last executing test programs: 1m28.853738785s ago: executing program 2 (id=241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3000000}, 0x1c) 1m9.349879682s ago: executing program 2 (id=241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3000000}, 0x1c) 50.842996818s ago: executing program 2 (id=241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3000000}, 0x1c) 37.452425812s ago: executing program 2 (id=241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3000000}, 0x1c) 23.615117267s ago: executing program 2 (id=241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3000000}, 0x1c) 15.810398674s ago: executing program 0 (id=2102): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xffffffff, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (fail_nth: 14) 15.182972599s ago: executing program 0 (id=2109): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000040)=0xa9a9, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)=0x4) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000140)=0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000840) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r4, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x4b}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x40080) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000400)=0x6a65, 0x4) r7 = syz_init_net_socket$ax25(0x3, 0x0, 0xc3) r8 = accept$ax25(r7, &(0x7f0000000440)={{0x3, @default}, [@bcast, @rose, @rose, @netrom, @bcast, @remote, @remote, @rose]}, &(0x7f00000004c0)=0x48) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, &(0x7f0000000500)={'batadv0\x00', {0x2, 0x0, @remote}}) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000540)={0x2, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r9, 0x4) r10 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000600)={r0, 0x1, 0x6, 0xfff}) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x0, 0x218, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000680), {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xff000000, 0xff, 0x4, 0xb, {@mac=@multicast, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0xf, 0x7, 0x16f, 0x4000, 0x3, 0x6, 'ip6erspan0\x00', 'pimreg\x00', {}, {}, 0x0, 0x100}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x3, 0x3}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x8000, 0x98, 0x1, 0x0, "90466a875f6d9f5fb6dbadeabdbc30a2c359a0551466e5ad41777c718853895a50bc37f0ef39eb6c624c1c5d48e1654cf6d75f25026f297b656a64a1b92d9321"}}}, {{@arp={@multicast1, @empty, 0x0, 0x1fffffffe, 0x10, 0xa, {@empty, {[0xff, 0x1fe, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x7f, 0xff, 0x6, 0xa, 0x6, 0x8000, 'veth0_vlan\x00', 'ip6erspan0\x00', {}, {0xff}, 0x0, 0x14}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0xc1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) socket$qrtr(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000b00)) recvfrom$ax25(r7, &(0x7f0000000b40)=""/51, 0x33, 0x40, &(0x7f0000000b80)={{0x3, @default, 0x5}, [@default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r11, 0x84, 0x21, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) listen(r8, 0x7) r12 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r12, 0x0, 0x48a, &(0x7f0000000c80)={0x555c, 0xf, 0x7fff}, 0xc) 14.541844309s ago: executing program 0 (id=2118): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000080200000038000480340001800c0001007061796c6f6164002400028008000340000000000800024000000000080005400000000208000440000000000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 14.312352137s ago: executing program 0 (id=2122): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000140)=0x735, 0x4) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000f00000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r1, @ANYBLOB="140006"], 0x48}}, 0x0) 14.082179158s ago: executing program 0 (id=2125): syz_80211_inject_frame(0x0, 0x0, 0x2a) syz_80211_inject_frame(0x0, &(0x7f00000007c0)=ANY=[], 0x59e) socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x11, @loopback, 0x4e20, 0x0, 'none\x00'}, 0x2c) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'sh\x00'}, 0x2c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x4}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff0100000000000000fff00000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ff00"/97], 0xb8}}, 0x0) 12.590022535s ago: executing program 0 (id=2147): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800f31dd9ab07ea1f574df19e05", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x6, 0x8}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f00000017c0)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES64=r2, @ANYRESDEC=r4], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f0000000180), &(0x7f0000003ec0)=ANY=[@ANYBLOB="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"], 0x22d6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000003010000000000000000000000000000658d9553cdfb244cc262209f32777e67e776813e6c7a96ed78ba289a66944f854d24c2b713ce90107cf0ad56f4b640ed9271b44bb4e9a09f2dcb31b0106bc75433009cd829d5f756dbdd6e4f"], 0x14}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='svcrdma_decode_wseg\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 11.346829408s ago: executing program 2 (id=241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3000000}, 0x1c) 2.07437085s ago: executing program 4 (id=2218): sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB="24002d8004000200000000000500010000000000050004"], 0x40}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01004c0000ddffffffff200000d808000300", @ANYRES32=r1, @ANYBLOB="2c002d800800020005"], 0x48}}, 0x0) 2.049461353s ago: executing program 3 (id=2219): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000002a0009000000004c000000000400002c14001600fc01000000000000000000000000000008000c"], 0x30}, 0x1, 0x3000000}, 0x0) 1.80239423s ago: executing program 4 (id=2221): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed={{0x85, 0x0, 0x0, 0x0, 0x67, 0x4}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x10}}]}, 0x38}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) 1.641837098s ago: executing program 3 (id=2222): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000600)={0xa, 0x4e24, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x4e24, 0x0, @loopback={0x4000000000000}}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="15"], 0x18}}], 0x2, 0x0) 1.470455215s ago: executing program 4 (id=2224): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0xf0, 0x10, 0x1, 0xf00, 0x0, {{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) 1.4551591s ago: executing program 3 (id=2225): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x1a000, 0xffffffffffff0000, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.334071721s ago: executing program 4 (id=2227): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000304000000000000e4ffffff0000", @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 1.219155241s ago: executing program 1 (id=2228): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYRES64=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3, 0x4}, 0x10}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x10000004}) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x3) epoll_wait(r4, &(0x7f0000000540)=[{}], 0x1, 0x7f36be39) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100080c100000", 0x51}, {&(0x7f00000000c0)="530aed8e43f8c8", 0x7}], 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0100000000000c0232251a000000"], 0x14}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000280), 0xa7c, r7}, 0x38) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000280)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x3, r1}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r13, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x70}}, 0x0) close(r2) r14 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000680)={{0x3, @rose}, [@rose, @default, @remote, @null, @null, @rose, @default, @rose]}, &(0x7f0000000080)=0x48, 0x800) getsockopt$netrom_NETROM_T4(r14, 0x103, 0x6, &(0x7f0000000140)=0xffffeff7, &(0x7f0000000240)=0xfffffffffffffe1c) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="bc01000010000300"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028004001a8008000d000100000014001400766574"], 0x1bc}, 0x1, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x8, 0x4e, 0xa}, [@ldst={0x5, 0x3, 0x0, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x3ff, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) 1.115125592s ago: executing program 4 (id=2229): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={0x0, 0x0, 0x4000, r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x43, 0x0, 0x4}, 0xc) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$sock(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}, 0x0) shutdown(r2, 0x0) sendmmsg$unix(r1, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='+', 0x1}], 0x1}}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x10, 0x80, 0x8, 0x0, {{0x1e, 0x4, 0x3, 0x5, 0x78, 0x68, 0x0, 0x8, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, {[@timestamp_addr={0x44, 0x14, 0x59, 0x1, 0x2, [{@broadcast, 0x4}, {@rand_addr=0x64010102, 0x7}]}, @cipso={0x86, 0x1f, 0x0, [{0x5, 0x2}, {0x7, 0x12, "a798d16f088461dd4744682fc5783204"}, {0x6, 0x5, "a3f04e"}]}, @noop, @timestamp={0x44, 0x8, 0xe4, 0x0, 0x0, [0x0]}, @noop, @timestamp={0x44, 0xc, 0x52, 0x0, 0xf, [0x4, 0x80000001]}, @lsrr={0x83, 0x17, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000640)={'syztnl2\x00', r5, 0x0, 0x700, 0x5, 0x2, {{0xb, 0x4, 0x2, 0x3, 0x2c, 0x67, 0x0, 0x1f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@cipso={0x86, 0x18, 0xfffffffffffffffc, [{0x1, 0x12, "1ffb202ac249a8fed6e6f8f48dcb3661"}]}]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x8001, 0x8, 0x1450, 0xffffffffffffffff, 0x10000, '\x00', r6, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x5}, 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x10, 0x140a, 0x20, 0x70bd27, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x404c014) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r7}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000020c0)={@link_local, @random="57f90a2d42b0", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x10, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x9, &(0x7f0000000040)=0x22, 0x4) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r9, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xfc, r11, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5c6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2791, @private2, 0x3}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbc}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4800000}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbea}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffbff}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) r12 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c0, 0x338, 0x1b8, 0x1b8, 0x428, 0x2a0, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, &(0x7f0000000180), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, 0xff, 0xff000000, 'bond0\x00', 'bond0\x00', {0xff}, {0xff}, 0x8c, 0x3, 0x8}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x2, 0x2, @multicast2, 0x4e21}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0xe11, 0x100, 0x1}}, @common=@addrtype={{0x30}, {0x0, 0x8, 0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x0, 0x3}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0x5, 0x1}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffffff, 'veth1_to_bond\x00', 'rose0\x00', {0xff}, {}, 0x1d, 0x3, 0x72}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x5, 0x81]}}, @common=@icmp={{0x28}, {0x12, "c5c3"}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x6, 0x41}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f5c0000000c0a01080000000000000000010000000900020073797a3200000000300003802c000080080003400000000220000b801c0001800a0001006c696d69740000000c00028008000440000000090900010073797a3000000000140000001000010000000000001000000000000a"], 0xe0}}, 0x0) 838.226817ms ago: executing program 1 (id=2230): socket$inet6_sctp(0xa, 0x0, 0x84) pipe(0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008001c000000002018000780140002006e657464657673696d300000000000000800080000000000080009"], 0x44}}, 0x0) 694.137877ms ago: executing program 1 (id=2231): socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @broadcast, @void, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x13, 0x2, 0x0, 0x0, "c10d23d7ec96f99ea3be1d056b79f9097eb0fb2e3b1fac4c117934a284cef94e69142887bd00bd960f71c1c7f22d6a877e272d35d7a1d0ffe714e06bc884f732"}}}}, 0x0) 606.982045ms ago: executing program 1 (id=2232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002380)={0x64c, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0xfffffffa}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x2b, 0x7, 0x1, 0x0, "987f813f0b87fbb41d896397bee3fd8455ec2055654629aa3d0efbb8d7bbdd0e1e478162fa5bed"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x2f, 0x7, 0x1, 0x0, "de7bab9a750f2b9aac712693453aa980c5c6e01e7d9272b503be20035f0b6a4136678bee6442511d39c06d"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x59c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x4c0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4ac, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1f8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x98, 0x1, "176e22324db74df4bd1f4e36176f69af00c4917d55d49f51f57f8fc222b0b5e7c930b4e4d334ee4b2ae13e886048a592c0ed63520eca363958bb92f5e6eeff9fa860c30003ba1fc41ee4765dbb598b328df64e72cc371f10b7458d2e2e682a05dea02496d96b42c5fe379ff58c92eb154fe9ff86387128c2185c3b34711adb70dbb8a6ddd7f7a47a242d14891ee05d088b53a3cb"}, @NFTA_DATA_VALUE={0x14, 0x1, "7f8ca6ca8b59739522fda4d951b22441"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xf4, 0x1, "6be8bf707b5a0a0680b3eae1f95978d94395f8363719512a248e42e76fb38f5f808e1908764157ddfe89ed5e650875c96014a1b1d93ce0ed1f4da09ff94338fac8c92df49f9a5ce27fa8f7db80e1e3ced93252406197dfdc7867edb09d4d2312ce9ce05ff09e1b7781607b5876185446f40623153b8a7f9b0340f3c98c5bea0bbb86f4241be02f128de9134e767b07857a52f5241d0d536e4534ad197a7fdca844d9461b320561089ec5c3659071e726639d5001ae26d44597e4f4a06e2985c52a4c2e816757f13da3adc95e639d7259e413e1ad7247de8852d34d70f7448a411de876ce9c895f8bbb01ff71a787f539"}]}, @NFTA_IMMEDIATE_DATA={0x268, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc2, 0x1, "9b9eed614150f0040f65fb4f0e1f04bd6ffa2ec4a9b24232e508b1002b391522a31c552cba211916c11b2fc984b5fb6f508e9215a9f6f544189a56e9b2e7d55a7807e00f5a403eda41926119cd85def2c185ae1d40afcb6d334ced638b60f1e547612ef1249c5c43e91781c7e32055dfb035c327126634d13f2e4df7fb836eed679cc4832e2c30da6062650d7ec1eaeba09e06e69a3132618ee049bf7ba14d04c2eb404d7d0b7c274b5ec8c3eae0257340f67457969f07881dbe05b3a43b"}, @NFTA_DATA_VALUE={0x43, 0x1, "fd9a07443172cb6e4b3d4f9078a032071a165ffdd0ba37f4b947c527534938311b1eae43ced68f514ba886dc651619a273de3925cd6f457c891aefdcf33749"}, @NFTA_DATA_VALUE={0x6, 0x1, 'vs'}, @NFTA_DATA_VALUE={0x14, 0x1, "b6a2480bef2c196203b93d987bfe4d8c"}, @NFTA_DATA_VALUE={0xd5, 0x1, "1fff0d8a0acb54dd0afc9c7117d766d4449a06c4ec92828354834f53d58023ac265a1308ab989a29654df2b39f88286f3ce98e57f3e43f4ad3dea0d90734b995937b0269aceb72623d4f63c522a7a17f3d4881852af58470cd5270128ee343cee1b49c43532ccc618ae4e3d601ae635f2700293c2c3f24992985a3cf0e27b05dbd89e33ea53b51ced5108e1a872632806778bbda7d3504b765e3c54a613303be1d7fbcf166718b30191dd38b3dc2a10a8319b0ea4a82a25a139dcf50beab6e14d360db29fd9680569f57e5f2c1e74d2455"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x48, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_DREG={0x8}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DREG={0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x18}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf000000}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, 0x64c}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) 498.336812ms ago: executing program 1 (id=2233): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c20000000180c20000000800001800000b00002f9078ac1e0001e00000012001000000089078"], 0x0) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) write$binfmt_elf64(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x328) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r6 = accept$alg(r5, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) setsockopt$sock_linger(r6, 0x1, 0x3d, &(0x7f0000000080), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/146, 0x92}], 0x1}, 0x0) 481.358003ms ago: executing program 3 (id=2234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$caif_stream(0x25, 0x1, 0x0) connect$inet6(r1, &(0x7f0000001d40)={0xa, 0x0, 0x0, @mcast2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x20, 0x76, 0x0, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010400000000000000000200001e090001007309"], 0x20}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000000000000080000000000000000000000000000fc02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cc011100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000fe880000000000000000000000000101e0000002000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bbff0200000000000000000000000000010003"], 