syzkaller login: [ 245.314588][ T2893] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 245.413314][ T2893] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 278.813727][ T2893] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:24085' (ECDSA) to the list of known hosts. 1970/01/01 00:05:05 fuzzer started 1970/01/01 00:05:16 dialing manager at localhost:43739 1970/01/01 00:05:20 syscalls: 2768 1970/01/01 00:05:20 code coverage: enabled 1970/01/01 00:05:20 comparison tracing: enabled 1970/01/01 00:05:20 extra coverage: enabled 1970/01/01 00:05:20 setuid sandbox: enabled 1970/01/01 00:05:20 namespace sandbox: enabled 1970/01/01 00:05:20 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:05:20 fault injection: enabled 1970/01/01 00:05:20 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:05:20 net packet injection: enabled 1970/01/01 00:05:20 net device setup: enabled 1970/01/01 00:05:20 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:05:20 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:05:20 USB emulation: enabled 1970/01/01 00:05:20 hci packet injection: /dev/vhci does not exist 1970/01/01 00:05:20 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:05:20 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:05:26 fetching corpus: 50, signal 25807/27461 (executing program) 1970/01/01 00:05:28 fetching corpus: 100, signal 33116/36239 (executing program) 1970/01/01 00:05:30 fetching corpus: 150, signal 37398/41947 (executing program) 1970/01/01 00:05:32 fetching corpus: 200, signal 40432/46330 (executing program) 1970/01/01 00:05:36 fetching corpus: 250, signal 42426/49649 (executing program) 1970/01/01 00:05:38 fetching corpus: 300, signal 45836/54214 (executing program) 1970/01/01 00:05:40 fetching corpus: 350, signal 48068/57606 (executing program) 1970/01/01 00:05:42 fetching corpus: 400, signal 50077/60754 (executing program) 1970/01/01 00:05:44 fetching corpus: 450, signal 52168/63913 (executing program) 1970/01/01 00:05:47 fetching corpus: 500, signal 55350/68011 (executing program) 1970/01/01 00:05:49 fetching corpus: 550, signal 57110/70769 (executing program) 1970/01/01 00:05:51 fetching corpus: 600, signal 59303/73830 (executing program) 1970/01/01 00:05:53 fetching corpus: 650, signal 60766/76240 (executing program) 1970/01/01 00:05:55 fetching corpus: 700, signal 61656/78141 (executing program) 1970/01/01 00:05:57 fetching corpus: 750, signal 62953/80355 (executing program) 1970/01/01 00:05:59 fetching corpus: 800, signal 64368/82613 (executing program) 1970/01/01 00:06:00 fetching corpus: 850, signal 65295/84468 (executing program) 1970/01/01 00:06:02 fetching corpus: 900, signal 66129/86202 (executing program) 1970/01/01 00:06:05 fetching corpus: 950, signal 69197/89626 (executing program) 1970/01/01 00:06:06 fetching corpus: 1000, signal 69994/91255 (executing program) 1970/01/01 00:06:08 fetching corpus: 1050, signal 70872/93000 (executing program) 1970/01/01 00:06:11 fetching corpus: 1100, signal 74809/96894 (executing program) 1970/01/01 00:06:12 fetching corpus: 1150, signal 75563/98418 (executing program) 1970/01/01 00:06:14 fetching corpus: 1200, signal 76786/100299 (executing program) 1970/01/01 00:06:16 fetching corpus: 1250, signal 78414/102420 (executing program) 1970/01/01 00:06:18 fetching corpus: 1300, signal 79378/104021 (executing program) 1970/01/01 00:06:20 fetching corpus: 1350, signal 81352/106253 (executing program) 1970/01/01 00:06:23 fetching corpus: 1400, signal 82497/107917 (executing program) 1970/01/01 00:06:24 fetching corpus: 1450, signal 83282/109321 (executing program) 1970/01/01 00:06:27 fetching corpus: 1500, signal 85106/111305 (executing program) 1970/01/01 00:06:29 fetching corpus: 1550, signal 85816/112635 (executing program) 1970/01/01 00:06:31 fetching corpus: 1600, signal 86887/114131 (executing program) 1970/01/01 00:06:33 fetching corpus: 1650, signal 87555/115344 (executing program) 1970/01/01 00:06:35 fetching corpus: 1700, signal 88148/116522 (executing program) 1970/01/01 00:06:36 fetching corpus: 1750, signal 88769/117738 (executing program) 1970/01/01 00:06:38 fetching corpus: 1800, signal 89582/118992 (executing program) 1970/01/01 00:06:40 fetching corpus: 1850, signal 