 442.221907][T19619] dump_stack_lvl+0x241/0x360 [ 442.221935][T19619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.221953][T19619] ? __pfx__printk+0x10/0x10 [ 442.221972][T19619] ? __pfx_lock_release+0x10/0x10 [ 442.221998][T19619] should_fail_ex+0x3b0/0x4e0 [ 442.222024][T19619] _copy_from_user+0x2f/0xe0 [ 442.222046][T19619] copy_msghdr_from_user+0xae/0x680 [ 442.222074][T19619] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 442.222112][T19619] __sys_sendmsg+0x23d/0x3a0 [ 442.222140][T19619] ? __pfx___sys_sendmsg+0x10/0x10 [ 442.222161][T19619] ? vfs_write+0x7c4/0xc90 [ 442.222215][T19619] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 442.222245][T19619] ? do_syscall_64+0x100/0x230 [ 442.310432][T19619] ? do_syscall_64+0xb6/0x230 [ 442.315251][T19619] do_syscall_64+0xf3/0x230 [ 442.319754][T19619] ? clear_bhb_loop+0x35/0x90 [ 442.324439][T19619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.330331][T19619] RIP: 0033:0x7f493e775bd9 [ 442.334742][T19619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.354348][T19619] RSP: 002b:00007f493f47c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.362761][T19619] RAX: ffffffffffffffda RBX: 00007f493e904038 RCX: 00007f493e775bd9 [ 442.370726][T19619] RDX: 0000000000000000 RSI: 0000000020000ec0 RDI: 0000000000000004 [ 442.378686][T19619] RBP: 00007f493f47c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 442.386652][T19619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.394623][T19619] R13: 000000000000006e R14: 00007f493e904038 R15: 00007ffe43e9d578 [ 442.402614][T19619] [ 442.428611][T19625] netlink: 'syz.0.4980': attribute type 8 has an invalid length. [ 442.596378][T19635] sch_fq: defrate 0 ignored. [ 443.742204][T19704] netlink: 'syz.1.5009': attribute type 1 has an invalid length. [ 443.855332][T19711] pimreg12: entered allmulticast mode [ 443.913653][T19715] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 443.962514][T19715] bond12: (slave batadv3): Enslaving as a backup interface with an up link [ 443.972102][T19709] pimreg12: left allmulticast mode [ 444.162050][T19718] debugfs: Directory 'ü!ô' with parent 'ieee80211' already present! [ 444.257103][T19724] IPVS: Error joining to the multicast group [ 444.521381][ T5144] IPVS: starting estimator thread 0... [ 444.615736][T19742] ipvlan2: entered promiscuous mode [ 444.623088][T19744] IPVS: using max 17 ests per chain, 40800 per kthread [ 444.662098][T19750] netlink: 'syz.3.5027': attribute type 1 has an invalid length. [ 444.676196][T19742] ipvlan2: entered allmulticast mode [ 444.951288][T19765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.985444][T19765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.028119][T19762] lo speed is unknown, defaulting to 1000 [ 445.369190][T19762] lo speed is unknown, defaulting to 1000 [ 445.603737][T19793] __nla_validate_parse: 12 callbacks suppressed [ 445.603761][T19793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5045'. [ 445.941207][T19801] netlink: 'syz.3.5049': attribute type 4 has an invalid length. [ 446.153495][T19809] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5052'. [ 446.483564][T19824] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5055'. [ 446.539772][T19822] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5057'. [ 446.696485][T19821] syzkaller0: entered promiscuous mode [ 446.711569][T19830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5059'. [ 446.730111][T19821] syzkaller0: entered allmulticast mode [ 446.746147][T19827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5058'. [ 446.945448][T19838] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 447.000613][T19835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5058'. [ 449.941776][T19841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5063'. [ 450.092068][T19881] netlink: 'syz.2.5074': attribute type 10 has an invalid length. [ 450.109781][T19881] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5074'. [ 450.128009][T19887] FAULT_INJECTION: forcing a failure. [ 450.128009][T19887] name failslab, interval 1, probability 0, space 0, times 0 [ 450.147184][T19881] bridge0: port 3(batadv0) entered blocking state [ 450.158885][T19881] bridge0: port 3(batadv0) entered disabled state [ 450.168291][T19887] CPU: 1 PID: 19887 Comm: syz.1.5076 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 450.178488][T19887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 450.188745][T19887] Call Trace: [ 450.192052][T19887] [ 450.195002][T19887] dump_stack_lvl+0x241/0x360 [ 450.199707][T19887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.204937][T19887] ? __pfx__printk+0x10/0x10 [ 450.209566][T19887] should_fail_ex+0x3b0/0x4e0 [ 450.214274][T19887] ? __alloc_skb+0x1c3/0x440 [ 450.218902][T19887] should_failslab+0x9/0x20 [ 450.223434][T19887] kmem_cache_alloc_node_noprof+0x71/0x320 [ 450.229282][T19887] __alloc_skb+0x1c3/0x440 [ 450.233734][T19887] ? __pfx___alloc_skb+0x10/0x10 [ 450.238707][T19887] ? __lock_acquire+0x1346/0x1fd0 [ 450.243762][T19887] alloc_skb_with_frags+0xc3/0x770 [ 450.248921][T19887] sock_alloc_send_pskb+0x91a/0xa60 [ 450.254158][T19887] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 450.259900][T19887] ? dev_get_by_index+0x23/0x2d0 [ 450.264869][T19887] packet_sendmsg+0x3e19/0x6710 [ 450.269732][T19887] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 450.275128][T19887] ? __pfx___might_resched+0x10/0x10 [ 450.280427][T19887] ? aa_sk_perm+0x967/0xab0 [ 450.285102][T19887] ? __pfx_packet_sendmsg+0x10/0x10 [ 450.290304][T19887] ? __import_iovec+0x536/0x820 [ 450.295148][T19887] ? aa_sock_msg_perm+0x91/0x160 [ 450.300084][T19887] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 450.305359][T19887] ? security_socket_sendmsg+0x87/0xb0 [ 450.310810][T19887] ? __pfx_packet_sendmsg+0x10/0x10 [ 450.316002][T19887] __sock_sendmsg+0x221/0x270 [ 450.320767][T19887] ____sys_sendmsg+0x525/0x7d0 [ 450.325536][T19887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.330831][T19887] __sys_sendmmsg+0x3b2/0x740 [ 450.335542][T19887] ? __pfx___sys_sendmmsg+0x10/0x10 [ 450.340777][T19887] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 450.346665][T19887] ? ksys_write+0x23e/0x2c0 [ 450.351162][T19887] ? __pfx_lock_release+0x10/0x10 [ 450.356200][T19887] ? vfs_write+0x7c4/0xc90 [ 450.360614][T19887] ? __mutex_unlock_slowpath+0x21d/0x750 [ 450.366247][T19887] ? __pfx_vfs_write+0x10/0x10 [ 450.371062][T19887] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 450.377087][T19887] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 450.383432][T19887] ? do_syscall_64+0x100/0x230 [ 450.388245][T19887] __x64_sys_sendmmsg+0xa0/0xb0 [ 450.393114][T19887] do_syscall_64+0xf3/0x230 [ 450.397632][T19887] ? clear_bhb_loop+0x35/0x90 [ 450.402312][T19887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.408200][T19887] RIP: 0033:0x7f493e775bd9 [ 450.412612][T19887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.432389][T19887] RSP: 002b:00007f493f49d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 450.440799][T19887] RAX: ffffffffffffffda RBX: 00007f493e903f60 RCX: 00007f493e775bd9 [ 450.448761][T19887] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 0000000000000004 [ 450.456859][T19887] RBP: 00007f493f49d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 450.464849][T19887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.472825][T19887] R13: 000000000000004d R14: 00007f493e903f60 R15: 00007ffe43e9d578 [ 450.480815][T19887] [ 450.488837][T19881] batadv0: entered allmulticast mode [ 450.501562][T19881] batadv0: entered promiscuous mode [ 450.507957][T19881] bridge0: port 3(batadv0) entered blocking state [ 450.514619][T19881] bridge0: port 3(batadv0) entered forwarding state [ 450.559947][T19891] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5079'. [ 450.621385][T10712] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 450.630800][T10712] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 450.738262][T19902] tc_dump_action: action bad kind [ 450.767259][T19904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5082'. [ 450.807301][T19904] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.816763][T19904] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.826175][T19904] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.836862][T19904] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.888662][T19904] vxlan0: entered promiscuous mode [ 451.095806][T19922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5091'. [ 451.106454][T19923] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5092'. [ 451.272574][T19928] trusted_key: syz.0.5094 sent an empty control message without MSG_MORE. [ 451.416443][T19937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5097'. [ 451.436862][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5097'. [ 451.845623][T19953] pim6reg527: entered allmulticast mode [ 451.885902][T19955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5105'. [ 451.957942][T19962] veth5: entered allmulticast mode [ 451.978405][T19955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5105'. [ 452.013923][T19955] veth5 (unregistering): left allmulticast mode [ 452.100394][T19969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5110'. [ 452.184609][T19977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5112'. [ 452.242370][T19976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5114'. [ 452.264797][T19982] netlink: 'syz.2.5116': attribute type 21 has an invalid length. [ 452.919487][T20028] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 456.050332][T20091] netlink: 'syz.3.5152': attribute type 1 has an invalid length. [ 456.058437][T20091] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 456.142422][T20108] __nla_validate_parse: 3 callbacks suppressed [ 456.142443][T20108] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5157'. [ 456.174571][T20108] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 456.326910][T20118] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.363807][T20123] xt_TPROXY: Can be used only with -p tcp or -p udp [ 456.388430][T20122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5164'. [ 456.413152][T20124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5165'. [ 456.682722][T20140] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5171'. [ 456.736216][T20144] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5173'. [ 456.765851][T20145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5173'. [ 456.912419][T20157] netlink: 'syz.3.5177': attribute type 4 has an invalid length. [ 456.983623][T20159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5179'. [ 457.030641][T20159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5179'. [ 457.088763][T20167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5184'. [ 457.114653][T20169] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5183'. [ 457.339539][T20188] netlink: 'syz.3.5189': attribute type 10 has an invalid length. [ 457.402176][T20186] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 457.547025][T20191] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20008 - 0 [ 457.572988][T20191] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20008 - 0 [ 457.590035][T20191] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20008 - 0 [ 457.610039][T20191] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20008 - 0 [ 457.620750][T20191] geneve3: entered promiscuous mode [ 457.636054][T20191] geneve3: entered allmulticast mode [ 458.378553][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.403770][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.416187][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.439677][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.449540][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.479689][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.510690][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.529716][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.559940][T20235] ebtables: ebtables: counters copy to user failed while replacing table [ 