0x27c}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x2, 0x10000}, &(0x7f0000000a40)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000a80)={0x0, 0x1000, "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"}, &(0x7f0000001ac0)=0x1008) sendmsg$inet_sctp(r7, &(0x7f0000001c00)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x3, @remote, 0xbef}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000340)="30448be209d2263eeb75677f900ee5170ecf5e754c4938875360a011a6a913d84a4f05e1a0cff6a32f749153d3ee7cfb0af5fd993160bfa16c08b96de10a650fa82a13d74e79c2f6c19138a3e64750da2f37ba93de4d5a9d9e56abc0e46d2e4c23e53e3fa92756320a5f5088534c6b754c29054e47950dc8824c6b505884ad3d711f6ed897f3bac10859093e36faf415f2982b2dfb78aa8b126bb174519e9e03242103d758fc34a93b322b9369c89cfb2c215739c22707a7db4e5e1da9b60fc7e4419375f65efba52842822300e782d7f9cd9d9529ca164765cefc", 0xdb}, {&(0x7f00000004c0)="79dc4ca0523b470f80e754cf26015014bef56e9c3e68afbe91a4f36e8d00f62bf1e4ba2df2cb445e8742e070773754b34666e43ca27893ed756b22d4e1a38a7ff9cc9983cb26d52a26f36c6fecd3d37f3f9df892c423260a6bd27408a4aa05cfa3698aff4cbe4762e1740e355ab065c0d6c240cc8dfabc9fe34336fd718b082b74b0f11aa0585406f1be6974d4b39cefbdf68464ccb4276d44f9cf99428d4b800ca5985c8cf081b78015167c", 0xac}, {&(0x7f0000000580)="67654e2ea7bbe9676b2502f419ac5a48ff1cfbf8c4d022f3e1ccb3317b9b1fb1f13394e4967ccfb12a7ee313d134243a7db09345aea01a93f294120674e51e59592cbfad8a71e734bcbd2f986b690ac6c6dfe23d7e71a8a339ae444b4a492b42c4d98a932199af62da8393e8f899a02b5d6c31897fe6b107e2f6e488ed2b09042206130bf1fba9c435f94ff9f23ef918e9999a5d0f464baf2b200724a137677a2f3c4803447d2ac2f524573a217fc9ca1c3f3acb2113a736b895856f379c180655eacf2529b300011f16206176b52af2009c0707ccaf97cde3ddcfb89e7d019aee43827f508feca18c8d441e0a867a5db0c7084589", 0xf5}, {&(0x7f0000001d80)="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", 0x119}, {&(0x7f0000000840)="0269c7589852e1b8a8d90e89d232e70bd5c013e9ea559e66f108bfdb22927b153fe09ac19367faa46f15c67386d621234713f30b89e8567fc43a42dd79266122cfdd8912aed6098ac265c85d89f3fd379344f83aa5fd17f4f75e8961f791d9ad09dd39668044a9444385424e00a39941078193bbdc064a776517c880fab40bdd5af99c4ec09a09ad6c78ee", 0x8b}, {&(0x7f0000000740)="120af2e51f300516e7543d2132b4662378804fa9d21eb6db073d3aa9456d99e305b8c5bd1748ca66d30bacb5610ce8e0de8fd86f4ad6c1bb46d7fe933b022c2285f1a5087d4b8b584a3c7e9e30b6d2936662baa50855c5459a04ca75fff172df35fcf29f21b6d4964b8c9f4eec02f53c4b1c718bfd75ac952866aa1c29", 0x7d}, {&(0x7f0000000900)="f939c67f195b9e47f2fc4c9b6d2190461805642eedd29674c7859aaec5ee748dfc86dc06c07dff11d9a348a9c30abfd1204c660ced7d9fab8105e29fbdd5c571bf024d2d4aba9c2dbcbb91a55cace5761f073cb54a0b4596f9c1b92d58d85ae9d0d2c6f377d4c48f8af5f46ea64a72a2da01bb36bddcbe208475395a3b1fbb1b33d4a87638d619e2adb0e3250d7360bc", 0x90}, {&(0x7f0000000180)="4acfef562efa080388fefc0f33d8a27350", 0x11}], 0x8, &(0x7f0000001c40)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0x9, 0xfb, 0x200, 0xe, 0x80, 0x15, 0x2, 0xf, r10}}, @authinfo={0x18, 0x84, 0x6, {0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x1, 0xc, 0xffff, 0x2, r11}}, @sndrcv={0x30, 0x84, 0x1, {0xffff, 0x5b, 0x0, 0x7fffffff, 0x9, 0x36, 0xea000000, 0x3, r10}}, @dstaddrv6={0x20, 0x84, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}], 0xf0, 0x4004001}, 0x40) 262.719767ms ago: executing program 1 (id=2235): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000430001004000000000000000a56d223000159471"], 0x24}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000004, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000023c0)={r3, 0xffffffffffffffff, 0x100000000007}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000002800)={0x1c, 0x0, {0xb9, @usage=0x800, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x1, @usage, 0x3, 0x1f, [0x5d63, 0x1ca0d09d, 0xfffffffffce839ad, 0x9d0, 0x100000001, 0xf5bc]}, {0x0, @struct={0x10001, 0x800}, 0x0, 0x76e, 0x81, 0x8000, 0x4001, 0x3, 0x0, @struct={0x42482a0e, 0x7}, 0x80, 0xc, [0x4, 0x64, 0x5, 0x1000, 0x8000000000000001, 0x4]}, {0x0, @struct={0x6, 0x7}, r4, 0x7f, 0x0, 0x5, 0x2, 0x7, 0x43a, @struct={0x1, 0x7}, 0xffffff7f, 0x5, [0x4, 0x8001, 0x6, 0x0, 0x0, 0xffffffffffff536c]}, {0x1, 0x7f, 0x1}}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="3f000000010040", 0x7) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x543ed2b3478737ef) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000ec0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) epoll_pwait(0xffffffffffffffff, &(0x7f0000000440)=[{}], 0x1, 0xfffffffa, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x98, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @remote, 0x0, 0xff, 'rose0\x00', 'macvlan1\x00'}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @empty, 0x1}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}, {0xfff2, 0x10}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) setsockopt$inet6_int(r6, 0x29, 0x2, &(0x7f0000000040)=0x40000006, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000300)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e28, @rand_addr=0x64010100}, {0x2, 0x4e20, @local}, 0xc, 0x0, 0x0, 0x0, 0xa094, &(0x7f0000000180)='vlan0\x00', 0x7, 0x100000001, 0x1}) 142.281208ms ago: executing program 3 (id=2236): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x5, 0x0, 0x20001f00) pipe(&(0x7f0000000000)) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) (async) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}, 0x1, 0x3}}, 0x26) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) (async) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x5, 0x0, 0x20001f00) (async) pipe(&(0x7f0000000000)) (async) 141.817847ms ago: executing program 4 (id=2237): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x80000000, 0x1a) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 3 (id=2238): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x1400, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) kernel console output (not intermixed with test programs): : attribute type 1 has an invalid length. [ 205.835852][ T9106] netlink: 'syz.3.1243': attribute type 1 has an invalid length. [ 205.865394][ T9106] netlink: 'syz.3.1243': attribute type 1 has an invalid length. [ 205.877731][ T9106] netlink: 'syz.3.1243': attribute type 1 has an invalid length. [ 205.881057][ T9109] block nbd0: not configured, cannot reconfigure [ 205.895207][ T9108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.906499][ T9106] netlink: 'syz.3.1243': attribute type 1 has an invalid length. [ 205.930540][ T9106] netlink: 'syz.3.1243': attribute type 1 has an invalid length. [ 205.945182][ T9106] netlink: 'syz.3.1243': attribute type 1 has an invalid length. [ 205.964435][ T8778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.013963][ T8778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.029370][ T8778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.044740][ T8778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.054674][ T8778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.072442][ T8778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.084965][ T8778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.110102][ T8778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.150159][ T8778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.196852][ T8778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.211766][ T8778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.227448][ T8778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.246248][ T8778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.279866][ T9123] gretap0: entered promiscuous mode [ 206.305544][ T9123] gretap0: left promiscuous mode [ 206.387671][ T9125] __nla_validate_parse: 8 callbacks suppressed [ 206.387695][ T9125] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1249'. [ 206.484603][ T9125] macvlan4: entered allmulticast mode [ 206.508397][ T9125] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 206.539003][ T9125] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 206.553231][ T9125] bond0: (slave macvlan4): Enslaving as an active interface with an up link [ 206.704284][ T3916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.757818][ T3916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.851576][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1255'. [ 206.857253][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.897545][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.916306][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'. [ 206.967220][ T9144] block nbd0: not configured, cannot reconfigure [ 207.022778][ T9150] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1258'. [ 207.392779][ T9163] ip6t_REJECT: ECHOREPLY is not supported [ 207.477359][ T9172] validate_nla: 3 callbacks suppressed [ 207.477380][ T9172] netlink: 'syz.1.1267': attribute type 3 has an invalid length. [ 207.502423][ T9163] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1265'. [ 207.512066][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1267'. [ 207.741704][ T9181] ipvlan2: entered promiscuous mode [ 207.752682][ T9181] ipvlan2: entered allmulticast mode [ 207.759820][ T9181] ip6gretap0: entered allmulticast mode [ 207.854496][ T9164] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1264'. [ 207.873105][ T9164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.951179][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1270'. [ 207.970874][ T9184] block nbd0: not configured, cannot reconfigure [ 208.123543][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1271'. [ 208.242418][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1274'. [ 208.294099][ T9198] xt_TCPMSS: Only works on TCP SYN packets [ 208.586939][ T9217] block nbd0: not configured, cannot reconfigure [ 208.862383][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.477340][ T5113] Bluetooth: hci3: command 0x0406 tx timeout [ 209.982610][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.064789][ T9245] block nbd0: not configured, cannot reconfigure [ 210.151271][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.320944][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.335788][ T9256] dccp_invalid_packet: P.Data Offset(172) too large [ 210.416246][ T9254] vlan5: entered promiscuous mode [ 210.424790][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 210.439991][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 210.449438][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 210.461453][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 210.470979][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 210.478730][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.486840][ T9254] vlan5: entered allmulticast mode [ 210.542585][ T9260] macvlan3: entered promiscuous mode [ 210.560500][ T9260] vlan1: entered promiscuous mode [ 210.583596][ T9260] macvlan3: entered allmulticast mode [ 210.590885][ T9260] vlan1: entered allmulticast mode [ 210.596617][ T9260] veth0_vlan: entered allmulticast mode [ 210.613497][ T9260] team0: Device macvlan3 is up. Set it down before adding it as a team port [ 210.647897][ T9260] vlan1: left allmulticast mode [ 210.653465][ T9260] veth0_vlan: left allmulticast mode [ 210.661593][ T9260] vlan1: left promiscuous mode [ 210.833330][ T9266] block nbd0: not configured, cannot reconfigure [ 210.955570][ T61] bridge_slave_1: left allmulticast mode [ 210.979775][ T61] bridge_slave_1: left promiscuous mode [ 210.997424][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.040856][ T61] bridge_slave_0: left allmulticast mode [ 211.046582][ T61] bridge_slave_0: left promiscuous mode [ 211.079754][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.175410][ T9282] netlink: 'syz.1.1297': attribute type 13 has an invalid length. [ 211.678542][ T9303] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 211.933145][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.949372][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.964256][ T61] bond0 (unregistering): Released all slaves [ 212.116905][ T9312] trusted_key: syz.3.1307 sent an empty control message without MSG_MORE. [ 212.368156][ T9325] __nla_validate_parse: 6 callbacks suppressed [ 212.368184][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 212.403210][ T9325] block nbd0: not configured, cannot reconfigure [ 212.522328][ T5110] Bluetooth: hci4: command tx timeout [ 212.874332][ T61] hsr_slave_0: left promiscuous mode [ 212.904623][ T61] hsr_slave_1: left promiscuous mode [ 212.912775][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.941391][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.950486][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1318'. [ 212.975586][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.003010][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.046877][ T61] veth1_macvtap: left promiscuous mode [ 213.054365][ T61] veth0_macvtap: left promiscuous mode [ 213.060881][ T61] veth1_vlan: left promiscuous mode [ 213.067292][ T61] veth0_vlan: left promiscuous mode [ 213.075322][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'. [ 213.085911][ T9355] block nbd0: not configured, cannot reconfigure [ 213.653460][ T61] team0 (unregistering): Port device team_slave_1 removed [ 213.701414][ T61] team0 (unregistering): Port device team_slave_0 removed [ 214.215948][ T9366] netlink: 'syz.4.1323': attribute type 13 has an invalid length. [ 214.228464][ T9257] chnl_net:caif_netlink_parms(): no params data found [ 214.420462][ T9370] macvlan3: entered promiscuous mode [ 214.425832][ T9370] macvlan3: entered allmulticast mode [ 214.444594][ T9377] Unknown options in mask 1f4 [ 214.586437][ T9380] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 214.597719][ T5110] Bluetooth: hci4: command tx timeout [ 214.664005][ T9257] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.688666][ T9387] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1332'. [ 214.716307][ T9257] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.741314][ T9257] bridge_slave_0: entered allmulticast mode [ 214.747507][ T9389] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1333'. [ 214.756811][ T9257] bridge_slave_0: entered promiscuous mode [ 214.802743][ T9257] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.827233][ T9257] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.836028][ T9257] bridge_slave_1: entered allmulticast mode [ 214.858235][ T9257] bridge_slave_1: entered promiscuous mode [ 214.870063][ T9392] netlink: 'syz.4.1334': attribute type 10 has an invalid length. [ 214.899923][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 214.919075][ T9392] geneve0: entered promiscuous mode [ 214.943526][ T9395] block nbd0: not configured, cannot reconfigure [ 215.063525][ T9257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.092295][ T9257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.160553][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 215.207319][ T9402] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 215.270103][ T9257] team0: Port device team_slave_0 added [ 215.298765][ T9257] team0: Port device team_slave_1 added [ 215.477454][ T9257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.497279][ T9257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.526596][ T9415] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 215.541042][ T9415] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1342'. [ 215.554218][ T9419] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1343'. [ 215.554492][ T9257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.581274][ T9418] netlink: 'syz.4.1344': attribute type 10 has an invalid length. [ 215.649781][ T9418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.659701][ T9418] batadv0: entered promiscuous mode [ 215.666668][ T9418] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 215.700732][ T9257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.727689][ T9257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.770215][ T9257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.892818][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'. [ 215.918903][ T9434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1349'. [ 215.933617][ T9430] macvlan3: entered promiscuous mode [ 215.940354][ T9434] block nbd0: not configured, cannot reconfigure [ 215.947139][ T9430] macvlan3: entered allmulticast mode [ 215.962135][ T9257] hsr_slave_0: entered promiscuous mode [ 215.983431][ T9257] hsr_slave_1: entered promiscuous mode [ 216.166611][ T9443] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 216.239209][ T9444] IPVS: persistence engine module ip_vs_pe_À not found [ 216.458886][ T9457] netpci0: tun_chr_ioctl cmd 2148553947 [ 216.677378][ T5110] Bluetooth: hci4: command tx timeout [ 217.058269][ T9482] netlink: 'syz.4.1366': attribute type 4 has an invalid length. [ 217.642936][ T9257] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.670089][ T9257] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.681404][ T9506] __nla_validate_parse: 4 callbacks suppressed [ 217.681425][ T9506] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1374'. [ 