last executing test programs: 1.590867677s ago: executing program 3 (id=1453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028008000140e9ff00010500030000000000080002400000000d0900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001400)=@sack_info={r3, 0x6, 0x5d5eaac9}, 0xc) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071113900000000008510946a3a226f96f12118004d9500000700f76a8b9c73f59834af7073ee929b8876d69b1482f7522c3d7abdb269d6c8919b352c230a0d9144b71584c4598f044b3aaa2134005a51ae48813a01e256148c1f584d6c64ecdab8599623b91c2887fe0d81a7de85d33b11216b671771ca60ecfad8eec993fc98838acd23e3a3ac976b5d942bb87685775c3a7a2042373cc0f4dd1b0e48669751c4381a2faeb0bac3497bdc6cb6cca53a1716ee5e7a1a1966b5f517bc39898a9ab91d0c20740bb4b93bd79c56b6fed933e557cc7ff192a5ec8c3d78e5ee72a6ecd5a7d2f1b1dcd100000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.474845453s ago: executing program 3 (id=1455): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x190, 0x150, 0x150, 0x0, 0xf8010000, 0x260, 0x238, 0x238, 0x260, 0x238, 0x3, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000023c0)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x1c6, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x190, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, @hopopts={0x11, 0x23, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @generic={0x0, 0xe3, "9a406896431cf8cebb1379b1cfca3ce3334fb0cd81c12766ff8351be2d961c40ce922dd8423e2de93ba96a5c90f772216e5e60c7d2a67cbcbc1d3b195d538eb920fc058775cc06baf8a87b4736fa0cf5161d47d4416aa6a1099c3aa4a927c4d93bcf1f4a781cbde0ee829f1276818415e192376437a6d4854c3c3ad346c7df7dfea9cd0463aa441a1b9cd514fedb8172d54cbf1353cf5f63fe58465c2d0e165df05ada44174919aaffc29df43606f9d49bcc571525c7aecc77ad523da96156400a63d03f15e4254c95ecb66cda9310041006d9d10e6b8a38bbdcac75348fe624c73bd8"}]}, @hopopts={0x0, 0x0, '\x00', [@enc_lim]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}, "c52104e4fbd8be11e86055d5cec119bfa161827fb675e43744d104b96e26ecb84a318c4c1d7b4f70305e74abd64694eddc8e552b811b2a1c63e32b811f4e8296"}}}}}}, 0x0) 1.336685056s ago: executing program 3 (id=1461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0xfffd, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4e, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2, 0x0, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.13738583s ago: executing program 2 (id=1465): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000107000000000000000007"], 0x18}], 0x1}, 0x0) (fail_nth: 9) 1.101253613s ago: executing program 0 (id=1466): r0 = socket(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000056512f3e000000010000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000c00040007004c001a804800048014000700ff01000000000000000000000000000114000700fc01000000000000000000000000000014000700fe80000000000000000000000000000005000b"], 0x74}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x3c}}, 0x2400c0d4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10001100", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, 0x0, 0x0) 784.633322ms ago: executing program 4 (id=1468): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711734000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007204800000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xff9, &(0x7f0000001e40)=""/4089, 0x41000, 0x0, '\x00', r0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000240), 0x4) 783.91471ms ago: executing program 0 (id=1469): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x80, 0x80, 0x0, 0x9010, {{0x18, 0x4, 0x0, 0x2, 0x60, 0x64, 0x0, 0x8, 0x4, 0x0, @multicast2, @local, {[@timestamp_prespec={0x44, 0xc, 0xad, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x7f}]}, @timestamp_prespec={0x44, 0x3c, 0x67, 0x3, 0x2, [{@multicast2, 0x8}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x1}, {@private=0xa010102, 0xfffffffa}, {@multicast1, 0x3d26}, {@remote, 0x48}, {@broadcast, 0x1}, {@remote, 0x3}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x8, 0x700, 0xfffff078, 0x1, {{0xe, 0x4, 0x3, 0x28, 0x38, 0x66, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@rr={0x7, 0x23, 0x93, [@private=0xa010101, @loopback, @loopback, @multicast1, @loopback, @multicast1, @rand_addr=0x64010101, @private=0xa010102]}, @end]}}}}}) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x8000, 0x40, 0xffffffff, 0x8, {{0x18, 0x4, 0x2, 0x1, 0x60, 0x68, 0x0, 0xf9, 0x29, 0x0, @remote, @multicast1, {[@timestamp_prespec={0x44, 0x3c, 0x8e, 0x3, 0x5, [{@multicast1, 0x6}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x8}, {@multicast2, 0x40}, {@rand_addr=0x64010102, 0x3}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x10000}, {@broadcast, 0x1}]}, @generic={0x82, 0xd, "8d50195903e4e503e96e3c"}]}}}}}) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3c00000010020000001000000300220004000000d03319114bb11062cf47e1854debd750d0a7d257ff5c82550cdba68ea324412756fb128736eadb31e5a5ecefcbbc109c99ca7def69ea563b9a638d195de4253fb6c204707ab8857dd31a0e95b2c0e25b112de3e906b7c78f5b71ec84877745bdd0a934af44278c575915ec637ac3bd910259dc332675e2ca8587c5d615f26d3c9ac1f2b77005615bb30578f236245f227f013f9e2cfa750f6e4d6a988ee7a2899f235253177d26c7108ef97d60cdcfedc00256305144183d5063b03cfe8b2940edae47006ce5ea6ffe0943", @ANYRESDEC=r11, @ANYBLOB="10060000000000001c0012800b00010067656e65766500000c000280060005004e230000"], 0x3c}, 0x1, 0x2}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f00000009c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000580)={0x3dc, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x234, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa8, 0x5, "926351812e8b477182421f841f84804261bfb3955cd7b2f6bb8f5c4169949fcd9a228cc013ef6a426e1b43345a9ecf2d290afec9b1c11b1e7febde3258bf769a5933dd43845b98bd5b316f9883d2ea3b66e0a5a2dcbd77b01e218b833f6c1e41a05f6c32f45135689ef6c7ef5ae557772025066f9b3d465b9bfd6baff13fbb4fba6bbae2649790564f9f1f25193b5fe963dc3807d956968f4b4096bf95e055de38818ae2"}, @ETHTOOL_A_BITSET_MASK={0xdc, 0x5, "c237fa032131d63f6663c81da6ca86d2b88a1d076b0b60718a505f9b6afd7ea18faf1f4614a147c2c656bb69c493a9c3da83791daf0f4783ab88b446ed79ef314ffe9032f704a6a86f224f62acd4066586941d69c5fd07eb27dd462a4902167beb8c1d78d73ec77dd37f67dec418df96ae8d8a688437f21e6991a74bf77e626437fcd42ff53a614fc6af14f4830c581d9ff4076fd17206abb3b844bb55e0f6e2069510fb2fcb1313a41e7cf67795ee6783f4ae9c29fc1be71ae2511549af6bf86ebb966fae2505295f4200f44c81eae89294eabdfce05327"}, @ETHTOOL_A_BITSET_VALUE={0xa9, 0x4, "561ed5cdf646537dfb86b5718041a46172d6dafada1b8e5c32daaa2363930863fb2c182552d2908152f362817b64e47a2be46c93fffd4c89bd3d5104b6114e2593273298ade907f40b163e819ee025cc03902c7830fbcc20fcbf6107d4b488835529254d48115708d6d61241d9e79556d43a78d4b0a66c9151b41260255e8fcfb0a89611473255d01547ac5e18b3de1b1f8d82af0e5a15c2913aa298c282f1830b8d7240f6"}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x60, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0x53, 0x4, "ed9b2683747baa2febf1b31e3bbeee53e948dbd422cc326316ee9640869db6ef5a1ed1f8941f69f7120acb3e4ce647b1c0c1e153a8f2a39ee1137801ff6c0ad627517194407e958610ff8ee07585b2"}]}, @ETHTOOL_A_DEBUG_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0xc000}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]}, 0x10) 783.463415ms ago: executing program 4 (id=1470): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x2000000064832, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x202000, 0x1000}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x1, 0x0, &(0x7f0000000400)) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000107000000000000000007"], 0x18}], 0x1}, 0x0) 766.89455ms ago: executing program 2 (id=1471): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x190, 0x150, 0x150, 0x0, 0xf8010000, 0x260, 0x238, 0x238, 0x260, 0x238, 0x3, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000023c0)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x1c6, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "922ff5", 0x190, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[@fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, @hopopts={0x11, 0x23, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x0, [0x0, 0x0]}}, @generic={0x0, 0xe3, "9a406896431cf8cebb1379b1cfca3ce3334fb0cd81c12766ff8351be2d961c40ce922dd8423e2de93ba96a5c90f772216e5e60c7d2a67cbcbc1d3b195d538eb920fc058775cc06baf8a87b4736fa0cf5161d47d4416aa6a1099c3aa4a927c4d93bcf1f4a781cbde0ee829f1276818415e192376437a6d4854c3c3ad346c7df7dfea9cd0463aa441a1b9cd514fedb8172d54cbf1353cf5f63fe58465c2d0e165df05ada44174919aaffc29df43606f9d49bcc571525c7aecc77ad523da96156400a63d03f15e4254c95ecb66cda9310041006d9d10e6b8a38bbdcac75348fe624c73bd8"}]}, @hopopts={0x0, 0x0, '\x00', [@enc_lim]}], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "114f84", 0x0, "8e269c"}, "c52104e4fbd8be11e86055d5cec119bfa161827fb675e43744d104b96e26ecb84a318c4c1d7b4f70305e74abd64694eddc8e552b811b2a1c63e32b811f4e8296"}}}}}}, 0x0) 702.519653ms ago: executing program 4 (id=1472): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061112800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x60, r0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "02d0e86cbe4d68f75ce39f0dab"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac09}, @NL80211_KEY_IDX={0x5}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x60}}, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000400)={'veth0_to_batadv\x00', {0x2, 0x4e20, @loopback}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc04000000050104000000000000000000000000540201000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000003405be39dc2a3ba9f2d90eca67823d459716e3f50fc1e8682163f65134d25ad2"], 0x4bc}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x6, 0x0, &(0x7f0000000180)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)={0x550, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x72, 0xe, {{{}, {0x7fff}, @device_b, @device_b}, 0x0, @default, 0x130, @val={0x0, 0x6, @default_ibss_ssid}, @val, @val={0x3, 0x1, 0x8c}, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_PROBE_RESP={0x4a4, 0x91, "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"}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x550}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) read(r5, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="300000001d001100e70c2aa198002de7070000009b1156d82d18d2bebfc3da00bfb0e934454d8cabea79ac1e81906890d6611499078aa3216cf0cce01d3726a9bc97c00bc7d9ce858f2990354626f038334bacc4149bad436fc04d6f728f5305e7608811c326b7c96a96b61b6c2f60e27bbf25386058a2f89c1f5111fbcaa3782d18906ef6e8778bccfaa0b5882b6e97b226aaeb2b45a3cde080794abaee635ec57d04e8c8924bf3d1d3c2cebf18b1c020230c88581d6c8a1799b4baf6aa48e052783aafb46b2eb238188603ad893a3fe06ca7ed27cf4ac33b9609cba5f2f5233558e89244c3fe3ef5", @ANYRES32=r11, @ANYBLOB="000000000a0002002ee308099cc800000600050001000000"], 0x30}}, 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x7, 0x621, 0x49, 0x4b14, 0x0, 0x6, 0x400}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, &(0x7f0000000e80)=0x57bb, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$nl_route(r12, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newnexthop={0x24, 0x68, 0x300, 0x70bd2c, 0x25dfdbfe, {0x2, 0x0, 0x1, 0x0, 0x1}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) 701.684256ms ago: executing program 0 (id=1473): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply={0x2a}}}}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000210a011d29ca1e668192a400020000000c00034000000000000000000900020073797a320000000009000100"], 0x38}}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0xe0, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2b}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xf}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x40080) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000c44f6c10aad01f26372104000000040000060000000000000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x39}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r3 = gettid() sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, 0x26, 0x107, 0x0, 0x0, {0x1a}, [@typed={0x4}, @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @typed={0x8, 0x7, 0x0, 0x0, @pid=r3}]}, 0x34}}, 0x0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) (rerun: 64) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0004080045100000000000000000283384cca1819123dd931c740500050001000000080007000400000008000700010000000c00028008000200020000002a5a3fe38fa995e687c03a87c3fd61999b2a1a0a008ee14dbb4ec98959d0a319dbc184ac719e36fd1c5ecd92350b1b3a50"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x44000) 700.535384ms ago: executing program 3 (id=1474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000100000000000000000000f5000a20000000000a010800000000000000000100000a0900010073797a300000000048000000090a010100000000000000000100000808000a40000000000900020073797a32000000000900010073797a300000000008000540000000020c000b4000000000000009212c0000000e0a01080000000000000000010000000900020073797a32000000000900010073797a3000"], 0xbc}}, 0x0) 700.150577ms ago: executing program 1 (id=1475): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000a80)={0x0, 0x15, &(0x7f0000000a40)={&(0x7f00000008c0)={0x14, r4, 0x1}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'erspan0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010f0000000000371c010700000008000300", @ANYRES32=r7], 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff3a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 641.097407ms ago: executing program 2 (id=1476): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=@getsa={0x34, 0x12, 0x1, 0x0, 0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0xff}, [@mark={0xc}]}, 0x34}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 603.104612ms ago: executing program 1 (id=1477): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x5, 0x4) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005800)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xf, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic='c$9']}]}, 0x28}], 0x1}, 0x0) 543.226039ms ago: executing program 0 (id=1478): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="000e000000000000240012800b0001006d616373656300001400028005000c000100010005000b"], 0x44}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp-reno\x00', 0xb) close(r0) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x26, 0x0, 0x0) 542.759334ms ago: executing program 3 (id=1479): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000340)={0x2b}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x24004004, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) syz_init_net_socket$x25(0xb, 0x5, 0x27) 525.344741ms ago: executing program 2 (id=1480): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000010000100feffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="008000000000000008000d00ffffff7f2c002b8008000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="06000000226a83fb48697d694ef9d0a9a7d0686c82992d1eb41f20926b7ee0885f342ea0c72bc167d5670dcc98532d47ccfaa03b7f7f75ae296de22b28de37f1fd4250f141f9731ea628a427434fd8c74f574e14df7b41e48182f9ffdbe3636ab30f65d4fa9036c7835e8421a887aa0036b3c941acc3fcad4980553d5382a1bc771cf3ca8da6e336cfa9417e021ef852f456bc2abe29db5f5084489fa8d0bcc3d77665c8dd6e4f804fd783ef68997957000aca5898f210b9c11e92f5badf532616c3d23a4b0458558a2762be0ac5e8f991102707cf8ed70e4b9ced91f83eff4d8bbb584248a1b1bd94046344195478e80dc3a05897d9f91327", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="080003000b000000080029004398000004001400"], 0x60}}, 0x0) 482.385458ms ago: executing program 4 (id=1481): socket$kcm(0x10, 0x2, 0x10) (async) r0 = epoll_create1(0x0) (async) r1 = socket(0x1, 0x2, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0x0, @in, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}}, 0xe8) (async) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "ca4d8a8bf1fc3664", "12c2c1a08c589130a8fa2a48d472d323", "4c5ab1a5", "fa8f45fb093884bb"}, 0x28) (async) socket$igmp6(0xa, 0x3, 0x2) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) listen(r5, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11}}}}}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010022bd7000e3dbdf2527000000080003005bbbc295a276105fad66a9b127a092adac7568b1ee623f8761849f22c338d9a69d5227952174e1388326e8fca4a674c72f4dc3f46ff5674c0175c591c20841ed4a61a80c4e550bec2fcd9a8c666114950969db454c5c340f01be2eb3f56be544f6419c67a7ca94570076714cb2a505584607d971a0e0a15f8e4c5e306aa8a0a245416014fda12b51ef8caf86ca2cd9aa874f88ad0caa5f6064d540b637c3a0", @ANYRES32=r9, @ANYBLOB="04005f000a003400010101010101000006003600010000000400340004005f000a0006000802110000010000"], 0x48}, 0x1, 0x0, 0x0, 0x10000}, 0x4000810) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r4, 0x1, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe39}, {0x5, 0x87}}]}, 0x4c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) 411.114951ms ago: executing program 3 (id=1482): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x209, 0x70bd2c, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x34}}, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x40051}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) getsockname$packet(r3, &(0x7f0000000240), &(0x7f0000000280)=0x14) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000340), 0xfffffffffffffff2, 0x8041, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x19, 0x0, 0x0) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x6c, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x6c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', r9, 0x4, 0x8, 0x0, 0xfffffff8, 0x20, @dev={0xfe, 0x80, '\x00', 0xa}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x7, 0x1, 0x6}}) 408.005055ms ago: executing program 1 (id=1483): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x9, @none, 0xfffa, 0x1}, 0xe) (async) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000)={0x4}, 0x2) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fd}, 0xe) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x17, 0x56, 0xd23}, 0x18}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4fd901f1b64002ea, 0x1, 0x4, 0x6, 0x0, 0x80, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x97}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @map_idx={0x18, 0xc54311496643bff3, 0x5, 0x0, 0x6}, @alu={0x4, 0x1, 0x3, 0xb, 0x1, 0xfffffffffffffff8, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x8, &(0x7f0000000200)=""/8, 0x40f00, 0x55, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0xb, 0x1, 0x6}, 0x10, 0x21b22, 0xffffffffffffffff, 0x7, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x5, 0x5, 0xb, 0x3}, {0x6, 0x5, 0xc, 0xb}, {0x4, 0x4, 0x9, 0x2}, {0x5, 0x5, 0xf, 0xc}, {0x5, 0x1, 0x9, 0x2}, {0x4, 0x5, 0x1, 0x3}, {0x3, 0x2, 0xc, 0xa}], 0x10, 0xfffffff7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000480)={0x0, r2}, 0x10) 368.841803ms ago: executing program 4 (id=1484): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$pppl2tp(0x18, 0x1, 0x1) socket$netlink(0x10, 0x3, 0x6) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c0005006c000040000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="06"], 0x90}}, 0x0) 352.128967ms ago: executing program 1 (id=1485): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500c300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r1], 0x80}}, 0x0) 349.435136ms ago: executing program 2 (id=1486): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x248, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x1f8, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x168, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xfc, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x4c, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @local}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x248}}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0xc, [@const={0xa, 0x0, 0x0, 0xa, 0x4}, @var={0x3, 0x0, 0x0, 0xe, 0x5, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x1}}, @union={0x4, 0x1, 0x0, 0x5, 0x0, 0x8, [{0x6, 0x4, 0x1}]}, @struct={0x8, 0x2, 0x0, 0x4, 0x1, 0x3ff, [{0xc, 0x0, 0x9}, {0x4, 0x2, 0x2a0}]}]}, {0x0, [0x0, 0x61, 0x5f, 0x61, 0x30, 0x0, 0x5f, 0x61, 0x30, 0x0]}}, &(0x7f00000002c0)=""/90, 0x94, 0x5a, 0x1, 0x3d6aeb80, 0x10000, @value}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={r0, r8, 0x0, 0x0, 0x0}, 0x30) r9 = socket(0x15, 0x5, 0x0) bind$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 299.165923ms ago: executing program 0 (id=1487): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x4}]}, 0x18}}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000a80)={0x0, 0x15, &(0x7f0000000a40)={&(0x7f00000008c0)={0x14, r4, 0x1}, 0x14}}, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'erspan0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010f0000000000371c010700000008000300", @ANYRES32=r7], 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000000000000071117700000000008510000002000000850000005600000095000000000000009500a50500000000eefd02f7e4c7ef6bfd6b7e160d5a59898098d03978903a3ecb0443b5069f63b76ffe38996114079c34e953ab2fc1f800c7ff9cdad0b490700b4586082326cabc459587bf937e83c29ff4e4a47e30f1b31c886030af93d6bfa6aa21216810d61d6e970aa4c96e0f77e00ff165"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff3a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 259.899649ms ago: executing program 1 (id=1488): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) sendfile(r1, r0, &(0x7f0000000040)=0x5, 0x5) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) (async, rerun: 64) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x6}, 0x1c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, 0x0, 0x0) 132.235343ms ago: executing program 1 (id=1489): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) (async) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @broadcast}, 0x10) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @empty, 0x25b3}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @empty, 0x5}, 0x1c) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00'], 0x48}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000050000000800020000000000080003000000e4"], 0x24}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000170000005800068008000600000000004c0004"], 0x6c}}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188009ac0f000300", 0x33fe0}], 0x1}, 0x0) (async) r8 = socket$unix(0x1, 0x2, 0x0) (async) sendmsg$TIPC_NL_KEY_FLUSH(r5, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)={0x19c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x600}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x41}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfdca4b4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2c59}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8beb}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffce2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc991}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf038}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5c00000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x4004800}, 0x42040011) sendto$unix(r8, &(0x7f0000000000)="45ab5b346895e54b0d59d8496883a3ae4cb9a059262aa2f0562e88107d2c4b3c72d11df78251fa60d641d043240364e55ce064faab106807cae651e1a2f491e8511110934738729eba038bbb4a3a8084dffad63dec356b28f7138f5c7566c171fe5002194ef89c37d47f9ca8f08a51d9c517599438b5253539b7aac69b944ad7402ba8592567f493145ceda463321d60bbf88339be44f25bbc7507289e85d2809c93d8405a", 0xa5, 0x20048010, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0100001000130100000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001600001000000c001c"], 0x14c}}, 0x0) (async) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) getsockopt$sock_buf(r10, 0x1, 0x37, &(0x7f0000000340)=""/230, &(0x7f0000000440)=0xe6) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000008ffffdf00000000000000030000000000000009030000000700004081bd9b79961ae839fc000000000c00000000000000000000002e0000000000000000"], 0x0, 0x51, 0x0, 0x0, 0x0, 0x10000, @value}, 0x28) 131.713234ms ago: executing program 4 (id=1490): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) readv(r3, &(0x7f0000001740)=[{&(0x7f00000011c0)=""/253, 0xf7}], 0x1) (async) socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 64) socket$kcm(0x29, 0x7, 0x0) (async, rerun: 64) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000040)={0x3c8, 0x12, 0x100, 0x70bd26, 0x25dfdbfb, {0x8, 0x1, 0x0, 0x6, {0x4e21, 0x4e23, [0x9, 0xe, 0xfffffff1, 0xfffffff7], [0x2, 0x8, 0xfdf6, 0x81], 0x0, [0x6, 0x9]}, 0x5, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "0b1c6ff25c5a70fceaede70257fccb2721ec25d6a03c4b7c2661b7523ce06c1257b56221cc649392a66dbb"}, @INET_DIAG_REQ_BYTECODE={0x1a, 0x1, "41dbe2ce33a3545831d7549013dc5aca7aa9c5912816"}, @INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "c5ebc56c9027c50f4db7bbe0013cf13b836359b2b0333f2b7490ceb9035068da3f839c6d929307c5d9b132c6d03038593403fc7addf3d16d7189938f87e335719def047c31c4adb0605d38544d7cdd27071ce2a6842ec5ca51187bf691df0ad4e9ac87cdbdede0eb6950b3ab7a233c0d72964da3bb734a28bfa0ff7864e1ba2bac66fabd0871e9f1100131bc69b6785cd87635191807a75287eb0cff817ee367"}, @INET_DIAG_REQ_BYTECODE={0xbe, 0x1, "d0db73ac985d8ecaf4c4a23b81fedbfbe58dc22136bc9d64a4ef6a0bb820d7026a13f1bc9042ed22ebf59793e3b2a247372b920606e4564d40486c821f9d31bc8e36a5558b96876e6425eff66723f3715b4ede1400be44703883ba6582cdd1e2e8ab41f562792ee586a4f0fe2cfaacd9d7442ac63276123be37592bec6400b8e336c41bf7bef459b9aa293225a35cd736ac8e5f512a3b92145b720463188f5aca844561b0c9b617a8eeab2cdda10f453ed2c2052d089043c8bb3"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "957cd71a96bf429294b369e86ed859a05741b31642a092025850cb32425fdc8310d0b08b5caf52367fda9fd3ec8336f6190c8fd08bd361f49e2962f3571d3c6bd64605b3a37aad5e51cb832067676e0ab5d093ccd9c7fe283fc7bc1949a444bb6c0f"}, @INET_DIAG_REQ_BYTECODE={0xe1, 0x1, "57bf3fbb15d39e1ab8656ab33b1804def928b0d892512f595164b011aee6116f78fb909ffa1f3c590fa92efaf30fe2ad5c7e19463130d9c88aaa9a9a0bb99d6a3668a4e5709e3dc43f421b3de04f61313d8370182019208379148fa6ed932e6478c4e2a5157ba32c5a9700d365e9abfb1999f2e3389c10af419d6b394e437a0db258947a11ac31ba3dd15af3663ef58f1b53d577396b38b9623ae3dc33d2c6f6780f17ecb95a2cf08e090da6d39910ab6cd4360655016b616631f2e5dc13d0cb5b8d53c8ac1f52aef1825a431be49387a81ccaa34f1e48e4a67969c725"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "459adb4b0236275f80aa355ab8323a770aed24544ff51e20467754ea3a36b25d0abd05188ee42cafcf3eee8b430903263a781e44880bc8679b70a5cf7d3bd29ee5f2aa58d7"}, @INET_DIAG_REQ_BYTECODE={0x33, 0x1, "64f5d7952c98fce7da0c348255c75881dad671ffb99a450d2bbf554dccd057a81d4159a0735c0547a1a7d831ffab80"}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x4801}, 0x4000800) 1.407561ms ago: executing program 0 (id=1491): setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) syz_emit_ethernet(0x214, &(0x7f00000008c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "0fd6c0", 0x1de, 0x2f, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@routing={0x33, 0x8, 0x2, 0x8, 0x0, [@private2, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback={0x0, 0x337}, @empty]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xa0, 0x3, [], "5ebfa1c9233878f8217379be29c01edfd1ed65d83f1ce5547f85ef59b3923a8959d3cc320e2921bdddde435b35765edd4f3921f610e56e22321a38903fefc7e6848c1c687d4eeed06903b1e8d77a0ed671574b6ebaf0f0757692c6b34321f608e798d4e59415f801b0cf2900316dae700eb33a4ebce64c6b1696301ae3bd155957d7d197be25dd0c98c551fc442268d9a810325c9e4f24bb6a51d748e1965d0a"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "c247d4daafbf0da103832da10b86f62070235f43d9055339b9ba85380f8da68c8e84a5592f673dfb77c44a5de9b59115f28da28d09667fe282e49eafd246e8535c027bdcd02888b365cc1fa9baaf358584fb3657aac4676667569cc09205a2ad065594da8976d70dfa55e4bb34b72c"}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x6, 0x1, 0x81, 0x2, 0x1, 0x0, 0x2, 0x3}, 0x1, {0x8e01}}}, {0x8, 0x22eb, 0x0, {{0x9, 0x2, 0x3, 0x3, 0x1, 0x0, 0x2, 0x1}, 0x2, {0x10000, 0xa4, 0x2, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "d069b88a0cb42cea9991d5a9bb081e98b1282f337c66646701c758a234cda379f87646290a2684e201c94c2c1a75558b1e2bcb4db31b11d97a7e816bd5c4b3bec9c1ef"}}}}}}}, 0x0) 0s ago: executing program 2 (id=1492): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, &(0x7f0000000580)="004f28528714f2dfa69abbd8f2aef5138cdc4ed99544d356947c5317ec121817bfa4012e5fcee694f38ec49bbf652c0d2c67368b2046e8f939452aff4c1670376e55940ba803654348", 0x0}, 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0x80, 0x1, 0x8001, 0x2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7806, 0x1, 0xffffaf2b, 0x9}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000f40)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000f80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000fc0)=0x14) sendmmsg$inet(r1, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="8dff552d60d58ada451af0da6f271c2da571387cc7a46f5bcc8bab1646de415eb46c328f9943323f3137573f751b76bf54d355c4a1fedb25873d9e0549d092419573e208b7d5519280eba3d5cecbb2d6a9ae2d54944a14d5f82d24a9f0cfb56139ef3d5a664f5d99b28192b68fd4bdec985dcaae81601651408d5dffc6d7766724713b40876a70a0326715", 0x8b}, {&(0x7f00000004c0)="f32899ec9c79e103b81ac95f1bd00ae5a8c9b251789f4111a0b7872366fd84ad04707348a75ea17e792d0c4baaf2cbd6ebd3af1625d00eff923a69a7634235e5170fdfdeeaed0bb57c6d7c7ea4c7e71b23f2649cc7013a5ae19a70e8e16f83852070e1b6fceb75543a1dfd26064eab018657960a9c445d09818edd77db329f8cf2d97227ea63786e1879038c0c7a338e6a5e8cc92ea78a0c9dc3fbf9b87e6725e79b6d7eea6af8a300ca6d67a6594c81d0547013c5e27fbd0a642f09f6", 0xbd}], 0x2, &(0x7f0000000700)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5b57ff61}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa166}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0xb0}}, {{&(0x7f0000000640)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000a80)=[{&(0x7f00000007c0)="0c22f7afa329f003e5e156b239c69be31a6c2e7c7902f86fd1384c38a5f1d9663c505d569a42a2929563b3248b643403320993859b1c5db9661e80dbf1a248b20345d5c057933a1d4d0724f5523d3a0598c1f1b447cfed7d30f8f12a01b26e8f25972d5142e6a15b25e6b3c76caba32ddc77c9bf9a8a4ae254271e6723fd2f44a6b02821d7e02418b6cf42633bfb3564", 0x90}, {&(0x7f0000000880)="2743fb0869a84710ab6a3c6c1e2a37f9714549b2602a7247d37ca2ed5989b6011755a84a5687f59c2100710ddd712e99b57bca4f847617d366c56bc007b8dae0190b204163f1e36139a90578b095820b328ec485a712d2712b45a0a1fd9f011ea5a5f96f04b77d7098b1296b6c1fd4b6bda1145f0ae80c436b900daf22183088f433512d60762e89b554b740c8f06516204850eecc1ee85d1c46a58314d0e4b49f8c7f5ab172744ea03040e1a280b0ae5b6cb63f501d03e682154b84e222ec274544ddb4abff0303106ba7775703bec83f60", 0xd2}, {&(0x7f0000000980)}, {&(0x7f00000009c0)="35880b33fd6c9d725ff1cfd87bcd4dd1173fdbc41d31688344f329f5a86e1d55c5f12f9bf3409f68a688fdc8c08535baad5cdffc00d297432b73c5cb5ddabc0df32a2847d14e342e4f2e15e198bec47e1dedcf384a326ee165450a57ff3d7350f5e1ea4b31597dbf9a9835ccb2944bb98c6aea6b2581a0a8c0abb574b51ed7ad9fcaa2a8730b017e8451ad59840dde963ec70caa", 0x94}], 0x4, &(0x7f0000000ac0)=[@ip_retopts={{0x178, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0xa6, 0x3, 0x3, [{@loopback, 0x8}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x5}, {@multicast1, 0xfffff165}, {@loopback, 0x401}, {@rand_addr=0x64010100}, {@remote, 0xee}, {@private=0xa010101, 0xe}]}, @cipso={0x86, 0x7d, 0xffffffffffffffff, [{0x5, 0x10, "04199bcb6e34e09a8d55b63cd606"}, {0x2, 0x12, "39276272704dcaf30ca293626edf8072"}, {0x0, 0x8, "27c5ed1f6050"}, {0x5, 0x12, "39e19f39165fc03ac21a15c7a92a0dea"}, {0x5, 0xe, "ebc991fd14c2fc2e7cf08fec"}, {0x2, 0x8, "2ff1e2819e97"}, {0x5, 0xb, "f487a04e9bc253c7ec"}, {0x5, 0x12, "18dc36c0d3ab0573c4cd030d84f654b1"}, {0x1, 0x8, "f9dea4877c5f"}]}, @timestamp={0x44, 0x8, 0x77, 0x0, 0x4, [0x6]}, @cipso={0x86, 0x41, 0xffffffffffffffff, [{0x6, 0xd, "0d9b97583afe339064a2b8"}, {0x7, 0x8, "a0b11d3b3c6e"}, {0x7, 0x7, "f59dbfedb6"}, {0x5, 0xf, "d5085e55e3f041a4f4c18c0ecf"}, {0x1, 0x10, "0bf417ce7af7db5282923025d610"}]}, @noop, @ssrr={0x89, 0x23, 0x72, [@dev={0xac, 0x14, 0x14, 0x39}, @empty, @dev={0xac, 0x14, 0x14, 0x42}, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast1]}, @end, @timestamp_addr={0x44, 0x24, 0x47, 0x1, 0x6, [{@loopback, 0x4}, {@private=0xa010100}, {@local, 0xc}, {@multicast1, 0xe53b}]}, @rr={0x7, 0x1b, 0x8b, [@loopback, @remote, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @remote, @remote]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x2a}}}}], 0x198}}, {{&(0x7f0000000c80)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000cc0)="03c23ee8fb87b9d2fc0587d653cff0925a1479104758de1459ffc51b36b4886b8a11406d68702c7345f805a0db0370a43606a769223a3d2fb7b2fcf8df5afc93a5367a94c042e1da538eb8af402ccee189a482ae45fa57ca73bf23e20349156f6c608779c64f8c591e4522bf014d459d24df820bd17f27dfb76fc95cf0c693d91ef186e92ae7ca6427a1742433b354cceeb43307c39bbceab28f04906e7d211d272cc9", 0xa3}, {&(0x7f0000000d80)="fb6fcf08919c3ff3b3198dcc46068a7923b5ab2428d18c49e4effde77c0ba37d2bbec6ad0740a584d6f36b65a1728941fe4bc3c38a05852d3e86f00b61e9af59457ce3496fa3b91862e480907b9cf38368c4c118c846f990708a8d4b8a7349b51c3fd5603b2fdf2ec194d180b2ced4a7ae16ac6ff8990544b17230f18f365dcadab5c44e87666ad277", 0x89}, {&(0x7f0000000e40)="cdf58c866d5bf65dd43b61afaf7518fad4ab77a63192e1ca93b15e147c598c83da01101feef1803f96564555c648c2641f29f70e9aca25a48ab2e9ce2c66042454418662e7e5941d78b323a305c7f3e1a7393c22a19c15a4a4b8fda2e4ce158cda12578050c18d1d3e3411e9dd47f7d7a7a6be99a31b40", 0x77}], 0x3, &(0x7f0000001000)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0xb0, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x41, [@private=0xa010102]}, @timestamp_addr={0x44, 0x4c, 0x14, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x3}, {@private=0xa010102, 0x6}, {@multicast2, 0x250}, {@local, 0x3}, {@private=0xa010101, 0x8}, {@private=0xa010100, 0x2}, {@initdev={0xac, 0x1e, 0xa1, 0x0}, 0x27a8}]}, @timestamp_prespec={0x44, 0xc, 0xd9, 0x3, 0x5, [{@multicast2, 0xa}]}, @end, @timestamp_prespec={0x44, 0x3c, 0x20, 0x3, 0x3, [{@empty, 0xc}, {@multicast1, 0x3}, {@multicast1, 0x869}, {@multicast1, 0x800}, {@broadcast, 0x9}, {@multicast2, 0x9}, {@local, 0x2}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xab}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @empty}}}], 0x140}}], 0x3, 0x40000) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x3c, r8, 0x1, 0x70bd29, 0x200004, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x22}]}, 0x3c}}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01010000ddffffffffff2a00000008000300", @ANYRES32=r11, @ANYBLOB="0a000600b3f06c6ddc4c0000050034003c000000"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.233' (ED25519) to the list of known hosts. [ 54.912243][ T5836] cgroup: Unknown subsys name 'net' [ 55.082428][ T5836] cgroup: Unknown subsys name 'cpuset' [ 55.090261][ T5836] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.393818][ T5836] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.450854][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.469725][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.477445][ T5862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.485584][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.494717][ T5862] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.503260][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.512055][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.519674][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.520278][ T5862] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.535168][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.543391][ T5862] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.551446][ T5867] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.559802][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.570793][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.578560][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.586491][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.586983][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.601218][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.601635][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.623805][ T5862] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.625022][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.638485][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.645821][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.646286][ T5155] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.660505][ T5862] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.661542][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.675564][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.675884][ T5155] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.690966][ T5862] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.700103][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.929942][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 59.102709][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.111063][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.118410][ T5846] bridge_slave_0: entered allmulticast mode [ 59.125509][ T5846] bridge_slave_0: entered promiscuous mode [ 59.153203][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 59.162137][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.169229][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.176700][ T5846] bridge_slave_1: entered allmulticast mode [ 59.183434][ T5846] bridge_slave_1: entered promiscuous mode [ 59.245426][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.268713][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.299449][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 59.322868][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 59.341504][ T5846] team0: Port device team_slave_0 added [ 59.383620][ T5846] team0: Port device team_slave_1 added [ 59.435521][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.443478][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.452648][ T5852] bridge_slave_0: entered allmulticast mode [ 59.459222][ T5852] bridge_slave_0: entered promiscuous mode [ 59.491016][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.498140][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.506002][ T5852] bridge_slave_1: entered allmulticast mode [ 59.513284][ T5852] bridge_slave_1: entered promiscuous mode [ 59.531525][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.538492][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.564531][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.576316][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 59.624103][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.631208][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.657493][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.681583][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.688735][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.696037][ T5853] bridge_slave_0: entered allmulticast mode [ 59.702622][ T5853] bridge_slave_0: entered promiscuous mode [ 