458.572639][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.584596][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.599882][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.611151][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.630043][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.649706][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.665500][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.679795][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.699845][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.711797][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.722710][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.734521][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.745917][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.757688][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.874200][T20247] syz.3.5207 uses old SIOCAX25GETINFO [ 459.566316][T20286] IPv6: sit1: Disabled Multicast RS [ 459.659438][T20292] netlink: 'syz.2.5224': attribute type 12 has an invalid length. [ 459.740994][T20297] FAULT_INJECTION: forcing a failure. [ 459.740994][T20297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.766927][T20297] CPU: 0 PID: 20297 Comm: syz.1.5226 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 459.777147][T20297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 459.787230][T20297] Call Trace: [ 459.790528][T20297] [ 459.793477][T20297] dump_stack_lvl+0x241/0x360 [ 459.798180][T20297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.803403][T20297] ? __pfx__printk+0x10/0x10 [ 459.808020][T20297] ? __pfx_lock_release+0x10/0x10 [ 459.813187][T20297] ? __lock_acquire+0x1346/0x1fd0 [ 459.818249][T20297] should_fail_ex+0x3b0/0x4e0 [ 459.823128][T20297] _copy_from_user+0x2f/0xe0 [ 459.828096][T20297] do_ipv6_setsockopt+0x2f1/0x3630 [ 459.833231][T20297] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 459.838810][T20297] ? __pfx___might_resched+0x10/0x10 [ 459.844135][T20297] ? __lock_acquire+0x1346/0x1fd0 [ 459.849376][T20297] ? aa_sk_perm+0x967/0xab0 [ 459.854081][T20297] ? __pfx_aa_sk_perm+0x10/0x10 [ 459.858935][T20297] ? __pfx_lock_acquire+0x10/0x10 [ 459.863956][T20297] ipv6_setsockopt+0x5c/0x1a0 [ 459.868628][T20297] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 459.874521][T20297] do_sock_setsockopt+0x3af/0x720 [ 459.879549][T20297] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 459.885086][T20297] ? __fget_files+0x29/0x470 [ 459.889671][T20297] ? __fget_files+0x3f6/0x470 [ 459.894353][T20297] __sys_setsockopt+0x1ae/0x250 [ 459.899205][T20297] __x64_sys_setsockopt+0xb5/0xd0 [ 459.904231][T20297] do_syscall_64+0xf3/0x230 [ 459.908757][T20297] ? clear_bhb_loop+0x35/0x90 [ 459.913448][T20297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.919345][T20297] RIP: 0033:0x7f493e775bd9 [ 459.923759][T20297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.943361][T20297] RSP: 002b:00007f493f49d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 459.951776][T20297] RAX: ffffffffffffffda RBX: 00007f493e903f60 RCX: 00007f493e775bd9 [ 459.959742][T20297] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 459.967796][T20297] RBP: 00007f493f49d0a0 R08: 0000000000000014 R09: 0000000000000000 [ 459.975765][T20297] R10: 0000000020004c40 R11: 0000000000000246 R12: 0000000000000001 [ 459.983729][T20297] R13: 000000000000004d R14: 00007f493e903f60 R15: 00007ffe43e9d578 [ 459.991799][T20297] [ 460.126331][T20299] ɶƣ0GC¦: entered promiscuous mode [ 460.847295][T20335] ipip0: entered promiscuous mode [ 461.098303][T20355] Dead loop on virtual device ipvlan1, fix it urgently! [ 461.203372][T20363] __nla_validate_parse: 14 callbacks suppressed [ 461.203392][T20363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5254'. [ 461.305600][T20367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5256'. [ 461.351510][T20368] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.361227][T20368] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.370531][T20368] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.379355][T20368] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 461.411686][T20376] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5258'. [ 461.421674][T20367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.514231][T20367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.553813][T20371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5258'. [ 461.556319][T20367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.623959][T20382] lo speed is unknown, defaulting to 1000 [ 461.987705][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5268'. [ 462.009892][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5268'. [ 462.041438][T20398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5268'. [ 462.178901][T20382] lo speed is unknown, defaulting to 1000 [ 462.508858][T20421] ɶƣ0GC¦: entered promiscuous mode [ 462.550062][T20426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5274'. [ 462.579413][T20426] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5274'. [ 462.596895][T20429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5277'. [ 462.703132][T20432] vxlan1: entered promiscuous mode [ 463.569427][T20461] IPVS: Error joining to the multicast group [ 464.109963][T20484] debugfs: Directory 'ü!ô' with parent 'ieee80211' already present! [ 464.205709][T20487] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 464.231444][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 464.451018][T20493] netlink: 'syz.0.5302': attribute type 3 has an invalid length. [ 464.603902][T20498] netlink: 'syz.1.5304': attribute type 1 has an invalid length. [ 464.731305][T20501] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 464.754977][T20501] bond13: (slave batadv4): Enslaving as a backup interface with an up link [ 464.860367][ T5145] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 465.392653][T20530] lo speed is unknown, defaulting to 1000 [ 465.517978][ T25] wlan1: No basic rates, using min rate instead [ 465.564020][ T25] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 465.599940][ T25] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 465.634357][T20548] xt_CT: You must specify a L4 protocol and not use inversions on it [ 465.659553][T20555] netlink: 'syz.0.5326': attribute type 10 has an invalid length. [ 465.750448][ T11] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 465.889864][ T1101] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 465.995236][T20575] lo speed is unknown, defaulting to 1000 [ 466.005722][T20572] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 466.015990][ T77] wlan1: authentication with 08:02:11:00:00:00 timed out [ 466.031748][T20572] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 466.061498][T20572] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 466.079008][T20583] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 466.093017][T20572] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 466.110106][T20572] geneve2: entered promiscuous mode [ 466.120387][T20572] geneve2: entered allmulticast mode [ 466.162355][T20580] : entered promiscuous mode [ 466.272948][T20588] __nla_validate_parse: 14 callbacks suppressed [ 466.272972][T20588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5336'. [ 466.315834][T20575] lo speed is unknown, defaulting to 1000 [ 466.450376][T20597] netlink: 'syz.0.5339': attribute type 29 has an invalid length. [ 466.474034][T20595] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 466.484974][T20597] netlink: 'syz.0.5339': attribute type 29 has an invalid length. [ 466.602795][T20601] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5341'. [ 466.603508][T20600] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5342'. [ 466.631600][T20603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5343'. [ 466.647502][T20603] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5343'. [ 466.749952][T20605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5344'. [ 466.870286][T20615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5349'. [ 466.880201][T20614] netlink: 'syz.1.5348': attribute type 1 has an invalid length. [ 466.894346][T20616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5346'. [ 466.979427][T20614] bond14: (slave gre3): The slave device specified does not support setting the MAC address [ 467.011046][T20614] bond14: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 467.029869][T20620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5350'. [ 467.046175][T20621] Dead loop on virtual device ipvlan1, fix it urgently! [ 467.059077][T20614] bond14: (slave gre3): making interface the new active one [ 467.069299][T20614] bond14: (slave gre3): Enslaving as an active interface with an up link [ 467.699430][T20635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5354'. [ 467.920174][ T5094] Bluetooth: hci1: command 0x0405 tx timeout [ 468.043211][T20652] FAULT_INJECTION: forcing a failure. [ 468.043211][T20652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.066008][T20652] CPU: 0 PID: 20652 Comm: syz.1.5361 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 468.076223][T20652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 468.086396][T20652] Call Trace: [ 468.089671][T20652] [ 468.089683][T20652] dump_stack_lvl+0x241/0x360 [ 468.089711][T20652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.089732][T20652] ? __pfx__printk+0x10/0x10 [ 468.107127][T20652] ? __pfx_lock_release+0x10/0x10 [ 468.112187][T20652] should_fail_ex+0x3b0/0x4e0 [ 468.116894][T20652] _copy_from_iter+0x1f6/0x1960 [ 468.121773][T20652] ? __virt_addr_valid+0x183/0x520 [ 468.126916][T20652] ? skb_set_owner_w+0x238/0x3e0 [ 468.131885][T20652] ? __pfx_lock_release+0x10/0x10 [ 468.136936][T20652] ? __pfx__copy_from_iter+0x10/0x10 [ 468.142341][T20652] ? __virt_addr_valid+0x183/0x520 [ 468.147477][T20652] ? __virt_addr_valid+0x183/0x520 [ 468.152627][T20652] ? __virt_addr_valid+0x44e/0x520 [ 468.157745][T20652] ? __phys_addr_symbol+0x2f/0x70 [ 468.162774][T20652] ? __check_object_size+0x49c/0x900 [ 468.168080][T20652] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 468.173825][T20652] skb_copy_datagram_from_iter+0xf3/0x6c0 [ 468.179584][T20652] ? skb_put+0x114/0x1f0 [ 468.183853][T20652] packet_sendmsg+0x4231/0x6710 [ 468.188760][T20652] ? __pfx___might_resched+0x10/0x10 [ 468.194148][T20652] ? aa_sk_perm+0x967/0xab0 [ 468.198686][T20652] ? __pfx_packet_sendmsg+0x10/0x10 [ 468.203920][T20652] ? __import_iovec+0x536/0x820 [ 468.209564][T20652] ? aa_sock_msg_perm+0x91/0x160 [ 468.214508][T20652] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 468.219799][T20652] ? security_socket_sendmsg+0x87/0xb0 [ 468.225288][T20652] ? __pfx_packet_sendmsg+0x10/0x10 [ 468.230516][T20652] __sock_sendmsg+0x221/0x270 [ 468.235220][T20652] ____sys_sendmsg+0x525/0x7d0 [ 468.240020][T20652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.245345][T20652] __sys_sendmmsg+0x3b2/0x740 [ 468.250039][T20652] ? __pfx___sys_sendmmsg+0x10/0x10 [ 468.255253][T20652] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 468.261286][T20652] ? ksys_write+0x23e/0x2c0 [ 468.265821][T20652] ? __pfx_lock_release+0x10/0x10 [ 468.270856][T20652] ? vfs_write+0x7c4/0xc90 [ 468.275312][T20652] ? __mutex_unlock_slowpath+0x21d/0x750 [ 468.280966][T20652] ? __pfx_vfs_write+0x10/0x10 [ 468.285776][T20652] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 468.291780][T20652] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 468.298128][T20652] ? do_syscall_64+0x100/0x230 [ 468.302919][T20652] __x64_sys_sendmmsg+0xa0/0xb0 [ 468.307786][T20652] do_syscall_64+0xf3/0x230 [ 468.312286][T20652] ? clear_bhb_loop+0x35/0x90 [ 468.316960][T20652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.322858][T20652] RIP: 0033:0x7f493e775bd9 [ 468.327296][T20652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.346935][T20652] RSP: 002b:00007f493f49d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 468.355368][T20652] RAX: ffffffffffffffda RBX: 00007f493e903f60 RCX: 00007f493e775bd9 [ 468.363342][T20652] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 0000000000000004 [ 468.371322][T20652] RBP: 00007f493f49d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 468.379323][T20652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.387327][T20652] R13: 000000000000004d R14: 00007f493e903f60 R15: 00007ffe43e9d578 [ 468.395428][T20652] [ 468.821753][T20671] Dead loop on virtual device ipvlan1, fix it urgently! [ 469.704551][T20732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 469.711971][T20732] IPv6: NLM_F_CREATE should