217.725875][ T9257] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.775352][ T9510] netlink: 'syz.4.1376': attribute type 1 has an invalid length. [ 217.810407][ T9257] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.850659][ T9510] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.878502][ T9510] bond2: entered promiscuous mode [ 217.885942][ T9510] bond0: (slave bond2): Enslaving as an active interface with an up link [ 217.951980][ T9516] bond2: entered allmulticast mode [ 217.981800][ T9518] netlink: 'syz.3.1378': attribute type 4 has an invalid length. [ 218.276494][ T9257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.394313][ T9257] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.430469][ T5218] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.437733][ T5218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.468756][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.476000][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.585548][ T9538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1387'. [ 218.623158][ T9538] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1387'. [ 218.758624][ T5110] Bluetooth: hci4: command tx timeout [ 218.807144][ T9549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1390'. [ 218.816088][ T9549] block nbd0: not configured, cannot reconfigure [ 218.855843][ T9550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1389'. [ 218.877283][ T9555] netlink: 1584 bytes leftover after parsing attributes in process `syz.4.1393'. [ 218.894839][ T9557] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1392'. [ 220.632418][ T9565] netlink: 'syz.4.1395': attribute type 10 has an invalid length. [ 220.642813][ T9565] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.711732][ T9565] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.719060][ T9565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.764063][ T9565] bridge0: entered promiscuous mode [ 220.779739][ T9565] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 220.790164][ T9572] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 220.910656][ T9257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.966455][ T9580] netlink: 'syz.0.1400': attribute type 11 has an invalid length. [ 221.093529][ T9257] veth0_vlan: entered promiscuous mode [ 221.129178][ T9257] veth1_vlan: entered promiscuous mode [ 221.166408][ T9585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1403'. [ 221.232099][ T9257] veth0_macvtap: entered promiscuous mode [ 221.290864][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1404'. [ 221.291672][ T9257] veth1_macvtap: entered promiscuous mode [ 221.376132][ T9596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1407'. [ 221.388642][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.407347][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.426003][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.462612][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.477733][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.488262][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.502305][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.513672][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.526012][ T9257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.566839][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.601739][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.612483][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.624342][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.634495][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.653658][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.662063][ T9607] netlink: 'syz.1.1411': attribute type 1 has an invalid length. [ 221.665438][ T9257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.682377][ T9257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.694645][ T9257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.793508][ T9257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.803385][ T9257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.818647][ T9257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.827617][ T9257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.530132][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.552527][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.621838][ T3916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.643597][ T3916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.246628][ T9630] __nla_validate_parse: 1 callbacks suppressed [ 224.246649][ T9630] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1417'. [ 224.585926][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1425'. [ 224.597727][ T9666] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1427'. [ 224.606907][ T9666] netlink: 'syz.4.1427': attribute type 1 has an invalid length. [ 224.657509][ T9666] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1427'. [ 226.340166][ T9673] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 226.564324][ T9687] netlink: 'syz.0.1432': attribute type 1 has an invalid length. [ 226.599425][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 226.610653][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 226.621108][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 226.631115][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 226.639845][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 226.647720][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.742593][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.905658][ T9697] IPVS: persistence engine module ip_vs_pe_À not found [ 226.939134][ T9704] netlink: 'syz.3.1437': attribute type 2 has an invalid length. [ 227.078530][ T9707] netlink: 2272 bytes leftover after parsing attributes in process `syz.1.1438'. [ 227.132208][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.154220][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1438'. [ 227.304576][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.514949][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.613785][ T9720] tap0: tun_chr_ioctl cmd 1074025677 [ 227.620067][ T9720] tap0: linktype set to 769 [ 227.641232][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1442'. [ 227.810757][ T9740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.826208][ T9740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.842148][ T9742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.894139][ T5227] IPVS: starting estimator thread 0... [ 228.019714][ T9743] IPVS: using max 17 ests per chain, 40800 per kthread [ 228.061702][ T9753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.757821][ T5110] Bluetooth: hci4: command tx timeout [ 229.213814][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1453'. [ 229.863233][ T9689] chnl_net:caif_netlink_parms(): no params data found [ 229.939621][ T9773] Dead loop on virtual device ipvlan1, fix it urgently! [ 230.054772][ T9777] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1460'. [ 230.140793][ T35] bridge_slave_1: left allmulticast mode [ 230.146501][ T35] bridge_slave_1: left promiscuous mode [ 230.164173][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.189190][ T35] bridge_slave_0: left allmulticast mode [ 230.197688][ T35] bridge_slave_0: left promiscuous mode [ 230.214734][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.642712][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.654889][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.667358][ T35] bond0 (unregistering): Released all slaves [ 230.741403][ T9689] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.774533][ T9689] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.804379][ T9689] bridge_slave_0: entered allmulticast mode [ 230.829126][ T9689] bridge_slave_0: entered promiscuous mode [ 230.838457][ T9793] sctp: [Deprecated]: syz.4.1464 (pid 9793) Use of int in maxseg socket option. [ 230.838457][ T9793] Use struct sctp_assoc_value instead [ 230.838544][ T5110] Bluetooth: hci4: command tx timeout [ 230.868193][ T9689] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.883993][ T9689] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.894154][ T9689] bridge_slave_1: entered allmulticast mode [ 230.917251][ T9689] bridge_slave_1: entered promiscuous mode [ 231.231444][ T9689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.309478][ T9689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.655865][ T9689] team0: Port device team_slave_0 added [ 231.663902][ T9820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1468'. [ 231.689192][ T9689] team0: Port device team_slave_1 added [ 231.768483][ T35] hsr_slave_0: left promiscuous mode [ 231.784847][ T35] hsr_slave_1: left promiscuous mode [ 231.796912][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.806065][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.814984][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.822572][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.853458][ T35] veth1_macvtap: left promiscuous mode [ 231.859324][ T35] veth0_macvtap: left promiscuous mode [ 231.865108][ T35] veth1_vlan: left promiscuous mode [ 231.870661][ T35] veth0_vlan: left promiscuous mode [ 232.693522][ T35] team0 (unregistering): Port device team_slave_1 removed [ 232.732625][ T35] team0 (unregistering): Port device team_slave_0 removed [ 232.917894][ T5113] Bluetooth: hci0: command 0x0406 tx timeout [ 232.924046][ T5113] Bluetooth: hci4: command tx timeout [ 232.927767][ T5110] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 234.691736][ T9834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1474'. [ 234.814702][ T9835] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1473'. [ 234.844199][ T9835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 234.899552][ T9689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.906616][ T9689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.964221][ T9689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.997587][ T5110] Bluetooth: hci4: command tx timeout [ 235.029578][ T9689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.059145][ T9689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.098633][ T9689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.123654][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1478'. [ 235.223857][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 235.422464][ T9689] hsr_slave_0: entered promiscuous mode [ 235.441516][ T9689] hsr_slave_1: entered promiscuous mode [ 235.907321][ T9878] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1488'. [ 236.030491][ T9874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1486'. [ 237.599836][ T9886] ipvlan2: entered promiscuous mode [ 237.605146][ T9886] ipvlan2: entered allmulticast mode [ 237.637491][ T9889] netlink: 'syz.4.1493': attribute type 1 has an invalid length. [ 237.645336][ T9889] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1493'. [ 237.669033][ T9894] netlink: 'syz.4.1493': attribute type 1 has an invalid length. [ 237.677739][ T9894] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.1493'. [ 237.818171][ T9903] xt_ecn: cannot match TCP bits for non-tcp packets [ 237.975452][ T9913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1501'. [ 238.189117][ T9921] openvswitch: netlink: Key type 540 is out of range max 32 [ 238.516062][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1504'. [ 238.567238][ T9689] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.621543][ T9941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1504'. [ 238.622187][ T9689] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 238.652653][ T9948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1506'. [ 238.666032][ T9689] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.687557][ T9689] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.918492][ T9955] tap0: tun_chr_ioctl cmd 1074025677 [ 238.937449][ T9955] tap0: linktype set to 780 [ 238.986478][ T9961] netlink: 'syz.1.1509': attribute type 1 has an invalid length. [ 239.047743][ T9958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.532179][ T9689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.942550][ T9689] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.963986][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.971249][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.285517][ T9996] __nla_validate_parse: 2 callbacks suppressed [ 240.285539][ T9996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1522'. [ 240.566656][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.573928][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.835221][T10015] netlink: 393 bytes leftover after parsing attributes in process `syz.4.1525'. [ 240.870914][T10018] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1526'. [ 241.052055][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1527'. [ 241.188624][T10037] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004 [ 241.273574][ T9689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.457822][ T9689] veth0_vlan: entered promiscuous mode [ 241.525357][ T9689] veth1_vlan: entered promiscuous mode [ 241.740664][ T9689] veth0_macvtap: entered promiscuous mode [ 241.797875][ T9689] veth1_macvtap: entered promiscuous mode [ 241.898637][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.946010][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.974617][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.986245][T10072] IPVS: persistence engine module ip_vs_pe_À not found [ 241.994310][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.004643][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.025734][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.046816][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.067935][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.083654][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1540'. [ 242.106344][ T9689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.189093][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.220413][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.243612][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.254392][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.264717][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.300434][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.319649][ T9689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.334097][ T9689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.365424][ T9689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.449504][ T9689] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.483339][ T9689] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.499090][ T9689] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.513667][ T9689] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.839656][ T3916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.890494][ T3916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.941263][T10120] FAULT_INJECTION: forcing a failure. [ 242.941263][T10120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.000167][ T3916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.037175][ T3916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.051985][T10120] CPU: 1 PID: 10120 Comm: syz.3.1549 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 243.062210][T10120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 243.072305][T10120] Call Trace: [ 243.075598][T10120] [ 243.078640][T10120] dump_stack_lvl+0x241/0x360 [ 243.083360][T10120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.088577][T10120] ? __pfx__printk+0x10/0x10 [ 243.093182][T10120] ? __pfx_lock_release+0x10/0x10 [ 243.098231][T10120] should_fail_ex+0x3b0/0x4e0 [ 243.102934][T10120] _copy_from_user+0x2f/0xe0 [ 243.107541][T10120] copy_msghdr_from_user+0xae/0x680 [ 243.112753][T10120] ? __pfx___might_resched+0x10/0x10 [ 243.118057][T10120] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 243.123886][T10120] ? __might_fault+0xaa/0x120 [ 243.128589][T10120] do_recvmmsg+0x40f/0xae0 [ 243.133031][T10120] ? __pfx_lock_release+0x10/0x10 [ 243.138073][T10120] ? __pfx_do_recvmmsg+0x10/0x10 [ 243.143050][T10120] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 243.148957][T10120] ? ksys_write+0x23e/0x2c0 [ 243.153500][T10120] ? __pfx_lock_release+0x10/0x10 [ 243.158546][T10120] ? vfs_write+0x7c4/0xc90 [ 243.162999][T10120] ? __mutex_unlock_slowpath+0x21d/0x750 [ 243.168660][T10120] ? __fget_files+0x3f6/0x470 [ 243.173372][T10120] __x64_sys_recvmmsg+0x199/0x250 [ 243.178439][T10120] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 243.184005][T10120] ? do_syscall_64+0x100/0x230 [ 243.188785][T10120] ? do_syscall_64+0xb6/0x230 [ 243.193477][T10120] do_syscall_64+0xf3/0x230 [ 243.197988][T10120] ? clear_bhb_loop+0x35/0x90 [ 243.202693][T10120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.208606][T10120] RIP: 0033:0x7fdffaf75bd9 [ 243.213037][T10120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.232653][T10120] RSP: 002b:00007fdffbd62048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 243.241080][T10120] RAX: ffffffffffffffda