90214/120064 (executing program) 1970/01/01 00:06:41 fetching corpus: 1900, signal 91042/121297 (executing program) 1970/01/01 00:06:44 fetching corpus: 1950, signal 93364/123214 (executing program) 1970/01/01 00:06:46 fetching corpus: 2000, signal 93881/124226 (executing program) 1970/01/01 00:06:48 fetching corpus: 2050, signal 94452/125338 (executing program) 1970/01/01 00:06:49 fetching corpus: 2100, signal 94905/126286 (executing program) 1970/01/01 00:06:51 fetching corpus: 2150, signal 95476/127267 (executing program) 1970/01/01 00:06:53 fetching corpus: 2200, signal 96695/128511 (executing program) 1970/01/01 00:06:55 fetching corpus: 2250, signal 97403/129510 (executing program) 1970/01/01 00:06:58 fetching corpus: 2300, signal 98300/130545 (executing program) 1970/01/01 00:06:59 fetching corpus: 2350, signal 98641/131375 (executing program) 1970/01/01 00:07:01 fetching corpus: 2400, signal 99123/132235 (executing program) 1970/01/01 00:07:03 fetching corpus: 2450, signal 99478/133047 (executing program) 1970/01/01 00:07:05 fetching corpus: 2500, signal 101072/134243 (executing program) 1970/01/01 00:07:06 fetching corpus: 2550, signal 101970/135217 (executing program) 1970/01/01 00:07:08 fetching corpus: 2600, signal 102339/136011 (executing program) 1970/01/01 00:07:10 fetching corpus: 2650, signal 102781/136794 (executing program) 1970/01/01 00:07:13 fetching corpus: 2700, signal 103537/137683 (executing program) 1970/01/01 00:07:15 fetching corpus: 2740, signal 104009/138461 (executing program) 1970/01/01 00:07:15 fetching corpus: 2740, signal 104009/139068 (executing program) 1970/01/01 00:07:15 fetching corpus: 2740, signal 104009/139683 (executing program) 1970/01/01 00:07:16 fetching corpus: 2740, signal 104009/140290 (executing program) 1970/01/01 00:07:16 fetching corpus: 2740, signal 104009/140937 (executing program) 1970/01/01 00:07:16 fetching corpus: 2740, signal 104009/141586 (executing program) 1970/01/01 00:07:16 fetching corpus: 2740, signal 104009/142224 (executing program) 1970/01/01 00:07:16 fetching corpus: 2740, signal 104009/142816 (executing program) 1970/01/01 00:07:16 fetching corpus: 2740, signal 104009/143454 (executing program) 1970/01/01 00:07:16 fetching corpus: 2740, signal 104009/144099 (executing program) 1970/01/01 00:07:17 fetching corpus: 2740, signal 104009/144720 (executing program) 1970/01/01 00:07:17 fetching corpus: 2740, signal 104009/145329 (executing program) 1970/01/01 00:07:17 fetching corpus: 2740, signal 104009/145950 (executing program) 1970/01/01 00:07:17 fetching corpus: 2740, signal 104009/146561 (executing program) 1970/01/01 00:07:17 fetching corpus: 2740, signal 104009/147169 (executing program) 1970/01/01 00:07:17 fetching corpus: 2740, signal 104009/147787 (executing program) 1970/01/01 00:07:17 fetching corpus: 2740, signal 104009/148405 (executing program) 1970/01/01 00:07:17 fetching corpus: 2740, signal 104009/149024 (executing program) 1970/01/01 00:07:18 fetching corpus: 2740, signal 104009/149647 (executing program) 1970/01/01 00:07:18 fetching corpus: 2740, signal 104009/150267 (executing program) 1970/01/01 00:07:18 fetching corpus: 2740, signal 104009/150888 (executing program) 1970/01/01 00:07:18 fetching corpus: 2740, signal 104009/150906 (executing program) 1970/01/01 00:07:18 fetching corpus: 2740, signal 104009/150906 (executing program) 1970/01/01 00:09:03 starting 2 fuzzer processes 00:09:22 executing program 0: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0x1, 0x995, 0xffff, 0xffff}, 0x10) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040}, 0x80) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000480)={0x2e8, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x70}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x1f8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "4e186fc541b5213d4413ee7173cf3592541620ac"}}, @TIPC_NLA_NODE_ID={0xab, 0x3, "4904973d7128287b1cf62fbf3ca71ea3ced0402dd723ccd5a0756ac57248f30c93b6d50217324bd19e58b775a96cc597ba533a8f6199ea77c213736f2ebcc0190756b53443dd528011e2ca4bfb5f2cfc9f1442682450a0494e1c0ede0956fe022a230ec4a2efbff4f4ea073f0ce805d537d59383e9d0f2541259090b9cd376dc56c2608bbfc0cc7ebf22968e49e4b92cbe745f27da171595fa2866ad89e6bf09d0e6ff69e9c9c9"}, @TIPC_NLA_NODE_ID={0x65, 