be set when creating new route [ 469.719224][T20732] IPv6: NLM_F_CREATE should be set when creating new route [ 469.726554][T20732] IPv6: NLM_F_CREATE should be set when creating new route [ 469.767125][T20733] xt_ecn: cannot match TCP bits for non-tcp packets [ 469.836257][T20733] macvlan2: entered allmulticast mode [ 469.850494][T20733] macvlan2: mtu greater than device maximum [ 470.794157][T20801] FAULT_INJECTION: forcing a failure. [ 470.794157][T20801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.830684][T20801] CPU: 1 PID: 20801 Comm: syz.4.5415 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 470.840901][T20801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 470.851071][T20801] Call Trace: [ 470.854380][T20801] [ 470.857337][T20801] dump_stack_lvl+0x241/0x360 [ 470.862079][T20801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 470.867287][T20801] ? __pfx__printk+0x10/0x10 [ 470.871881][T20801] ? __pfx_lock_release+0x10/0x10 [ 470.876911][T20801] should_fail_ex+0x3b0/0x4e0 [ 470.881594][T20801] _copy_from_iter+0x1f6/0x1960 [ 470.886479][T20801] ? __virt_addr_valid+0x183/0x520 [ 470.891616][T20801] ? __pfx_lock_release+0x10/0x10 [ 470.896661][T20801] ? __alloc_skb+0x28f/0x440 [ 470.901284][T20801] ? __pfx__copy_from_iter+0x10/0x10 [ 470.906607][T20801] ? __virt_addr_valid+0x183/0x520 [ 470.911721][T20801] ? __virt_addr_valid+0x183/0x520 [ 470.916829][T20801] ? __virt_addr_valid+0x44e/0x520 [ 470.922027][T20801] ? __check_object_size+0x49c/0x900 [ 470.927317][T20801] netlink_sendmsg+0x73d/0xcb0 [ 470.932159][T20801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.937444][T20801] ? __import_iovec+0x536/0x820 [ 470.942399][T20801] ? aa_sock_msg_perm+0x91/0x160 [ 470.947335][T20801] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 470.952613][T20801] ? security_socket_sendmsg+0x87/0xb0 [ 470.958097][T20801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.963405][T20801] __sock_sendmsg+0x221/0x270 [ 470.968201][T20801] ____sys_sendmsg+0x525/0x7d0 [ 470.973010][T20801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 470.978318][T20801] __sys_sendmsg+0x2b0/0x3a0 [ 470.982942][T20801] ? __pfx___sys_sendmsg+0x10/0x10 [ 470.988069][T20801] ? vfs_write+0x7c4/0xc90 [ 470.992547][T20801] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 470.998895][T20801] ? do_syscall_64+0x100/0x230 [ 471.003670][T20801] ? do_syscall_64+0xb6/0x230 [ 471.008355][T20801] do_syscall_64+0xf3/0x230 [ 471.012871][T20801] ? clear_bhb_loop+0x35/0x90 [ 471.017809][T20801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.023698][T20801] RIP: 0033:0x7f552ad75bd9 [ 471.028108][T20801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.047714][T20801] RSP: 002b:00007f552bad4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.056152][T20801] RAX: ffffffffffffffda RBX: 00007f552af04038 RCX: 00007f552ad75bd9 [ 471.064128][T20801] RDX: 0000000000000000 RSI: 0000000020000ec0 RDI: 0000000000000004 [ 471.072101][T20801] RBP: 00007f552bad40a0 R08: 0000000000000000 R09: 0000000000000000 [ 471.080070][T20801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.088037][T20801] R13: 000000000000006e R14: 00007f552af04038 R15: 00007ffe275f68e8 [ 471.096027][T20801] [ 471.278226][T20816] netlink: 'syz.0.5419': attribute type 1 has an invalid length. [ 471.313885][T20816] __nla_validate_parse: 8 callbacks suppressed [ 471.313905][T20816] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5419'. [ 471.455427][T20825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 471.673291][T20842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5431'. [ 471.744418][T20844] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5432'. [ 471.913308][T20854] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5437'. [ 471.961816][T20856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5438'. [ 471.982908][T20856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5438'. [ 472.157428][T20867] netlink: 'syz.3.5442': attribute type 2 has an invalid length. [ 472.175963][T20867] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5442'. [ 472.352364][T20875] openvswitch: netlink: Key type 96 is out of range max 32 [ 472.570773][ T5103] Bluetooth: hci0: command tx timeout [ 472.864584][T20905] netlink: 'syz.0.5458': attribute type 9 has an invalid length. [ 472.886278][T20905] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5458'. [ 473.123074][T20923] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5464'. [ 473.148363][T20923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5464'. [ 473.483086][T20946] sctp: [Deprecated]: syz.1.5471 (pid 20946) Use of int in max_burst socket option. [ 473.483086][T20946] Use struct sctp_assoc_value instead [ 473.811266][T20958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.866748][T20963] netlink: 'syz.2.5478': attribute type 1 has an invalid length. [ 473.998856][T20958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.150106][T20958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.190153][T20976] netlink: 'syz.2.5481': attribute type 12 has an invalid length. [ 474.361599][T20958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.544872][ T5103] Bluetooth: hci1: link tx timeout [ 474.551538][ T5103] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 474.562020][ T5094] Bluetooth: hci1: link tx timeout [ 474.567255][ T5094] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 474.594594][ T5094] Bluetooth: hci1: link tx timeout [ 474.599871][ T5094] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 474.625751][T20958] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.666100][T20958] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.707808][T20993] netlink: 'syz.2.5488': attribute type 13 has an invalid length. [ 474.739119][T20958] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.763425][T20958] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.801043][T21011] xt_ecn: cannot match TCP bits for non-tcp packets [ 474.883246][T21013] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 474.918218][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 474.956288][T21011] macvlan2: entered allmulticast mode [ 474.990641][T21011] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode [ 475.029954][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 475.081851][T21011] mac80211_hwsim hwsim62 wlan0: entered allmulticast mode [ 475.195344][T21011] team0: Port device macvlan2 added [ 475.707183][T21058] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 475.743688][T21058] batadv1: entered allmulticast mode [ 475.796415][T21058] team0: Port device batadv1 added [ 475.982432][T21076] vlan3: entered allmulticast mode [ 476.256778][T21103] Dead loop on virtual device ipvlan1, fix it urgently! [ 476.295767][T21105] xt_ecn: cannot match TCP bits for non-tcp packets [ 476.509927][T21114] netlink: 'syz.2.5531': attribute type 10 has an invalid length. [ 476.570591][T21118] __nla_validate_parse: 12 callbacks suppressed [ 476.570613][T21118] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5533'. [ 476.640576][ T5094] Bluetooth: hci1: command 0x0405 tx timeout [ 476.747021][T21127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5536'. [ 476.795283][T21127] geneve3: entered promiscuous mode [ 477.163691][T21144] x_tables: duplicate underflow at hook 1 [ 477.411592][T21160] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5544'. [ 477.416488][T21159] lo speed is unknown, defaulting to 1000 [ 477.514147][T21165] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5548'. [ 477.546177][T21165] vlan2: entered promiscuous mode [ 477.561640][T21165] team0: entered promiscuous mode [ 477.580066][T21165] team_slave_0: entered promiscuous mode [ 477.585955][T21165] team_slave_1: entered promiscuous mode [ 477.620074][T21165] macvlan2: entered promiscuous mode [ 477.640102][T21165] team0: left promiscuous mode [ 477.644929][T21165] team_slave_0: left promiscuous mode [ 477.669972][T21165] team_slave_1: left promiscuous mode [ 477.679849][T21165] macvlan2: left promiscuous mode [ 477.905842][T21159] lo speed is unknown, defaulting to 1000 [ 477.997131][T21173] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 478.044462][T21179] FAULT_INJECTION: forcing a failure. [ 478.044462][T21179] name failslab, interval 1, probability 0, space 0, times 0 [ 478.093824][T21179] CPU: 0 PID: 21179 Comm: syz.0.5551 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 478.104038][T21179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 478.114134][T21179] Call Trace: [ 478.117435][T21179] [ 478.120387][T21179] dump_stack_lvl+0x241/0x360 [ 478.125102][T21179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.130383][T21179] ? __pfx__printk+0x10/0x10 [ 478.135006][T21179] ? __pfx___might_resched+0x10/0x10 [ 478.140337][T21179] should_fail_ex+0x3b0/0x4e0 [ 478.145049][T21179] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 478.151336][T21179] should_failslab+0x9/0x20 [ 478.155861][T21179] __kmalloc_noprof+0xd8/0x400 [ 478.160637][T21179] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 478.166711][T21179] genl_rcv_msg+0x802/0xec0 [ 478.171211][T21179] ? mark_lock+0x9a/0x350 [ 478.175539][T21179] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.180600][T21179] ? __pfx_lock_acquire+0x10/0x10 [ 478.185648][T21179] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 478.191108][T21179] ? __pfx_nl802154_add_llsec_seclevel+0x10/0x10 [ 478.197433][T21179] ? __pfx_nl802154_post_doit+0x10/0x10 [ 478.203009][T21179] ? __pfx___might_resched+0x10/0x10 [ 478.208345][T21179] netlink_rcv_skb+0x1e3/0x430 [ 478.213209][T21179] ? __pfx_genl_rcv_msg+0x10/0x10 [ 478.218235][T21179] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 478.223589][T21179] genl_rcv+0x28/0x40 [ 478.227691][T21179] netlink_unicast+0x7f0/0x990 [ 478.232584][T21179] ? __pfx_netlink_unicast+0x10/0x10 [ 478.237891][T21179] ? __virt_addr_valid+0x183/0x520 [ 478.243040][T21179] ? __check_object_size+0x49c/0x900 [ 478.248325][T21179] ? bpf_lsm_netlink_send+0x9/0x10 [ 478.253455][T21179] netlink_sendmsg+0x8e4/0xcb0 [ 478.258231][T21179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.263512][T21179] ? __import_iovec+0x536/0x820 [ 478.268443][T21179] ? aa_sock_msg_perm+0x91/0x160 [ 478.273411][T21179] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 478.278705][T21179] ? security_socket_sendmsg+0x87/0xb0 [ 478.284172][T21179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 478.289491][T21179] __sock_sendmsg+0x221/0x270 [ 478.294213][T21179] ____sys_sendmsg+0x525/0x7d0 [ 478.299014][T21179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 478.304425][T21179] __sys_sendmsg+0x2b0/0x3a0 [ 478.309024][T21179] ? __pfx___sys_sendmsg+0x10/0x10 [ 478.314137][T21179] ? vfs_write+0x7c4/0xc90 [ 478.318589][T21179] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 478.324920][T21179] ? do_syscall_64+0x100/0x230 [ 478.329691][T21179] ? do_syscall_64+0xb6/0x230 [ 478.334375][T21179] do_syscall_64+0xf3/0x230 [ 478.338876][T21179] ? clear_bhb_loop+0x35/0x90 [ 478.343567][T21179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.349542][T21179] RIP: 0033:0x7f2bb8575bd9 [ 478.353962][T21179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.373576][T21179] RSP: 002b:00007f2bb931a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 478.382006][T21179] RAX: ffffffffffffffda RBX: 00007f2bb8704038 RCX: 00007f2bb8575bd9 [ 478.389978][T21179] RDX: 0000000000000000 RSI: 0000000020000ec0 RDI: 0000000000000004 [ 478.397965][T21179] RBP: 00007f2bb931a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 478.406036][T21179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.414005][T21179] R13: 000000000000006e R14: 00007f2bb8704038 R15: 00007fff51cb6eb8 [ 478.422167][T21179] [ 479.060324][T21202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5562'. [ 479.114024][T21205] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5563'. [ 479.164035][T21205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5563'. [ 479.327749][T21211] xt_TPROXY: Can be used only with -p tcp or -p udp [ 479.346652][T21209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.678273][T21219] netlink: 'syz.1.5569': attribute type 1 has an invalid length. [ 479.697616][T21219] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5569'. [ 480.104218][T21232] netlink: 'syz.4.5572': attribute