RBX: 00007fdffb104038 RCX: 00007fdffaf75bd9 [ 243.249084][T10120] RDX: 000000000291962b RSI: 0000000020000040 RDI: 0000000000000003 [ 243.257102][T10120] RBP: 00007fdffbd620a0 R08: 0000000000000000 R09: 0000000000000000 [ 243.265267][T10120] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 243.273275][T10120] R13: 000000000000006e R14: 00007fdffb104038 R15: 00007ffe033a0928 [ 243.281282][T10120] [ 243.462355][T10125] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 243.965546][T10157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1561'. [ 244.060720][T10161] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1563'. [ 244.252692][T10168] netlink: 'syz.4.1566': attribute type 11 has an invalid length. [ 244.258136][T10173] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1567'. [ 244.271571][T10172] netlink: 'syz.0.1568': attribute type 2 has an invalid length. [ 244.277484][T10168] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1566'. [ 244.568624][T10184] netlink: 'syz.3.1572': attribute type 1 has an invalid length. [ 244.795205][ T1053] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.122826][ T1053] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.189219][ T1053] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.257242][ T1053] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.373145][ T1053] bridge_slave_1: left allmulticast mode [ 245.378965][ T1053] bridge_slave_1: left promiscuous mode [ 245.384737][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.394086][ T1053] bridge_slave_0: left allmulticast mode [ 245.400862][ T1053] bridge_slave_0: left promiscuous mode [ 245.406668][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.752166][ T1053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.763922][ T1053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.775382][ T1053] bond0 (unregistering): Released all slaves [ 246.083070][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1576'. [ 246.196928][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1579'. [ 246.247722][ T1053] hsr_slave_0: left promiscuous mode [ 246.256074][ T1053] hsr_slave_1: left promiscuous mode [ 246.276396][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.302826][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.342082][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.369739][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.428754][ T1053] veth1_macvtap: left promiscuous mode [ 246.434675][T10219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1582'. [ 246.442477][ T1053] veth0_macvtap: left promiscuous mode [ 246.469738][ T1053] veth1_vlan: left promiscuous mode [ 246.481445][ T1053] veth0_vlan: left promiscuous mode [ 246.580477][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.590444][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.598826][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.608692][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.617829][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 246.625537][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 247.081007][ T1053] team0 (unregistering): Port device team_slave_1 removed [ 247.141308][ T1053] team0 (unregistering): Port device team_slave_0 removed [ 248.030328][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1586'. [ 248.271783][T10221] chnl_net:caif_netlink_parms(): no params data found [ 248.656071][T10221] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.678542][ T5113] Bluetooth: hci4: command tx timeout [ 248.680957][T10221] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.727237][T10221] bridge_slave_0: entered allmulticast mode [ 248.760590][T10221] bridge_slave_0: entered promiscuous mode [ 248.793242][T10283] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1600'. [ 248.854602][T10221] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.879549][T10221] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.886882][T10221] bridge_slave_1: entered allmulticast mode [ 248.912009][T10221] bridge_slave_1: entered promiscuous mode [ 248.936921][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 249.131625][T10221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.279707][T10221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.338562][T10298] syz.4.1607[10298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.338733][T10298] syz.4.1607[10298] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.355845][T10271] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1596'. [ 249.381478][T10271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.451081][T10221] team0: Port device team_slave_0 added [ 249.457894][T10298] netlink: 'syz.4.1607': attribute type 4 has an invalid length. [ 249.470682][T10221] team0: Port device team_slave_1 added [ 249.706204][T10221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.723929][T10221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.778173][T10221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.822680][T10221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.836610][T10221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.866234][T10221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.111281][T10221] hsr_slave_0: entered promiscuous mode [ 250.133855][T10221] hsr_slave_1: entered promiscuous mode [ 250.174466][T10319] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 250.589946][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1612'. [ 250.758535][ T5113] Bluetooth: hci4: command tx timeout [ 250.925215][T10350] netlink: 'syz.0.1618': attribute type 29 has an invalid length. [ 250.933403][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1618'. [ 252.319199][T10350] netlink: 'syz.0.1618': attribute type 29 has an invalid length. [ 252.347460][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1618'. [ 252.734881][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1625'. [ 252.837428][ T5113] Bluetooth: hci4: command tx timeout [ 253.112862][T10386] netlink: 'syz.4.1630': attribute type 4 has an invalid length. [ 253.299907][T10221] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 253.334817][T10221] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 253.353471][T10221] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 253.398821][T10221] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.471491][T10356] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1620'. [ 253.484853][T10356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 253.501829][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1631'. [ 253.526140][T10394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1632'. [ 253.551008][T10394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1632'. [ 253.570879][T10394] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1632'. [ 253.865750][T10404] x_tables: ip_tables: osf match: only valid for protocol 6 [ 254.922168][ T5113] Bluetooth: hci4: command tx timeout [ 255.220166][T10408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1635'. [ 255.514088][T10418] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1640'. [ 255.606080][T10221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.646669][T10429] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1644'. [ 255.679050][T10429] 1ªX¹¦À: renamed from 60ªX¹¦À [ 255.699937][T10429] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 255.729113][T10221] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.776337][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.783664][ T5227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.809138][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.816416][ T5227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.188162][T10221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.421943][T10451] FAULT_INJECTION: forcing a failure. [ 256.421943][T10451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.441898][T10451] CPU: 0 PID: 10451 Comm: syz.3.1649 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 256.452125][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 256.462201][T10451] Call Trace: [ 256.465500][T10451] [ 256.468440][T10451] dump_stack_lvl+0x241/0x360 [ 256.473155][T10451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.478368][T10451] ? __pfx__printk+0x10/0x10 [ 256.483001][T10451] ? __pfx_lock_release+0x10/0x10 [ 256.488071][T10451] should_fail_ex+0x3b0/0x4e0 [ 256.492795][T10451] _copy_from_user+0x2f/0xe0 [ 256.497427][T10451] copy_msghdr_from_user+0xae/0x680 [ 256.502675][T10451] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 256.508542][T10451] __sys_sendmsg+0x23d/0x3a0 [ 256.513189][T10451] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.518525][T10451] ? vfs_write+0x7c4/0xc90 [ 256.523038][T10451] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.529433][T10451] ? do_syscall_64+0x100/0x230 [ 256.534265][T10451] ? do_syscall_64+0xb6/0x230 [ 256.538986][T10451] do_syscall_64+0xf3/0x230 [ 256.543526][T10451] ? clear_bhb_loop+0x35/0x90 [ 256.548245][T10451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.554179][T10451] RIP: 0033:0x7fdffaf75bd9 [ 256.558635][T10451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.578293][T10451] RSP: 002b:00007fdffbd83048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.586756][T10451] RAX: ffffffffffffffda RBX: 00007fdffb103f60 RCX: 00007fdffaf75bd9 [ 256.594770][T10451] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 256.602850][T10451] RBP: 00007fdffbd830a0 R08: 0000000000000000 R09: 0000000000000000 [ 256.610862][T10451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.618872][T10451] R13: 000000000000000b R14: 00007fdffb103f60 R15: 00007ffe033a0928 [ 256.626885][T10451] [ 258.062791][T10456] bridge_slave_0: left allmulticast mode [ 258.079385][T10456] bridge_slave_0: left promiscuous mode [ 258.085158][T10456] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.125312][T10466] __nla_validate_parse: 1 callbacks suppressed [ 258.125334][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'. [ 258.168025][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1654'. [ 258.184568][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1654'. [ 258.315854][T10474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1655'. [ 258.332065][T10478] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1657'. [ 258.342304][T10478] bridge_slave_1: left allmulticast mode [ 258.350735][T10478] bridge_slave_1: left promiscuous mode [ 258.362985][T10474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1655'. [ 258.374926][T10478] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.403672][T10478] bridge_slave_0: left allmulticast mode [ 258.411616][T10478] bridge_slave_0: left promiscuous mode [ 258.420823][T10478] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.585664][T10487] netlink: 'syz.4.1660': attribute type 10 has an invalid length. [ 258.594013][T10487] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1660'. [ 258.610790][T10487] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 258.684136][T10221] veth0_vlan: entered promiscuous mode [ 258.724239][T10221] veth1_vlan: entered promiscuous mode [ 258.825987][T10221] veth0_macvtap: entered promiscuous mode [ 258.841874][T10221] veth1_macvtap: entered promiscuous mode [ 258.866612][T10221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.885438][T10221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.911450][T10221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.925703][T10221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.936284][T10221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.947918][T10221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.958181][T10221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.969509][T10221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.981740][T10221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.053197][T10221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.065449][T10221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.079790][T10221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.091842][T10221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.114838][T10221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.125901][T10221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.140686][T10221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.151447][T10221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.169249][T10221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.236126][T10502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1665'. [ 259.257245][T10500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1664'. [ 259.370332][T10511] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1668'. [ 259.441109][T10221] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.458037][T10221] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.480816][T10221] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.490474][T10221] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.207878][T10514] team0: left promiscuous mode [ 261.212745][T10514] team_slave_1: left promiscuous mode [ 261.227374][T10514] bond0: left promiscuous mode [ 261.232325][T10514] bond_slave_0: left promiscuous mode [ 261.245100][T10514] bond_slave_1: left promiscuous mode [ 261.251010][T10514] macvlan2: left promiscuous mode [ 261.257336][T10514] batadv0: left promiscuous mode [ 261.262880][T10514] bridge0: left promiscuous mode [ 261.414679][T10532] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 261.571212][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.608847][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.750610][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.786907][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.147858][T10571] netlink: 'syz.0.1681': attribute type 1 has an invalid length. [ 262.621840][T10601] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 262.854460][T10616] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20004 [ 262.862243][T10618] netlink: 'syz.4.1694': attribute type 10 has an invalid length. [ 262.955322][T10618] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 263.203244][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.215047][T10631] __nla_validate_parse: 5 callbacks suppressed [ 263.215069][T10631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1700'. [ 263.593476][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.785411][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.837345][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.923447][ T35] bridge_slave_1: left allmulticast mode [ 263.929242][ T35] bridge_slave_1: left promiscuous mode [ 263.935081][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.946734][ T35] bridge_slave_0: left allmulticast mode [ 263.952872][ T35] bridge_slave_0: left promiscuous mode [ 263.958890][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.322007][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.334453][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.346772][ T35] bond0 (unregistering): Released all slaves [ 264.775286][T10646] tipc: Started in network mode [ 264.787558][T10646] tipc: Node identity 080211, cluster identity 4711 [ 264.797975][T10646] tipc: Enabled bearer , priority 10 [ 264.812389][T10649] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.1704'. [ 264.958649][T10658] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1708'. [ 265.005713][T10658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1708'. [ 265.030300][ T5110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 265.041821][ T5110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 265.051995][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 265.064213][ T5110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 265.073118][ T5110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 265.084466][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 265.192965][ T35] hsr_slave_0: left promiscuous mode [ 265.212675][ T35] hsr_slave_1: left promiscuous mode [ 265.237458][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.244928][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.278137][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.301450][T10674] IPVS: persistence engine module ip_vs_pe_À not found [ 265.311024][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.381358][ T35] veth1_macvtap: left promiscuous mode [ 265.404136][ T35] veth0_macvtap: left promiscuous mode [ 265.423358][ T35] veth1_vlan: left promiscuous mode [ 265.434884][ T35] veth0_vlan: left promiscuous mode [ 265.530776][T10694] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1715'. [ 265.918919][ T784] tipc: Node number set to 134353152 [ 266.144150][ T35] team0 (unregistering): Port device team_slave_1 removed [ 266.193697][ T35] team0 (unregistering): Port device team_slave_0 removed [ 267.098163][T10705] netlink: 'syz.3.1720': attribute type 13 has an invalid length. [ 267.165649][ T5113] Bluetooth: hci4: command tx timeout [ 267.177393][T10707] netlink: 'syz.4.1718': attribute type 1 has an invalid length. [ 267.185176][T10707] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1718'. [ 