0x3, "538aa41b7c403c13e78cfda6eda28d6f712588bedda556219be7096f33fc2bb77859d384672121e3ea9e1d193c5bc8c20127fe0cabff1df83603560be76dc4200265aeaf31cba230fbab18d6d7517c0beb53c685d35935a15f2be786eb453ed11b"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x97}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "54f84b75204f6074d9d7bc8ccb25a55d26d49724827f22075ee1d5"}}, @TIPC_NLA_NODE_ID={0x46, 0x3, "0972b7dc32d437830344c9e546bc1eb73bfb9f6aba7ea68a17bfd9c5a5951a447246012c329eed326ba4343f11cdec92dfab2847d83eb2698f59d7f488f7bcd12160"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x71000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}]}]}, 0x2e8}, 0x1, 0x0, 0x0, 0xc040}, 0x20008000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}}, 0x54) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xe3c, 0x77}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "127b93883d804616e3e45b6d856d2a7b"}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x44000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x68, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x7, @media='ib\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x44) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000d00)='team\x00', 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7, 0xd5e, 0x10, @empty, @dev={0xfe, 0x80, [], 0x33}, 0x8060, 0x80, 0x4}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000e80)={'syztnl2\x00', &(0x7f0000000e00)={'gretap0\x00', 0x0, 0x7800, 0x40, 0x9, 0x7f1b80, {{0xa, 0x4, 0x0, 0x17, 0x28, 0x66, 0x0, 0x17, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@end, @lsrr={0x83, 0xb, 0x1d, [@broadcast, @remote]}, @generic={0x88, 0x8, "16ed01b69afa"}]}}}}}) accept$packet(0xffffffffffffffff, &(0x7f00000012c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x14) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000008bc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000008b80)={&(0x7f00000080c0)={0xaa8, r6, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xdd}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x200}}}]}}, {{0x8, 0x1, r7}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x6, 0x0, 0x40, 0x5}, {0x0, 0x0, 0xea, 0x2}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x25b}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0xaa8}, 0x1, 0x0, 0x0, 0x24040040}, 0x30048000) 00:10:02 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x800) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'bond_slave_1\x00', {'veth0_to_bridge\x00'}, 0x6}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x401, 0x9, 0x5, 0x120, 0x0}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={r1, 0x9, 0x5, [0x3, 0x33, 0x4, 0x8, 0x4be]}, 0x12) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000240)='wg1\x00', 0x7fffffff, 0x7, 0x6}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000300)=0x2) r3 = socket(0x4, 0x6, 0x6) sendmsg$ETHTOOL_MSG_WOL_GET(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa4, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x400, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x8000, 0x10, 0x7, 0x7, {{0x18, 0x4, 0x2, 0xa, 0x60, 0x64, 0x0, 0x99, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@lsrr={0x83, 0x13, 0xf3, [@private=0xa010101, @local, @private=0xa010101, @loopback]}, @noop, @ssrr={0x89, 0x2b, 0x1d, [@loopback, @empty, @dev={0xac, 0x14, 0x14, 0x14}, @loopback, @broadcast, @rand_addr=0x64010101, @local, @rand_addr=0x64010101, @multicast2, @local]}, @timestamp={0x44, 0xc, 0x12, 0x0, 0xf, [0x2, 0x6]}]}}}}}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000005c0)) getsockopt$packet_buf(r3, 0x107, 0x1, &(0x7f0000000600)=""/174, &(0x7f00000006c0)=0xae) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000000740)=@add_del={0x2, &(0x7f0000000700)='caif0\x00'}) sendmsg(r2, &(0x7f0000000940)={&(0x7f0000000780)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x2, 0x2, 0x1, 0x4, {0xa, 0x4e24, 0x1000, @private2, 0x5}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000800)="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", 0xfa}], 0x1}, 0x8810) fcntl$addseals(r3, 0x409, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4045) [ 609.197057][ T3087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.343831][ T3087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.444479][ T3087] device hsr_slave_0 entered promiscuous mode [ 633.743352][ T3087] device hsr_slave_1 entered promiscuous mode [ 649.113319][ T3087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 649.679474][ T3087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 650.784879][ T3087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 651.254649][ T3087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 689.552571][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.545381][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 691.915790][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 719.663058][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 719.791653][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 720.282162][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 720.423439][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 723.066947][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 723.253401][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 724.574769][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 724.756715][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 725.374256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 725.525053][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 729.215036][ T3253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.724668][ T3253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.901526][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 731.905930][ T1935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 760.663822][ T3253] device hsr_slave_0 entered promiscuous mode [ 760.744559][ T3253] device hsr_slave_1 entered promiscuous mode [ 760.894362][ T3253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 760.915241][ T3253] Cannot create hsr debugfs directory [ 803.715422][ T3253] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 804.405045][ T3253] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 808.434167][ T3253] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 810.096986][ T3253] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 818.903047][ T3128] device hsr_slave_0 left promiscuous mode [ 818.936168][ T3128] device hsr_slave_1 left promiscuous mode [ 826.931384][ T3128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.475100][ T3128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.284832][ T3128] bond0 (unregistering): Released all slaves [ 854.106258][ T3128] device hsr_slave_0 left promiscuous mode [ 854.154293][ T3128] device hsr_slave_1 left promiscuous mode [ 859.276686][ T3128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.570481][ T3128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.223937][ T3128] bond0 (unregistering): Released all slaves [ 868.881908][ T3524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.022268][ T3524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.651307][ T3524] device hsr_slave_0 entered promiscuous mode [ 882.686455][ T3524] device hsr_slave_1 entered promiscuous mode [ 887.322873][ T3647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.491289][ T3647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.676418][ T3647] device hsr_slave_0 entered promiscuous mode [ 898.715753][ T3647] device hsr_slave_1 entered promiscuous mode [ 898.771894][ T3647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 898.773550][ T3647] Cannot create hsr debugfs directory [ 898.876836][ T3524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 899.730228][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 899.773479][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 908.035433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 908.056053][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 908.289172][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 908.335531][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 908.621586][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 908.981601][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 909.737282][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 909.824044][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 