type 1 has an invalid length. [ 480.149921][T21239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5575'. [ 480.190818][T21239] IPVS: Error joining to the multicast group [ 480.234531][T21243] netlink: 'syz.1.5576': attribute type 27 has an invalid length. [ 480.411861][T21252] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5580'. [ 480.636943][T21272] netlink: 'syz.4.5584': attribute type 1 has an invalid length. [ 480.828667][T21279] netlink: 'syz.4.5586': attribute type 1 has an invalid length. [ 480.915020][T21283] netlink: 'syz.3.5588': attribute type 1 has an invalid length. [ 481.028608][T21288] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 481.043412][T21289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 481.052449][T21289] bond2: entered promiscuous mode [ 481.059025][T21289] bond0: (slave bond2): Enslaving as an active interface with an up link [ 481.095743][T21296] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 481.110641][T21296] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 481.275213][T21306] syzkaller0: refused to change device tx_queue_len [ 481.327272][T21311] bridge0: entered promiscuous mode [ 481.355950][T21311] bond0: entered promiscuous mode [ 481.377167][T21311] bond_slave_0: entered promiscuous mode [ 481.391321][T21311] bond_slave_1: entered promiscuous mode [ 481.449266][T21311] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 481.458427][T21311] Cannot create hsr debugfs directory [ 481.752426][T21335] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.781476][T21335] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 481.821114][T21338] __nla_validate_parse: 3 callbacks suppressed [ 481.821135][T21338] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5607'. [ 481.848749][T21338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5607'. [ 481.880581][T21335] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.904502][T21335] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 482.072724][T21348] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 482.096038][T21335] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.135037][T21335] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 482.227880][T21335] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.247517][T21335] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 482.278094][T21356] netlink: 'syz.2.5614': attribute type 5 has an invalid length. [ 482.286836][T21356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5614'. [ 482.457394][T21335] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 482.467276][T21335] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 482.488705][T21335] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 482.497257][T21335] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 482.502959][T21368] netlink: 468 bytes leftover after parsing attributes in process `syz.2.5618'. [ 482.554051][T21335] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 482.573090][T21335] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 482.590232][T21368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5618'. [ 482.614859][T21335] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 482.643246][T21335] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 482.768844][T21377] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5622'. [ 483.103997][T21403] FAULT_INJECTION: forcing a failure. [ 483.103997][T21403] name failslab, interval 1, probability 0, space 0, times 0 [ 483.133384][T21403] CPU: 0 PID: 21403 Comm: syz.1.5631 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 483.143596][T21403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 483.153676][T21403] Call Trace: [ 483.156978][T21403] [ 483.159930][T21403] dump_stack_lvl+0x241/0x360 [ 483.164628][T21403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 483.169843][T21403] ? __pfx__printk+0x10/0x10 [ 483.174454][T21403] ? __pfx___might_resched+0x10/0x10 [ 483.179769][T21403] should_fail_ex+0x3b0/0x4e0 [ 483.184476][T21403] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 483.190756][T21403] should_failslab+0x9/0x20 [ 483.195284][T21403] __kmalloc_noprof+0xd8/0x400 [ 483.200080][T21403] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 483.206173][T21403] genl_rcv_msg+0x802/0xec0 [ 483.210702][T21403] ? mark_lock+0x9a/0x350 [ 483.215062][T21403] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.220136][T21403] ? __pfx_lock_acquire+0x10/0x10 [ 483.225172][T21403] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 483.230579][T21403] ? __pfx_nl80211_set_cqm+0x10/0x10 [ 483.235894][T21403] ? __pfx_nl80211_post_doit+0x10/0x10 [ 483.241379][T21403] ? __pfx___might_resched+0x10/0x10 [ 483.246709][T21403] netlink_rcv_skb+0x1e3/0x430 [ 483.251501][T21403] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.256553][T21403] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.261870][T21403] ? __netlink_deliver_tap+0x77e/0x7c0 [ 483.267406][T21403] genl_rcv+0x28/0x40 [ 483.271412][T21403] netlink_unicast+0x7f0/0x990 [ 483.276189][T21403] ? __pfx_netlink_unicast+0x10/0x10 [ 483.281472][T21403] ? __virt_addr_valid+0x183/0x520 [ 483.286626][T21403] ? __check_object_size+0x49c/0x900 [ 483.291936][T21403] ? bpf_lsm_netlink_send+0x9/0x10 [ 483.297102][T21403] netlink_sendmsg+0x8e4/0xcb0 [ 483.301927][T21403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.307259][T21403] ? __import_iovec+0x536/0x820 [ 483.312135][T21403] ? aa_sock_msg_perm+0x91/0x160 [ 483.317101][T21403] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 483.322492][T21403] ? security_socket_sendmsg+0x87/0xb0 [ 483.327967][T21403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.333266][T21403] __sock_sendmsg+0x221/0x270 [ 483.337992][T21403] ____sys_sendmsg+0x525/0x7d0 [ 483.342792][T21403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.348133][T21403] __sys_sendmsg+0x2b0/0x3a0 [ 483.352778][T21403] ? __pfx___sys_sendmsg+0x10/0x10 [ 483.358012][T21403] ? vfs_write+0x7c4/0xc90 [ 483.362765][T21403] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 483.369137][T21403] ? do_syscall_64+0x100/0x230 [ 483.373962][T21403] ? do_syscall_64+0xb6/0x230 [ 483.378676][T21403] do_syscall_64+0xf3/0x230 [ 483.383216][T21403] ? clear_bhb_loop+0x35/0x90 [ 483.387919][T21403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.393851][T21403] RIP: 0033:0x7f493e775bd9 [ 483.398291][T21403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.417950][T21403] RSP: 002b:00007f493f49d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.426433][T21403] RAX: ffffffffffffffda RBX: 00007f493e903f60 RCX: 00007f493e775bd9 [ 483.434523][T21403] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 483.442662][T21403] RBP: 00007f493f49d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 483.450781][T21403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.458775][T21403] R13: 000000000000004d R14: 00007f493e903f60 R15: 00007ffe43e9d578 [ 483.466805][T21403] [ 483.524540][ T5103] Bluetooth: hci0: command tx timeout [ 483.720651][T21421] netlink: 'syz.2.5634': attribute type 4 has an invalid length. [ 483.780784][T21428] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5639'. [ 483.805815][T21430] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5640'. [ 483.833521][T21430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5640'. [ 483.900136][T21434] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5641'. [ 484.337812][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 484.700952][T21471] syzkaller0: entered promiscuous mode [ 484.706477][T21471] syzkaller0: entered allmulticast mode [ 484.808468][T21478] lo speed is unknown, defaulting to 1000 [ 487.550333][T21478] lo speed is unknown, defaulting to 1000 [ 487.671182][T21503] __nla_validate_parse: 3 callbacks suppressed [ 487.671206][T21503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5667'. [ 487.720279][T21503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5667'. [ 487.735792][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5668'. [ 487.750386][T21508] IPVS: Error joining to the multicast group [ 487.868343][T21511] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5671'. [ 487.920435][T21511] sysfs: cannot create duplicate filename '/class/ieee80211/ü!ô' [ 487.950953][T21511] CPU: 0 PID: 21511 Comm: syz.2.5671 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 487.961172][T21511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 487.971251][T21511] Call Trace: [ 487.974551][T21511] [ 487.977507][T21511] dump_stack_lvl+0x241/0x360 [ 487.982227][T21511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.987461][T21511] ? __pfx__printk+0x10/0x10 [ 487.992092][T21511] ? sysfs_warn_dup+0x51/0xa0 [ 487.996797][T21511] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 488.002204][T21511] sysfs_warn_dup+0x8e/0xa0 [ 488.006741][T21511] sysfs_do_create_link_sd+0xbe/0x110 [ 488.012145][T21511] device_add_class_symlinks+0x1c5/0x250 [ 488.017819][T21511] device_add+0x553/0xbf0 [ 488.022281][T21511] wiphy_register+0x1d3f/0x2b30 [ 488.027202][T21511] ? __pfx_wiphy_register+0x10/0x10 [ 488.032616][T21511] ? minstrel_ht_alloc+0x72b/0x860 [ 488.037802][T21511] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 488.043917][T21511] ieee80211_register_hw+0x3098/0x3d80 [ 488.049396][T21511] ? ieee80211_register_hw+0x10e1/0x3d80 [ 488.055040][T21511] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 488.060880][T21511] ? __asan_memset+0x23/0x50 [ 488.065518][T21511] ? __hrtimer_init+0x170/0x250 [ 488.070412][T21511] mac80211_hwsim_new_radio+0x2597/0x44d0 [ 488.076195][T21511] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 488.082291][T21511] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 488.088730][T21511] ? kstrndup+0x5c/0xb0 [ 488.092912][T21511] ? __asan_memcpy+0x40/0x70 [ 488.097506][T21511] hwsim_new_radio_nl+0xe4c/0x21d0 [ 488.102628][T21511] ? __pfx___nla_validate_parse+0x10/0x10 [ 488.108347][T21511] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 488.113954][T21511] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 488.120332][T21511] genl_rcv_msg+0xb14/0xec0 [ 488.124866][T21511] ? mark_lock+0x9a/0x350 [ 488.129241][T21511] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.134350][T21511] ? __pfx_lock_acquire+0x10/0x10 [ 488.139403][T21511] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 488.144953][T21511] ? __pfx___might_resched+0x10/0x10 [ 488.150257][T21511] netlink_rcv_skb+0x1e3/0x430 [ 488.155044][T21511] ? __pfx_genl_rcv_msg+0x10/0x10 [ 488.160119][T21511] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 488.165548][T21511] ? __netlink_deliver_tap+0x77e/0x7c0 [ 488.171065][T21511] genl_rcv+0x28/0x40 [ 488.175080][T21511] netlink_unicast+0x7f0/0x990 [ 488.179881][T21511] ? __pfx_netlink_unicast+0x10/0x10 [ 488.185196][T21511] ? __virt_addr_valid+0x183/0x520 [ 488.190324][T21511] ? __check_object_size+0x49c/0x900 [ 488.195620][T21511] ? bpf_lsm_netlink_send+0x9/0x10 [ 488.200748][T21511] netlink_sendmsg+0x8e4/0xcb0 [ 488.205632][T21511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.211044][T21511] ? __import_iovec+0x536/0x820 [ 488.215933][T21511] ? aa_sock_msg_perm+0x91/0x160 [ 488.220921][T21511] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 488.226233][T21511] ? security_socket_sendmsg+0x87/0xb0 [ 488.231722][T21511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.237055][T21511] __sock_sendmsg+0x221/0x270 [ 488.241823][T21511] ____sys_sendmsg+0x525/0x7d0 [ 488.246616][T21511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.251923][T21511] __sys_sendmsg+0x2b0/0x3a0 [ 488.256521][T21511] ? __pfx___sys_sendmsg+0x10/0x10 [ 488.261723][T21511] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 488.268087][T21511] ? do_syscall_64+0x100/0x230 [ 488.272886][T21511] ? do_syscall_64+0xb6/0x230 [ 488.277598][T21511] do_syscall_64+0xf3/0x230 [ 488.282129][T21511] ? clear_bhb_loop+0x35/0x90 [ 488.286840][T21511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.292842][T21511] RIP: 0033:0x7f72e2d75bd9 [ 488.297309][T21511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.316946][T21511] RSP: 002b:00007f72e3ab0048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.325391][T21511] RAX: ffffffffffffffda RBX: 00007f72e2f03f60 RCX: 00007f72e2d75bd9 [ 488.333387][T21511] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 