267.354113][T10718] netlink: 'syz.1.1723': attribute type 1 has an invalid length. [ 267.362226][T10718] netlink: 9372 bytes leftover after parsing attributes in process `syz.1.1723'. [ 267.371552][T10718] netlink: 'syz.1.1723': attribute type 1 has an invalid length. [ 267.502657][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1724'. [ 267.565523][T10661] chnl_net:caif_netlink_parms(): no params data found [ 267.606889][T10724] macsec0: left allmulticast mode [ 267.713750][T10737] netlink: 'syz.3.1727': attribute type 298 has an invalid length. [ 267.756402][T10735] netlink: 'syz.3.1727': attribute type 298 has an invalid length. [ 267.772207][T10735] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 267.782782][T10737] netlink: 'syz.3.1727': attribute type 1 has an invalid length. [ 267.809343][T10735] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1727'. [ 267.818726][T10738] macvlan3: entered promiscuous mode [ 267.824081][T10738] macvlan3: entered allmulticast mode [ 267.831241][T10737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1727'. [ 268.035163][T10661] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.056522][T10661] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.081353][T10661] bridge_slave_0: entered allmulticast mode [ 268.100928][T10661] bridge_slave_0: entered promiscuous mode [ 268.122439][T10661] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.138238][T10661] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.145915][T10661] bridge_slave_1: entered allmulticast mode [ 268.207164][T10661] bridge_slave_1: entered promiscuous mode [ 268.254577][T10766] __nla_validate_parse: 3 callbacks suppressed [ 268.254596][T10766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1739'. [ 268.282812][T10766] netlink: 97 bytes leftover after parsing attributes in process `syz.1.1739'. [ 268.294941][T10763] netlink: 'syz.3.1738': attribute type 10 has an invalid length. [ 268.354066][T10763] hsr0: entered promiscuous mode [ 268.354484][T10773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 268.395222][T10661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.417428][T10773] block nbd0: not configured, cannot reconfigure [ 268.439593][T10661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.464895][T10776] netlink: 'syz.0.1742': attribute type 10 has an invalid length. [ 268.505812][T10776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1742'. [ 268.565856][T10776] batman_adv: batadv0: Adding interface: virt_wifi0 [ 268.591146][T10776] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.637640][T10776] batman_adv: batadv0: Interface activated: virt_wifi0 [ 268.638816][T10787] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1746'. [ 268.700325][T10791] netlink: 1584 bytes leftover after parsing attributes in process `syz.3.1748'. [ 268.759565][T10661] team0: Port device team_slave_0 added [ 268.783396][T10661] team0: Port device team_slave_1 added [ 268.937149][T10661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.967907][T10661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.019389][T10661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.064428][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1753'. [ 269.148941][T10661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.155934][T10661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.217043][T10661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.238177][ T5113] Bluetooth: hci4: command tx timeout [ 269.425995][T10661] hsr_slave_0: entered promiscuous mode [ 269.450821][T10661] hsr_slave_1: entered promiscuous mode [ 269.497489][T10825] A link change request failed with some changes committed already. Interface ipip3 may have been left with an inconsistent configuration, please check. [ 270.347329][T10863] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1767'. [ 270.589475][T10866] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.596695][T10866] bridge0: port 2(bridge_slave_1) entered listening state [ 270.604233][T10866] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.611516][T10866] bridge0: port 1(bridge_slave_0) entered listening state [ 270.653309][T10866] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 270.726010][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1776'. [ 270.754798][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1774'. [ 270.898664][T10889] netlink: 'syz.1.1778': attribute type 11 has an invalid length. [ 270.984014][T10661] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 271.032644][T10661] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 271.072616][T10895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.084052][T10661] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 271.114122][T10661] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 271.142261][T10899] Dead loop on virtual device ipvlan1, fix it urgently! [ 271.280247][T10905] ip6gretap0: entered promiscuous mode [ 271.302173][T10905] ip6gretap0: left promiscuous mode [ 271.321175][ T5113] Bluetooth: hci4: command tx timeout [ 271.365055][T10911] FAULT_INJECTION: forcing a failure. [ 271.365055][T10911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.377065][T10661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.393963][T10911] CPU: 0 PID: 10911 Comm: syz.3.1788 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 271.404178][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 271.404326][T10661] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.414240][T10911] Call Trace: [ 271.414283][T10911] [ 271.414294][T10911] dump_stack_lvl+0x241/0x360 [ 271.414334][T10911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.437069][T10911] ? __pfx__printk+0x10/0x10 [ 271.441797][T10911] ? snprintf+0xda/0x120 [ 271.446092][T10911] should_fail_ex+0x3b0/0x4e0 [ 271.450826][T10911] _copy_to_user+0x2f/0xb0 [ 271.455285][T10911] simple_read_from_buffer+0xca/0x150 [ 271.460714][T10911] proc_fail_nth_read+0x1e9/0x250 [ 271.465812][T10911] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.466784][T10661] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 271.471379][T10911] ? rw_verify_area+0x520/0x6b0 [ 271.471410][T10911] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 271.471438][T10911] vfs_read+0x204/0xbc0 [ 271.481960][T10661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 271.486592][T10911] ? __pfx_lock_release+0x10/0x10 [ 271.511764][T10911] ? __pfx_vfs_read+0x10/0x10 [ 271.516478][T10911] ? __fget_files+0x29/0x470 [ 271.521099][T10911] ? __fget_files+0x3f6/0x470 [ 271.521405][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.525809][T10911] ksys_read+0x1a0/0x2c0 [ 271.525848][T10911] ? __pfx_ksys_read+0x10/0x10 [ 271.533028][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.537091][T10911] ? do_syscall_64+0x100/0x230 [ 271.537123][T10911] ? do_syscall_64+0xb6/0x230 [ 271.548230][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.549070][T10911] do_syscall_64+0xf3/0x230 [ 271.553931][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.558483][T10911] ? clear_bhb_loop+0x35/0x90 [ 271.558517][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.558543][T10911] RIP: 0033:0x7fdffaf746bc [ 271.558565][T10911] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 271.612000][T10911] RSP: 002b:00007fdffbd83040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.620466][T10911] RAX: ffffffffffffffda RBX: 00007fdffb103f60 RCX: 00007fdffaf746bc [ 271.628487][T10911] RDX: 000000000000000f RSI: 00007fdffbd830b0 RDI: 0000000000000006 [ 271.636511][T10911] RBP: 00007fdffbd830a0 R08: 0000000000000000 R09: 0000000000000000 [ 271.644535][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.652544][T10911] R13: 000000000000000b R14: 00007fdffb103f60 R15: 00007ffe033a0928 [ 271.660587][T10911] [ 271.948925][T10661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.131179][T10661] veth0_vlan: entered promiscuous mode [ 272.177918][T10661] veth1_vlan: entered promiscuous mode [ 272.265622][T10938] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 272.326315][T10942] validate_nla: 4 callbacks suppressed [ 272.326337][T10942] netlink: 'syz.0.1799': attribute type 10 has an invalid length. [ 272.383658][T10942] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 272.410571][T10661] veth0_macvtap: entered promiscuous mode [ 272.456468][T10944] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 272.481563][T10661] veth1_macvtap: entered promiscuous mode [ 272.495127][T10947] xt_connbytes: Forcing CT accounting to be enabled [ 272.507306][T10947] xt_bpf: check failed: parse error [ 272.542271][T10661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.553918][T10661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.565747][T10661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.595300][T10661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.615531][T10661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.642117][T10661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.658135][T10661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 272.672852][T10661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.686395][T10661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.709422][T10956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.740953][T10661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.771333][T10661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.797095][T10661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.817663][T10661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.853273][T10661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.868514][T10661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.881509][T10661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 272.895437][T10661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 272.927575][T10661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.985505][T10661] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.015737][T10661] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.029170][T10661] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.038174][T10661] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.227732][ T3916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.241505][ T3916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.261319][T10975] __nla_validate_parse: 10 callbacks suppressed [ 273.261342][T10975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1811'. [ 273.295874][T10977] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1810'. [ 273.315302][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.325945][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.407198][ T5113] Bluetooth: hci4: command tx timeout [ 273.691955][T10986] FAULT_INJECTION: forcing a failure. [ 273.691955][T10986] name failslab, interval 1, probability 0, space 0, times 0 [ 273.715252][T10986] CPU: 1 PID: 10986 Comm: syz.1.1813 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 273.725474][T10986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 273.735571][T10986] Call Trace: [ 273.738884][T10986] [ 273.741840][T10986] dump_stack_lvl+0x241/0x360 [ 273.746551][T10986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.751770][T10986] ? __pfx__printk+0x10/0x10 [ 273.756424][T10986] ? netlink_insert+0x10b7/0x14b0 [ 273.761474][T10986] should_fail_ex+0x3b0/0x4e0 [ 273.766197][T10986] ? __alloc_skb+0x1c3/0x440 [ 273.770807][T10986] should_failslab+0x9/0x20 [ 273.775420][T10986] kmem_cache_alloc_node_noprof+0x71/0x320 [ 273.781348][T10986] __alloc_skb+0x1c3/0x440 [ 273.785814][T10986] ? __pfx___alloc_skb+0x10/0x10 [ 273.790843][T10986] ? netlink_autobind+0xd6/0x2f0 [ 273.795827][T10986] ? netlink_autobind+0x2b0/0x2f0 [ 273.800898][T10986] netlink_sendmsg+0x638/0xcb0 [ 273.805734][T10986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.811310][T10986] ? __import_iovec+0x536/0x820 [ 273.816170][T10986] ? aa_sock_msg_perm+0x91/0x160 [ 273.821229][T10986] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 273.826516][T10986] ? security_socket_sendmsg+0x87/0xb0 [ 273.831990][T10986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.837554][T10986] __sock_sendmsg+0x221/0x270 [ 273.842280][T10986] ____sys_sendmsg+0x525/0x7d0 [ 273.847125][T10986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.852486][T10986] __sys_sendmsg+0x2b0/0x3a0 [ 273.857118][T10986] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.862358][T10986] ? vfs_write+0x7c4/0xc90 [ 273.866845][T10986] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.873194][T10986] ? do_syscall_64+0x100/0x230 [ 273.877980][T10986] ? do_syscall_64+0xb6/0x230 [ 273.882734][T10986] do_syscall_64+0xf3/0x230 [ 273.887274][T10986] ? clear_bhb_loop+0x35/0x90 [ 273.891988][T10986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.897908][T10986] RIP: 0033:0x7fbc6cd75bd9 [ 273.902347][T10986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.922159][T10986] RSP: 002b:00007fbc6da8b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.930694][T10986] RAX: ffffffffffffffda RBX: 00007fbc6cf03f60 RCX: 00007fbc6cd75bd9 [ 273.938690][T10986] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000015 [ 273.946684][T10986] RBP: 00007fbc6da8b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 273.954672][T10986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.962665][T10986] R13: 000000000000000b R14: 00007fbc6cf03f60 R15: 00007ffd8a755258 [ 273.970670][T10986] [ 273.989632][T10991] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1816'. [ 274.151399][T10997] veth1_macvtap: left promiscuous mode [ 274.165577][T10997] macsec0: entered allmulticast mode [ 274.192847][T10997] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 274.351774][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1823'. [ 274.604955][T11024] netlink: 'syz.3.1827': attribute type 3 has an invalid length. [ 274.613647][T11024] netlink: 'syz.3.1827': attribute type 3 has an invalid length. [ 274.656913][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1828'. [ 274.934480][T11043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1832'. [ 274.947628][T11046] netlink: 4964 bytes leftover after parsing attributes in process `syz.0.1834'. [ 275.055949][T11048] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 275.180913][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1837'. [ 275.284189][T11062] syz.4.1839[11062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.284366][T11062] syz.4.1839[11062] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 275.315386][T11061] netlink: 'syz.0.1840': attribute type 13 has an invalid length. [ 275.491745][T11069] netlink: 'syz.4.1843': attribute type 1 has an invalid length. [ 275.518272][T11069] lo: MTU too low for tipc bearer [ 275.531364][T11069] tipc: Enabling of bearer rejected, failed to enable media [ 275.707861][T11077] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 275.745641][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 275.975039][T11091] netlink: 'syz.1.1851': attribute type 3 has an invalid length. [ 276.163575][T11099] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 276.204419][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1855'. [ 276.634786][ T1059] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.669274][ T1059] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.737605][ T1059] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.823396][ T1059] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.903518][ T1059] bridge_slave_1: left allmulticast mode [ 277.932530][ T1059] bridge_slave_1: left promiscuous mode [ 277.955577][ T1059] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.997761][ T1059] bridge_slave_0: left allmulticast mode [ 278.003575][ T1059] bridge_slave_0: left promiscuous mode [ 278.044472][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.281043][T11149] __nla_validate_parse: 80 callbacks suppressed [ 278.281146][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1869'. [ 278.400060][ T5110] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 278.421481][ T5110] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 278.430106][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 278.441167][ T5110] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 278.457171][ T5110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 278.465905][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.632895][T11159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1872'. [ 278.827363][ T1059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.843754][ T1059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.855335][ T1059] bond0 (unregistering): Released all slaves [ 278.876550][T11141] macvlan3: entered allmulticast mode [ 278.885625][T11141] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 278.927259][T11146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1868'. [ 278.956832][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1871'. [ 278.977292][T11156] IPv6: NLM_F_CREATE should be specified when creating new route [ 278.985379][T11156] IPv6: NLM_F_REPLACE set, but no existing node