59.713837][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.746320][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.753570][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.761287][ T5853] bridge_slave_1: entered allmulticast mode [ 59.767841][ T5853] bridge_slave_1: entered promiscuous mode [ 59.776003][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.803555][ T5846] hsr_slave_0: entered promiscuous mode [ 59.812836][ T5846] hsr_slave_1: entered promiscuous mode [ 59.845270][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.852683][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.860212][ T5849] bridge_slave_0: entered allmulticast mode [ 59.866767][ T5849] bridge_slave_0: entered promiscuous mode [ 59.902756][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.913129][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.920859][ T5849] bridge_slave_1: entered allmulticast mode [ 59.927461][ T5849] bridge_slave_1: entered promiscuous mode [ 59.937727][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.960133][ T5852] team0: Port device team_slave_0 added [ 59.966396][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.973613][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.981086][ T5851] bridge_slave_0: entered allmulticast mode [ 59.987667][ T5851] bridge_slave_0: entered promiscuous mode [ 60.010694][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.039154][ T5852] team0: Port device team_slave_1 added [ 60.051323][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.058408][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.068057][ T5851] bridge_slave_1: entered allmulticast mode [ 60.075321][ T5851] bridge_slave_1: entered promiscuous mode [ 60.125974][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.137668][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.152710][ T5853] team0: Port device team_slave_0 added [ 60.162466][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.170634][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.196714][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.209637][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.216605][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.242574][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.255692][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.267036][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.278046][ T5853] team0: Port device team_slave_1 added [ 60.357013][ T5851] team0: Port device team_slave_0 added [ 60.365322][ T5849] team0: Port device team_slave_0 added [ 60.372107][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.379110][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.408650][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.437601][ T5852] hsr_slave_0: entered promiscuous mode [ 60.443835][ T5852] hsr_slave_1: entered promiscuous mode [ 60.453068][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.460949][ T5852] Cannot create hsr debugfs directory [ 60.468535][ T5851] team0: Port device team_slave_1 added [ 60.484230][ T5849] team0: Port device team_slave_1 added [ 60.492963][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.500236][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.526419][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.589937][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.596917][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.624675][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.636773][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.644876][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.644913][ T55] Bluetooth: hci0: command tx timeout [ 60.679623][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.692157][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.699103][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.719888][ T55] Bluetooth: hci1: command tx timeout [ 60.725524][ T5861] Bluetooth: hci4: command tx timeout [ 60.730872][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.767328][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.774487][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.801024][ T55] Bluetooth: hci2: command tx timeout [ 60.806903][ T5861] Bluetooth: hci3: command tx timeout [ 60.812457][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.877884][ T5851] hsr_slave_0: entered promiscuous mode [ 60.884835][ T5851] hsr_slave_1: entered promiscuous mode [ 60.892864][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.900534][ T5851] Cannot create hsr debugfs directory [ 60.912346][ T5853] hsr_slave_0: entered promiscuous mode [ 60.918446][ T5853] hsr_slave_1: entered promiscuous mode [ 60.926202][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.934046][ T5853] Cannot create hsr debugfs directory [ 60.992995][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.034179][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.045051][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.071491][ T5849] hsr_slave_0: entered promiscuous mode [ 61.079334][ T5849] hsr_slave_1: entered promiscuous mode [ 61.085915][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.094983][ T5849] Cannot create hsr debugfs directory [ 61.114258][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.287774][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.303693][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.338824][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.361863][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.425189][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.441808][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.463623][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.476637][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.574749][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.608853][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.618504][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.630924][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.651672][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.672055][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.689023][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.696941][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.744016][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.751290][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.762800][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.770020][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.778285][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.785434][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.817315][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.824520][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.845428][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.866379][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.876643][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.896961][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.905361][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.939270][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.993542][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.000754][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.014376][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.021525][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.193757][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.232219][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.298080][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.321498][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.365404][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.385487][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.392632][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.402819][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.409972][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.429100][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.436293][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.461949][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.469089][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.510497][ T5849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.520993][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.593225][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.623468][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.717366][ T5846] veth0_vlan: entered promiscuous mode [ 62.725465][ T5861] Bluetooth: hci0: command tx timeout [ 62.739937][ T5846] veth1_vlan: entered promiscuous mode [ 62.799836][ T5861] Bluetooth: hci4: command tx timeout [ 62.800520][ T55] Bluetooth: hci1: command tx timeout [ 62.823226][ T5846] veth0_macvtap: entered promiscuous mode [ 62.880405][ T55] Bluetooth: hci2: command tx timeout [ 62.890290][ T55] Bluetooth: hci3: command tx timeout [ 62.917704][ T5851] veth0_vlan: entered promiscuous mode [ 62.935708][ T5846] veth1_macvtap: entered promiscuous mode [ 62.966856][ T5851] veth1_vlan: entered promiscuous mode [ 62.983205][ T5852] veth0_vlan: entered promiscuous mode [ 63.005857][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.020182][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.032420][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.044149][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.054590][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.066527][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.076483][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.108478][ T5852] veth1_vlan: entered promiscuous mode [ 63.121053][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.207943][ T5851] veth0_macvtap: entered promiscuous mode [ 63.235782][ T5852] veth0_macvtap: entered promiscuous mode [ 63.247235][ T5852] veth1_macvtap: entered promiscuous mode [ 63.264580][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.266247][ T5851] veth1_macvtap: entered promiscuous mode [ 63.278769][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.313595][ T5849] veth0_vlan: entered promiscuous mode [ 63.338850][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.353841][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.365524][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.376670][ T5849] veth1_vlan: entered promiscuous mode [ 63.394228][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.405463][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.416211][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.426847][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.437730][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.469749][ T3405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.470508][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.477600][ T3405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.494176][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.511123][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.522469][ T5853] veth0_vlan: entered promiscuous mode [ 63.533957][ T5852] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.543480][ T5852] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.552620][ T5852] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.561415][ T5852] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.572180][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.583022][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.593923][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.604783][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.617073][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.631071][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.639947][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.648644][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.657533][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.673924][ T5853] veth1_vlan: entered promiscuous mode [ 63.707081][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.775187][ T5853] veth0_macvtap: entered promiscuous mode [ 63.784124][ T5849] veth0_macvtap: entered promiscuous mode [ 63.832194][ T5853] veth1_macvtap: entered promiscuous mode [ 63.850105][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.860639][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.870655][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.881191][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.891101][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.901595][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.912809][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.922529][ T5849] veth1_macvtap: entered promiscuous mode [ 63.929496][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.940041][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.949897][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.960340][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.970265][ T5853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.981012][ T5853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.992077][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.117580][ T5853] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.129695][ T5853] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.138431][ T5853] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.154201][ T5853] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.179767][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.187695][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.201739][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.212496][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.223081][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.233733][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.243771][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.254299][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.264193][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.274719][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.287136][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.304985][ T3445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.325291][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.330499][ T3445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.338340][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.358434][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.371698][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.403213][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.414735][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.429964][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.440637][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.452199][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.485878][ T5849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.495686][ T5849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.504929][ T5849] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.515214][ T5849] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.557866][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.558115][ T3509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.573414][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.608487][ T3509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.726272][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.753932][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.787373][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.796170][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.820171][ T55] Bluetooth: hci0: command tx timeout [ 64.872765][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.880946][ T55] Bluetooth: hci1: command tx timeout [ 64.891349][ T55] Bluetooth: hci4: command tx timeout [ 64.910087][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.948387][ T5952] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.960585][ T55] Bluetooth: hci3: command tx timeout [ 64.960655][ T55] Bluetooth: hci2: command tx timeout [ 64.989423][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.015681][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.127038][ T5958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9'. [ 65.269814][ T5958] xt_cgroup: path and classid specified [ 65.323360][ T5958] warning: `syz.3.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 65.476173][ T5973] Zero length message leads to an empty skb [ 65.523205][ T5970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.552449][ T5970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 66.065894][ T5998] tipc: Started in network mode [ 66.081059][ T5998] tipc: Node identity eea6db75bdab, cluster identity 4711 [ 66.089172][ T5998] tipc: Enabled bearer , priority 0 [ 66.297687][ T5998] tipc: Resetting bearer [ 66.358357][ T5995] tipc: Resetting bearer [ 66.417648][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.30'. [ 66.489869][ T6021] syz.0.30 uses obsolete (PF_INET,SOCK_PACKET) [ 66.490387][ T6022] Cannot find del_set index 0 as target [ 66.882005][ T5861] Bluetooth: hci0: command tx timeout [ 66.961532][ T5861] Bluetooth: hci4: command tx timeout [ 66.961546][ T55] Bluetooth: hci1: command tx timeout [ 67.043984][ T5861] Bluetooth: hci2: command tx timeout [ 67.046471][ T55] Bluetooth: hci3: command tx timeout [ 67.094193][ T970] tipc: Node number set to 1393417077 [ 67.730124][ T5995] tipc: Disabling bearer [ 67.741786][ T6014] IPv6: sit1: Disabled Multicast RS [ 67.845682][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 67.874788][ T6025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.30'. [ 68.125408][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 68.337227][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.41'. [ 68.379057][ T6055] tipc: Started in network mode [ 68.397952][ T6055] tipc: Node identity 2e469246204d, cluster identity 4711 [ 68.420849][ T6055] tipc: Enabled bearer , priority 0 [ 68.556260][ T6068] netlink: 'syz.1.47': attribute type 9 has an invalid length. [ 68.569537][ T6068] netlink: 134712 bytes leftover after parsing attributes in process `syz.1.47'. [ 68.603407][ T6055] tipc: Resetting bearer [ 68.623345][ T6050] tipc: Resetting bearer [ 69.274739][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 69.305107][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 69.315060][ T6083] netlink: 32 bytes leftover after parsing attributes in process `syz.4.54'. [ 69.386044][ T55] block nbd0: Receive control failed (result -107) [ 69.479535][ T5884] tipc: Node number set to 235639366 [ 69.974447][ T6093] openvswitch: netlink: Tunnel attr 80 out of range max 16 [ 70.331612][ T6050] tipc: Disabling bearer [ 70.508841][ T6099] __nla_validate_parse: 2 callbacks suppressed [ 70.508861][ T6099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 70.703305][ T6112] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.831203][ T6114] dccp_invalid_packet: P.Data Offset(172) too large [ 70.984329][ T6127] vlan2: entered allmulticast mode [ 71.010388][ T6127] bond0: entered allmulticast mode [ 71.035677][ T6127] bond_slave_0: entered allmulticast mode [ 71.053461][ T6127] bond_slave_1: entered allmulticast mode [ 71.082301][ T6138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 71.091309][ T6127] bond0: left allmulticast mode [ 71.103231][ T6127] bond_slave_0: left allmulticast mode [ 71.115647][ T6127] bond_slave_1: left allmulticast mode [ 71.197337][ T6140] tipc: Enabled bearer , priority 0 [ 71.383777][ T6135] tipc: Resetting bearer [ 71.402662][ T6149] Cannot find add_set index 0 as target [ 71.518143][ T11] tipc: Resetting bearer [ 71.545102][ T6133] tipc: Resetting bearer [ 71.694712][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.702316][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.783341][ T6133] tipc: Disabling bearer [ 72.795557][ T6160] netlink: 'syz.2.83': attribute type 4 has an invalid length. [ 73.311402][ T6191] netlink: 76 bytes leftover after parsing attributes in process `syz.3.94'. [ 73.330192][ T6191] block nbd0: NBD_DISCONNECT [ 73.339723][ T6191] block nbd0: Send disconnect failed -32 [ 73.356445][ T6191] block nbd0: shutting down sockets [ 73.460439][ T6202] netlink: 'syz.4.97': attribute type 4 has an invalid length. [ 73.502688][ T6204] netlink: 32 bytes leftover after parsing attributes in process `syz.2.98'. [ 73.558945][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.612604][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.683007][ T6212] vlan2: entered allmulticast mode [ 73.708317][ T6212] bond0: entered allmulticast mode [ 73.733748][ T6212] bond_slave_0: entered allmulticast mode [ 73.743553][ T6217] netlink: 48 bytes leftover after parsing attributes in process `syz.2.102'. [ 73.758052][ T6212] bond_slave_1: entered allmulticast mode [ 73.768828][ T6212] bond0: left allmulticast mode [ 73.778346][ T6212] bond_slave_0: left allmulticast mode [ 73.784397][ T6212] bond_slave_1: left allmulticast mode [ 73.838589][ T6216] netlink: 84 bytes leftover after parsing attributes in process `syz.2.102'. [ 73.974690][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 74.574403][ T6258] netlink: 'syz.4.118': attribute type 21 has an invalid length. [ 74.595137][ T6262] netlink: 'syz.0.120': attribute type 3 has an invalid length. [ 74.605224][ T6258] netlink: 128 bytes leftover after parsing attributes in process `syz.4.118'. [ 74.636504][ T6258] netlink: 'syz.4.118': attribute type 5 has an invalid length. [ 74.648384][ T6258] netlink: 3 bytes leftover after parsing attributes in process `syz.4.118'. [ 74.658705][ T6262] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 74.970796][ T6272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.122'. [ 75.328839][ T6285] tipc: Enabling not permitted [ 75.338383][ T6285] tipc: Enabling of bearer rejected, failed to enable media [ 75.617154][ T6302] xt_l2tp: v2 doesn't support IP mode [ 75.657777][ T6301] __nla_validate_parse: 3 callbacks suppressed [ 75.657799][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.135'. [ 75.699637][ T6303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 75.737654][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.135'. [ 75.775188][ T6303] netlink: 'syz.0.134': attribute type 11 has an invalid length. [ 75.804908][ T6301] netlink: 44 bytes leftover after parsing attributes in process `syz.1.135'. [ 75.865172][ T6307] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 76.402255][ T6311] netlink: 200 bytes leftover after parsing attributes in process `syz.4.137'. [ 76.618944][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.0.139'. [ 76.644762][ T6313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'. [ 76.688383][ T6332] vlan2: entered allmulticast mode [ 76.710364][ T6332] bond0: entered allmulticast mode [ 76.729402][ T6332] bond_slave_0: entered allmulticast mode [ 76.751183][ T6332] bond_slave_1: entered allmulticast mode [ 76.770240][ T6308] atomic_op ffff88807d1e5198 conn xmit_atomic 0000000000000000 [ 76.789864][ T6332] bond0: left allmulticast mode [ 76.794871][ T6332] bond_slave_0: left allmulticast mode [ 76.807755][ T8] cfg80211: failed to load regulatory.db [ 76.818591][ T6332] bond_slave_1: left allmulticast mode [ 77.324381][ T6352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 77.333887][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 77.343424][ T6352] netlink: 40 bytes leftover after parsing attributes in process `syz.0.148'. [ 77.376588][ T6353] netlink: 'syz.2.150': attribute type 4 has an invalid length. [ 77.691208][ T6370] Cannot find add_set index 0 as target [ 77.910095][ T6385] FAULT_INJECTION: forcing a failure. [ 77.910095][ T6385] name failslab, interval 1, probability 0, space 0, times 1 [ 77.953164][ T6385] CPU: 0 UID: 0 PID: 6385 Comm: syz.2.162 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 77.963861][ T6385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 77.973951][ T6385] Call Trace: [ 77.977259][ T6385] [ 77.980206][ T6385] dump_stack_lvl+0x241/0x360 [ 77.984939][ T6385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.990156][ T6385] ? __pfx__printk+0x10/0x10 [ 77.994774][ T6385] ? __kmalloc_noprof+0xb0/0x400 [ 77.999744][ T6385] ? __pfx___might_resched+0x10/0x10 [ 78.005071][ T6385] should_fail_ex+0x3b0/0x4e0 [ 78.009780][ T6385] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 78.016048][ T6385] should_failslab+0xac/0x100 [ 78.020733][ T6385] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 78.026976][ T6385] __kmalloc_noprof+0xd8/0x400 [ 78.031741][ T6385] ? apparmor_capable+0x13b/0x1b0 [ 78.036772][ T6385] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 78.042845][ T6385] genl_rcv_msg+0x802/0xec0 [ 78.047347][ T6385] ? mark_lock+0x9a/0x360 [ 78.051679][ T6385] ? __pfx_genl_rcv_msg+0x10/0x10 [ 78.056717][ T6385] ? __pfx_lock_acquire+0x10/0x10 [ 78.061740][ T6385] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 78.067109][ T6385] ? __pfx_nl80211_start_ap+0x10/0x10 [ 78.072475][ T6385] ? __pfx_nl80211_post_doit+0x10/0x10 [ 78.077931][ T6385] ? __pfx___might_resched+0x10/0x10 [ 78.083232][ T6385] netlink_rcv_skb+0x1e3/0x430 [ 78.088007][ T6385] ? __pfx_genl_rcv_msg+0x10/0x10 [ 78.093034][ T6385] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 78.098326][ T6385] ? __netlink_deliver_tap+0x77e/0x7c0 [ 78.103792][ T6385] genl_rcv+0x28/0x40 [ 78.107776][ T6385] netlink_unicast+0x7f6/0x990 [ 78.112552][ T6385] ? __pfx_netlink_unicast+0x10/0x10 [ 78.117840][ T6385] ? __virt_addr_valid+0x183/0x530 [ 78.122952][ T6385] ? __check_object_size+0x48e/0x900 [ 78.128243][ T6385] netlink_sendmsg+0x8e4/0xcb0 [ 78.133021][ T6385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.138308][ T6385] ? aa_sock_msg_perm+0x91/0x160 [ 78.143251][ T6385] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.148532][ T6385] __sock_sendmsg+0x221/0x270 [ 78.153211][ T6385] ____sys_sendmsg+0x52a/0x7e0 [ 78.157980][ T6385] ? __pfx_____sys_sendmsg+0x10/0x10 [ 78.163276][ T6385] __sys_sendmsg+0x292/0x380 [ 78.167865][ T6385] ? __pfx___sys_sendmsg+0x10/0x10 [ 78.172982][ T6385] ? __pfx_vfs_write+0x10/0x10 [ 78.177766][ T6385] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 78.184098][ T6385] ? do_syscall_64+0x100/0x230 [ 78.188863][ T6385] ? do_syscall_64+0xb6/0x230 [ 78.193537][ T6385] do_syscall_64+0xf3/0x230 [ 78.198036][ T6385] ? clear_bhb_loop+0x35/0x90 [ 78.202712][ T6385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.208613][ T6385] RIP: 0033:0x7f3ac157e719 [ 78.213037][ T6385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.232641][ T6385] RSP: 002b:00007f3ac2411038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.241060][ T6385] RAX: ffffffffffffffda RBX: 00007f3ac1735f80 RCX: 00007f3ac157e719 [ 78.249029][ T6385] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 78.256995][ T6385] RBP: 00007f3ac2411090 R08: 0000000000000000 R09: 0000000000000000 [ 78.264960][ T6385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.272929][ T6385] R13: 0000000000000000 R14: 00007f3ac1735f80 R15: 00007ffe5b439d08 [ 78.280904][ T6385] [ 78.438328][ T6395] netlink: 'syz.2.166': attribute type 4 has an invalid length. [ 78.520300][ T6397] netlink: 'syz.1.167': attribute type 1 has an invalid length. [ 78.591231][ T6399] team0: No ports can be present during mode change [ 78.604370][ T6404] Cannot find add_set index 0 as target [ 78.890611][ T6414] netlink: 'syz.0.173': attribute type 8 has an invalid length. [ 78.900883][ T6414] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 79.165448][ T6446] netlink: 'syz.4.182': attribute type 4 has an invalid length. [ 79.432230][ T6449] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.440194][ T6449] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.492345][ T6451] veth0: entered promiscuous mode [ 79.547321][ T6448] veth0: left promiscuous mode [ 79.572933][ T6463] FAULT_INJECTION: forcing a failure. [ 79.572933][ T6463] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.605196][ T6463] CPU: 1 UID: 0 PID: 6463 Comm: syz.1.188 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 79.615855][ T6463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 79.625944][ T6463] Call Trace: [ 79.629248][ T6463] [ 79.632203][ T6463] dump_stack_lvl+0x241/0x360 [ 79.636921][ T6463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.642156][ T6463] ? __pfx__printk+0x10/0x10 [ 79.646800][ T6463] ? __pfx_lock_release+0x10/0x10 [ 79.651873][ T6463] should_fail_ex+0x3b0/0x4e0 [ 79.656589][ T6463] _copy_from_user+0x2f/0xc0 [ 79.661216][ T6463] __sys_bpf+0x1a4/0x810 [ 79.665490][ T6463] ? __pfx___sys_bpf+0x10/0x10 [ 79.670294][ T6463] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 79.676311][ T6463] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.682686][ T6463] ? do_syscall_64+0x100/0x230 [ 79.687485][ T6463] __x64_sys_bpf+0x7c/0x90 [ 79.691934][ T6463] do_syscall_64+0xf3/0x230 [ 79.696473][ T6463] ? clear_bhb_loop+0x35/0x90 [ 79.701188][ T6463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.707108][ T6463] RIP: 0033:0x7f5ecb57e719 [ 79.711548][ T6463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.731183][ T6463] RSP: 002b:00007f5ecc2d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 79.739740][ T6463] RAX: ffffffffffffffda RBX: 00007f5ecb735f80 RCX: 00007f5ecb57e719 [ 79.747739][ T6463] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 79.755715][ T6463] RBP: 00007f5ecc2d4090 R08: 0000000000000000 R09: 0000000000000000 [ 79.763688][ T6463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.771672][ T6463] R13: 0000000000000000 R14: 00007f5ecb735f80 R15: 00007ffe8c408a78 [ 79.779652][ T6463] [ 80.312287][ T55] block nbd0: Receive control failed (result -107) [ 80.352823][ T6503] netlink: 'syz.0.205': attribute type 28 has an invalid length. [ 80.372561][ T6503] netlink: 'syz.0.205': attribute type 3 has an invalid length. [ 80.800241][ T6529] __nla_validate_parse: 21 callbacks suppressed [ 80.800262][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 80.916952][ T6534] netlink: 224 bytes leftover after parsing attributes in process `syz.0.217'. [ 80.969255][ T6534] netlink: 224 bytes leftover after parsing attributes in process `syz.0.217'. [ 80.997029][ T6534] netlink: 224 bytes leftover after parsing attributes in process `syz.0.217'. [ 81.016943][ T6534] netlink: 224 bytes leftover after parsing attributes in process `syz.0.217'. [ 81.026578][ T6534] netlink: 224 bytes leftover after parsing attributes in process `syz.0.217'. [ 81.036972][ T6534] netlink: 224 bytes leftover after parsing attributes in process `syz.0.217'. [ 81.047397][ T6534] netlink: 224 bytes leftover after parsing attributes in process `syz.0.217'. [ 81.063044][ T6534] netlink: 224 bytes leftover after parsing attributes in process `syz.0.217'. [ 81.074797][ T6534] netlink: 224 bytes leftover after parsing attributes in process `syz.0.217'. [ 81.508640][ T6561] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 82.559761][ T6608] nbd: nbd0 already in use [ 82.836918][ T6619] vlan2: entered allmulticast mode [ 82.843055][ T6619] bond0: entered allmulticast mode [ 82.848228][ T6619] bond_slave_0: entered allmulticast mode [ 82.854128][ T6619] bond_slave_1: entered allmulticast mode [ 82.908050][ T6619] bond0: left allmulticast mode [ 82.913160][ T6619] bond_slave_0: left allmulticast mode [ 82.919671][ T6619] bond_slave_1: left allmulticast mode [ 83.514280][ T6657] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.525714][ T6657] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.537190][ T6657] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.546586][ T6657] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 83.557391][ T6657] geneve2: entered promiscuous mode [ 83.567807][ T6657] geneve2: entered allmulticast mode [ 83.588989][ T6661] tipc: Started in network mode [ 83.599896][ T6661] tipc: Node identity a2863724247e, cluster identity 4711 [ 83.607452][ T6661] tipc: Enabled bearer , priority 0 [ 83.694493][ T6661] tipc: Resetting bearer [ 83.715101][ T6660] tipc: Resetting bearer [ 84.701269][ T5944] tipc: Node number set to 2264413988 [ 85.132700][ T6660] tipc: Disabling bearer [ 85.141922][ T6673] tipc: Enabling of bearer rejected, media not registered [ 85.340187][ T6690] SET target dimension over the limit! [ 86.050541][ T6730] __nla_validate_parse: 31 callbacks suppressed [ 86.050560][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.293'. [ 86.129151][ T6736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.296'. [ 86.438880][ T6749] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.301'. [ 86.453591][ T6749] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 86.469831][ T6751] netlink: 'syz.0.304': attribute type 7 has an invalid length. [ 86.477530][ T6751] netlink: 140 bytes leftover after parsing attributes in process `syz.0.304'. [ 86.670319][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'. [ 86.726392][ T6764] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 86.941743][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'. [ 86.974174][ T6776] netlink: 21 bytes leftover after parsing attributes in process `syz.3.313'. [ 87.122371][ T6786] FAULT_INJECTION: forcing a failure. [ 87.122371][ T6786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.180018][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.0.319 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 87.190668][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.200750][ T6786] Call Trace: [ 87.204044][ T6786] [ 87.207008][ T6786] dump_stack_lvl+0x241/0x360 [ 87.209437][ T6793] xt_TCPMSS: Only works on TCP SYN packets [ 87.211695][ T6786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.222704][ T6786] ? __pfx__printk+0x10/0x10 [ 87.227306][ T6786] ? __pfx_lock_release+0x10/0x10 [ 87.232339][ T6786] should_fail_ex+0x3b0/0x4e0 [ 87.237014][ T6786] _copy_from_user+0x2f/0xc0 [ 87.241604][ T6786] do_sock_getsockopt+0x1d1/0x7e0 [ 87.246627][ T6786] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 87.252168][ T6786] ? __fget_files+0x3f3/0x470 [ 87.256838][ T6786] ? __fget_files+0x29/0x470 [ 87.261430][ T6786] __sys_getsockopt+0x267/0x330 [ 87.266281][ T6786] ? __pfx___sys_getsockopt+0x10/0x10 [ 87.271672][ T6786] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.277999][ T6786] ? do_syscall_64+0x100/0x230 [ 87.282761][ T6786] __x64_sys_getsockopt+0xb5/0xd0 [ 87.287784][ T6786] do_syscall_64+0xf3/0x230 [ 87.292282][ T6786] ? clear_bhb_loop+0x35/0x90 [ 87.297048][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.302935][ T6786] RIP: 0033:0x7fd23717e719 [ 87.307354][ T6786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.326966][ T6786] RSP: 002b:00007fd237f47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 87.335380][ T6786] RAX: ffffffffffffffda RBX: 00007fd237335f80 RCX: 00007fd23717e719 [ 87.343348][ T6786] RDX: 000000000000000e RSI: 0000000000000084 RDI: 0000000000000003 [ 87.351313][ T6786] RBP: 00007fd237f47090 R08: 0000000020000040 R09: 0000000000000000 [ 87.359282][ T6786] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 87.367252][ T6786] R13: 0000000000000000 R14: 00007fd237335f80 R15: 00007ffe71de6118 [ 87.375229][ T6786] [ 87.653593][ T6802] netlink: 56 bytes leftover after parsing attributes in process `syz.2.327'. [ 87.681284][ T6802] (unnamed net_device) (uninitialized): (slave ip6tnl0): Device is not bonding slave [ 87.699596][ T6802] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip6tnl0) [ 87.883989][ T6816] tipc: Started in network mode [ 87.889058][ T6816] tipc: Node identity 5eb0b8dcbd1b, cluster identity 4711 [ 87.896850][ T6816] tipc: Enabled bearer , priority 0 [ 88.072433][ T6819] tipc: Resetting bearer [ 88.097405][ T6825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.336'. [ 88.114812][ T6814] tipc: Resetting bearer [ 88.960561][ T5944] tipc: Node number set to 3819682012 [ 89.600091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.827869][ T6814] tipc: Disabling bearer [ 90.197183][ T6854] netlink: 28 bytes leftover after parsing attributes in process `syz.3.346'. [ 90.615163][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.622681][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.653221][ T6870] veth0: entered promiscuous mode [ 90.666485][ T6872] vlan2: entered allmulticast mode [ 90.677066][ T6872] bond0: entered allmulticast mode [ 90.685599][ T6872] bond_slave_0: entered allmulticast mode [ 90.696269][ T6872] bond_slave_1: entered allmulticast mode [ 90.711630][ T6872] bond0: left allmulticast mode [ 90.716752][ T6872] bond_slave_0: left allmulticast mode [ 90.743026][ T6872] bond_slave_1: left allmulticast mode [ 90.771857][ T6866] veth0: left promiscuous mode [ 90.968544][ T6885] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 91.002991][ T6885] netlink: 'syz.1.357': attribute type 2 has an invalid length. [ 91.053953][ T6885] sit0: entered promiscuous mode [ 91.059089][ T6885] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 91.077371][ T6885] __nla_validate_parse: 1 callbacks suppressed [ 91.077389][ T6885] netlink: 1 bytes leftover after parsing attributes in process `syz.1.357'. [ 91.134887][ T6895] sch_tbf: peakrate 32768 is lower than or equals to rate 1281593178885145793 ! [ 91.271980][ T6906] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 91.358191][ T6906] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 91.759066][ T6940] netlink: 40 bytes leftover after parsing attributes in process `syz.4.372'. [ 91.943822][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.951399][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.998699][ T6936] veth0: entered promiscuous mode [ 92.024977][ T6930] veth0: left promiscuous mode [ 92.189872][ T6955] netlink: 'syz.3.375': attribute type 3 has an invalid length. [ 92.457829][ T6970] FAULT_INJECTION: forcing a failure. [ 92.457829][ T6970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.519347][ T6970] CPU: 0 UID: 0 PID: 6970 Comm: syz.2.379 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 92.529996][ T6970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.540079][ T6970] Call Trace: [ 92.543387][ T6970] [ 92.546341][ T6970] dump_stack_lvl+0x241/0x360 [ 92.551043][ T6970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.556264][ T6970] ? __pfx__printk+0x10/0x10 [ 92.560871][ T6970] ? snprintf+0xda/0x120 [ 92.565127][ T6970] should_fail_ex+0x3b0/0x4e0 [ 92.569815][ T6970] _copy_to_user+0x31/0xb0 [ 92.574242][ T6970] simple_read_from_buffer+0xca/0x150 [ 92.579627][ T6970] proc_fail_nth_read+0x1e9/0x250 [ 92.584660][ T6970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.590208][ T6970] ? rw_verify_area+0x55e/0x6f0 [ 92.595058][ T6970] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.600605][ T6970] vfs_read+0x1fc/0xb70 [ 92.604769][ T6970] ? fdget_pos+0x24e/0x320 [ 92.609182][ T6970] ? __pfx_vfs_read+0x10/0x10 [ 92.613861][ T6970] ? __fget_files+0x3f3/0x470 [ 92.618540][ T6970] ? fdget_pos+0x24e/0x320 [ 92.622954][ T6970] ksys_read+0x183/0x2b0 [ 92.627195][ T6970] ? __pfx_ksys_read+0x10/0x10 [ 92.631954][ T6970] ? do_syscall_64+0x100/0x230 [ 92.636716][ T6970] ? do_syscall_64+0xb6/0x230 [ 92.641397][ T6970] do_syscall_64+0xf3/0x230 [ 92.645903][ T6970] ? clear_bhb_loop+0x35/0x90 [ 92.650587][ T6970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.656488][ T6970] RIP: 0033:0x7f3ac157d15c [ 92.660912][ T6970] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 92.680519][ T6970] RSP: 002b:00007f3ac2411030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.688934][ T6970] RAX: ffffffffffffffda RBX: 00007f3ac1735f80 RCX: 00007f3ac157d15c [ 92.696900][ T6970] RDX: 000000000000000f RSI: 00007f3ac24110a0 RDI: 0000000000000003 [ 92.704867][ T6970] RBP: 00007f3ac2411090 R08: 0000000000000000 R09: 0000000000000000 [ 92.712836][ T6970] R10: 0000000000000214 R11: 0000000000000246 R12: 0000000000000001 [ 92.720801][ T6970] R13: 0000000000000000 R14: 00007f3ac1735f80 R15: 00007ffe5b439d08 [ 92.728780][ T6970] [ 92.823459][ T6974] vlan2: entered allmulticast mode [ 92.830571][ T6974] bond0: entered allmulticast mode [ 92.835757][ T6974] bond_slave_0: entered allmulticast mode [ 92.842794][ T6974] bond_slave_1: entered allmulticast mode [ 92.882582][ T6979] nbd: couldn't find device at index 255 [ 92.910049][ T6981] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:0000 with DS=0x2 [ 92.926234][ T6974] bond0: left allmulticast mode [ 92.934380][ T6974] bond_slave_0: left allmulticast mode [ 92.940864][ T6974] bond_slave_1: left allmulticast mode [ 93.220907][ T6996] openvswitch: netlink: Actions may not be safe on all matching packets [ 93.246803][ T6999] netlink: 'syz.0.390': attribute type 1 has an invalid length. [ 93.270713][ T6999] netlink: 9336 bytes leftover after parsing attributes in process `syz.0.390'. [ 93.295017][ T6999] netlink: 'syz.0.390': attribute type 8 has an invalid length. [ 93.394400][ T7006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 93.423942][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.469494][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.537962][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.553321][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.850557][ T7031] netlink: 830 bytes leftover after parsing attributes in process `syz.0.403'. [ 94.061111][ T7045] IPVS: sync thread started: state = MASTER, mcast_ifn = macvtap0, syncid = 0, id = 0 [ 94.683773][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'. [ 94.701404][ T7075] nbd: nbd0 already in use [ 94.876221][ T7086] netlink: 5 bytes leftover after parsing attributes in process `syz.2.427'. [ 94.928549][ T7086] netlink: 5 bytes leftover after parsing attributes in process `syz.2.427'. [ 95.228553][ T7112] netlink: 'syz.2.439': attribute type 4 has an invalid length. [ 95.260878][ T7114] netlink: 'syz.3.437': attribute type 3 has an invalid length. [ 95.261559][ T7113] netlink: 'syz.3.437': attribute type 3 has an invalid length. [ 95.276390][ T7114] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.437'. [ 95.352536][ T7113] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.437'. [ 95.373737][ T7121] Cannot find add_set index 0 as target [ 95.718371][ T7146] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 95.890747][ T7153] nbd: nbd0 already in use [ 96.054082][ T7162] netlink: 'syz.1.457': attribute type 3 has an invalid length. [ 96.079982][ T7162] __nla_validate_parse: 4 callbacks suppressed [ 96.080000][ T7162] netlink: 766 bytes leftover after parsing attributes in process `syz.1.457'. [ 96.173735][ T7175] netlink: 'syz.2.458': attribute type 4 has an invalid length. [ 96.261443][ T7180] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.461'. [ 96.270931][ T7180] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 96.284794][ T7180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.461'. [ 97.783283][ T7199] netlink: 64 bytes leftover after parsing attributes in process `syz.2.468'. [ 98.054510][ T7212] netlink: 'syz.2.475': attribute type 4 has an invalid length. [ 98.354127][ T7222] lo: entered promiscuous mode [ 98.363486][ T7222] lo: entered allmulticast mode [ 98.384254][ T7222] tunl0: entered promiscuous mode [ 98.403277][ T7222] tunl0: entered allmulticast mode [ 98.436190][ T7222] gre0: entered promiscuous mode [ 98.450110][ T7222] gre0: entered allmulticast mode [ 98.479638][ T7222] gretap0: entered promiscuous mode [ 98.504526][ T7222] gretap0: entered allmulticast mode [ 98.533637][ T7222] erspan0: entered promiscuous mode [ 98.561114][ T7222] erspan0: entered allmulticast mode [ 98.591690][ T7222] ip_vti0: entered promiscuous mode [ 98.613483][ T7222] ip_vti0: entered allmulticast mode [ 98.625821][ T7222] ip6_vti0: entered promiscuous mode [ 98.644984][ T7222] ip6_vti0: entered allmulticast mode [ 98.653636][ T7222] sit0: entered promiscuous mode [ 98.658769][ T7222] sit0: entered allmulticast mode [ 98.664560][ T7222] ip6tnl0: entered promiscuous mode [ 98.670136][ T7222] ip6tnl0: entered allmulticast mode [ 98.678002][ T7222] ip6gre0: entered promiscuous mode [ 98.689941][ T7222] ip6gre0: entered allmulticast mode [ 98.702348][ T7222] syz_tun: entered promiscuous mode [ 98.720112][ T7222] syz_tun: entered allmulticast mode [ 98.725596][ T7222] ip6gretap0: entered promiscuous mode [ 98.744830][ T7222] ip6gretap0: entered allmulticast mode [ 98.754177][ T7222] bridge0: entered promiscuous mode [ 98.776448][ T7222] bridge0: entered allmulticast mode [ 98.786749][ T7227] veth0: entered promiscuous mode [ 98.814734][ T7246] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 98.824780][ T7240] syzkaller1: entered promiscuous mode [ 98.832085][ T7240] syzkaller1: entered allmulticast mode [ 98.879766][ T7221] veth0: left promiscuous mode [ 99.031242][ T7272] netlink: 'syz.3.488': attribute type 4 has an invalid length. [ 99.247893][ T7275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.542323][ T7294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.556356][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 99.576174][ T7300] nbd: nbd0 already in use [ 99.596583][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.499'. [ 99.752042][ T7308] netlink: 76 bytes leftover after parsing attributes in process `syz.2.501'. [ 99.768248][ T7308] block nbd0: NBD_DISCONNECT [ 99.778609][ T7308] block nbd0: Send disconnect failed -32 [ 99.785016][ T7308] block nbd0: shutting down sockets [ 99.852753][ T7313] xt_bpf: check failed: parse error [ 99.969589][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.507'. [ 100.137554][ T7323] trusted_key: syz.1.509 sent an empty control message without MSG_MORE. [ 100.174768][ T7329] netlink: 76 bytes leftover after parsing attributes in process `syz.0.512'. [ 100.215109][ T7331] netlink: 8 bytes leftover after parsing attributes in process `syz.2.510'. [ 100.291654][ T55] block nbd0: Receive control failed (result -107) [ 101.069217][ T7394] nbd: nbd0 already in use [ 101.084234][ T7392] Bluetooth: MGMT ver 1.23 [ 101.169057][ T7396] __nla_validate_parse: 4 callbacks suppressed [ 101.169076][ T7396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.532'. [ 101.202354][ T7396] bond0: entered promiscuous mode [ 101.212438][ T7396] bond_slave_0: entered promiscuous mode [ 101.225238][ T7396] bond_slave_1: entered promiscuous mode [ 101.596026][ T7329] syz.0.512 (7329) used greatest stack depth: 18896 bytes left [ 101.759079][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.545'. [ 101.941009][ T7440] vlan2: entered allmulticast mode [ 101.947543][ T7440] bond0: entered allmulticast mode [ 101.973176][ T7440] bond_slave_0: entered allmulticast mode [ 101.978974][ T7440] bond_slave_1: entered allmulticast mode [ 101.998150][ T7440] bond0: left allmulticast mode [ 102.014028][ T7440] bond_slave_0: left allmulticast mode [ 102.021154][ T7440] bond_slave_1: left allmulticast mode [ 102.243860][ T7465] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.559'. [ 102.276538][ T7464] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.559'. [ 102.288076][ T7465] netlink: 'syz.1.559': attribute type 9 has an invalid length. [ 102.288827][ T7469] FAULT_INJECTION: forcing a failure. [ 102.288827][ T7469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.296700][ T7468] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.560'. [ 102.315408][ T7469] CPU: 1 UID: 0 PID: 7469 Comm: syz.4.561 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 102.320399][ T7465] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.559'. [ 102.328906][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.328921][ T7469] Call Trace: [ 102.328928][ T7469] [ 102.328937][ T7469] dump_stack_lvl+0x241/0x360 [ 102.328967][ T7469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.340676][ T7468] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 102.348172][ T7469] ? __pfx__printk+0x10/0x10 [ 102.353460][ T7465] openvswitch: netlink: Message has 8 unknown bytes. [ 102.354380][ T7469] ? __pfx_lock_release+0x10/0x10 [ 102.389302][ T7469] should_fail_ex+0x3b0/0x4e0 [ 102.394023][ T7469] _copy_from_user+0x2f/0xc0 [ 102.398647][ T7469] copy_msghdr_from_user+0xae/0x680 [ 102.403881][ T7469] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 102.409741][ T7469] __sys_sendmsg+0x22d/0x380 [ 102.414378][ T7469] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.419536][ T7469] ? __pfx_vfs_write+0x10/0x10 [ 102.424370][ T7469] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.430738][ T7469] ? do_syscall_64+0x100/0x230 [ 102.435549][ T7469] ? do_syscall_64+0xb6/0x230 [ 102.440257][ T7469] do_syscall_64+0xf3/0x230 [ 102.444794][ T7469] ? clear_bhb_loop+0x35/0x90 [ 102.449498][ T7469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.455434][ T7469] RIP: 0033:0x7fdfc817e719 [ 102.459867][ T7469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.479849][ T7469] RSP: 002b:00007fdfc8ebd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.488295][ T7469] RAX: ffffffffffffffda RBX: 00007fdfc8335f80 RCX: 00007fdfc817e719 [ 102.496298][ T7469] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 102.504351][ T7469] RBP: 00007fdfc8ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 102.512361][ T7469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.520369][ T7469] R13: 0000000000000000 R14: 00007fdfc8335f80 R15: 00007ffcdd01ff38 [ 102.528408][ T7469] [ 102.544880][ T7480] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.562'. [ 102.565753][ T7480] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 102.744162][ T7491] vlan2: entered allmulticast mode [ 102.764834][ T7491] bond0: entered allmulticast mode [ 102.778199][ T7491] bond_slave_0: entered allmulticast mode [ 102.807737][ T7491] bond_slave_1: entered allmulticast mode [ 102.841469][ T7491] bond0: left allmulticast mode [ 102.846393][ T7491] bond_slave_0: left allmulticast mode [ 102.857898][ T7491] bond_slave_1: left allmulticast mode [ 103.013463][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 103.049429][ T7511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.057133][ T7511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.078562][ T7511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.087877][ T7518] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.576'. [ 103.100147][ T7518] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 103.150415][ T7521] netlink: 108 bytes leftover after parsing attributes in process `syz.2.574'. [ 103.176912][ T7524] tipc: Started in network mode [ 103.182922][ T7524] tipc: Node identity 3e09032f6547, cluster identity 4711 [ 103.205728][ T7524] tipc: Enabled bearer , priority 0 [ 103.242823][ T7515] tipc: Resetting bearer [ 103.253731][ T7514] tipc: Resetting bearer [ 103.310011][ T7531] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 104.243408][ T5944] tipc: Node number set to 1531839279 [ 104.527703][ T7514] tipc: Disabling bearer [ 104.906530][ T7564] raw_sendmsg: syz.0.591 forgot to set AF_INET. Fix it! [ 105.052618][ T7578] tipc: Enabled bearer , priority 0 [ 105.157707][ T7578] tipc: Resetting bearer [ 105.184360][ T7577] tipc: Resetting bearer [ 105.359956][ T7609] FAULT_INJECTION: forcing a failure. [ 105.359956][ T7609] name failslab, interval 1, probability 0, space 0, times 0 [ 105.373044][ T7609] CPU: 1 UID: 0 PID: 7609 Comm: syz.0.607 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 105.383667][ T7609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.393754][ T7609] Call Trace: [ 105.397149][ T7609] [ 105.400096][ T7609] dump_stack_lvl+0x241/0x360 [ 105.404808][ T7609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.410130][ T7609] ? __pfx__printk+0x10/0x10 [ 105.414762][ T7609] ? ref_tracker_alloc+0x332/0x490 [ 105.419916][ T7609] should_fail_ex+0x3b0/0x4e0 [ 105.424624][ T7609] ? skb_clone+0x20c/0x390 [ 105.429065][ T7609] should_failslab+0xac/0x100 [ 105.433771][ T7609] ? skb_clone+0x20c/0x390 [ 105.438214][ T7609] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 105.443617][ T7609] skb_clone+0x20c/0x390 [ 105.447899][ T7609] __netlink_deliver_tap+0x3cc/0x7c0 [ 105.453227][ T7609] ? netlink_deliver_tap+0x2e/0x1b0 [ 105.458461][ T7609] netlink_deliver_tap+0x19d/0x1b0 [ 105.463610][ T7609] netlink_unicast+0x7c4/0x990 [ 105.468420][ T7609] ? __pfx_netlink_unicast+0x10/0x10 [ 105.473745][ T7609] ? __virt_addr_valid+0x183/0x530 [ 105.478892][ T7609] ? __check_object_size+0x48e/0x900 [ 105.484217][ T7609] netlink_sendmsg+0x8e4/0xcb0 [ 105.489023][ T7609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.494355][ T7609] ? aa_sock_msg_perm+0x91/0x160 [ 105.499336][ T7609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.504662][ T7609] __sock_sendmsg+0x221/0x270 [ 105.509392][ T7609] ____sys_sendmsg+0x52a/0x7e0 [ 105.514193][ T7609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.519536][ T7609] __sys_sendmsg+0x292/0x380 [ 105.524160][ T7609] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.529317][ T7609] ? __pfx_vfs_write+0x10/0x10 [ 105.534143][ T7609] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.540513][ T7609] ? do_syscall_64+0x100/0x230 [ 105.545318][ T7609] ? do_syscall_64+0xb6/0x230 [ 105.550053][ T7609] do_syscall_64+0xf3/0x230 [ 105.554586][ T7609] ? clear_bhb_loop+0x35/0x90 [ 105.559385][ T7609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.565315][ T7609] RIP: 0033:0x7fd23717e719 [ 105.569766][ T7609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.589508][ T7609] RSP: 002b:00007fd237f47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.597965][ T7609] RAX: ffffffffffffffda RBX: 00007fd237335f80 RCX: 00007fd23717e719 [ 105.605970][ T7609] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 105.613972][ T7609] RBP: 00007fd237f47090 R08: 0000000000000000 R09: 0000000000000000 [ 105.621984][ T7609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.629994][ T7609] R13: 0000000000000000 R14: 00007fd237335f80 R15: 00007ffe71de6118 [ 105.638008][ T7609] [ 105.644082][ T7609] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 106.902155][ T7577] tipc: Disabling bearer [ 106.928384][ T7628] vlan2: entered allmulticast mode [ 106.946740][ T7628] bond0: entered allmulticast mode [ 106.969485][ T7628] bond_slave_0: entered allmulticast mode [ 106.979984][ T7628] bond_slave_1: entered allmulticast mode [ 106.997259][ T7628] bond0: left allmulticast mode [ 107.007668][ T7628] bond_slave_0: left allmulticast mode [ 107.019451][ T7628] bond_slave_1: left allmulticast mode [ 107.082928][ T7637] netlink: 'syz.1.619': attribute type 10 has an invalid length. [ 107.101808][ T7637] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.109031][ T7637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.116617][ T7637] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.123822][ T7637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.155211][ T7637] bridge0: entered promiscuous mode [ 107.161646][ T7637] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 107.291010][ T7647] netlink: 'syz.3.623': attribute type 1 has an invalid length. [ 107.304869][ T7650] __nla_validate_parse: 9 callbacks suppressed [ 107.304888][ T7650] netlink: 124 bytes leftover after parsing attributes in process `syz.1.624'. [ 107.305934][ T7653] FAULT_INJECTION: forcing a failure. [ 107.305934][ T7653] name failslab, interval 1, probability 0, space 0, times 0 [ 107.314596][ T7647] netlink: 'syz.3.623': attribute type 2 has an invalid length. [ 107.321871][ T7654] Cannot find add_set index 0 as target [ 107.333677][ T7650] nbd: must specify at least one socket [ 107.347267][ T7653] CPU: 1 UID: 0 PID: 7653 Comm: syz.0.626 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 107.362939][ T7653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.373028][ T7653] Call Trace: [ 107.376336][ T7653] [ 107.379296][ T7653] dump_stack_lvl+0x241/0x360 [ 107.384011][ T7653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.389336][ T7653] ? __pfx__printk+0x10/0x10 [ 107.393963][ T7653] ? __kmalloc_noprof+0xb0/0x400 [ 107.398939][ T7653] ? __pfx___might_resched+0x10/0x10 [ 107.404255][ T7653] should_fail_ex+0x3b0/0x4e0 [ 107.408971][ T7653] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 107.415212][ T7653] should_failslab+0xac/0x100 [ 107.419892][ T7653] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 107.426132][ T7653] __kmalloc_noprof+0xd8/0x400 [ 107.430903][ T7653] ? apparmor_capable+0x13b/0x1b0 [ 107.435938][ T7653] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 107.442009][ T7653] genl_rcv_msg+0x802/0xec0 [ 107.446508][ T7653] ? mark_lock+0x9a/0x360 [ 107.450842][ T7653] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.455880][ T7653] ? __pfx_lock_acquire+0x10/0x10 [ 107.460904][ T7653] ? __pfx_ovs_flow_cmd_del+0x10/0x10 [ 107.466275][ T7653] ? __pfx___might_resched+0x10/0x10 [ 107.471574][ T7653] netlink_rcv_skb+0x1e3/0x430 [ 107.476334][ T7653] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.481355][ T7653] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.486643][ T7653] ? __netlink_deliver_tap+0x77e/0x7c0 [ 107.492144][ T7653] genl_rcv+0x28/0x40 [ 107.496134][ T7653] netlink_unicast+0x7f6/0x990 [ 107.500913][ T7653] ? __pfx_netlink_unicast+0x10/0x10 [ 107.506204][ T7653] ? __virt_addr_valid+0x183/0x530 [ 107.511316][ T7653] ? __check_object_size+0x48e/0x900 [ 107.516602][ T7653] netlink_sendmsg+0x8e4/0xcb0 [ 107.521371][ T7653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.526654][ T7653] ? aa_sock_msg_perm+0x91/0x160 [ 107.531611][ T7653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.536907][ T7653] __sock_sendmsg+0x221/0x270 [ 107.541605][ T7653] ____sys_sendmsg+0x52a/0x7e0 [ 107.546395][ T7653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.551694][ T7653] __sys_sendmsg+0x292/0x380 [ 107.556307][ T7653] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.561443][ T7653] ? __pfx_vfs_write+0x10/0x10 [ 107.566245][ T7653] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.572601][ T7653] ? do_syscall_64+0x100/0x230 [ 107.577379][ T7653] ? do_syscall_64+0xb6/0x230 [ 107.582066][ T7653] do_syscall_64+0xf3/0x230 [ 107.586574][ T7653] ? clear_bhb_loop+0x35/0x90 [ 107.591252][ T7653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.597148][ T7653] RIP: 0033:0x7fd23717e719 [ 107.601567][ T7653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.621174][ T7653] RSP: 002b:00007fd237f47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.629586][ T7653] RAX: ffffffffffffffda RBX: 00007fd237335f80 RCX: 00007fd23717e719 [ 107.637549][ T7653] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 107.645513][ T7653] RBP: 00007fd237f47090 R08: 0000000000000000 R09: 0000000000000000 [ 107.653476][ T7653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.661439][ T7653] R13: 0000000000000000 R14: 00007fd237335f80 R15: 00007ffe71de6118 [ 107.669415][ T7653] [ 107.713855][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.627'. [ 107.723022][ T7659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.627'. [ 107.880804][ T7671] vlan2: entered allmulticast mode [ 107.886960][ T7671] bond0: entered allmulticast mode [ 107.894079][ T7671] bond_slave_0: entered allmulticast mode [ 107.900520][ T7671] bond_slave_1: entered allmulticast mode [ 107.922519][ T7671] bond0: left allmulticast mode [ 107.939391][ T7671] bond_slave_0: left allmulticast mode [ 107.945115][ T7671] bond_slave_1: left allmulticast mode [ 107.966902][ T7662] tipc: Enabled bearer , priority 0 [ 108.003015][ T7665] tipc: Resetting bearer [ 108.165973][ T11] tipc: Resetting bearer [ 108.182438][ T7660] tipc: Resetting bearer [ 109.538709][ T7660] tipc: Disabling bearer [ 109.746236][ T7725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.647'. [ 109.812340][ T7743] netlink: 'syz.1.646': attribute type 1 has an invalid length. [ 109.842497][ T7743] netlink: 9348 bytes leftover after parsing attributes in process `syz.1.646'. [ 109.899886][ T7743] netlink: 'syz.1.646': attribute type 1 has an invalid length. [ 110.030809][ T7758] tipc: Enabled bearer , priority 0 [ 110.093832][ T7758] tipc: Resetting bearer [ 110.141678][ T7757] tipc: Resetting bearer [ 110.276466][ T7773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.658'. [ 111.524131][ T7757] tipc: Disabling bearer [ 111.543133][ T7776] tipc: New replicast peer: 255.255.255.255 [ 111.551071][ T7776] tipc: Enabled bearer , priority 10 [ 111.627702][ T7793] Cannot find map_set index 0 as target [ 111.765996][ T7805] netlink: 'syz.2.670': attribute type 2 has an invalid length. [ 111.779676][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 111.992947][ T7817] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 112.040249][ T7821] tipc: Enabled bearer , priority 0 [ 112.132348][ T7830] netlink: 'syz.3.679': attribute type 1 has an invalid length. [ 112.145080][ T7830] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.679'. [ 112.150766][ T7821] tipc: Resetting bearer [ 112.157667][ T7832] xt_hashlimit: overflow, rate too high: 0 [ 112.181697][ T7819] tipc: Resetting bearer [ 112.272329][ T7838] netlink: 48 bytes leftover after parsing attributes in process `syz.3.682'. [ 113.561975][ T7819] tipc: Disabling bearer [ 113.584942][ T7839] netem: incorrect ge model size [ 113.590560][ T7839] netem: change failed [ 113.758312][ T7862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.822364][ T7862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.952949][ T7868] netlink: 'syz.1.691': attribute type 4 has an invalid length. [ 114.115949][ T7883] tipc: Enabled bearer , priority 0 [ 114.208879][ T7883] tipc: Resetting bearer [ 114.248329][ T7882] tipc: Resetting bearer [ 114.368509][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 114.385240][ T7906] nbd: nbd0 already in use [ 114.556244][ T7913] netlink: 16 bytes leftover after parsing attributes in process `syz.3.704'. [ 115.662865][ T7882] tipc: Disabling bearer [ 115.818287][ T7929] netlink: 'syz.3.710': attribute type 4 has an invalid length. [ 115.852596][ T7928] netlink: 'syz.3.710': attribute type 4 has an invalid length. [ 115.876147][ T7939] Bluetooth: MGMT ver 1.23 [ 115.995849][ T7943] netlink: 'syz.3.713': attribute type 4 has an invalid length. [ 116.021926][ T7946] vlan2: entered allmulticast mode [ 116.028531][ T7943] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.713'. [ 116.042110][ T7946] bond0: entered allmulticast mode [ 116.047281][ T7946] bond_slave_0: entered allmulticast mode [ 116.054860][ T7943] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 116.066403][ T7946] bond_slave_1: entered allmulticast mode [ 116.075349][ T7946] bridge0: entered allmulticast mode [ 116.131398][ T7946] bond0: left allmulticast mode [ 116.136320][ T7946] bond_slave_0: left allmulticast mode [ 116.151691][ T7946] bond_slave_1: left allmulticast mode [ 116.164250][ T7946] bridge0: left allmulticast mode [ 116.257322][ T7963] tipc: Enabled bearer , priority 0 [ 116.322043][ T7963] tipc: Resetting bearer [ 116.336573][ T7960] tipc: Resetting bearer [ 116.344291][ T7967] netlink: 'syz.3.723': attribute type 3 has an invalid length. [ 116.359523][ T7967] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.723'. [ 117.629894][ T7960] tipc: Disabling bearer [ 117.854209][ T7982] netlink: 'syz.1.730': attribute type 1 has an invalid length. [ 117.869440][ T7982] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.730'. [ 117.885171][ T7982] netlink: 5 bytes leftover after parsing attributes in process `syz.1.730'. [ 117.902878][ T7986] Bluetooth: MGMT ver 1.23 [ 117.958965][ T7986] netlink: 'syz.0.732': attribute type 20 has an invalid length. [ 118.244078][ T8017] tipc: Enabled bearer , priority 0 [ 118.324768][ T8017] tipc: Resetting bearer [ 118.352600][ T8015] tipc: Resetting bearer [ 118.396411][ T8022] netlink: 68 bytes leftover after parsing attributes in process `syz.4.746'. [ 118.517506][ T8029] netlink: 'syz.3.749': attribute type 3 has an invalid length. [ 119.775434][ T8015] tipc: Disabling bearer [ 119.999559][ T55] Bluetooth: hci0: command tx timeout [ 120.036816][ T8059] netlink: 20 bytes leftover after parsing attributes in process `syz.2.760'. [ 120.957464][ T8075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.763'. [ 121.010778][ T8080] netlink: 9412 bytes leftover after parsing attributes in process `syz.4.764'. [ 121.126834][ T8085] tipc: Enabled bearer , priority 0 [ 121.138670][ T8087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 121.178035][ T8085] tipc: Resetting bearer [ 121.195574][ T8084] tipc: Resetting bearer [ 121.378177][ T8099] netlink: 'syz.3.775': attribute type 7 has an invalid length. [ 121.399392][ T8099] netlink: 'syz.3.775': attribute type 8 has an invalid length. [ 121.600396][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.199923][ T8105] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.778'. [ 122.211723][ T8105] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 122.962175][ T55] Bluetooth: hci4: command tx timeout [ 123.508990][ T8084] tipc: Disabling bearer [ 123.568706][ T8125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.784'. [ 123.586716][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.784'. [ 123.633887][ T8127] netlink: 64 bytes leftover after parsing attributes in process `syz.1.785'. [ 123.677051][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 123.695545][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.786'. [ 123.707641][ T8129] bridge_slave_1: left allmulticast mode [ 123.713861][ T8129] bridge_slave_1: left promiscuous mode [ 123.745907][ T8129] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.800392][ T8143] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 124.524906][ T8129] bridge_slave_0: left allmulticast mode [ 124.531371][ T8129] bridge_slave_0: left promiscuous mode [ 124.550790][ T8129] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.916792][ T8172] netlink: 'syz.0.799': attribute type 1 has an invalid length. [ 124.918598][ T8178] Cannot find add_set index 0 as target [ 124.930018][ T8171] netlink: 'syz.4.802': attribute type 9 has an invalid length. [ 124.938663][ T8177] delete_channel: no stack [ 125.244987][ T8204] __nla_validate_parse: 7 callbacks suppressed [ 125.245007][ T8204] netlink: 24 bytes leftover after parsing attributes in process `syz.4.813'. [ 125.454045][ T8221] x_tables: duplicate underflow at hook 1 [ 125.489141][ T8225] netlink: 28 bytes leftover after parsing attributes in process `syz.1.819'. [ 125.498865][ T8225] netlink: 72 bytes leftover after parsing attributes in process `syz.1.819'. [ 125.725957][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.826'. [ 125.977103][ T8256] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 125.986372][ T8258] netlink: 'syz.2.831': attribute type 1 has an invalid length. [ 126.020129][ T8258] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.831'. [ 126.049446][ T8258] netlink: 'syz.2.831': attribute type 1 has an invalid length. [ 126.067623][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'. [ 126.326414][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 126.355427][ T8282] nbd: nbd0 already in use [ 126.429233][ T8289] netlink: 64 bytes leftover after parsing attributes in process `syz.1.838'. [ 126.709877][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 126.770058][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.848'. [ 126.796192][ T8319] xt_TCPMSS: Only works on TCP SYN packets [ 126.904693][ T8325] nbd: nbd0 already in use [ 127.092993][ T8342] netlink: 'syz.3.856': attribute type 4 has an invalid length. [ 127.314341][ T8363] nbd: nbd0 already in use [ 127.345282][ T8364] openvswitch: netlink: Key type 29 is not supported [ 127.425595][ T8368] batadv0: entered promiscuous mode [ 127.485113][ T8368] batadv_slave_1: entered promiscuous mode [ 127.493343][ T8368] batadv_slave_1: left promiscuous mode [ 127.504500][ T8368] batadv0: left promiscuous mode [ 127.700758][ T8394] netlink: 'syz.3.875': attribute type 9 has an invalid length. [ 127.708788][ T8394] openvswitch: netlink: Port 134218868 exceeds max allowable 65535 [ 127.744646][ T8397] nbd: nbd0 already in use [ 127.855750][ T6949] hid-generic 0005:0C45:FFF9.0001: item fetching failed at offset 0/2 [ 127.865579][ T6949] hid-generic 0005:0C45:FFF9.0001: probe with driver hid-generic failed with error -22 [ 128.147913][ T8432] nbd: nbd0 already in use [ 128.333296][ T8446] veth0_to_bridge: entered promiscuous mode [ 128.341155][ T8446] batadv_slave_1: entered promiscuous mode [ 128.553642][ T8465] nbd: nbd0 already in use [ 128.608894][ T8467] netlink: 'syz.0.903': attribute type 3 has an invalid length. [ 128.648140][ T8471] netlink: 'syz.4.905': attribute type 5 has an invalid length. [ 128.804613][ T8488] netlink: 'syz.0.911': attribute type 1 has an invalid length. [ 128.824083][ T8488] netlink: 'syz.0.911': attribute type 4 has an invalid length. [ 128.958582][ T8495] veth0: entered promiscuous mode [ 128.976897][ T8493] veth0: left promiscuous mode [ 129.718865][ T8511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.916437][ T8523] team0: Device ipvlan1 failed to register rx_handler [ 129.937908][ T8529] validate_nla: 1 callbacks suppressed [ 129.937928][ T8529] netlink: 'syz.4.924': attribute type 4 has an invalid length. [ 130.104745][ T8541] netlink: 'syz.0.928': attribute type 1 has an invalid length. [ 130.125791][ T8538] veth0: entered promiscuous mode [ 130.146437][ T8537] veth0: left promiscuous mode [ 130.377747][ T8556] netlink: 'syz.2.933': attribute type 1 has an invalid length. [ 130.513910][ T8564] netlink: 'syz.4.936': attribute type 4 has an invalid length. [ 130.604893][ T8572] __nla_validate_parse: 23 callbacks suppressed [ 130.604913][ T8572] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.940'. [ 130.625694][ T8572] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 130.977445][ T8602] netlink: 'syz.2.952': attribute type 4 has an invalid length. [ 131.009450][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.953'. [ 131.111594][ T8611] netlink: 'syz.1.957': attribute type 1 has an invalid length. [ 131.163206][ T8616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.955'. [ 131.172985][ T8611] netlink: 512 bytes leftover after parsing attributes in process `syz.1.957'. [ 131.308747][ T8627] mac80211_hwsim hwsim11 ˙: renamed from wlan1 [ 131.343392][ T8630] netlink: 72 bytes leftover after parsing attributes in process `syz.2.963'. [ 131.430979][ T8635] netlink: 'syz.2.965': attribute type 4 has an invalid length. [ 131.558035][ T8647] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 131.661480][ T8654] lo: left promiscuous mode [ 131.683995][ T8654] lo: left allmulticast mode [ 131.694161][ T8654] tunl0: left promiscuous mode [ 131.699246][ T8654] tunl0: left allmulticast mode [ 131.704775][ T8654] gre0: left promiscuous mode [ 131.725213][ T8654] gre0: left allmulticast mode [ 131.730780][ T8654] gretap0: left promiscuous mode [ 131.745652][ T8654] gretap0: left allmulticast mode [ 131.753262][ T8654] erspan0: left promiscuous mode [ 131.758252][ T8654] erspan0: left allmulticast mode [ 131.765095][ T8654] ip_vti0: left promiscuous mode [ 131.770588][ T8654] ip_vti0: left allmulticast mode [ 131.775790][ T8654] ip6_vti0: left promiscuous mode [ 131.781029][ T8654] ip6_vti0: left allmulticast mode [ 131.786232][ T8654] sit0: left promiscuous mode [ 131.791003][ T8654] sit0: left allmulticast mode [ 131.795913][ T8654] ip6tnl0: left promiscuous mode [ 131.800966][ T8654] ip6tnl0: left allmulticast mode [ 131.805738][ T8667] FAULT_INJECTION: forcing a failure. [ 131.805738][ T8667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.821040][ T8654] ip6gre0: left promiscuous mode [ 131.826119][ T8654] ip6gre0: left allmulticast mode [ 131.831412][ T8654] syz_tun: left promiscuous mode [ 131.833412][ T8667] CPU: 0 UID: 0 PID: 8667 Comm: syz.0.977 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 131.836882][ T8654] syz_tun: left allmulticast mode [ 131.846941][ T8667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.846962][ T8667] Call Trace: [ 131.846972][ T8667] [ 131.846981][ T8667] dump_stack_lvl+0x241/0x360 [ 131.847020][ T8667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.847040][ T8667] ? __pfx__printk+0x10/0x10 [ 131.847063][ T8667] ? snprintf+0xda/0x120 [ 131.847086][ T8667] should_fail_ex+0x3b0/0x4e0 [ 131.847108][ T8667] _copy_to_user+0x31/0xb0 [ 131.847133][ T8667] simple_read_from_buffer+0xca/0x150 [ 131.847163][ T8667] proc_fail_nth_read+0x1e9/0x250 [ 131.847189][ T8667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.847214][ T8667] ? rw_verify_area+0x55e/0x6f0 [ 131.847236][ T8667] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 131.847262][ T8667] vfs_read+0x1fc/0xb70 [ 131.847287][ T8667] ? fdget_pos+0x24e/0x320 [ 131.847307][ T8667] ? __pfx_vfs_read+0x10/0x10 [ 131.847335][ T8667] ? __fget_files+0x3f3/0x470 [ 131.847363][ T8667] ? fdget_pos+0x24e/0x320 [ 131.847386][ T8667] ksys_read+0x183/0x2b0 [ 131.847406][ T8667] ? __pfx_ksys_read+0x10/0x10 [ 131.847424][ T8667] ? do_syscall_64+0x100/0x230 [ 131.847445][ T8667] ? do_syscall_64+0xb6/0x230 [ 131.847467][ T8667] do_syscall_64+0xf3/0x230 [ 131.847486][ T8667] ? clear_bhb_loop+0x35/0x90 [ 131.847508][ T8667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.847533][ T8667] RIP: 0033:0x7fd23717d15c [ 131.847552][ T8667] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 131.847574][ T8667] RSP: 002b:00007fd237f26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 131.847603][ T8667] RAX: ffffffffffffffda RBX: 00007fd237336058 RCX: 00007fd23717d15c [ 131.847618][ T8667] RDX: 000000000000000f RSI: 00007fd237f260a0 RDI: 0000000000000004 [ 131.847630][ T8667] RBP: 00007fd237f26090 R08: 0000000000000000 R09: 0000000000000000 [ 131.847643][ T8667] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 131.847656][ T8667] R13: 0000000000000001 R14: 00007fd237336058 R15: 00007ffe71de6118 [ 131.847683][ T8667] [ 132.058805][ T8654] ip6gretap0: left promiscuous mode [ 132.064161][ T8654] ip6gretap0: left allmulticast mode [ 132.070625][ T8654] bridge0: left promiscuous mode [ 132.088473][ T8664] veth0: entered promiscuous mode [ 132.102344][ T8674] netlink: 56 bytes leftover after parsing attributes in process `syz.2.978'. [ 132.111960][ T8652] veth0: left promiscuous mode [ 132.234138][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 132.491927][ T8693] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.987'. [ 132.519558][ T8693] openvswitch: netlink: Message has 32 unknown bytes. [ 132.983941][ T8710] Cannot find del_set index 4 as target [ 133.007919][ T8710] netlink: 'syz.0.997': attribute type 4 has an invalid length. [ 133.132508][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.141268][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.637858][ T8761] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1017'. [ 133.847341][ T8772] netlink: 'syz.3.1023': attribute type 1 has an invalid length. [ 133.856823][ T8772] netlink: 'syz.3.1023': attribute type 2 has an invalid length. [ 133.879185][ T8772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1023'. [ 134.168243][ T8804] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 134.234529][ T8805] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.241748][ T8805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.249264][ T8805] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.256465][ T8805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.291996][ T8805] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 134.543587][ T8825] block nbd0: NBD_DISCONNECT [ 134.548345][ T8825] block nbd0: Send disconnect failed -32 [ 134.580605][ T8825] block nbd0: shutting down sockets [ 134.770227][ T8847] xt_connbytes: Forcing CT accounting to be enabled [ 134.949679][ T8857] validate_nla: 2 callbacks suppressed [ 134.949698][ T8857] netlink: 'syz.1.1054': attribute type 1 has an invalid length. [ 135.104734][ T8871] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 135.171368][ T8879] tipc: Enabling of bearer rejected, failed to enable media [ 135.207675][ T8881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.244247][ T8881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.412150][ T8898] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_1, syncid = 2, id = 0 [ 135.695921][ T8917] tipc: Enabling of bearer rejected, failed to enable media [ 135.746058][ T8921] vlan2: entered allmulticast mode [ 135.759127][ T8921] bond0: entered allmulticast mode [ 135.772910][ T8921] bond_slave_0: entered allmulticast mode [ 135.787976][ T8921] bond_slave_1: entered allmulticast mode [ 135.812683][ T8921] bond0: left allmulticast mode [ 135.817795][ T8921] bond_slave_0: left allmulticast mode [ 135.823734][ T8921] bond_slave_1: left allmulticast mode [ 135.974911][ T8932] netlink: 'syz.1.1083': attribute type 8 has an invalid length. [ 135.985163][ T8932] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 136.038010][ T8941] __nla_validate_parse: 11 callbacks suppressed [ 136.038032][ T8941] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1086'. [ 136.081835][ T8941] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 136.168055][ T8949] syzkaller1: entered promiscuous mode [ 136.189422][ T8949] syzkaller1: entered allmulticast mode [ 136.243087][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1089'. [ 136.270940][ T8954] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1089'. [ 136.296615][ T8954] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1089'. [ 136.310760][ T8954] vlan2: entered allmulticast mode [ 136.323053][ T8960] netlink: 3084 bytes leftover after parsing attributes in process `syz.0.1093'. [ 136.334431][ T8960] netlink: 'syz.0.1093': attribute type 1 has an invalid length. [ 136.342753][ T8960] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1093'. [ 