488.341375][T21511] RBP: 00007f72e2de4e60 R08: 0000000000000000 R09: 0000000000000000 [ 488.349350][T21511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.357318][T21511] R13: 000000000000000b R14: 00007f72e2f03f60 R15: 00007fff144c5aa8 [ 488.365336][T21511] [ 488.398303][T21523] netlink: 'syz.1.5673': attribute type 10 has an invalid length. [ 488.437456][T21523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5673'. [ 488.493110][T21523] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 488.547376][T21528] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5676'. [ 488.739180][T21540] netlink: 'syz.2.5681': attribute type 1 has an invalid length. [ 488.792617][T21543] netlink: 'syz.0.5682': attribute type 12 has an invalid length. [ 488.812623][T21543] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5682'. [ 488.840643][T21540] bond4: (slave gretap2): Enslaving as a backup interface with an up link [ 488.933329][T21548] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 488.954353][T21550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5684'. [ 488.977024][T21550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5684'. [ 488.991097][T21540] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 489.023264][T21540] bond4: (slave batadv3): Enslaving as a backup interface with an up link [ 489.346320][T21564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5689'. [ 489.391459][T21565] Dead loop on virtual device ipvlan1, fix it urgently! [ 490.027043][T21594] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 490.127216][T21595] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 490.145568][ T50] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 490.195445][T21601] tc_dump_action: action bad kind [ 490.329531][T21612] netlink: 'syz.1.5708': attribute type 11 has an invalid length. [ 490.371689][T21612] netlink: 'syz.1.5708': attribute type 11 has an invalid length. [ 490.397771][T21612] debugfs: Directory 'netdev:' with parent 'phy3' already present! [ 490.408983][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 490.537387][T21611] syzkaller0: entered promiscuous mode [ 490.550139][T21611] syzkaller0: entered allmulticast mode [ 491.219510][ T5145] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 493.759871][ T5103] Bluetooth: hci4: command 0x0406 tx timeout [ 493.766824][T21648] netlink: 'syz.2.5720': attribute type 4 has an invalid length. [ 493.968595][T21657] __nla_validate_parse: 9 callbacks suppressed [ 493.968614][T21657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5724'. [ 494.051529][T21660] netlink: 188 bytes leftover after parsing attributes in process `syz.4.5725'. [ 494.076603][T21666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5724'. [ 494.200410][T21670] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5727'. [ 494.325228][T21683] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 494.465008][T21695] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5737'. [ 494.777930][T21707] netlink: 'syz.2.5742': attribute type 3 has an invalid length. [ 494.814580][T21707] netlink: 'syz.2.5742': attribute type 3 has an invalid length. [ 494.984510][T21717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5746'. [ 494.990244][T21718] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5745'. [ 495.051950][T21718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5745'. [ 495.111087][T21722] netlink: 'syz.3.5748': attribute type 1 has an invalid length. [ 495.133498][T21722] netlink: 'syz.3.5748': attribute type 2 has an invalid length. [ 495.367696][T21739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5756'. [ 495.381478][T21743] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5757'. [ 495.488663][T21744] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 495.502081][T21744] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 495.523534][T21744] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 495.548232][T21744] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 495.567561][T21744] geneve4: entered promiscuous mode [ 495.583125][T21744] geneve4: entered allmulticast mode [ 495.831143][T21765] netlink: 'syz.0.5764': attribute type 10 has an invalid length. [ 495.870433][T21765] bridge0: port 3(batadv0) entered disabled state [ 495.877179][T21765] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.884953][T21765] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.368228][T21799] netlink: 'syz.3.5773': attribute type 4 has an invalid length. [ 496.404403][T21795] lo speed is unknown, defaulting to 1000 [ 496.616150][T21805] x_tables: duplicate underflow at hook 2 [ 496.647559][T21810] unsupported nlmsg_type 40 [ 496.801430][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 496.925880][T21818] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 497.199099][T21795] lo speed is unknown, defaulting to 1000 [ 497.501760][T21849] netlink: 'syz.4.5791': attribute type 1 has an invalid length. [ 498.144833][T21868] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.219919][T21868] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.270468][T21868] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 498.507592][T21868] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.518927][T21868] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.530953][T21868] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 498.665037][T21868] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.700045][T21868] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.725293][T21868] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 498.878285][T21868] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 498.920053][T21868] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.971392][T21868] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 499.204943][T21868] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.244606][T21868] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 499.264933][T21868] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 499.346233][T21868] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.369813][T21868] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 499.393527][T21868] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 499.428616][T21900] netlink: 'syz.2.5804': attribute type 10 has an invalid length. [ 499.526094][T21880] delete_channel: no stack [ 499.553045][T21868] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.593029][T21868] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 499.634326][T21868] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 499.738025][T21868] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.771443][T21868] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 499.795418][T21868] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 499.997014][T21919] veth0_macvtap: left promiscuous mode [ 500.044608][T21927] netlink: 'syz.4.5814': attribute type 3 has an invalid length. [ 500.058246][T21927] __nla_validate_parse: 17 callbacks suppressed [ 500.058264][T21927] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5814'. [ 500.127211][T21927] netlink: 'syz.4.5814': attribute type 3 has an invalid length. [ 500.160718][T21927] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5814'. [ 500.374672][T21941] IPVS: Error joining to the multicast group [ 500.658927][T21955] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5824'. [ 500.680879][T21956] bridge_slave_1: left allmulticast mode [ 500.704663][T21956] bridge_slave_1: left promiscuous mode [ 500.741268][T21956] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.758758][T21956] netlink: 'syz.3.5821': attribute type 2 has an invalid length. [ 500.780696][T21956] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 500.813841][T21949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5821'. [ 501.016214][T21977] lo speed is unknown, defaulting to 1000 [ 501.248871][T21987] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5837'. [ 501.572650][T21977] lo speed is unknown, defaulting to 1000 [ 501.709183][T22005] syzkaller0: entered promiscuous mode [ 501.718790][T22005] syzkaller0: entered allmulticast mode [ 501.900392][T22015] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5848'. [ 501.938831][T22015] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5848'. [ 504.632301][T22024] netlink: 'syz.4.5852': attribute type 10 has an invalid length. [ 504.643064][T22024] syz_tun: entered promiscuous mode [ 504.820935][T22047] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5859'. [ 505.220536][T22063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5864'. [ 505.301337][T22070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5867'. [ 505.425098][T22063] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5864'. [ 505.482952][T22076] dummy0: entered promiscuous mode [ 505.514377][T22076] dummy0: left promiscuous mode [ 505.551743][T22082] x_tables: unsorted underflow at hook 2 [ 505.956485][T22095] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5874'. [ 505.985671][T22099] netlink: 'syz.2.5875': attribute type 10 has an invalid length. [ 506.019220][T22099] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5875'. [ 506.038862][T22101] xt_ecn: cannot match TCP bits for non-tcp packets [ 506.053225][T22099] bridge0: port 4(geneve0) entered blocking state [ 506.092376][T22099] bridge0: port 4(geneve0) entered disabled state [ 506.123320][T22099] geneve0: entered allmulticast mode [ 506.154929][T22099] geneve0: entered promiscuous mode [ 506.175194][T22099] bridge0: port 4(geneve0) entered blocking state [ 506.181889][T22099] bridge0: port 4(geneve0) entered forwarding state [ 506.290140][T22107] bridge: RTM_NEWNEIGH with invalid ether address [ 506.446574][T22118] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5884'. [ 506.478561][T22118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5884'. [ 506.512070][T22116] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5883'. [ 506.589355][T22122] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5883'. [ 506.669141][T22135] netlink: 'syz.3.5891': attribute type 1 has an invalid length. [ 506.685624][T22135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5891'. [ 506.739156][T22116] bond0: entered promiscuous mode [ 506.776672][T22116] bond_slave_0: entered promiscuous mode [ 506.786227][T22116] bond_slave_1: entered promiscuous mode [ 506.929114][T22145] macvlan3: entered promiscuous mode [ 507.369836][T22171] netlink: 'syz.4.5905': attribute type 5 has an invalid length. [ 507.387955][T22170] veth19: entered allmulticast mode [ 507.430648][T22170] veth19 (unregistering): left allmulticast mode [ 507.588304][T22179] netlink: 'syz.4.5908': attribute type 13 has an invalid length. [ 507.633643][T22179] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 507.757910][T22195] IPVS: set_ctl: invalid protocol: 12 172.30.4.3:20002 [ 507.849115][T22199] netlink: 'syz.1.5914': attribute type 10 has an invalid length. [ 508.113098][T22200] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.135989][T22200] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.163118][T22200] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20008 - 0 [ 508.192529][T22200] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 508.348427][T22223] netlink: 'syz.0.5922': attribute type 8 has an invalid length. [ 508.458290][T22200] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.486520][T22200] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.498430][T22200] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20008 - 0 [ 508.511203][T22200] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 508.566708][T22233] netlink: 'syz.0.5926': attribute type 1 has an invalid length. [ 508.757508][T22200] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.774636][T22200] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.787160][T22200] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20008 - 0 [ 508.798813][T22200] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 508.813217][T22246] xt_TPROXY: Can be used only with -p tcp or -p udp [ 508.833624][T22233] bond4 (unregistering): Released all slaves [ 508.927256][T22200] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.969828][T22200] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.015952][T22200] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20008 - 0 [ 509.036409][T22200] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 509.173786][T22258] netlink: 'syz.2.5936': attribute type 10 has an invalid length. [ 509.207082][T22200] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.224980][T22200] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 509.234265][T22200] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20008 - 0 [ 509.254350][T22200] netdevsim netdevsim4 eth0: set [1, 2] type 2 family 0 port 6081 - 0 [ 509.281573][T22200] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.298051][T22200] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 509.319928][T22200] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20008 - 0 [ 509.341168][T22200] netdevsim netdevsim4 eth1: set [1, 2] type 2 family 0 port 6081 - 0 [ 509.397638][T22200] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.440197][T22200] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 509.448530][T22200] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20008 - 0 [ 509.479926][T22200] netdevsim netdevsim4 eth2: set [1, 2] type 2 family 0 port 6081 - 0 [ 509.519480][T22200] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.541702][T22200] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 509.569783][T22200] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20008 - 0 [ 509.578120][T22200] netdevsim netdevsim4 eth3: set [1, 2] type 2 family 0 port 6081 - 0 [ 510.316845][T22319] __nla_validate_parse: 17 callbacks suppressed [ 510.316866][T22319] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5958'. [ 510.517227][T22331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5963'. [ 510.582454][T22331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5963'. [ 510.624810][T22337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5966'. [ 510.780384][T22344] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5969'. [ 511.147784][T22361] syzkaller0: entered promiscuous mode [ 511.148417][T22370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5976'. [ 511.163906][T22361] syzkaller0: entered allmulticast mode [ 511.176472][T22366] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5975'. [ 511.191168][T22366] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5975'. [ 511.507164][T22383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5980'. [ 513.829032][T22379] netlink: 'syz.1.5978': attribute type 4 has an invalid length. [ 513.845704][T22379] infiniband syz1: set active [ 513.857435][T18984] lo speed is unknown, defaulting to 1000 [ 513.880117][T18984] lo speed is unknown, defaulting to 1000 [ 513.944859][T22388] netlink: 'syz.3.5982': attribute type 4 has an invalid length. [ 513.992597][T22391] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5983'. [ 514.026459][T22395] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 514.143959][T22404] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 514.418925][T22419] netlink: 'syz.2.5996': attribute type 10 has an invalid length. [ 514.853127][T22443] openvswitch: netlink: Key type 253 is out of range max 32 [ 515.311623][T22456] netlink: 'syz.3.6010': attribute type 11 has an invalid length. [ 515.347253][T22456] __nla_validate_parse: 3 callbacks suppressed [ 515.347274][T22456] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6010'. [ 515.468937][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 515.480961][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 515.491676][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 515.503782][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 515.513240][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 515.520999][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 515.557421][T22463] lo speed is unknown, defaulting to 1000 [ 515.645635][T22473] ipvlan5: entered promiscuous mode [ 515.651224][T22473] ipvlan5: entered allmulticast mode [ 515.656673][T22473] ip6gretap0: entered allmulticast mode [ 515.855863][T22479] netlink: 'syz.4.6019': attribute type 10 has an invalid length. [ 515.875516][T22481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6020'. [ 515.930805][T22481] geneve3: entered promiscuous mode [ 515.986524][T22463] lo speed is unknown, defaulting to 1000 [ 515.992740][T22484] netlink: 'syz.3.6021': attribute type 6 has an invalid length. [ 516.004539][T22485] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 516.031729][T22484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6021'. [ 516.135800][T22484] lo speed is unknown, defaulting to 1000 [ 516.529922][T22498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6027'. [ 516.633187][T22498] 8021q: adding VLAN 0 to HW filter on device team2 [ 516.672476][T22503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6027'. [ 516.912655][T22484] lo speed is unknown, defaulting to 1000 [ 517.426961][T22463] chnl_net:caif_netlink_parms(): no params data found [ 517.600583][ T5094] Bluetooth: hci3: command tx timeout [ 517.700854][T22463] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.735835][T22463] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.754390][T22463] bridge_slave_0: entered allmulticast mode [ 517.763583][T22463] bridge_slave_0: entered promiscuous mode [ 517.772572][T22463] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.780364][T22463] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.787683][T22463] bridge_slave_1: entered allmulticast mode [ 517.795244][T22463] bridge_slave_1: entered promiscuous mode [ 517.902410][T22463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.934895][T22463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.129394][T22463] team0: Port device team_slave_0 added [ 518.149494][T22463] team0: Port device team_slave_1 added [ 518.170772][T22556] netlink: 'syz.4.6041': attribute type 4 has an invalid length. [ 518.331019][T22564] netlink: 'syz.0.6043': attribute type 10 has an invalid length. [ 518.500028][T22577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6047'. [ 518.531414][T22463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.538385][T22463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.585290][T22577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6047'. [ 518.625744][T22463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.740177][T22463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.747175][T22463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.820071][T22583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6050'. [ 518.849711][T22463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.074086][T22593] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.081330][T22593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.141225][T22463] hsr_slave_0: entered promiscuous mode [ 519.170338][T22463] hsr_slave_1: entered promiscuous mode [ 519.178640][T22463] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.188710][T22463] Cannot create hsr debugfs directory [ 519.325333][T22607] ip6gretap0: entered promiscuous mode [ 519.348489][T22607] batadv_slave_0: entered promiscuous mode [ 519.356961][T22607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.369800][T22607] Cannot create hsr debugfs directory [ 519.375418][T22607] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 519.404877][T22612] netlink: 'syz.4.6061': attribute type 29 has an invalid length. [ 519.446575][T22612] netlink: 'syz.4.6061': attribute type 29 has an invalid length. [ 519.460130][T22608] netlink: 'syz.4.6061': attribute type 29 has an invalid length. [ 519.673554][T22463] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.681909][ T5094] Bluetooth: hci3: command tx timeout [ 519.749104][T22629] netlink: 'syz.1.6066': attribute type 7 has an invalid length. [ 519.831687][T22629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6066'. [ 519.866439][T22463] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.991510][T22639] ip6gretap0: entered promiscuous mode [ 520.022981][T22639] batadv_slave_0: entered promiscuous mode [ 520.031816][T22646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6074'. [ 520.076074][T22463] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.107082][T22646] IPVS: Error joining to the multicast group [ 520.159807][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 520.179565][T22463] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.229087][T22653] netlink: 'syz.0.6076': attribute type 1 has an invalid length. [ 520.251428][T10713] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 520.270324][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 520.291756][ T5141] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 520.379823][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 520.489774][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 520.540545][T22463] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 520.547488][T22667] x_tables: duplicate underflow at hook 3 [ 520.560313][T22463] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 520.576301][T22463] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 520.599269][T22463] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 520.758651][T22673] veth1_macvtap: left promiscuous mode [ 520.772326][T22673] macsec0: entered promiscuous mode [ 520.777695][T22673] macsec0: entered allmulticast mode [ 520.840804][T22675] veth1_macvtap: entered promiscuous mode [ 520.855903][T22675] veth1_macvtap: entered allmulticast mode [ 520.890056][T22675] macsec0: left promiscuous mode [ 520.895506][T22673] Dead loop on virtual device ipvlan1, fix it urgently! [ 520.903268][ C1] BUG: TASK stack guard page was hit at ffffc9000bc5ff58 (stack is ffffc9000bc60000..ffffc9000bc68000) [ 520.903305][ C1] Oops: stack guard page: 0000 [#1] PREEMPT SMP KASAN PTI [ 520.903324][ C1] CPU: 1 PID: 22673 Comm: syz.1.6082 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 520.903344][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 520.903354][ C1] RIP: 0010:validate_chain+0x1f/0x5900 [ 520.903383][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec c0 02 00 00 49 89 ce <89> 54 24 58 48 89 bc 24 80 00 00 00 65 48 8b 04 25 28 00 00 00 48 [ 520.903400][ C1] RSP: 0018:ffffc9000bc5ff60 EFLAGS: 00010086 [ 520.903416][ C1] RAX: 1ffffffff2594a67 RBX: ffffffff92ca5338 RCX: 730efcfa534bfbe4 [ 520.903430][ C1] RDX: 0000000000000000 RSI: ffff88807eedad68 RDI: ffff88807eed9e00 [ 520.903442][ C1] RBP: ffffc9000bc60260 R08: ffffffff92fbd587 R09: 1ffffffff25f7ab0 [ 520.903461][ C1] R10: dffffc0000000000 R11: fffffbfff25f7ab1 R12: ffff88807eed9e00 [ 520.903475][ C1] R13: ffff88807eed9e00 R14: 730efcfa534bfbe4 R15: ffff88807eed9e00 [ 520.903488][ C1] FS: 00007f493f49d6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 520.903504][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.903516][ C1] CR2: ffffc9000bc5ff58 CR3: 000000005926c000 CR4: 00000000003506f0 [ 520.903531][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 520.903542][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 520.903553][ C1] Call Trace: [ 520.903560][ C1] <#DF> [ 520.903567][ C1] ? __die_body+0x88/0xe0 [ 520.903593][ C1] ? die+0xcf/0x110 [ 520.903618][ C1] ? handle_stack_overflow+0x96/0xd0 [ 520.903641][ C1] ? exc_double_fault+0x178/0x1b0 [ 520.903664][ C1] ? asm_exc_double_fault+0x23/0x30 [ 520.903691][ C1] ? validate_chain+0x1f/0x5900 [ 520.903711][ C1] [ 520.903718][ C1] [ 520.903744][ C1] ? __pfx_validate_chain+0x10/0x10 [ 520.903771][ C1] ? mark_lock+0x9a/0x350 [ 520.903791][ C1] __lock_acquire+0x1346/0x1fd0 [ 520.903819][ C1] lock_acquire+0x1ed/0x550 [ 520.903836][ C1] ? bad_range+0x5f/0x270 [ 520.903859][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 520.903880][ C1] ? check_new_pages+0xd6/0x3d0 [ 520.903905][ C1] ? bad_range+0x5f/0x270 [ 520.903923][ C1] seqcount_lockdep_reader_access+0x127/0x1e0 [ 520.903943][ C1] ? bad_range+0x5f/0x270 [ 520.903962][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 520.903984][ C1] ? __pfx_lock_release+0x10/0x10 [ 520.904001][ C1] ? do_raw_spin_trylock+0xc8/0x1f0 [ 520.904027][ C1] bad_range+0x5f/0x270 [ 520.904050][ C1] get_page_from_freelist+0x2e33/0x2f10 [ 520.904078][ C1] ? validate_chain+0x15b1/0x5900 [ 520.904113][ C1] ? prepare_alloc_pages+0x369/0x5d0 [ 520.904142][ C1] __alloc_pages_noprof+0x256/0x6c0 [ 520.904168][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 520.904196][ C1] ? dev_hard_start_xmit+0x27a/0x7e0 [ 520.904220][ C1] ? arch_stack_walk+0x174/0x1b0 [ 520.904246][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 520.904274][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 520.904297][ C1] ? stack_trace_save+0x118/0x1d0 [ 520.904324][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 520.904349][ C1] ? alloc_pages_noprof+0x43/0x170 [ 520.904373][ C1] stack_depot_save_flags+0x666/0x830 [ 520.904402][ C1] save_stack+0x109/0x1f0 [ 520.904427][ C1] ? __pfx_save_stack+0x10/0x10 [ 520.904449][ C1] ? post_alloc_hook+0x1f3/0x230 [ 520.904476][ C1] ? get_page_from_freelist+0x2e4c/0x2f10 [ 520.904499][ C1] ? __alloc_pages_noprof+0x256/0x6c0 [ 520.904522][ C1] ? alloc_pages_mpol_noprof+0x3e8/0x680 [ 520.904544][ C1] ? stack_depot_save_flags+0x666/0x830 [ 520.904566][ C1] ? kasan_save_track+0x51/0x80 [ 520.904583][ C1] ? kasan_save_free_info+0x40/0x50 [ 520.904607][ C1] ? poison_slab_object+0xe0/0x150 [ 520.904626][ C1] ? __kasan_slab_free+0x37/0x60 [ 520.904643][ C1] ? kmem_cache_free_bulk+0x1f8/0x370 [ 520.904660][ C1] ? kfree_skb_list_reason+0x72e/0x7c0 [ 520.904682][ C1] ? ip6_fragment+0x1c86/0x22c0 [ 520.904699][ C1] ? ip6_finish_output+0x2b8/0x810 [ 520.904723][ C1] ? ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.904740][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 520.904758][ C1] ? dev_hard_start_xmit+0x27a/0x7e0 [ 520.904787][ C1] __set_page_owner+0x92/0x800 [ 520.904814][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 520.904835][ C1] ? __pfx_lock_release+0x10/0x10 [ 520.904854][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 520.904877][ C1] ? do_raw_spin_trylock+0xc8/0x1f0 [ 520.904906][ C1] post_alloc_hook+0x1f3/0x230 [ 520.904931][ C1] get_page_from_freelist+0x2e4c/0x2f10 [ 520.904958][ C1] ? kasan_save_free_info+0x40/0x50 [ 520.904982][ C1] ? __kasan_slab_free+0x37/0x60 [ 520.905002][ C1] ? kfree_skb_list_reason+0x72e/0x7c0 [ 520.905025][ C1] ? __dev_queue_xmit+0x18d2/0x3e90 [ 520.905051][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 520.905069][ C1] ? deref_stack_reg+0x1c7/0x260 [ 520.905092][ C1] ? prepare_alloc_pages+0x369/0x5d0 [ 520.905117][ C1] __alloc_pages_noprof+0x256/0x6c0 [ 520.905140][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 520.905164][ C1] ? ip6_finish_output+0x2b8/0x810 [ 520.905189][ C1] ? arch_stack_walk+0x174/0x1b0 [ 520.905213][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 520.905236][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 520.905258][ C1] ? stack_trace_save+0x118/0x1d0 [ 520.905283][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 520.905308][ C1] ? alloc_pages_noprof+0x43/0x170 [ 520.905328][ C1] stack_depot_save_flags+0x666/0x830 [ 520.905352][ C1] kasan_save_track+0x51/0x80 [ 520.905368][ C1] ? kasan_save_track+0x3f/0x80 [ 520.905383][ C1] ? kasan_save_free_info+0x40/0x50 [ 520.905404][ C1] ? poison_slab_object+0xe0/0x150 [ 520.905424][ C1] ? __kasan_slab_free+0x37/0x60 [ 520.905443][ C1] ? kmem_cache_free_bulk+0x1f8/0x370 [ 520.905464][ C1] ? kfree_skb_list_reason+0x72e/0x7c0 [ 520.905488][ C1] ? ip6_fragment+0x1c86/0x22c0 [ 520.905504][ C1] ? ip6_finish_output+0x2b8/0x810 [ 520.905529][ C1] ? ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.905546][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 520.905564][ C1] ? dev_hard_start_xmit+0x27a/0x7e0 [ 520.905587][ C1] ? __dev_queue_xmit+0x1b63/0x3e90 [ 520.905611][ C1] ? ip6_finish_output2+0xfc2/0x1680 [ 520.905629][ C1] ? ip6_fragment+0x1adc/0x22c0 [ 520.905645][ C1] ? ip6_finish_output+0x2b8/0x810 [ 520.905670][ C1] ? ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.905686][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 520.905703][ C1] ? dev_hard_start_xmit+0x27a/0x7e0 [ 520.905726][ C1] ? __dev_queue_xmit+0x1b63/0x3e90 [ 520.905750][ C1] ? ip6_finish_output2+0xfc2/0x1680 [ 520.905767][ C1] ? ip6_fragment+0x1adc/0x22c0 [ 520.905783][ C1] ? ip6_finish_output+0x2b8/0x810 [ 520.905807][ C1] ? ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.905824][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 520.905842][ C1] ? dev_hard_start_xmit+0x27a/0x7e0 [ 520.905865][ C1] ? __dev_queue_xmit+0x1b63/0x3e90 [ 520.905888][ C1] ? ip6_finish_output2+0xfc2/0x1680 [ 520.905906][ C1] ? ip6_fragment+0x1adc/0x22c0 [ 520.905922][ C1] ? ip6_finish_output+0x2b8/0x810 [ 520.905946][ C1] ? ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.905963][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 520.905980][ C1] ? dev_hard_start_xmit+0x27a/0x7e0 [ 520.906002][ C1] ? __dev_queue_xmit+0x1b63/0x3e90 [ 520.906026][ C1] ? ip6_finish_output2+0xfc2/0x1680 [ 520.906044][ C1] ? ip6_fragment+0x1adc/0x22c0 [ 520.906059][ C1] ? ip6_finish_output+0x2b8/0x810 [ 520.906084][ C1] ? ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.906100][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 520.906118][ C1] ? dev_hard_start_xmit+0x27a/0x7e0 [ 520.906141][ C1] ? __dev_queue_xmit+0x1b63/0x3e90 [ 520.906164][ C1] ? ip6_finish_output2+0xfc2/0x1680 [ 520.906183][ C1] ? ip6_fragment+0x1adc/0x22c0 [ 520.906199][ C1] ? ip6_finish_output+0x2b8/0x810 [ 520.906221][ C1] ? ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.906237][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 520.906254][ C1] ? dev_hard_start_xmit+0x27a/0x7e0 [ 520.906277][ C1] ? __dev_queue_xmit+0x1b63/0x3e90 [ 520.906299][ C1] ? ip6_finish_output2+0xfc2/0x1680 [ 520.906317][ C1] ? ip6_fragment+0x1adc/0x22c0 [ 520.906333][ C1] ? ip6_finish_output+0x2b8/0x810 [ 520.906358][ C1] ? ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.906374][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 520.906392][ C1] ? dev_hard_start_xmit+0x27a/0x7e0 [ 520.906414][ C1] ? __dev_queue_xmit+0x1b63/0x3e90 [ 520.906438][ C1] ? ip6_finish_output2+0xfc2/0x1680 [ 520.906461][ C1] ? ip6_fragment+0x1adc/0x22c0 [ 520.906478][ C1] ? ip6_finish_output+0x2b8/0x810 [ 520.906502][ C1] ? ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.906519][ C1] ? ipvlan_start_xmit+0x4a/0x150 [ 520.906536][ C1] ? dev_hard_start_xmit+0x27a/0x7e0 [ 520.906558][ C1] ? __dev_queue_xmit+0x1b63/0x3e90 [ 520.906580][ C1] ? ip6_finish_output2+0xfc2/0x1680 [ 520.906599][ C1] ? ip6_fragment+0x1adc/0x22c0 [ 520.906615][ C1] ? ip6_finish_output+0x2b8/0x810 [ 520.906639][ C1] ? __phys_addr+0xba/0x170 [ 520.906662][ C1] ? kfree_skb_list_reason+0x72e/0x7c0 [ 520.906686][ C1] kasan_save_free_info+0x40/0x50 [ 520.906713][ C1] poison_slab_object+0xe0/0x150 [ 520.906735][ C1] __kasan_slab_free+0x37/0x60 [ 520.906757][ C1] kmem_cache_free_bulk+0x1f8/0x370 [ 520.906776][ C1] ? kfree_skb_list_reason+0x72e/0x7c0 [ 520.906806][ C1] kfree_skb_list_reason+0x72e/0x7c0 [ 520.906834][ C1] ? __pfx_kfree_skb_list_reason+0x10/0x10 [ 520.906858][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 520.906883][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 520.906914][ C1] ? kfree+0x149/0x360 [ 520.906940][ C1] ip6_fragment+0x1c86/0x22c0 [ 520.906969][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.906989][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 520.907008][ C1] ? __pfx_lock_release+0x10/0x10 [ 520.907029][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 520.907060][ C1] ? ip6_mtu+0x81/0x3f0 [ 520.907087][ C1] ip6_finish_output+0x2b8/0x810 [ 520.907117][ C1] ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.907140][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 520.907160][ C1] ? netif_skb_features+0x7f4/0xbb0 [ 520.907189][ C1] ipvlan_start_xmit+0x4a/0x150 [ 520.907208][ C1] dev_hard_start_xmit+0x27a/0x7e0 [ 520.907241][ C1] __dev_queue_xmit+0x1b63/0x3e90 [ 520.907275][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 520.907301][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 520.907339][ C1] ? mark_lock+0x9a/0x350 [ 520.907361][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 520.907383][ C1] ? __ipv6_neigh_lookup_noref+0x59f/0x730 [ 520.907405][ C1] ? ip6_finish_output2+0xdb6/0x1680 [ 520.907427][ C1] ip6_finish_output2+0xfc2/0x1680 [ 520.907446][ C1] ? rcu_is_watching+0x15/0xb0 [ 520.907474][ C1] ? ip6_finish_output2+0x712/0x1680 [ 520.907493][ C1] ? ip6_fraglist_prepare+0x253/0x700 [ 520.907512][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.907532][ C1] ? ip6_copy_metadata+0x8a6/0xed0 [ 520.907554][ C1] ip6_fragment+0x1adc/0x22c0 [ 520.907583][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.907601][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 520.907621][ C1] ? __pfx_lock_release+0x10/0x10 [ 520.907641][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 520.907671][ C1] ? ip6_mtu+0x81/0x3f0 [ 520.907697][ C1] ip6_finish_output+0x2b8/0x810 [ 520.907727][ C1] ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.907750][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 520.907771][ C1] ? netif_skb_features+0x7f4/0xbb0 [ 520.907799][ C1] ipvlan_start_xmit+0x4a/0x150 [ 520.907819][ C1] dev_hard_start_xmit+0x27a/0x7e0 [ 520.907851][ C1] __dev_queue_xmit+0x1b63/0x3e90 [ 520.907884][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 520.907910][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 520.907947][ C1] ? mark_lock+0x9a/0x350 [ 520.907970][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 520.907991][ C1] ? __ipv6_neigh_lookup_noref+0x59f/0x730 [ 520.908013][ C1] ? ip6_finish_output2+0xdb6/0x1680 [ 520.908035][ C1] ip6_finish_output2+0xfc2/0x1680 [ 520.908055][ C1] ? rcu_is_watching+0x15/0xb0 [ 520.908077][ C1] ? ip6_finish_output2+0x712/0x1680 [ 520.908097][ C1] ? ip6_fraglist_prepare+0x253/0x700 [ 520.908115][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.908135][ C1] ? ip6_copy_metadata+0x8a6/0xed0 [ 520.908158][ C1] ip6_fragment+0x1adc/0x22c0 [ 520.908186][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.908205][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 520.908224][ C1] ? __pfx_lock_release+0x10/0x10 [ 520.908244][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 520.908275][ C1] ? ip6_mtu+0x81/0x3f0 [ 520.908301][ C1] ip6_finish_output+0x2b8/0x810 [ 520.908330][ C1] ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.908354][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 520.908374][ C1] ? netif_skb_features+0x7f4/0xbb0 [ 520.908402][ C1] ipvlan_start_xmit+0x4a/0x150 [ 520.908422][ C1] dev_hard_start_xmit+0x27a/0x7e0 [ 520.908459][ C1] __dev_queue_xmit+0x1b63/0x3e90 [ 520.908492][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 520.908518][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 520.908555][ C1] ? mark_lock+0x9a/0x350 [ 520.908577][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 520.908599][ C1] ? __ipv6_neigh_lookup_noref+0x59f/0x730 [ 520.908621][ C1] ? ip6_finish_output2+0xdb6/0x1680 [ 520.908643][ C1] ip6_finish_output2+0xfc2/0x1680 [ 520.908662][ C1] ? rcu_is_watching+0x15/0xb0 [ 520.908684][ C1] ? ip6_finish_output2+0x712/0x1680 [ 520.908704][ C1] ? ip6_fraglist_prepare+0x253/0x700 [ 520.908723][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.908742][ C1] ? ip6_copy_metadata+0x8a6/0xed0 [ 520.908765][ C1] ip6_fragment+0x1adc/0x22c0 [ 520.908793][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.908812][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 520.908831][ C1] ? __pfx_lock_release+0x10/0x10 [ 520.908851][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 520.908881][ C1] ? ip6_mtu+0x81/0x3f0 [ 520.908908][ C1] ip6_finish_output+0x2b8/0x810 [ 520.908937][ C1] ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.908960][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 520.908980][ C1] ? netif_skb_features+0x7f4/0xbb0 [ 520.909009][ C1] ipvlan_start_xmit+0x4a/0x150 [ 520.909030][ C1] dev_hard_start_xmit+0x27a/0x7e0 [ 520.909062][ C1] __dev_queue_xmit+0x1b63/0x3e90 [ 520.909095][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 520.909121][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 520.909158][ C1] ? mark_lock+0x9a/0x350 [ 520.909180][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 520.909202][ C1] ? __ipv6_neigh_lookup_noref+0x59f/0x730 [ 520.909221][ C1] ? ip6_finish_output2+0xdb6/0x1680 [ 520.909243][ C1] ip6_finish_output2+0xfc2/0x1680 [ 520.909263][ C1] ? rcu_is_watching+0x15/0xb0 [ 520.909284][ C1] ? ip6_finish_output2+0x712/0x1680 [ 520.909305][ C1] ? ip6_fraglist_prepare+0x253/0x700 [ 