found! [ 279.013917][T11160] ip_vti0: mtu less than device minimum [ 279.177850][T11171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1876'. [ 279.470761][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1880'. [ 279.554800][ T1059] hsr_slave_0: left promiscuous mode [ 279.584123][ T1059] hsr_slave_1: left promiscuous mode [ 279.605881][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.627854][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.636600][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.644477][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.689812][ T1059] veth1_macvtap: left promiscuous mode [ 279.695682][ T1059] veth0_macvtap: left promiscuous mode [ 279.701808][ T1059] veth1_vlan: left promiscuous mode [ 279.707543][ T1059] veth0_vlan: left promiscuous mode [ 280.362251][ T1059] team0 (unregistering): Port device team_slave_1 removed [ 280.414023][ T1059] team0 (unregistering): Port device team_slave_0 removed [ 280.522953][ T5110] Bluetooth: hci4: command tx timeout [ 281.156091][T11221] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1888'. [ 281.247987][T11220] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1890'. [ 281.294915][T11152] chnl_net:caif_netlink_parms(): no params data found [ 281.330916][T11230] netlink: 13496 bytes leftover after parsing attributes in process `syz.3.1891'. [ 281.358493][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1891'. [ 281.386693][T11230] netlink: 'syz.3.1891': attribute type 12 has an invalid length. [ 281.452744][T11230] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.461627][T11230] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.470433][T11230] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.479218][T11230] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.506287][T11230] vxlan0: entered promiscuous mode [ 281.626598][T11240] netlink: 'syz.4.1897': attribute type 10 has an invalid length. [ 281.642700][T11240] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 281.736306][T11246] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 281.738522][T11152] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.772457][T11152] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.782537][T11152] bridge_slave_0: entered allmulticast mode [ 281.798210][T11152] bridge_slave_0: entered promiscuous mode [ 281.823626][T11152] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.835707][T11152] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.843657][T11152] bridge_slave_1: entered allmulticast mode [ 281.851854][T11152] bridge_slave_1: entered promiscuous mode [ 281.933562][T11152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.974126][T11152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.070337][T11152] team0: Port device team_slave_0 added [ 282.094431][T11152] team0: Port device team_slave_1 added [ 282.189849][T11152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.207365][T11152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.213209][T11266] netlink: 'syz.3.1905': attribute type 62 has an invalid length. [ 282.235017][T11152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.267825][T11152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.284852][T11152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.311842][T11152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.473384][T11152] hsr_slave_0: entered promiscuous mode [ 282.483006][T11152] hsr_slave_1: entered promiscuous mode [ 282.508133][T11279] vlan2: entered promiscuous mode [ 282.597585][ T5110] Bluetooth: hci4: command tx timeout [ 282.659176][T11284] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 282.853775][T11296] netlink: 'syz.4.1916': attribute type 1 has an invalid length. [ 282.957610][T11302] netlink: 'syz.4.1919': attribute type 11 has an invalid length. [ 283.208987][T11319] ipvlan2: entered promiscuous mode [ 283.215226][T11319] ipvlan2: entered allmulticast mode [ 283.384595][T11325] __nla_validate_parse: 8 callbacks suppressed [ 283.384620][T11325] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1928'. [ 283.423121][T11327] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 283.497923][T11330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'. [ 283.699946][T11152] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 283.742393][T11152] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 283.763332][T11347] syz.0.1934[11347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.763507][T11347] syz.0.1934[11347] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.810927][T11152] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 283.911520][T11152] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 284.064225][ T9] tipc: Resetting bearer [ 284.274058][T11152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.361630][T11152] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.402695][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.409966][ T5227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.445071][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.452407][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.521804][T11380] netlink: 'syz.0.1942': attribute type 10 has an invalid length. [ 284.567512][T11380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.590015][T11380] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 284.677965][ T5110] Bluetooth: hci4: command tx timeout [ 284.698817][T11380] netem: change failed [ 285.616046][T11152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.673505][T11460] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1951'. [ 285.708936][T11459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1952'. [ 285.731394][T11152] veth0_vlan: entered promiscuous mode [ 285.768856][T11152] veth1_vlan: entered promiscuous mode [ 285.844642][T11464] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1955'. [ 285.874955][T11152] veth0_macvtap: entered promiscuous mode [ 285.886628][T11468] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1956'. [ 285.905808][T11152] veth1_macvtap: entered promiscuous mode [ 285.958773][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.974836][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.985061][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.998393][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.011312][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.040223][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.063866][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.079116][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.092831][T11152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.162114][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.187834][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1957'. [ 286.193923][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.208340][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 286.209247][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 286.230612][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.241262][T11470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1958'. [ 286.242385][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.261216][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.272179][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.282847][T11152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.293790][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1958'. [ 286.312794][T11152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.331352][T11478] FAULT_INJECTION: forcing a failure. [ 286.331352][T11478] name failslab, interval 1, probability 0, space 0, times 0 [ 286.343265][T11152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.364874][T11479] netlink: 'syz.1.1961': attribute type 20 has an invalid length. [ 286.374244][T11478] CPU: 0 PID: 11478 Comm: syz.0.1960 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 286.380853][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1959'. [ 286.384519][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 286.384539][T11478] Call Trace: [ 286.384549][T11478] [ 286.384560][T11478] dump_stack_lvl+0x241/0x360 [ 286.384597][T11478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.402369][T11152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.403848][T11478] ? __pfx__printk+0x10/0x10 [ 286.417065][T11152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.419953][T11478] should_fail_ex+0x3b0/0x4e0 [ 286.446656][T11478] ? sctp_add_bind_addr+0x89/0x3a0 [ 286.447737][T11152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.451796][T11478] should_failslab+0x9/0x20 [ 286.465085][T11478] kmalloc_trace_noprof+0x6c/0x2c0 [ 286.470260][T11478] sctp_add_bind_addr+0x89/0x3a0 [ 286.474238][T11152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.475231][T11478] sctp_copy_local_addr_list+0x311/0x500 [ 286.489563][T11478] ? sctp_copy_local_addr_list+0xab/0x500 [ 286.496027][T11478] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 286.497241][T11483] netlink: 'syz.3.1962': attribute type 1 has an invalid length. [ 286.502209][T11478] ? sctp_v6_is_any+0x60/0x70 [ 286.514678][T11478] sctp_bind_addr_copy+0xad/0x3b0 [ 286.519768][T11478] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 286.526149][T11478] sctp_connect_new_asoc+0x2f3/0x6c0 [ 286.531478][T11478] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 286.537329][T11478] ? sctp_get_af_specific+0x2a/0x80 [ 286.542662][T11478] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 286.548520][T11478] __sctp_connect+0x66d/0xe30 [ 286.553258][T11478] ? __pfx___sctp_connect+0x10/0x10 [ 286.558503][T11478] ? __might_fault+0xc6/0x120 [ 286.563332][T11478] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 286.569015][T11478] ? security_sctp_bind_connect+0x90/0xb0 [ 286.574803][T11478] sctp_getsockopt_connectx3+0x46f/0x730 [ 286.580492][T11478] ? __local_bh_enable_ip+0x168/0x200 [ 286.585952][T11478] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 286.592154][T11478] ? __local_bh_enable_ip+0x168/0x200 [ 286.597581][T11478] ? sctp_getsockopt+0x13a/0xbb0 [ 286.602566][T11478] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 286.608346][T11478] sctp_getsockopt+0x8de/0xbb0 [ 286.613171][T11478] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 286.619106][T11478] do_sock_getsockopt+0x373/0x850 [ 286.624174][T11478] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 286.629779][T11478] ? __fget_files+0x3f6/0x470 [ 286.634532][T11478] __sys_getsockopt+0x271/0x330 [ 286.639438][T11478] ? __pfx___sys_getsockopt+0x10/0x10 [ 286.644866][T11478] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 286.651242][T11478] ? do_syscall_64+0x100/0x230 [ 286.656050][T11478] __x64_sys_getsockopt+0xb5/0xd0 [ 286.661129][T11478] do_syscall_64+0xf3/0x230 [ 286.665680][T11478] ? clear_bhb_loop+0x35/0x90 [ 286.670408][T11478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.676349][T11478] RIP: 0033:0x7fa7db575bd9 [ 286.680804][T11478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.700507][T11478] RSP: 002b:00007fa7dc2b5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 286.708973][T11478] RAX: ffffffffffffffda RBX: 00007fa7db703f60 RCX: 00007fa7db575bd9 [ 286.717075][T11478] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 286.725088][T11478] RBP: 00007fa7dc2b50a0 R08: 0000000020000740 R09: 0000000000000000 [ 286.733120][T11478] R10: 0000000020000700 R11: 0000000000000246 R12: 0000000000000002 [ 286.741134][T11478] R13: 000000000000000b R14: 00007fa7db703f60 R15: 00007ffe1de1bce8 [ 286.749185][T11478] [ 286.754086][ T5218] IPVS: starting estimator thread 0... [ 286.802415][ T5110] Bluetooth: hci4: command tx timeout [ 286.870919][T11481] IPVS: using max 18 ests per chain, 43200 per kthread [ 287.133116][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.187099][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.329643][T11422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.351381][T11422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.684695][T11499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.930931][T11523] netlink: 'syz.3.1971': attribute type 15 has an invalid length. [ 288.161197][T11535] macvlan3: entered allmulticast mode [ 288.171852][T11535] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 288.553995][T11560] __nla_validate_parse: 8 callbacks suppressed [ 288.554019][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1981'. [ 288.632536][T11567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1984'. [ 288.930210][T11586] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1990'. [ 288.946880][T11586] 0ªX¹¦À: renamed from caif0 [ 288.956067][T11586] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 289.109158][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1993'. [ 289.234713][T11608] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.462657][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2003'. [ 290.002590][T11647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2010'. [ 290.161744][T11657] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2014'. [ 290.180211][T11657] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2014'. [ 290.342697][T11668] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2018'. [ 290.365547][ T3916] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.512054][ T3916] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.586226][ T3916] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.658466][ T3916] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.750032][ T3916] bridge_slave_1: left allmulticast mode [ 290.755729][ T3916] bridge_slave_1: left promiscuous mode [ 290.762122][ T3916] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.773731][ T3916] bridge_slave_0: left allmulticast mode [ 290.779745][ T3916] bridge_slave_0: left promiscuous mode [ 290.785494][ T3916] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.154896][ T3916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.169950][ T3916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.182818][ T3916] bond0 (unregistering): Released all slaves [ 291.436418][ T3916] hsr_slave_0: left promiscuous mode [ 291.443048][ T3916] hsr_slave_1: left promiscuous mode [ 291.452799][ T3916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.464301][ T3916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 291.472366][ T3916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.480558][ T3916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.505574][ T3916] veth1_macvtap: left promiscuous mode [ 291.511411][ T3916] veth0_macvtap: left promiscuous mode [ 291.517203][ T3916] veth1_vlan: left promiscuous mode [ 291.522598][ T3916] veth0_vlan: left promiscuous mode [ 292.334520][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 292.350278][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 292.368743][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 292.379612][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 292.380054][ T3916] team0 (unregistering): Port device team_slave_1 removed [ 292.402303][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 292.413701][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 292.509812][ T3916] team0 (unregistering): Port device team_slave_0 removed [ 293.396513][T11710] ipvlan2: entered promiscuous mode [ 293.406775][T11710] ipvlan2: entered allmulticast mode [ 293.969796][T11740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2037'. [ 294.046575][T11747] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2038'. [ 294.056163][T11691] chnl_net:caif_netlink_parms(): no params data found [ 294.061584][T11747] netlink: 'syz.4.2038': attribute type 1 has an invalid length. [ 294.081464][T11747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2038'. [ 294.197101][T11750] netlink: 'syz.1.2039': attribute type 13 has an invalid length. [ 294.326068][T11691] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.334777][T11757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'. [ 294.344692][T11691] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.360527][T11691] bridge_slave_0: entered allmulticast mode [ 294.383442][T11691] bridge_slave_0: entered promiscuous mode [ 294.408216][T11691] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.415480][T11691] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.437478][ T5113] Bluetooth: hci4: command tx timeout [ 294.444035][T11691] bridge_slave_1: entered allmulticast mode [ 294.450617][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2042'. [ 294.461728][T11691] bridge_slave_1: entered promiscuous mode [ 294.604551][T11768] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2043'. [ 294.631047][T11691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.665572][T11691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.825764][T11691] team0: Port device team_slave_0 added [ 294.843585][T11691] team0: Port device team_slave_1 added [ 294.964664][T11780] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2050'. [ 294.980672][T11691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.002837][T11691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.029784][T11783] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2048'. [ 