910.200519][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 910.240319][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 910.419613][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 911.501742][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 911.505920][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 914.695440][ T3647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.307236][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 915.362215][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 924.073368][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 924.121809][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 924.146074][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 924.176018][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 924.186770][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 924.220482][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 924.942690][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 924.960586][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 925.301183][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 925.343012][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 925.562125][ T3647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 926.564976][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 926.583521][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 933.989773][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 934.046379][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 941.513819][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 941.616961][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 941.724398][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 941.768948][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 941.847301][ T3524] device veth0_vlan entered promiscuous mode [ 942.497012][ T3524] device veth1_vlan entered promiscuous mode [ 943.771866][ T3524] device veth0_macvtap entered promiscuous mode [ 944.047076][ T3524] device veth1_macvtap entered promiscuous mode [ 944.230767][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 944.284905][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 944.350803][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 944.442883][ T3291] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 945.194919][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 945.214115][ T3364] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 945.503447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 945.580913][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 949.622471][ T3524] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 951.243303][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 951.322264][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 966.906153][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 966.972323][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 968.422633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 968.455895][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 968.554190][ T3647] device veth0_vlan entered promiscuous mode [ 970.895840][ T3647] device veth1_vlan entered promiscuous mode [ 975.585122][ T3128] device hsr_slave_0 left promiscuous mode [ 975.802598][ T3128] device hsr_slave_1 left promiscuous mode [ 976.230642][ T3128] device veth1_macvtap left promiscuous mode [ 976.236714][ T3128] device veth0_macvtap left promiscuous mode [ 976.279523][ T3128] device veth1_vlan left promiscuous mode [ 976.284167][ T3128] device veth0_vlan left promiscuous mode [ 987.033387][ T3128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 987.450093][ T3128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.520931][ T3128] bond0 (unregistering): Released all slaves [ 991.223963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 991.294332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 991.503700][ T3647] device veth0_macvtap entered promiscuous mode [ 991.935704][ T3647] device veth1_macvtap entered promiscuous mode [ 992.371689][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 993.446051][ T3363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 993.536465][ T3363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 994.093480][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 994.166023][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1004.592147][ T4081] Unable to handle kernel access to user memory without uaccess routines at virtual address 00000000200005c0 [ 1004.615375][ T4081] Oops [#1] [ 1004.616060][ T4081] Modules linked in: [ 1004.618656][ T4081] CPU: 1 PID: 4081 Comm: syz-executor.1 Not tainted 5.12.0-rc5-syzkaller-00715-ga5e13c6df0e4 #0 [ 1004.620406][ T4081] Hardware name: riscv-virtio,qemu (DT) [ 1004.621461][ T4081] epc : sock_ioctl+0x4c4/0x66c [ 1004.622673][ T4081] ra : sock_ioctl+0x4c4/0x66c [ 1004.623800][ T4081] epc : ffffffe0020e60a2 ra : ffffffe0020e60a2 sp : ffffffe009d27da0 [ 1004.624994][ T4081] gp : ffffffe004588b08 tp : ffffffe0070ddf00 t0 : 0000000000000000 [ 1004.626186][ T4081] t1 : 0000000000000001 t2 : 00000000000f4240 s0 : ffffffe009d27e30 [ 1004.627435][ T4081] s1 : 0000000000040000 a0 : 0000000000000000 a1 : 0000000000000007 [ 1004.628611][ T4081] a2 : 1ffffffc00e1bbe0 a3 : ffffffe002a94d2e a4 : 0000000000000000 [ 1004.632334][ T4081] a5 : 0000000000000000 a6 : 0000000000f00000 a7 : ffffffe000084f3a [ 1004.633853][ T4081] s2 : 0000000000000000 s3 : 0000000000008902 s4 : 00000000200005c0 [ 1004.634925][ T4081] s5 : ffffffe00458c0d0 s6 : ffffffe00d07b9c0 s7 : ffffffe009fab900 [ 1004.635995][ T4081] s8 : 0000000000008903 s9 : ffffffe00d07ba80 s10: 0000000000000000 [ 1004.637084][ T4081] s11: 0000000000020000 t3 : a752922899907500 t4 : ffffffc4042f4fb2 [ 1004.639018][ T4081] t5 : ffffffc4042f4fba t6 : 0000000000040000 [ 1004.640034][ T4081] status: 0000000000000120 badaddr: 00000000200005c0 cause: 000000000000000f [ 1004.641260][ T4081] Call Trace: [ 1004.641988][ T4081] [] sock_ioctl+0x4c4/0x66c [ 1004.643367][ T4081] [] sys_ioctl+0x5c2/0xd56 [ 1004.644521][ T4081] [] ret_from_syscall+0x0/0x2 [ 1004.791460][ T4081] ---[ end trace 97b8ee1eadf202c3 ]--- [ 1004.819907][ T4081] Kernel panic - not syncing: Fatal exception [ 1004.821393][ T4081] SMP: stopping secondary CPUs [ 1004.823087][ T4081] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:57:33 Registers: info registers vcpu 0 pc 0000003fb8cfbd74 mhartid 0000000000000000 mstatus 00000000000040a2 mip 0000000000000000 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe00000e9d4 sepc 0000003fb8cfde3c mcause 0000000000000009 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra 00000000000195a8 x2/sp 0000003fffee9780 x3/gp 0000000000053e20 x4/tp 0000003fb8d716c8 x5/t0 0000000000000000 x6/t1 000000000001330c x7/t2 0000000000000009 x8/s0 0000000000000000 x9/s1 000000001218d520 x10/a0 000000001218cc40 x11/a1 0000000000000001 x12/a2 0000000000000000 x13/a3 0000003fffee9a28 x14/a4 0000000000000008 x15/a5 0000000000000000 x16/a6 0000003fffec9361 x17/a7 0000000000000049 x18/s2 0000003fffee9a28 x19/s3 0000000000000000 x20/s4 000000007fffffff x21/s5 0000000000053818 x22/s6 ffffffffffffffff x23/s7 000000001217a010 x24/s8 0000000000047000 x25/s9 0000000000048000 x26/s10 0000000000047050 x27/s11 ffffffffffffffff x28/t3 0000003fb8cfbda0 x29/t4 0000000000000010 x30/t5 0000000000000007 x31/t6 0000000000000000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc ffffffe000c1b6ec mhartid 0000000000000001 mstatus 00000000000000a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffe00000542c mepc ffffffe000c1a856 sepc ffffffe0000dc08a mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffe000c1b6ec x2/sp ffffffe009d27760 x3/gp ffffffe004588b08 x4/tp ffffffe0070ddf00 x5/t0 ffffffe004ffdbb7 x6/t1 ffffffc4009ffb76 x7/t2 0000000000000000 x8/s0 ffffffe009d27790 x9/s1 ffffffe005230480 x10/a0 ffffffe0052304c8 x11/a1 ffffffd000633000 x12/a2 1ffffffc00a46099 x13/a3 ffffffe000c1b6ec x14/a4 0000000000000000 x15/a5 ffffffe0052304c8 x16/a6 0000000000f00000 x17/a7 ffffffe004ffdbb6 x18/s2 ffffffd000633000 x19/s3 0000000000000020 x20/s4 000000000000002a x21/s5 ffffffe000c1a946 x22/s6 ffffffe005230480 x23/s7 ffffffe0052304d8 x24/s8 0000000000000001 x25/s9 ffffffe00458c0d0 x26/s10 ffffffe005230708 x27/s11 ffffffe0052304d0 x28/t3 000000000000004d x29/t4 ffffffc4009ffb74 x30/t5 ffffffc4009ffb77 x31/t6 ffffffe004ffdbb7 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000