520.909324][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.909344][ C1] ? ip6_copy_metadata+0x8a6/0xed0 [ 520.909366][ C1] ip6_fragment+0x1adc/0x22c0 [ 520.909394][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.909412][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 520.909431][ C1] ? __pfx_lock_release+0x10/0x10 [ 520.909451][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 520.909486][ C1] ? ip6_mtu+0x81/0x3f0 [ 520.909512][ C1] ip6_finish_output+0x2b8/0x810 [ 520.909542][ C1] ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.909565][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 520.909587][ C1] ? netif_skb_features+0x7f4/0xbb0 [ 520.909609][ C1] ipvlan_start_xmit+0x4a/0x150 [ 520.909627][ C1] dev_hard_start_xmit+0x27a/0x7e0 [ 520.909654][ C1] __dev_queue_xmit+0x1b63/0x3e90 [ 520.909685][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 520.909710][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 520.909742][ C1] ? mark_lock+0x9a/0x350 [ 520.909762][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 520.909783][ C1] ? __ipv6_neigh_lookup_noref+0x59f/0x730 [ 520.909800][ C1] ? ip6_finish_output2+0xdb6/0x1680 [ 520.909820][ C1] ip6_finish_output2+0xfc2/0x1680 [ 520.909838][ C1] ? rcu_is_watching+0x15/0xb0 [ 520.909858][ C1] ? ip6_finish_output2+0x712/0x1680 [ 520.909875][ C1] ? ip6_fraglist_prepare+0x253/0x700 [ 520.909891][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.909906][ C1] ? ip6_copy_metadata+0x8a6/0xed0 [ 520.909925][ C1] ip6_fragment+0x1adc/0x22c0 [ 520.909949][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.909964][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 520.909982][ C1] ? __pfx_lock_release+0x10/0x10 [ 520.909999][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 520.910028][ C1] ? ip6_mtu+0x81/0x3f0 [ 520.910052][ C1] ip6_finish_output+0x2b8/0x810 [ 520.910076][ C1] ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.910094][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 520.910132][ C1] ? netif_skb_features+0x7f4/0xbb0 [ 520.910159][ C1] ipvlan_start_xmit+0x4a/0x150 [ 520.910179][ C1] dev_hard_start_xmit+0x27a/0x7e0 [ 520.910190][T22675] macsec0: left allmulticast mode [ 520.910208][ C1] __dev_queue_xmit+0x1b63/0x3e90 [ 520.910236][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 520.910257][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 520.910289][ C1] ? mark_lock+0x9a/0x350 [ 520.910308][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 520.910328][ C1] ? __ipv6_neigh_lookup_noref+0x59f/0x730 [ 520.910347][ C1] ? ip6_finish_output2+0xdb6/0x1680 [ 520.910366][ C1] ip6_finish_output2+0xfc2/0x1680 [ 520.910383][ C1] ? rcu_is_watching+0x15/0xb0 [ 520.910403][ C1] ? ip6_finish_output2+0x712/0x1680 [ 520.910421][ C1] ? ip6_fraglist_prepare+0x253/0x700 [ 520.910437][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.910461][ C1] ? ip6_copy_metadata+0x8a6/0xed0 [ 520.910481][ C1] ip6_fragment+0x1adc/0x22c0 [ 520.910506][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.910524][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 520.910541][ C1] ? __pfx_lock_release+0x10/0x10 [ 520.910559][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 520.910587][ C1] ? ip6_mtu+0x81/0x3f0 [ 520.910610][ C1] ip6_finish_output+0x2b8/0x810 [ 520.910637][ C1] ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.910657][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 520.910675][ C1] ? netif_skb_features+0x7f4/0xbb0 [ 520.910700][ C1] ipvlan_start_xmit+0x4a/0x150 [ 520.910719][ C1] dev_hard_start_xmit+0x27a/0x7e0 [ 520.910748][ C1] __dev_queue_xmit+0x1b63/0x3e90 [ 520.910777][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 520.910801][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 520.910834][ C1] ? mark_lock+0x9a/0x350 [ 520.910854][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 520.910873][ C1] ? __ipv6_neigh_lookup_noref+0x59f/0x730 [ 520.910891][ C1] ? ip6_finish_output2+0xdb6/0x1680 [ 520.910911][ C1] ip6_finish_output2+0xfc2/0x1680 [ 520.910928][ C1] ? rcu_is_watching+0x15/0xb0 [ 520.910948][ C1] ? ip6_finish_output2+0x712/0x1680 [ 520.910966][ C1] ? ip6_fraglist_prepare+0x253/0x700 [ 520.910983][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.911001][ C1] ? ip6_copy_metadata+0x8a6/0xed0 [ 520.911021][ C1] ip6_fragment+0x1adc/0x22c0 [ 520.911046][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.911063][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 520.911080][ C1] ? __pfx_lock_release+0x10/0x10 [ 520.911098][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 520.911125][ C1] ? ip6_mtu+0x81/0x3f0 [ 520.911148][ C1] ip6_finish_output+0x2b8/0x810 [ 520.911174][ C1] ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.911195][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 520.911213][ C1] ? netif_skb_features+0x7f4/0xbb0 [ 520.911238][ C1] ipvlan_start_xmit+0x4a/0x150 [ 520.911256][ C1] dev_hard_start_xmit+0x27a/0x7e0 [ 520.911286][ C1] __dev_queue_xmit+0x1b63/0x3e90 [ 520.911315][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 520.911339][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 520.911372][ C1] ? mark_lock+0x9a/0x350 [ 520.911392][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 520.911411][ C1] ? __ipv6_neigh_lookup_noref+0x59f/0x730 [ 520.911430][ C1] ? ip6_finish_output2+0xdb6/0x1680 [ 520.911450][ C1] ip6_finish_output2+0xfc2/0x1680 [ 520.911470][ C1] ? rcu_is_watching+0x15/0xb0 [ 520.911490][ C1] ? ip6_finish_output2+0x712/0x1680 [ 520.911508][ C1] ? ip6_fraglist_prepare+0x253/0x700 [ 520.911525][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.911542][ C1] ? ip6_copy_metadata+0x8a6/0xed0 [ 520.911563][ C1] ip6_fragment+0x1adc/0x22c0 [ 520.911588][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.911605][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 520.911622][ C1] ? __pfx_lock_release+0x10/0x10 [ 520.911640][ C1] ? __pfx_ip6_finish_output+0x10/0x10 [ 520.911667][ C1] ? ip6_mtu+0x81/0x3f0 [ 520.911690][ C1] ip6_finish_output+0x2b8/0x810 [ 520.911716][ C1] ipvlan_queue_xmit+0xa2e/0x11d0 [ 520.911736][ C1] ? __pfx_ipvlan_queue_xmit+0x10/0x10 [ 520.911754][ C1] ? netif_skb_features+0x7f4/0xbb0 [ 520.911780][ C1] ipvlan_start_xmit+0x4a/0x150 [ 520.911798][ C1] dev_hard_start_xmit+0x27a/0x7e0 [ 520.911827][ C1] __dev_queue_xmit+0x1b63/0x3e90 [ 520.911848][ C1] ? ip6_xmit+0xefe/0x17f0 [ 520.911870][ C1] ? sctp_v6_xmit+0x9f2/0x13f0 [ 520.911898][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 520.911922][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 520.911955][ C1] ? mark_lock+0x9a/0x350 [ 520.911975][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 520.911994][ C1] ? __ipv6_neigh_lookup_noref+0x59f/0x730 [ 520.912013][ C1] ? ip6_finish_output2+0xdb6/0x1680 [ 520.912033][ C1] ip6_finish_output2+0xfc2/0x1680 [ 520.912050][ C1] ? skb_copy_bits+0x6d0/0x7a0 [ 520.912073][ C1] ? ip6_finish_output2+0x712/0x1680 [ 520.912093][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.912117][ C1] ip6_fragment+0x164e/0x22c0 [ 520.912142][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 520.912159][ C1] ? __pfx_ip6_fragment+0x10/0x10 [ 520.912176][ C1] ? __pfx_lock_release+0x10/0x10 [ 520.912199][ C1] ? ip6_mtu+0x81/0x3f0 [ 520.912223][ C1] ip6_finish_output+0x2b8/0x810 [ 520.912249][ C1] ip6_xmit+0xefe/0x17f0 [ 520.912279][ C1] ? __pfx_ip6_xmit+0x10/0x10 [ 520.912310][ C1] ? sctp_v6_xmit+0x614/0x13f0 [ 520.912332][ C1] sctp_v6_xmit+0x9f2/0x13f0 [ 520.912361][ C1] ? __pfx_sctp_v6_xmit+0x10/0x10 [ 520.912382][ C1] ? __skb_checksum+0x82e/0x910 [ 520.912398][ C1] ? kasan_quarantine_put+0xdc/0x230 [ 520.912417][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 520.912445][ C1] ? sctp_compute_cksum+0x93/0x110 [ 520.912468][ C1] sctp_packet_transmit+0x26af/0x2ca0 [ 520.912499][ C1] sctp_packet_singleton+0x22c/0x320 [ 520.912521][ C1] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 520.912545][ C1] ? sctp_outq_select_transport+0x474/0x580 [ 520.912565][ C1] ? sctp_transport_burst_limited+0x18c/0x270 [ 520.912588][ C1] sctp_outq_flush+0x6d5/0x3e20 [ 520.912606][ C1] ? rcu_is_watching+0x15/0xb0 [ 520.912635][ C1] ? __pfx_sctp_outq_flush+0x10/0x10 [ 520.912656][ C1] ? sctp_outq_tail+0x67a/0x930 [ 520.912674][ C1] ? sctp_outq_uncork+0x4f/0xb0 [ 520.912693][ C1] sctp_do_sm+0x59cc/0x60c0 [ 520.912712][ C1] ? stack_depot_save_flags+0x29/0x830 [ 520.912738][ C1] ? kasan_save_track+0x51/0x80 [ 520.912756][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 520.912775][ C1] ? sctp_stream_init_ext+0x56/0x180 [ 520.912798][ C1] ? __pfx_sctp_do_sm+0x10/0x10 [ 520.912833][ C1] ? __sk_mem_raise_allocated+0xa5f/0x1140 [ 520.912857][ C1] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 520.912876][ C1] sctp_sendmsg_to_asoc+0xfa5/0x1800 [ 520.912900][ C1] ? sctp_v6_to_sk_saddr+0x101/0x1c0 [ 520.912924][ C1] ? __asan_memcpy+0x40/0x70 [ 520.912941][ C1] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 520.912963][ C1] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 520.912986][ C1] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 520.913003][ C1] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 520.913018][ C1] ? sctp_sendmsg+0xbb9/0x3520 [ 520.913045][ C1] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 520.913062][ C1] ? security_sctp_bind_connect+0x90/0xb0 [ 520.913085][ C1] sctp_sendmsg+0x1bc3/0x3520 [ 520.913118][ C1] ? __pfx_sctp_sendmsg+0x10/0x10 [ 520.913143][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 520.913168][ C1] ? inet_sendmsg+0x330/0x390 [ 520.913186][ C1] __sock_sendmsg+0x1a6/0x270 [ 520.913206][ C1] ____sys_sendmsg+0x525/0x7d0 [ 520.913233][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.913263][ C1] __sys_sendmmsg+0x3b2/0x740 [ 520.913290][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 520.913327][ C1] ? wake_up_q+0xdc/0x120 [ 520.913344][ C1] ? futex_wait+0x285/0x360 [ 520.913364][ C1] ? __pfx_futex_wait+0x10/0x10 [ 520.913385][ C1] ? __pfx_aa_sk_perm+0x10/0x10 [ 520.913409][ C1] ? do_sock_setsockopt+0x3e2/0x720 [ 520.913431][ C1] ? do_futex+0x33b/0x560 [ 520.913471][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 520.913489][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 520.913507][ C1] ? do_syscall_64+0x100/0x230 [ 520.913526][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 520.913549][ C1] do_syscall_64+0xf3/0x230 [ 520.913567][ C1] ? clear_bhb_loop+0x35/0x90 [ 520.913586][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.913605][ C1] RIP: 0033:0x7f493e775bd9 [ 520.913621][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.913636][ C1] RSP: 002b:00007f493f49d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 520.913654][ C1] RAX: ffffffffffffffda RBX: 00007f493e903f60 RCX: 00007f493e775bd9 [ 520.913667][ C1] RDX: 0000000000000001 RSI: 00000000200007c0 RDI: 000000000000000b [ 520.913679][ C1] RBP: 00007f493e7e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 520.913690][ C1] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 520.913700][ C1] R13: 000000000000004d R14: 00007f493e903f60 R15: 00007ffe43e9d578 [ 520.913720][ C1] [ 520.913727][ C1] Modules linked in: [ 520.913756][ C1] ---[ end trace 0000000000000000 ]--- [ 520.913764][ C1] RIP: 0010:validate_chain+0x1f/0x5900 [ 520.913785][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec c0 02 00 00 49 89 ce <89> 54 24 58 48 89 bc 24 80 00 00 00 65 48 8b 04 25 28 00 00 00 48 [ 520.913798][ C1] RSP: 0018:ffffc9000bc5ff60 EFLAGS: 00010086 [ 520.913813][ C1] RAX: 1ffffffff2594a67 RBX: ffffffff92ca5338 RCX: 730efcfa534bfbe4 [ 520.913826][ C1] RDX: 0000000000000000 RSI: ffff88807eedad68 RDI: ffff88807eed9e00 [ 520.913838][ C1] RBP: ffffc9000bc60260 R08: ffffffff92fbd587 R09: 1ffffffff25f7ab0 [ 520.913851][ C1] R10: dffffc0000000000 R11: fffffbfff25f7ab1 R12: ffff88807eed9e00 [ 520.913864][ C1] R13: ffff88807eed9e00 R14: 730efcfa534bfbe4 R15: ffff88807eed9e00 [ 520.913877][ C1] FS: 00007f493f49d6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 520.913892][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 520.913904][ C1] CR2: ffffc9000bc5ff58 CR3: 000000005926c000 CR4: 00000000003506f0 [ 520.913919][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 520.913929][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 520.913942][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 520.921539][ C1] Kernel Offset: disabled