295.050885][T11691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.120776][T11789] netlink: 'syz.3.2052': attribute type 1 has an invalid length. [ 295.131796][T11691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.141656][T11790] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2051'. [ 295.143800][T11691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.183869][T11691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.237472][T11784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2050'. [ 295.281823][T11794] veth1_macvtap: entered promiscuous mode [ 295.298926][T11794] veth1_macvtap: entered allmulticast mode [ 295.317407][T11794] macsec0: left allmulticast mode [ 295.337881][T11794] veth1_macvtap: left allmulticast mode [ 295.443223][T11691] hsr_slave_0: entered promiscuous mode [ 295.465511][T11691] hsr_slave_1: entered promiscuous mode [ 296.358853][T11837] batadv_slave_0: entered allmulticast mode [ 296.375291][T11836] pim6reg: entered allmulticast mode [ 296.391098][T11839] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 59527 - 0 [ 296.434860][T11839] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 59527 - 0 [ 296.455878][T11839] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 59527 - 0 [ 296.465111][T11843] netlink: 'syz.4.2073': attribute type 1 has an invalid length. [ 296.467199][T11839] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 59527 - 0 [ 296.473191][T11843] netlink: 'syz.4.2073': attribute type 1 has an invalid length. [ 296.491738][T11839] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 51210 - 0 [ 296.505020][T11839] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 51210 - 0 [ 296.517458][ T5110] Bluetooth: hci4: command tx timeout [ 296.518049][T11839] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 51210 - 0 [ 296.531932][T11839] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 51210 - 0 [ 296.541034][T11839] geneve3: entered promiscuous mode [ 296.549740][T11839] netdevsim netdevsim3 netdevsim0: unset [1, 2] type 2 family 0 port 51210 - 0 [ 296.558933][T11839] netdevsim netdevsim3 netdevsim1: unset [1, 2] type 2 family 0 port 51210 - 0 [ 296.567990][T11839] netdevsim netdevsim3 netdevsim2: unset [1, 2] type 2 family 0 port 51210 - 0 [ 296.577197][T11839] netdevsim netdevsim3 netdevsim3: unset [1, 2] type 2 family 0 port 51210 - 0 [ 296.586476][T11839] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 59527 - 0 [ 296.595625][T11839] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 59527 - 0 [ 296.605897][T11839] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 59527 - 0 [ 296.615102][T11839] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 59527 - 0 [ 296.907251][T11691] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 296.940107][T11691] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 296.949602][T11856] netlink: 'syz.1.2075': attribute type 1 has an invalid length. [ 296.983816][T11856] netlink: 'syz.1.2075': attribute type 1 has an invalid length. [ 296.988056][T11691] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 297.027699][T11864] IPv6: NLM_F_CREATE should be specified when creating new route [ 297.035676][T11864] IPv6: NLM_F_REPLACE set, but no existing node found! [ 297.072182][T11691] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 297.183229][T11873] block nbd0: not configured, cannot reconfigure [ 297.321685][ T5098] tipc: Resetting bearer [ 297.366340][T11883] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 297.390827][T11691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.451008][T11691] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.501208][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.508458][ T5098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.557454][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.564629][ T5098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.584688][T11890] 1ªX¹¦À: renamed from 60ªX¹¦À [ 297.602156][T11890] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 297.658534][T11889] af_packet: tpacket_rcv: packet too big, clamped from 65225 to 3952. macoff=96 [ 298.228857][T11691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.244112][T11926] FAULT_INJECTION: forcing a failure. [ 298.244112][T11926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.304848][T11926] CPU: 0 PID: 11926 Comm: syz.0.2102 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 298.315075][T11926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 298.325166][T11926] Call Trace: [ 298.328481][T11926] [ 298.331451][T11926] dump_stack_lvl+0x241/0x360 [ 298.336172][T11926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.338473][T11691] veth0_vlan: entered promiscuous mode [ 298.341386][T11926] ? __pfx__printk+0x10/0x10 [ 298.341418][T11926] ? __pfx_lock_release+0x10/0x10 [ 298.356541][T11926] should_fail_ex+0x3b0/0x4e0 [ 298.361282][T11926] _copy_from_user+0x2f/0xe0 [ 298.365920][T11926] copy_msghdr_from_user+0xae/0x680 [ 298.371163][T11926] ? __pfx___might_resched+0x10/0x10 [ 298.376498][T11926] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 298.378123][T11691] veth1_vlan: entered promiscuous mode [ 298.382334][T11926] ? __might_fault+0xaa/0x120 [ 298.382381][T11926] do_recvmmsg+0x40f/0xae0 [ 298.396964][T11926] ? __pfx_lock_release+0x10/0x10 [ 298.402188][T11926] ? __pfx_do_recvmmsg+0x10/0x10 [ 298.407169][T11926] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 298.413098][T11926] ? ksys_write+0x23e/0x2c0 [ 298.417621][T11926] ? __pfx_lock_release+0x10/0x10 [ 298.422832][T11926] ? vfs_write+0x7c4/0xc90 [ 298.427268][T11926] ? __mutex_unlock_slowpath+0x21d/0x750 [ 298.432923][T11926] ? __fget_files+0x3f6/0x470 [ 298.437626][T11926] __x64_sys_recvmmsg+0x199/0x250 [ 298.442742][T11926] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 298.448324][T11926] ? do_syscall_64+0x100/0x230 [ 298.453111][T11926] ? do_syscall_64+0xb6/0x230 [ 298.457814][T11926] do_syscall_64+0xf3/0x230 [ 298.462353][T11926] ? clear_bhb_loop+0x35/0x90 [ 298.467067][T11926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.472975][T11926] RIP: 0033:0x7fa7db575bd9 [ 298.477400][T11926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.497030][T11926] RSP: 002b:00007fa7dc294048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 298.505480][T11926] RAX: ffffffffffffffda RBX: 00007fa7db704038 RCX: 00007fa7db575bd9 [ 298.513467][T11926] RDX: 000000000291962b RSI: 0000000020000040 RDI: 0000000000000003 [ 298.521449][T11926] RBP: 00007fa7dc2940a0 R08: 0000000000000000 R09: 0000000000000000 [ 298.529426][T11926] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000002 [ 298.537429][T11926] R13: 000000000000006e R14: 00007fa7db704038 R15: 00007ffe1de1bce8 [ 298.545438][T11926] [ 298.599261][ T5110] Bluetooth: hci4: command 0x040f tx timeout [ 298.693629][T11691] veth0_macvtap: entered promiscuous mode [ 298.751338][T11691] veth1_macvtap: entered promiscuous mode [ 298.849221][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.876247][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.896299][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.923291][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.938774][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.949546][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.959965][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.970577][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.982573][T11691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.014706][T11952] __nla_validate_parse: 21 callbacks suppressed [ 299.014729][T11952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2114'. [ 299.070004][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.090413][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.114318][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.126414][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.139784][T11958] sctp: [Deprecated]: syz.4.2116 (pid 11958) Use of int in maxseg socket option. [ 299.139784][T11958] Use struct sctp_assoc_value instead [ 299.164462][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.177623][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.192495][T11959] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2117'. [ 299.208869][T11691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.226674][T11691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.239393][T11691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.276192][T11961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2117'. [ 299.300529][T11691] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.331684][T11691] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.362046][T11691] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.393522][T11691] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.434104][T11966] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 299.624188][T11969] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2120'. [ 299.629529][ T3916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.651058][ T3916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.800088][ T3916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.825491][ T3916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.920850][T11984] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 299.985252][T11986] netlink: 'syz.3.2124': attribute type 1 has an invalid length. [ 299.995137][T11986] netlink: 113592 bytes leftover after parsing attributes in process `syz.3.2124'. [ 300.231145][T11997] netlink: 'syz.4.2128': attribute type 10 has an invalid length. [ 300.239367][T11997] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2128'. [ 300.251928][T11997] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 300.474241][T12003] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 300.693297][T11980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.818909][T12015] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2136'. [ 300.997883][ C1] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 301.356214][T12046] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.557107][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.564824][ C1] bridge0: topology change detected, propagating [ 301.572556][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.579837][ C1] bridge0: topology change detected, propagating [ 301.590775][T12053] ebtables: ebtables: counters copy to user failed while replacing table [ 301.601524][T12059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2150'. [ 301.815542][T12072] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2153'. [ 301.861867][T12072] Êü: entered promiscuous mode [ 301.891132][T12074] netlink: 'syz.3.2155': attribute type 11 has an invalid length. [ 302.498190][T12089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2161'. [ 302.529774][ T5110] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 302.543452][ T5110] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 302.559465][ T5110] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 302.590058][ T5110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 302.600969][ T5110] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 302.617262][ T5110] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 302.768546][T10068] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.897831][ T5149] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 303.066470][T12090] chnl_net:caif_netlink_parms(): no params data found [ 303.189819][T12090] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.199718][T12090] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.207342][T12090] bridge_slave_0: entered allmulticast mode [ 303.214594][T12090] bridge_slave_0: entered promiscuous mode [ 303.224157][T12090] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.231525][T12090] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.239313][T12090] bridge_slave_1: entered allmulticast mode [ 303.246430][T12090] bridge_slave_1: entered promiscuous mode [ 303.288451][T12090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.301040][T12090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.361584][T12090] team0: Port device team_slave_0 added [ 303.375012][T12090] team0: Port device team_slave_1 added [ 303.411365][T12090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.418531][T12090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.444877][T12090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.459899][T12090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.466888][T12090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.502190][T12090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.541663][T10068] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.607704][T10068] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.631035][T12090] hsr_slave_0: entered promiscuous mode [ 303.638816][ T5180] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 303.647826][T12090] hsr_slave_1: entered promiscuous mode [ 303.654152][T12090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.661953][T12090] Cannot create hsr debugfs directory [ 303.730603][T10068] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.863634][T12090] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.880768][T12090] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.936336][T10068] bridge_slave_1: left allmulticast mode [ 303.942456][T10068] bridge_slave_1: left promiscuous mode [ 303.949612][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.965453][T10068] bridge_slave_0: left allmulticast mode [ 303.971411][T10068] bridge_slave_0: left promiscuous mode [ 303.977827][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.555836][T10068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.592645][T10068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.611662][T10068] bond0 (unregistering): Released all slaves [ 304.670017][T12090] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.688111][ T5110] Bluetooth: hci0: command tx timeout [ 304.697133][T12090] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.840311][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.867341][ T5113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.880339][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.888750][ T5113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.907128][ T5113] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 304.917279][ T5113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 305.044952][T12090] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.055760][T12090] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.202785][T12090] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.237158][T12090] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.299459][T12140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2172'. [ 305.476667][T10068] hsr_slave_0: left promiscuous mode [ 305.503464][T10068] hsr_slave_1: left promiscuous mode [ 305.514201][T10068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.532898][T10068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.541623][T10068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.551682][T10068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.578724][T10068] veth1_macvtap: left promiscuous mode [ 305.584317][T10068] veth0_macvtap: left promiscuous mode [ 305.590926][T10068] veth1_vlan: left promiscuous mode [ 305.596276][T10068] veth0_vlan: left promiscuous mode [ 306.063011][T12154] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2175'. [ 306.240892][T10068] team0 (unregistering): Port device team_slave_1 removed [ 306.286249][T10068] team0 (unregistering): Port device team_slave_0 removed [ 306.743481][T12146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2174'. [ 306.757195][ T5110] Bluetooth: hci0: command tx timeout [ 306.970525][T12161] netlink: 'syz.1.2178': attribute type 6 has an invalid length. [ 307.002374][ T5110] Bluetooth: hci4: command tx timeout [ 307.109689][T12163] netlink: 'syz.1.2180': attribute type 1 has an invalid length. [ 307.119402][T12163] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2180'. [ 307.160929][T12090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.206860][T12090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.308227][T12090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.417771][T12090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.546679][T12120] chnl_net:caif_netlink_parms(): no params data found [ 307.735640][T10068] bridge_slave_1: left allmulticast mode [ 307.742077][T10068] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.755537][T10068] bridge_slave_0: left allmulticast mode [ 307.764775][T10068] bridge_slave_0: left promiscuous mode [ 307.770730][T10068] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.480220][T10068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.501592][T10068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.516688][T10068] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 308.535231][T10068] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 308.543626][T10068] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 308.556496][T10068] bond0 (unregistering): (slave bond2): Releasing backup interface [ 308.566391][T10068] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 308.578055][T10068] bond0 (unregistering): Released all slaves [ 308.593187][T10068] bond1 (unregistering): Released all slaves [ 308.713118][T10068] bond2 (unregistering): Released all slaves [ 308.837402][ T5110] Bluetooth: hci0: command tx timeout [ 308.928683][T10068] tipc: Disabling bearer [ 308.938774][T10068] tipc: Left network mode [ 308.944023][T12201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2191'. [ 308.976906][T12206] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 309.008358][T12204] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2191'. [ 309.019903][T12120] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.037593][T12120] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.044961][T12120] bridge_slave_0: entered allmulticast mode [ 309.059269][T12120] bridge_slave_0: entered promiscuous mode [ 309.069576][T12120] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.076777][T12120] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.084145][ T5110] Bluetooth: hci4: command tx timeout [ 309.117255][T12120] bridge_slave_1: entered allmulticast mode [ 309.136236][T12120] bridge_slave_1: entered promiscuous mode [ 309.284733][T12120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.417771][T12120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.688349][T12120] team0: Port device team_slave_0 added [ 309.715224][T12090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.782293][T10068] hsr_slave_0: left promiscuous mode [ 309.793839][T10068] hsr_slave_1: left promiscuous mode [ 309.805515][T10068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.827198][T10068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.838629][T10068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.846115][T10068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.866529][T10068] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 309.874019][T10068] batman_adv: batadv0: Removing interface: virt_wifi0 [ 309.899890][T10068] veth1_vlan: left promiscuous mode [ 309.905383][T10068] @ÿ: left promiscuous mode [ 310.026588][T10068] pim6reg (unregistering): left allmulticast mode [ 310.500907][T10068] batadv_slave_0 (unregistering): left allmulticast mode [ 310.551302][T10068] team0 (unregistering): Port device team_slave_1 removed [ 310.597698][T10068] team0 (unregistering): Port device team_slave_0 removed [ 310.927383][ T5110] Bluetooth: hci0: command tx timeout [ 311.029149][T12120] team0: Port device team_slave_1 added [ 311.167818][ T5110] Bluetooth: hci4: command tx timeout [ 311.253404][T12090] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.267667][T12249] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2207'. [ 311.352602][T12253] sit0: entered promiscuous mode [ 311.389891][T12253] netlink: 'syz.3.2209': attribute type 1 has an invalid length. [ 311.417746][T12253] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2209'. [ 311.438128][T12120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.445162][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.488166][T12120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.501391][T12258] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2211'. [ 311.512566][T12258] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2211'. [ 311.538093][T12120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.545100][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.627864][T12120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.652837][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.660136][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.822692][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.829954][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.856912][T12269] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2216'. [ 311.902681][T12120] hsr_slave_0: entered promiscuous mode [ 311.922838][T12120] hsr_slave_1: entered promiscuous mode [ 311.988513][T12278] netlink: 'syz.3.2219': attribute type 11 has an invalid length. [ 312.065634][T12283] netlink: 'syz.1.2220': attribute type 4 has an invalid length. [ 312.159007][T10068] IPVS: stop unused estimator thread 0... [ 312.274099][T12287] xt_cluster: node mask cannot exceed total number of nodes [ 312.351419][T12292] Dead loop on virtual device ipvlan1, fix it urgently! [ 312.377444][T12293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2223'. [ 312.589264][T12303] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 312.609095][T12303] ipvlan2: entered promiscuous mode [ 312.614602][T12303] ipvlan2: entered allmulticast mode [ 312.735212][T12090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.832055][T12311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2228'. [ 312.875102][T12090] veth0_vlan: entered promiscuous mode [ 312.890549][T12311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2228'. [ 312.904989][T12090] veth1_vlan: entered promiscuous mode [ 312.955130][T12307] netlink: 360 bytes leftover after parsing attributes in process `syz.1.2228'. [ 313.063221][T12120] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 313.077700][T12090] veth0_macvtap: entered promiscuous mode [ 313.098788][T12120] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 313.112572][T12316] netlink: 'syz.1.2230': attribute type 7 has an invalid length. [ 313.124275][T12120] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 313.172029][T12090] veth1_macvtap: entered promiscuous mode [ 313.191896][T12120] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 313.238034][ T5110] Bluetooth: hci4: command tx timeout [ 313.262028][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.290730][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.306195][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.329111][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.348130][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.363757][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.381990][T12090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.422091][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.443092][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.456742][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.476073][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.486526][T12090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.510371][T12090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.530002][T12090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.558777][T12325] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2234'. [ 313.561527][T12090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.577789][T12090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.586709][T12090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.599005][T12090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.765493][T12329] Bluetooth: MGMT ver 1.22 [ 313.888880][ T1053] ================================================================== [ 313.897017][ T1053] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0 [ 313.905130][ T1053] Write of size 8 at addr ffff88807b49f808 by task kworker/u8:6/1053 [ 313.913228][ T1053] [ 313.914279][T12120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.915559][ T1053] CPU: 0 PID: 1053 Comm: kworker/u8:6 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 313.932509][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 313.942601][ T1053] Workqueue: l2tp l2tp_tunnel_del_work [ 313.948108][ T1053] Call Trace: [ 313.951415][ T1053] [ 313.954367][ T1053] dump_stack_lvl+0x241/0x360 [ 313.959081][ T1053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 313.964315][ T1053] ? __pfx__printk+0x10/0x10 [ 313.968943][ T1053] ? _printk+0xd5/0x120 [ 313.973181][ T1053] ? __virt_addr_valid+0x183/0x520 [ 313.978339][ T1053] ? __virt_addr_valid+0x183/0x520 [ 313.983514][ T1053] print_report+0x169/0x550 [ 313.988131][ T1053] ? __virt_addr_valid+0x183/0x520 [ 313.993288][ T1053] ? __virt_addr_valid+0x183/0x520 [ 313.998442][ T1053] ? __virt_addr_valid+0x44e/0x520 [ 314.003587][ T1053] ? __phys_addr+0xba/0x170 [ 314.008110][ T1053] ? l2tp_session_delete+0x28/0x9e0 [ 314.013329][ T1053] kasan_report+0x143/0x180 [ 314.018022][ T1053] ? l2tp_session_delete+0x28/0x9e0 [ 314.023233][ T1053] kasan_check_range+0x282/0x290 [ 314.028185][ T1053] l2tp_session_delete+0x28/0x9e0 [ 314.033308][ T1053] ? l2tp_tunnel_del_work+0x1d3/0x330 [ 314.038691][ T1053] l2tp_tunnel_del_work+0x1cb/0x330 [ 314.043899][ T1053] ? process_scheduled_works+0x945/0x1830 [ 314.049713][ T1053] process_scheduled_works+0xa2c/0x1830 [ 314.055305][ T1053] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.061341][ T1053] ? assign_work+0x364/0x3d0 [ 314.065953][ T1053] worker_thread+0x86d/0xd50 [ 314.070585][ T1053] ? __kthread_parkme+0x169/0x1d0 [ 314.075647][ T1053] ? __pfx_worker_thread+0x10/0x10 [ 314.080770][ T1053] kthread+0x2f0/0x390 [ 314.084862][ T1053] ? __pfx_worker_thread+0x10/0x10 [ 314.090092][ T1053] ? __pfx_kthread+0x10/0x10 [ 314.094707][ T1053] ret_from_fork+0x4b/0x80 [ 314.099143][ T1053] ? __pfx_kthread+0x10/0x10 [ 314.103762][ T1053] ret_from_fork_asm+0x1a/0x30 [ 314.108699][ T1053] [ 314.111729][ T1053] [ 314.114056][ T1053] Allocated by task 12333: [ 314.118484][ T1053] kasan_save_track+0x3f/0x80 [ 314.123188][ T1053] __kasan_kmalloc+0x98/0xb0 [ 314.127810][ T1053] __kmalloc_noprof+0x1f9/0x400 [ 314.132679][ T1053] l2tp_session_create+0x3b/0xc20 [ 314.137717][ T1053] pppol2tp_connect+0xca3/0x17a0 [ 314.142662][ T1053] __sys_connect+0x2df/0x310 [ 314.147268][ T1053] __x64_sys_connect+0x7a/0x90 [ 314.152053][ T1053] do_syscall_64+0xf3/0x230 [ 314.156563][ T1053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.162552][ T1053] [ 314.164878][ T1053] Freed by task 24: [ 314.168685][ T1053] kasan_save_track+0x3f/0x80 [ 314.173454][ T1053] kasan_save_free_info+0x40/0x50 [ 314.178493][ T1053] poison_slab_object+0xe0/0x150 [ 314.183440][ T1053] __kasan_slab_free+0x37/0x60 [ 314.188211][ T1053] kfree+0x149/0x360 [ 314.192209][ T1053] __sk_destruct+0x58/0x5f0 [ 314.196813][ T1053] rcu_core+0xafd/0x1830 [ 314.201112][ T1053] handle_softirqs+0x2c4/0x970 [ 314.205996][ T1053] run_ksoftirqd+0xca/0x130 [ 314.210505][ T1053] smpboot_thread_fn+0x544/0xa30 [ 314.215444][ T1053] kthread+0x2f0/0x390 [ 314.219524][ T1053] ret_from_fork+0x4b/0x80 [ 314.223976][ T1053] ret_from_fork_asm+0x1a/0x30 [ 314.228756][ T1053] [ 314.231279][ T1053] Last potentially related work creation: [ 314.236993][ T1053] kasan_save_stack+0x3f/0x60 [ 314.241687][ T1053] __kasan_record_aux_stack+0xac/0xc0 [ 314.247078][ T1053] call_rcu+0x167/0xa70 [ 314.251256][ T1053] pppol2tp_release+0x24b/0x350 [ 314.256117][ T1053] sock_close+0xbc/0x240 [ 314.260362][ T1053] __fput+0x24a/0x8a0 [ 314.264432][ T1053] task_work_run+0x24f/0x310 [ 314.269069][ T1053] syscall_exit_to_user_mode+0x168/0x360 [ 314.274719][ T1053] do_syscall_64+0x100/0x230 [ 314.279331][ T1053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.285243][ T1053] [ 314.287838][ T1053] The buggy address belongs to the object at ffff88807b49f800 [ 314.287838][ T1053] which belongs to the cache kmalloc-1k of size 1024 [ 314.301925][ T1053] The buggy address is located 8 bytes inside of [ 314.301925][ T1053] freed 1024-byte region [ffff88807b49f800, ffff88807b49fc00) [ 314.315643][ T1053] [ 314.317970][ T1053] The buggy address belongs to the physical page: [ 314.324394][ T1053] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b498 [ 314.333158][ T1053] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 314.341662][ T1053] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 314.349645][ T1053] page_type: 0xffffefff(slab) [ 314.354343][ T1053] raw: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 314.362930][ T1053] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 314.371605][ T1053] head: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 314.380370][ T1053] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 314.389042][ T1053] head: 00fff00000000003 ffffea0001ed2601 ffffffffffffffff 0000000000000000 [ 314.397723][ T1053] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 314.406477][ T1053] page dumped because: kasan: bad access detected [ 314.412919][ T1053] page_owner tracks the page as allocated [ 314.418630][ T1053] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5001, tgid 5001 (dhcpcd-run-hook), ts 61868544373, free_ts 61862368929 [ 314.440440][ T1053] post_alloc_hook+0x1f3/0x230 [ 314.445306][ T1053] get_page_from_freelist+0x2e4c/0x2f10 [ 314.450868][ T1053] __alloc_pages_noprof+0x256/0x6c0 [ 314.456081][ T1053] alloc_slab_page+0x5f/0x120 [ 314.460767][ T1053] allocate_slab+0x5a/0x2f0 [ 314.465278][ T1053] ___slab_alloc+0xcd1/0x14b0 [ 314.469969][ T1053] __slab_alloc+0x58/0xa0 [ 314.474304][ T1053] __kmalloc_noprof+0x257/0x400 [ 314.479168][ T1053] load_elf_phdrs+0x162/0x260 [ 314.483880][ T1053] load_elf_binary+0x937/0x2620 [ 314.488736][ T1053] bprm_execve+0xaf8/0x17c0 [ 314.493247][ T1053] do_execveat_common+0x553/0x700 [ 314.498288][ T1053] __x64_sys_execve+0x92/0xb0 [ 314.503003][ T1053] do_syscall_64+0xf3/0x230 [ 314.507510][ T1053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.513411][ T1053] page last free pid 4991 tgid 4991 stack trace: [ 314.519740][ T1053] free_unref_page+0xd22/0xea0 [ 314.524530][ T1053] __slab_free+0x31b/0x3d0 [ 314.528954][ T1053] qlist_free_all+0x9e/0x140 [ 314.533550][ T1053] kasan_quarantine_reduce+0x14f/0x170 [ 314.539016][ T1053] __kasan_slab_alloc+0x23/0x80 [ 314.543875][ T1053] kmem_cache_alloc_noprof+0x135/0x2a0 [ 314.549350][ T1053] getname_flags+0xbd/0x4f0 [ 314.553869][ T1053] do_sys_openat2+0xd2/0x1d0 [ 314.558558][ T1053] __x64_sys_openat+0x247/0x2a0 [ 314.563423][ T1053] do_syscall_64+0xf3/0x230 [ 314.567930][ T1053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.573830][ T1053] [ 314.576154][ T1053] Memory state around the buggy address: [ 314.581787][ T1053] ffff88807b49f700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 314.589852][ T1053] ffff88807b49f780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 314.597917][ T1053] >ffff88807b49f800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.605979][ T1053] ^ [ 314.610306][ T1053] ffff88807b49f880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.618472][ T1053] ffff88807b49f900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.626546][ T1053] ================================================================== [ 314.652248][T12120] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.654872][T12341] netlink: 'syz.1.2239': attribute type 2 has an invalid length. [ 314.682662][T11420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.694824][T12341] Êü: entered promiscuous mode [ 314.733132][ T1053] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 314.740382][ T1053] CPU: 1 PID: 1053 Comm: kworker/u8:6 Not tainted 6.10.0-rc6-syzkaller-01261-ge0ee68a8bef9 #0 [ 314.750634][ T1053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 314.760724][ T1053] Workqueue: l2tp l2tp_tunnel_del_work [ 314.766382][ T1053] Call Trace: [ 314.769696][ T1053] [ 314.772656][ T1053] dump_stack_lvl+0x241/0x360 [ 314.777386][ T1053] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.782615][ T1053] ? __pfx__printk+0x10/0x10 [ 314.787223][ T1053] ? preempt_schedule+0xe1/0xf0 [ 314.792117][ T1053] ? vscnprintf+0x5d/0x90 [ 314.796505][ T1053] panic+0x349/0x860 [ 314.800457][ T1053] ? check_panic_on_warn+0x21/0xb0 [ 314.805608][ T1053] ? __pfx_panic+0x10/0x10 [ 314.810053][ T1053] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 314.816061][ T1053] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 314.822443][ T1053] ? print_report+0x502/0x550 [ 314.827179][ T1053] check_panic_on_warn+0x86/0xb0 [ 314.832137][ T1053] ? l2tp_session_delete+0x28/0x9e0 [ 314.837447][ T1053] end_report+0x77/0x160 [ 314.841744][ T1053] kasan_report+0x154/0x180 [ 314.846291][ T1053] ? l2tp_session_delete+0x28/0x9e0 [ 314.851622][ T1053] kasan_check_range+0x282/0x290 [ 314.856617][ T1053] l2tp_session_delete+0x28/0x9e0 [ 314.861684][ T1053] ? l2tp_tunnel_del_work+0x1d3/0x330 [ 314.867100][ T1053] l2tp_tunnel_del_work+0x1cb/0x330 [ 314.872348][ T1053] ? process_scheduled_works+0x945/0x1830 [ 314.878114][ T1053] process_scheduled_works+0xa2c/0x1830 [ 314.883722][ T1053] ? __pfx_process_scheduled_works+0x10/0x10 [ 314.889731][ T1053] ? assign_work+0x364/0x3d0 [ 314.894367][ T1053] worker_thread+0x86d/0xd50 [ 314.899016][ T1053] ? __kthread_parkme+0x169/0x1d0 [ 314.904086][ T1053] ? __pfx_worker_thread+0x10/0x10 [ 314.909244][ T1053] kthread+0x2f0/0x390 [ 314.913349][ T1053] ? __pfx_worker_thread+0x10/0x10 [ 314.918496][ T1053] ? __pfx_kthread+0x10/0x10 [ 314.923134][ T1053] ret_from_fork+0x4b/0x80 [ 314.927597][ T1053] ? __pfx_kthread+0x10/0x10 [ 314.932227][ T1053] ret_from_fork_asm+0x1a/0x30 [ 314.937222][ T1053] [ 314.940549][ T1053] Kernel Offset: disabled [ 314.944888][ T1053] Rebooting in 86400 seconds..