136.391056][ T8962] veth0: entered promiscuous mode [ 136.430280][ T8956] veth0: left promiscuous mode [ 136.543829][ T8965] vlan2: entered allmulticast mode [ 136.569545][ T8965] bridge_slave_0: entered allmulticast mode [ 136.583908][ T8965] bridge_slave_0: left allmulticast mode [ 136.696097][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1101'. [ 136.754897][ T8988] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1103'. [ 136.765669][ T8988] openvswitch: netlink: Key type 8208 is out of range max 32 [ 136.853328][ T8994] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1105'. [ 136.918704][ T8995] sctp: [Deprecated]: syz.2.1105 (pid 8995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.918704][ T8995] Use struct sctp_sack_info instead [ 136.941261][ T8998] sctp: [Deprecated]: syz.2.1105 (pid 8998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.941261][ T8998] Use struct sctp_sack_info instead [ 137.228846][ T9018] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1114'. [ 137.566624][ T9031] netlink: 'syz.4.1118': attribute type 3 has an invalid length. [ 137.987624][ T9064] SET target dimension over the limit! [ 138.066080][ T9072] netlink: 'syz.0.1133': attribute type 9 has an invalid length. [ 138.117656][ T9075] Can't find ip_set type bitmap:ip,mac [ 138.357820][ T9094] netlink: 'syz.0.1138': attribute type 1 has an invalid length. [ 138.377808][ T9097] veth0: entered promiscuous mode [ 138.394168][ T9095] veth0: left promiscuous mode [ 139.136613][ T9138] veth0: entered promiscuous mode [ 139.151389][ T9137] veth0: left promiscuous mode [ 139.293441][ T9146] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 139.377002][ T9154] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 139.587605][ T9167] veth0: entered promiscuous mode [ 139.593830][ T9166] veth0: left promiscuous mode [ 139.670954][ T9173] FAULT_INJECTION: forcing a failure. [ 139.670954][ T9173] name failslab, interval 1, probability 0, space 0, times 0 [ 139.686367][ T9173] CPU: 0 UID: 0 PID: 9173 Comm: syz.3.1169 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 139.697069][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 139.707126][ T9173] Call Trace: [ 139.710404][ T9173] [ 139.713337][ T9173] dump_stack_lvl+0x241/0x360 [ 139.718030][ T9173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.723245][ T9173] ? __pfx__printk+0x10/0x10 [ 139.727869][ T9173] ? ref_tracker_alloc+0x332/0x490 [ 139.732997][ T9173] should_fail_ex+0x3b0/0x4e0 [ 139.737698][ T9173] ? skb_clone+0x20c/0x390 [ 139.742118][ T9173] should_failslab+0xac/0x100 [ 139.746813][ T9173] ? skb_clone+0x20c/0x390 [ 139.751254][ T9173] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 139.756640][ T9173] skb_clone+0x20c/0x390 [ 139.760905][ T9173] __netlink_deliver_tap+0x3cc/0x7c0 [ 139.766216][ T9173] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.771430][ T9173] netlink_deliver_tap+0x19d/0x1b0 [ 139.776547][ T9173] netlink_unicast+0x7c4/0x990 [ 139.781320][ T9173] ? __pfx_netlink_unicast+0x10/0x10 [ 139.786608][ T9173] ? __virt_addr_valid+0x183/0x530 [ 139.791725][ T9173] ? __check_object_size+0x48e/0x900 [ 139.797012][ T9173] netlink_sendmsg+0x8e4/0xcb0 [ 139.801782][ T9173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.807065][ T9173] ? aa_sock_msg_perm+0x91/0x160 [ 139.812002][ T9173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.817279][ T9173] __sock_sendmsg+0x221/0x270 [ 139.821964][ T9173] ____sys_sendmsg+0x52a/0x7e0 [ 139.826732][ T9173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 139.832030][ T9173] __sys_sendmsg+0x292/0x380 [ 139.836627][ T9173] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.841744][ T9173] ? __pfx_vfs_write+0x10/0x10 [ 139.846553][ T9173] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.852905][ T9173] ? do_syscall_64+0x100/0x230 [ 139.857682][ T9173] ? do_syscall_64+0xb6/0x230 [ 139.862362][ T9173] do_syscall_64+0xf3/0x230 [ 139.866867][ T9173] ? clear_bhb_loop+0x35/0x90 [ 139.871544][ T9173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.877434][ T9173] RIP: 0033:0x7fb5a977e719 [ 139.881852][ T9173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.901457][ T9173] RSP: 002b:00007fb5aa4f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.909878][ T9173] RAX: ffffffffffffffda RBX: 00007fb5a9935f80 RCX: 00007fb5a977e719 [ 139.917849][ T9173] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 139.925824][ T9173] RBP: 00007fb5aa4f1090 R08: 0000000000000000 R09: 0000000000000000 [ 139.933795][ T9173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.941766][ T9173] R13: 0000000000000000 R14: 00007fb5a9935f80 R15: 00007fffab74bcb8 [ 139.949748][ T9173] [ 140.058487][ T9181] netlink: 'syz.0.1172': attribute type 11 has an invalid length. [ 140.364790][ T9204] FAULT_INJECTION: forcing a failure. [ 140.364790][ T9204] name failslab, interval 1, probability 0, space 0, times 0 [ 140.382110][ T9204] CPU: 0 UID: 0 PID: 9204 Comm: syz.2.1180 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 140.392844][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 140.402928][ T9204] Call Trace: [ 140.406235][ T9204] [ 140.409190][ T9204] dump_stack_lvl+0x241/0x360 [ 140.413888][ T9204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.419098][ T9204] ? __pfx__printk+0x10/0x10 [ 140.423704][ T9204] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 140.429709][ T9204] ? __pfx___might_resched+0x10/0x10 [ 140.435036][ T9204] should_fail_ex+0x3b0/0x4e0 [ 140.439834][ T9204] should_failslab+0xac/0x100 [ 140.444537][ T9204] ? __alloc_skb+0x1c3/0x440 [ 140.449159][ T9204] kmem_cache_alloc_node_noprof+0x71/0x320 [ 140.454985][ T9204] ? genl_rcv_msg+0x88c/0xec0 [ 140.459679][ T9204] __alloc_skb+0x1c3/0x440 [ 140.464118][ T9204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.470302][ T9204] ? __pfx___alloc_skb+0x10/0x10 [ 140.475261][ T9204] netlink_dump+0x2cd/0xd80 [ 140.479768][ T9204] ? __pfx_netlink_dump+0x10/0x10 [ 140.484790][ T9204] ? __asan_memset+0x23/0x50 [ 140.489389][ T9204] ? genl_start+0x4a8/0x6d0 [ 140.493918][ T9204] __netlink_dump_start+0x5a2/0x790 [ 140.499137][ T9204] genl_rcv_msg+0x88c/0xec0 [ 140.503664][ T9204] ? mark_lock+0x9a/0x360 [ 140.508025][ T9204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.513084][ T9204] ? __pfx_genl_start+0x10/0x10 [ 140.517960][ T9204] ? __pfx_genl_dumpit+0x10/0x10 [ 140.522931][ T9204] ? __pfx_genl_done+0x10/0x10 [ 140.527748][ T9204] ? __pfx_lock_acquire+0x10/0x10 [ 140.532806][ T9204] ? __pfx_batadv_netlink_dump_hardif+0x10/0x10 [ 140.539088][ T9204] ? __pfx___might_resched+0x10/0x10 [ 140.544439][ T9204] netlink_rcv_skb+0x1e3/0x430 [ 140.549233][ T9204] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.554272][ T9204] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.559591][ T9204] ? __netlink_deliver_tap+0x77e/0x7c0 [ 140.565089][ T9204] genl_rcv+0x28/0x40 [ 140.569091][ T9204] netlink_unicast+0x7f6/0x990 [ 140.573889][ T9204] ? __pfx_netlink_unicast+0x10/0x10 [ 140.579214][ T9204] ? __virt_addr_valid+0x183/0x530 [ 140.584366][ T9204] ? __check_object_size+0x48e/0x900 [ 140.589698][ T9204] netlink_sendmsg+0x8e4/0xcb0 [ 140.594516][ T9204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.599840][ T9204] ? aa_sock_msg_perm+0x91/0x160 [ 140.604807][ T9204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.610097][ T9204] __sock_sendmsg+0x221/0x270 [ 140.614788][ T9204] ____sys_sendmsg+0x52a/0x7e0 [ 140.619571][ T9204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.624877][ T9204] __sys_sendmsg+0x292/0x380 [ 140.629483][ T9204] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.634619][ T9204] ? __pfx_vfs_write+0x10/0x10 [ 140.639427][ T9204] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.645776][ T9204] ? do_syscall_64+0x100/0x230 [ 140.650553][ T9204] ? do_syscall_64+0xb6/0x230 [ 140.655265][ T9204] do_syscall_64+0xf3/0x230 [ 140.659808][ T9204] ? clear_bhb_loop+0x35/0x90 [ 140.664522][ T9204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.670541][ T9204] RIP: 0033:0x7f3ac157e719 [ 140.675000][ T9204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.694642][ T9204] RSP: 002b:00007f3ac2411038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.703111][ T9204] RAX: ffffffffffffffda RBX: 00007f3ac1735f80 RCX: 00007f3ac157e719 [ 140.711119][ T9204] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 140.719124][ T9204] RBP: 00007f3ac2411090 R08: 0000000000000000 R09: 0000000000000000 [ 140.727119][ T9204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.735098][ T9204] R13: 0000000000000000 R14: 00007f3ac1735f80 R15: 00007ffe5b439d08 [ 140.743084][ T9204] [ 141.007466][ T9237] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 141.076296][ T9242] __nla_validate_parse: 12 callbacks suppressed [ 141.076318][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1193'. [ 141.192146][ T9239] team0 (unregistering): Port device team_slave_0 removed [ 141.205165][ T9239] team0 (unregistering): Port device team_slave_1 removed [ 141.224088][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 141.237521][ T9246] vlan2: entered allmulticast mode [ 141.245092][ T9246] bond0: entered allmulticast mode [ 141.269811][ T9246] bond_slave_0: entered allmulticast mode [ 141.281434][ T9246] bond_slave_1: entered allmulticast mode [ 141.293567][ T9246] bond0: left allmulticast mode [ 141.298561][ T9246] bond_slave_0: left allmulticast mode [ 141.304772][ T9246] bond_slave_1: left allmulticast mode [ 141.328429][ T9248] tipc: Enabling of bearer rejected, media not registered [ 141.410254][ T9252] tunl0: entered promiscuous mode [ 141.422546][ T9252] netlink: 'syz.4.1197': attribute type 3 has an invalid length. [ 141.430807][ T9252] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1197'. [ 141.493418][ T9252] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1197'. [ 141.530371][ T9262] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 141.628782][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1202'. [ 141.646671][ T9267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1202'. [ 141.665271][ T9271] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 141.700660][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1202'. [ 141.728362][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1202'. [ 141.817487][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1202'. [ 141.828353][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1202'. [ 141.910717][ T9287] C: renamed from team_slave_0 (while UP) [ 141.935036][ T9287] netlink: 'syz.0.1208': attribute type 1 has an invalid length. [ 141.960929][ T9287] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 142.241707][ T9312] openvswitch: netlink: Actions may not be safe on all matching packets [ 142.338110][ T9323] netlink: 'syz.1.1222': attribute type 10 has an invalid length. [ 142.379946][ T9326] atomic_op ffff88802d613998 conn xmit_atomic 0000000000000000 [ 142.544394][ T9344] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 142.784820][ T9363] veth0: entered promiscuous mode [ 142.795047][ T9363] netlink: 'syz.2.1234': attribute type 9 has an invalid length. [ 142.861841][ T9372] netlink: 'syz.2.1234': attribute type 9 has an invalid length. [ 142.941631][ T9373] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 142.974577][ T9362] veth0: left promiscuous mode [ 143.106708][ T9381] xt_hashlimit: overflow, rate too high: 0 [ 143.274068][ T9399] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 143.401352][ T9412] Cannot find add_set index 0 as target [ 143.872570][ T9454] Cannot find add_set index 0 as target [ 144.106344][ T9468] block nbd0: not configured, cannot reconfigure [ 144.153535][ T9472] FAULT_INJECTION: forcing a failure. [ 144.153535][ T9472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.174026][ T9472] CPU: 1 UID: 0 PID: 9472 Comm: syz.3.1273 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 144.184773][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.194856][ T9472] Call Trace: [ 144.196825][ T9474] IPVS: set_ctl: invalid protocol: 0 172.20.20.63:20002 [ 144.198137][ T9472] [ 144.198151][ T9472] dump_stack_lvl+0x241/0x360 [ 144.198177][ T9472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.218085][ T9472] ? __pfx__printk+0x10/0x10 [ 144.222707][ T9472] ? __pfx_lock_release+0x10/0x10 [ 144.227775][ T9472] should_fail_ex+0x3b0/0x4e0 [ 144.232489][ T9472] _copy_from_user+0x2f/0xc0 [ 144.237116][ T9472] copy_msghdr_from_user+0xae/0x680 [ 144.242358][ T9472] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 144.248215][ T9472] __sys_sendmsg+0x22d/0x380 [ 144.252835][ T9472] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.257998][ T9472] ? __pfx_vfs_write+0x10/0x10 [ 144.262819][ T9472] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.269181][ T9472] ? do_syscall_64+0x100/0x230 [ 144.273992][ T9472] ? do_syscall_64+0xb6/0x230 [ 144.278702][ T9472] do_syscall_64+0xf3/0x230 [ 144.283819][ T9472] ? clear_bhb_loop+0x35/0x90 [ 144.288530][ T9472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.294445][ T9472] RIP: 0033:0x7fb5a977e719 [ 144.298852][ T9472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.318459][ T9472] RSP: 002b:00007fb5aa4f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.326872][ T9472] RAX: ffffffffffffffda RBX: 00007fb5a9935f80 RCX: 00007fb5a977e719 [ 144.334843][ T9472] RDX: 0000000000000000 RSI: 00000000200047c0 RDI: 0000000000000003 [ 144.342864][ T9472] RBP: 00007fb5aa4f1090 R08: 0000000000000000 R09: 0000000000000000 [ 144.350862][ T9472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.358862][ T9472] R13: 0000000000000000 R14: 00007fb5a9935f80 R15: 00007fffab74bcb8 [ 144.366881][ T9472] [ 144.584293][ T9495] netlink: 'syz.4.1281': attribute type 4 has an invalid length. [ 144.711231][ T9502] block nbd0: not configured, cannot reconfigure [ 144.776335][ T9508] FAULT_INJECTION: forcing a failure. [ 144.776335][ T9508] name failslab, interval 1, probability 0, space 0, times 0 [ 144.823086][ T9508] CPU: 0 UID: 0 PID: 9508 Comm: syz.2.1287 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 144.833823][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.844260][ T9508] Call Trace: [ 144.847561][ T9508] [ 144.850516][ T9508] dump_stack_lvl+0x241/0x360 [ 144.855228][ T9508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.860459][ T9508] ? __pfx__printk+0x10/0x10 [ 144.865081][ T9508] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 144.871102][ T9508] ? __pfx___might_resched+0x10/0x10 [ 144.876426][ T9508] should_fail_ex+0x3b0/0x4e0 [ 144.881139][ T9508] should_failslab+0xac/0x100 [ 144.885848][ T9508] ? __alloc_skb+0x1c3/0x440 [ 144.890475][ T9508] kmem_cache_alloc_node_noprof+0x71/0x320 [ 144.895133][ T9512] ebt_limit: overflow, try lower: 0/0 [ 144.896294][ T9508] __alloc_skb+0x1c3/0x440 [ 144.896327][ T9508] ? __pfx___alloc_skb+0x10/0x10 [ 144.911079][ T9508] ? netlink_autobind+0xd6/0x2f0 [ 144.916044][ T9508] ? netlink_autobind+0x2b0/0x2f0 [ 144.921108][ T9508] netlink_sendmsg+0x638/0xcb0 [ 144.926001][ T9508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.931330][ T9508] ? aa_sock_msg_perm+0x91/0x160 [ 144.936302][ T9508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.941614][ T9508] __sock_sendmsg+0x221/0x270 [ 144.946333][ T9508] ____sys_sendmsg+0x52a/0x7e0 [ 144.951144][ T9508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 144.956476][ T9508] __sys_sendmsg+0x292/0x380 [ 144.961098][ T9508] ? __pfx___sys_sendmsg+0x10/0x10 [ 144.966254][ T9508] ? __pfx_vfs_write+0x10/0x10 [ 144.971076][ T9508] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.977448][ T9508] ? do_syscall_64+0x100/0x230 [ 144.982239][ T9508] ? do_syscall_64+0xb6/0x230 [ 144.986948][ T9508] do_syscall_64+0xf3/0x230 [ 144.991479][ T9508] ? clear_bhb_loop+0x35/0x90 [ 144.996182][ T9508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.002102][ T9508] RIP: 0033:0x7f3ac157e719 [ 145.006543][ T9508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.026178][ T9508] RSP: 002b:00007f3ac2411038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.034627][ T9508] RAX: ffffffffffffffda RBX: 00007f3ac1735f80 RCX: 00007f3ac157e719 [ 145.042626][ T9508] RDX: 0000000000000000 RSI: 00000000200047c0 RDI: 0000000000000003 [ 145.050622][ T9508] RBP: 00007f3ac2411090 R08: 0000000000000000 R09: 0000000000000000 [ 145.058618][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.066623][ T9508] R13: 0000000000000000 R14: 00007f3ac1735f80 R15: 00007ffe5b439d08 [ 145.074635][ T9508] [ 145.134867][ T9523] netlink: 'syz.0.1294': attribute type 7 has an invalid length. [ 145.144792][ T9523] netlink: 'syz.0.1294': attribute type 6 has an invalid length. [ 145.328370][ T9545] openvswitch: netlink: Unknown key attributes 2 [ 145.723259][ T9582] netlink: 'syz.2.1313': attribute type 1 has an invalid length. [ 146.182342][ T9614] __nla_validate_parse: 26 callbacks suppressed [ 146.182361][ T9614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1331'. [ 146.197988][ T9614] block nbd0: not configured, cannot reconfigure [ 146.220776][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'. [ 146.632324][ T9649] vxcan0: tx drop: invalid da for name 0x0000000400000000 [ 146.653296][ T9649] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.908540][ T9655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.926476][ T9657] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 146.936949][ T9655] Bluetooth: MGMT ver 1.23 [ 147.167377][ T9675] netlink: 4272 bytes leftover after parsing attributes in process `syz.4.1347'. [ 147.209587][ T9675] netlink: 'syz.4.1347': attribute type 3 has an invalid length. [ 147.223525][ T9675] netlink: 105 bytes leftover after parsing attributes in process `syz.4.1347'. [ 147.294713][ T5903] IPVS: starting estimator thread 0... [ 147.316687][ T9685] dummy0: entered promiscuous mode [ 147.399599][ T9687] IPVS: using max 17 ests per chain, 40800 per kthread [ 147.968987][ T9726] xt_limit: Overflow, try lower: 2147483649/128 [ 148.252262][ T9749] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1377'. [ 148.463214][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1384'. [ 148.574811][ T9770] FAULT_INJECTION: forcing a failure. [ 148.574811][ T9770] name failslab, interval 1, probability 0, space 0, times 0 [ 148.600114][ T9770] CPU: 0 UID: 0 PID: 9770 Comm: syz.3.1386 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 148.610857][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 148.620939][ T9770] Call Trace: [ 148.624240][ T9770] [ 148.627188][ T9770] dump_stack_lvl+0x241/0x360 [ 148.631891][ T9770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.637114][ T9770] ? __pfx__printk+0x10/0x10 [ 148.640099][ T9776] netlink: 'syz.0.1390': attribute type 11 has an invalid length. [ 148.641714][ T9770] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 148.655524][ T9770] ? __pfx___might_resched+0x10/0x10 [ 148.657746][ T9777] netlink: 'syz.0.1390': attribute type 11 has an invalid length. [ 148.660821][ T9770] should_fail_ex+0x3b0/0x4e0 [ 148.660850][ T9770] should_failslab+0xac/0x100 [ 148.660870][ T9770] ? __alloc_skb+0x1c3/0x440 [ 148.660891][ T9770] kmem_cache_alloc_node_noprof+0x71/0x320 [ 148.660918][ T9770] __alloc_skb+0x1c3/0x440 [ 148.660942][ T9770] ? __pfx___alloc_skb+0x10/0x10 [ 148.660963][ T9770] ? __mutex_trylock_common+0x183/0x2e0 [ 148.660990][ T9770] netlink_dump+0x2cd/0xd80 [ 148.661015][ T9770] ? trace_contention_end+0x3c/0x120 [ 148.713225][ T9770] ? __pfx_netlink_dump+0x10/0x10 [ 148.718288][ T9770] ? __pfx_lock_acquire+0x10/0x10 [ 148.723359][ T9770] __netlink_dump_start+0x5a2/0x790 [ 148.728605][ T9770] ? __pfx_vxlan_vnifilter_dump+0x10/0x10 [ 148.734353][ T9770] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 148.739331][ T9770] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.744816][ T9770] ? __pfx_rtnl_dumpit+0x10/0x10 [ 148.749770][ T9770] ? __pfx_vxlan_vnifilter_dump+0x10/0x10 [ 148.755491][ T9770] ? ref_tracker_free+0x643/0x7e0 [ 148.760515][ T9770] netlink_rcv_skb+0x1e3/0x430 [ 148.765277][ T9770] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 148.770739][ T9770] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 148.776037][ T9770] ? netlink_deliver_tap+0x2e/0x1b0 [ 148.781231][ T9770] netlink_unicast+0x7f6/0x990 [ 148.786002][ T9770] ? __pfx_netlink_unicast+0x10/0x10 [ 148.791284][ T9770] ? __virt_addr_valid+0x183/0x530 [ 148.796396][ T9770] ? __check_object_size+0x48e/0x900 [ 148.801687][ T9770] netlink_sendmsg+0x8e4/0xcb0 [ 148.806459][ T9770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.811746][ T9770] ? aa_sock_msg_perm+0x91/0x160 [ 148.816683][ T9770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.821959][ T9770] __sock_sendmsg+0x221/0x270 [ 148.826643][ T9770] ____sys_sendmsg+0x52a/0x7e0 [ 148.831426][ T9770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.836742][ T9770] __sys_sendmsg+0x292/0x380 [ 148.841350][ T9770] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.846480][ T9770] ? __pfx_vfs_write+0x10/0x10 [ 148.851271][ T9770] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.857601][ T9770] ? do_syscall_64+0x100/0x230 [ 148.862365][ T9770] ? do_syscall_64+0xb6/0x230 [ 148.867046][ T9770] do_syscall_64+0xf3/0x230 [ 148.871546][ T9770] ? clear_bhb_loop+0x35/0x90 [ 148.876217][ T9770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.882107][ T9770] RIP: 0033:0x7fb5a977e719 [ 148.886516][ T9770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.906117][ T9770] RSP: 002b:00007fb5aa4f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.914531][ T9770] RAX: ffffffffffffffda RBX: 00007fb5a9935f80 RCX: 00007fb5a977e719 [ 148.922495][ T9770] RDX: 0000000000000000 RSI: 00000000200047c0 RDI: 0000000000000003 [ 148.930463][ T9770] RBP: 00007fb5aa4f1090 R08: 0000000000000000 R09: 0000000000000000 [ 148.938427][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.946390][ T9770] R13: 0000000000000000 R14: 00007fb5a9935f80 R15: 00007fffab74bcb8 [ 148.954369][ T9770] [ 148.987086][ T9784] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1391'. [ 149.151216][ T9793] veth0: entered promiscuous mode [ 149.158861][ T9792] veth0: left promiscuous mode [ 149.274480][ T9799] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 149.313664][ T9805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1401'. [ 149.348700][ T9805] netlink: 'syz.2.1401': attribute type 30 has an invalid length. [ 149.366316][ T9805] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 149.377125][ T9805] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 149.932285][ T9851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1416'. [ 150.185710][ T9865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1422'. [ 150.217842][ T9868] dvmrp0: entered allmulticast mode [ 150.494519][ T9889] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 150.529934][ T9885] netlink: 'syz.2.1430': attribute type 4 has an invalid length. [ 150.631532][ T9897] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 150.701604][ T9902] netlink: 'syz.4.1437': attribute type 5 has an invalid length. [ 150.936595][ T9915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.946965][ T9915] team0: Port device bond0 added [ 150.972399][ T9913] pim6reg1: entered promiscuous mode [ 150.983223][ T9913] pim6reg1: entered allmulticast mode [ 151.228321][ T9936] __nla_validate_parse: 4 callbacks suppressed [ 151.228341][ T9936] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1449'. [ 151.344836][ T9940] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1451'. [ 151.373014][ T9940] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 151.562574][ T9957] netlink: 'syz.0.1458': attribute type 10 has an invalid length. [ 151.626547][ T9957] bridge0: port 2(–eth0_vlan) entered disabled state [ 151.659025][ T9957] bridge0: port 2(–eth0_vlan) entered blocking state [ 151.665895][ T9957] bridge0: port 2(–eth0_vlan) entered forwarding state [ 151.716324][ T9957] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 151.873216][ T9983] FAULT_INJECTION: forcing a failure. [ 151.873216][ T9983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.882619][ T9985] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1466'. [ 151.904723][ T9983] CPU: 0 UID: 0 PID: 9983 Comm: syz.2.1465 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 151.915455][ T9983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 151.925533][ T9983] Call Trace: [ 151.928831][ T9983] [ 151.931784][ T9983] dump_stack_lvl+0x241/0x360 [ 151.936482][ T9983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.938462][ T9985] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 151.941670][ T9983] ? __pfx__printk+0x10/0x10 [ 151.941702][ T9983] ? snprintf+0xda/0x120 [ 151.941726][ T9983] should_fail_ex+0x3b0/0x4e0 [ 151.941750][ T9983] _copy_to_user+0x31/0xb0 [ 151.941774][ T9983] simple_read_from_buffer+0xca/0x150 [ 151.941803][ T9983] proc_fail_nth_read+0x1e9/0x250 [ 151.941830][ T9983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.941858][ T9983] ? rw_verify_area+0x55e/0x6f0 [ 151.941880][ T9983] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.941904][ T9983] vfs_read+0x1fc/0xb70 [ 151.941932][ T9983] ? fdget_pos+0x24e/0x320 [ 151.941953][ T9983] ? __pfx_vfs_read+0x10/0x10 [ 152.007872][ T9983] ? __fget_files+0x3f3/0x470 [ 152.012584][ T9983] ? fdget_pos+0x24e/0x320 [ 152.017031][ T9983] ksys_read+0x183/0x2b0 [ 152.021312][ T9983] ? __pfx_ksys_read+0x10/0x10 [ 152.026105][ T9983] ? do_syscall_64+0x100/0x230 [ 152.030897][ T9983] ? do_syscall_64+0xb6/0x230 [ 152.035605][ T9983] do_syscall_64+0xf3/0x230 [ 152.040135][ T9983] ? clear_bhb_loop+0x35/0x90 [ 152.044839][ T9983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.050757][ T9983] RIP: 0033:0x7f3ac157d15c [ 152.055284][ T9983] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 152.074921][ T9983] RSP: 002b:00007f3ac2411030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.083370][ T9983] RAX: ffffffffffffffda RBX: 00007f3ac1735f80 RCX: 00007f3ac157d15c [ 152.091367][ T9983] RDX: 000000000000000f RSI: 00007f3ac24110a0 RDI: 0000000000000004 [ 152.099361][ T9983] RBP: 00007f3ac2411090 R08: 0000000000000000 R09: 0000000000000000 [ 152.107364][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.115371][ T9983] R13: 0000000000000000 R14: 00007f3ac1735f80 R15: 00007ffe5b439d08 [ 152.123395][ T9983] [ 152.260171][ T9999] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1472'. [ 152.310406][ T9999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1472'. [ 152.340341][ T9999] netlink: 'syz.4.1472': attribute type 1 has an invalid length. [ 152.408614][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 152.488663][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1480'. [ 152.522349][T10018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1480'. [ 152.609629][T10028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1484'. [ 152.630838][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1484'. [ 152.680008][ T55] block nbd0: Receive control failed (result -107) [ 152.696036][T10041] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 152.705662][T10041] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 152.873246][T10052] ================================================================== [ 152.881355][T10052] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x2f/0x140 [ 152.890492][T10052] Read of size 8 at addr ffff888024e17008 by task syz.1.1489/10052 [ 152.898400][T10052] [ 152.900730][T10052] CPU: 1 UID: 0 PID: 10052 Comm: syz.1.1489 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 152.911499][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 152.921560][T10052] Call Trace: [ 152.924846][T10052] [ 152.927785][T10052] dump_stack_lvl+0x241/0x360 [ 152.932485][T10052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.937791][T10052] ? __pfx__printk+0x10/0x10 [ 152.942400][T10052] ? _printk+0xd5/0x120 [ 152.946575][T10052] ? __virt_addr_valid+0x183/0x530 [ 152.951701][T10052] ? __virt_addr_valid+0x183/0x530 [ 152.956846][T10052] print_report+0x169/0x550 [ 152.961368][T10052] ? __virt_addr_valid+0x183/0x530 [ 152.966494][T10052] ? __virt_addr_valid+0x183/0x530 [ 152.971622][T10052] ? __virt_addr_valid+0x45f/0x530 [ 152.976749][T10052] ? __phys_addr+0xba/0x170 [ 152.981265][T10052] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 152.987781][T10052] kasan_report+0x143/0x180 [ 152.992305][T10052] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 152.998654][T10052] __list_del_entry_valid_or_report+0x2f/0x140 [ 153.004828][T10052] mgmt_pending_remove+0x26/0x1a0 [ 153.009869][T10052] mgmt_pending_foreach+0xd1/0x130 [ 153.015001][T10052] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 153.020392][T10052] __mgmt_power_off+0x183/0x430 [ 153.025260][T10052] ? __pfx___mgmt_power_off+0x10/0x10 [ 153.030658][T10052] ? __mutex_trylock_common+0x183/0x2e0 [ 153.036229][T10052] ? __pfx___might_resched+0x10/0x10 [ 153.041535][T10052] ? __pfx___mutex_trylock_common+0x10/0x10 [ 153.047445][T10052] ? rcu_is_watching+0x15/0xb0 [ 153.052229][T10052] ? trace_contention_end+0x3c/0x120 [ 153.057536][T10052] ? __mutex_lock+0x2ef/0xd70 [ 153.062239][T10052] ? __mutex_unlock_slowpath+0x21d/0x750 [ 153.067894][T10052] ? hci_dev_close_sync+0x5c8/0x11c0 [ 153.073209][T10052] ? __pfx___mutex_lock+0x10/0x10 [ 153.078253][T10052] ? lockdep_hardirqs_on+0x99/0x150 [ 153.083466][T10052] ? _raw_spin_unlock_irq+0x2e/0x50 [ 153.088678][T10052] ? drain_workqueue+0x2d3/0x3a0 [ 153.093636][T10052] ? hci_discovery_set_state+0x57/0x180 [ 153.099196][T10052] hci_dev_close_sync+0x6c4/0x11c0 [ 153.104339][T10052] hci_dev_close+0x112/0x210 [ 153.108942][T10052] sock_do_ioctl+0x158/0x460 [ 153.113549][T10052] ? __pfx_sock_do_ioctl+0x10/0x10 [ 153.118683][T10052] sock_ioctl+0x626/0x8e0 [ 153.123029][T10052] ? __pfx_sock_ioctl+0x10/0x10 [ 153.127892][T10052] ? __fget_files+0x29/0x470 [ 153.132498][T10052] ? __fget_files+0x3f3/0x470 [ 153.137179][T10052] ? __pfx_sock_ioctl+0x10/0x10 [ 153.142053][T10052] __se_sys_ioctl+0xf9/0x170 [ 153.146637][T10052] do_syscall_64+0xf3/0x230 [ 153.151126][T10052] ? clear_bhb_loop+0x35/0x90 [ 153.155798][T10052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.161687][T10052] RIP: 0033:0x7f5ecb57e719 [ 153.166115][T10052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.185735][T10052] RSP: 002b:00007f5ecc2d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.194139][T10052] RAX: ffffffffffffffda RBX: 00007f5ecb735f80 RCX: 00007f5ecb57e719 [ 153.202099][T10052] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000005 [ 153.210096][T10052] RBP: 00007f5ecb5f132e R08: 0000000000000000 R09: 0000000000000000 [ 153.218068][T10052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.226032][T10052] R13: 0000000000000000 R14: 00007f5ecb735f80 R15: 00007ffe8c408a78 [ 153.234012][T10052] [ 153.237037][T10052] [ 153.239362][T10052] Allocated by task 7986: [ 153.243676][T10052] kasan_save_track+0x3f/0x80 [ 153.248342][T10052] __kasan_kmalloc+0x98/0xb0 [ 153.252922][T10052] __kmalloc_cache_noprof+0x19c/0x2c0 [ 153.258298][T10052] mgmt_pending_new+0x65/0x250 [ 153.263055][T10052] mgmt_pending_add+0x36/0x120 [ 153.267808][T10052] set_link_security+0x5da/0x820 [ 153.272742][T10052] hci_mgmt_cmd+0xc47/0x11d0 [ 153.277318][T10052] hci_sock_sendmsg+0x7b8/0x11c0 [ 153.282250][T10052] __sock_sendmsg+0x221/0x270 [ 153.286932][T10052] sock_write_iter+0x2d7/0x3f0 [ 153.291685][T10052] vfs_write+0xaeb/0xd30 [ 153.296097][T10052] ksys_write+0x183/0x2b0 [ 153.300407][T10052] do_syscall_64+0xf3/0x230 [ 153.304898][T10052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.310791][T10052] [ 153.313098][T10052] Freed by task 10054: [ 153.317141][T10052] kasan_save_track+0x3f/0x80 [ 153.321819][T10052] kasan_save_free_info+0x40/0x50 [ 153.326833][T10052] __kasan_slab_free+0x59/0x70 [ 153.331603][T10052] kfree+0x1a0/0x440 [ 153.335500][T10052] mgmt_pending_foreach+0xd1/0x130 [ 153.340596][T10052] mgmt_index_removed+0x133/0x390 [ 153.345603][T10052] hci_sock_bind+0xcce/0x1150 [ 153.350263][T10052] __sys_bind+0x22d/0x2d0 [ 153.354575][T10052] __x64_sys_bind+0x7a/0x90 [ 153.359058][T10052] do_syscall_64+0xf3/0x230 [ 153.363550][T10052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.369445][T10052] [ 153.371750][T10052] The buggy address belongs to the object at ffff888024e17000 [ 153.371750][T10052] which belongs to the cache kmalloc-96 of size 96 [ 153.385627][T10052] The buggy address is located 8 bytes inside of [ 153.385627][T10052] freed 96-byte region [ffff888024e17000, ffff888024e17060) [ 153.399174][T10052] [ 153.401483][T10052] The buggy address belongs to the physical page: [ 153.407894][T10052] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888024e17c00 pfn:0x24e17 [ 153.417961][T10052] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 153.426031][T10052] page_type: f5(slab) [ 153.430012][T10052] raw: 00fff00000000200 ffff88801ac41280 ffffea0000c5c150 ffffea0000d48150 [ 153.438590][T10052] raw: ffff888024e17c00 0000000000200010 00000001f5000000 0000000000000000 [ 153.447179][T10052] page dumped because: kasan: bad access detected [ 153.453579][T10052] page_owner tracks the page as allocated [ 153.459276][T10052] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12, tgid 12 (kworker/u8:1), ts 62998560092, free_ts 62970779092 [ 153.478294][T10052] post_alloc_hook+0x1f3/0x230 [ 153.483066][T10052] get_page_from_freelist+0x303f/0x3190 [ 153.488619][T10052] __alloc_pages_noprof+0x292/0x710 [ 153.493803][T10052] alloc_pages_mpol_noprof+0x3e8/0x680 [ 153.499249][T10052] alloc_slab_page+0x6a/0x120 [ 153.503912][T10052] allocate_slab+0x5a/0x2f0 [ 153.508396][T10052] ___slab_alloc+0xcd1/0x14b0 [ 153.513061][T10052] __slab_alloc+0x58/0xa0 [ 153.517377][T10052] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 153.522738][T10052] nsim_fib_event_nb+0x17c/0x10b0 [ 153.527747][T10052] notifier_call_chain+0x19f/0x3e0 [ 153.532861][T10052] atomic_notifier_call_chain+0xdb/0x180 [ 153.538504][T10052] call_fib_notifiers+0x31/0x60 [ 153.543355][T10052] fib6_add+0x1bd5/0x4430 [ 153.547689][T10052] ip6_ins_rt+0x106/0x170 [ 153.552003][T10052] __ipv6_ifa_notify+0x5d2/0x1230 [ 153.557010][T10052] page last free pid 5931 tgid 5931 stack trace: [ 153.563315][T10052] free_unref_folios+0xf12/0x18d0 [ 153.568327][T10052] folios_put_refs+0x76c/0x860 [ 153.573078][T10052] free_pages_and_swap_cache+0x5c8/0x690 [ 153.578695][T10052] tlb_flush_mmu+0x3a3/0x680 [ 153.583272][T10052] tlb_finish_mmu+0xd4/0x200 [ 153.587846][T10052] exit_mmap+0x496/0xc40 [ 153.592073][T10052] __mmput+0x115/0x390 [ 153.596128][T10052] exit_mm+0x220/0x310 [ 153.600183][T10052] do_exit+0x9b2/0x28e0 [ 153.604329][T10052] do_group_exit+0x207/0x2c0 [ 153.608913][T10052] __x64_sys_exit_group+0x3f/0x40 [ 153.613920][T10052] x64_sys_call+0x2634/0x2640 [ 153.618583][T10052] do_syscall_64+0xf3/0x230 [ 153.623072][T10052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.628958][T10052] [ 153.631284][T10052] Memory state around the buggy address: [ 153.636909][T10052] ffff888024e16f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.644952][T10052] ffff888024e16f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.652995][T10052] >ffff888024e17000: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 153.661041][T10052] ^ [ 153.665360][T10052] ffff888024e17080: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 153.673411][T10052] ffff888024e17100: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 153.681468][T10052] ================================================================== [ 153.703058][T10052] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.710288][T10052] CPU: 1 UID: 0 PID: 10052 Comm: syz.1.1489 Not tainted 6.12.0-rc5-syzkaller-00178-g0144c06c5890 #0 [ 153.721063][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 153.731137][T10052] Call Trace: [ 153.734411][T10052] [ 153.737336][T10052] dump_stack_lvl+0x241/0x360 [ 153.742019][T10052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.747224][T10052] ? __pfx__printk+0x10/0x10 [ 153.751802][T10052] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.757956][T10052] ? vscnprintf+0x5d/0x90 [ 153.762292][T10052] panic+0x349/0x880 [ 153.766197][T10052] ? check_panic_on_warn+0x21/0xb0 [ 153.771305][T10052] ? __pfx_panic+0x10/0x10 [ 153.775736][T10052] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 153.781709][T10052] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 153.788031][T10052] check_panic_on_warn+0x86/0xb0 [ 153.792979][T10052] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 153.799317][T10052] end_report+0x77/0x160 [ 153.803568][T10052] kasan_report+0x154/0x180 [ 153.808061][T10052] ? __list_del_entry_valid_or_report+0x2f/0x140 [ 153.814486][T10052] __list_del_entry_valid_or_report+0x2f/0x140 [ 153.820658][T10052] mgmt_pending_remove+0x26/0x1a0 [ 153.825690][T10052] mgmt_pending_foreach+0xd1/0x130 [ 153.830803][T10052] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 153.836175][T10052] __mgmt_power_off+0x183/0x430 [ 153.841022][T10052] ? __pfx___mgmt_power_off+0x10/0x10 [ 153.846390][T10052] ? __mutex_trylock_common+0x183/0x2e0 [ 153.851931][T10052] ? __pfx___might_resched+0x10/0x10 [ 153.857213][T10052] ? __pfx___mutex_trylock_common+0x10/0x10 [ 153.863107][T10052] ? rcu_is_watching+0x15/0xb0 [ 153.867875][T10052] ? trace_contention_end+0x3c/0x120 [ 153.873155][T10052] ? __mutex_lock+0x2ef/0xd70 [ 153.877824][T10052] ? __mutex_unlock_slowpath+0x21d/0x750 [ 153.883455][T10052] ? hci_dev_close_sync+0x5c8/0x11c0 [ 153.896756][T10052] ? __pfx___mutex_lock+0x10/0x10 [ 153.901789][T10052] ? lockdep_hardirqs_on+0x99/0x150 [ 153.906981][T10052] ? _raw_spin_unlock_irq+0x2e/0x50 [ 153.912172][T10052] ? drain_workqueue+0x2d3/0x3a0 [ 153.917114][T10052] ? hci_discovery_set_state+0x57/0x180 [ 153.922658][T10052] hci_dev_close_sync+0x6c4/0x11c0 [ 153.927769][T10052] hci_dev_close+0x112/0x210 [ 153.932359][T10052] sock_do_ioctl+0x158/0x460 [ 153.936947][T10052] ? __pfx_sock_do_ioctl+0x10/0x10 [ 153.942056][T10052] sock_ioctl+0x626/0x8e0 [ 153.946383][T10052] ? __pfx_sock_ioctl+0x10/0x10 [ 153.951226][T10052] ? __fget_files+0x29/0x470 [ 153.955808][T10052] ? __fget_files+0x3f3/0x470 [ 153.960483][T10052] ? __pfx_sock_ioctl+0x10/0x10 [ 153.965329][T10052] __se_sys_ioctl+0xf9/0x170 [ 153.969927][T10052] do_syscall_64+0xf3/0x230 [ 153.974422][T10052] ? clear_bhb_loop+0x35/0x90 [ 153.979092][T10052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.984981][T10052] RIP: 0033:0x7f5ecb57e719 [ 153.989389][T10052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.008989][T10052] RSP: 002b:00007f5ecc2d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 154.017429][T10052] RAX: ffffffffffffffda RBX: 00007f5ecb735f80 RCX: 00007f5ecb57e719 [ 154.025417][T10052] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000005 [ 154.033392][T10052] RBP: 00007f5ecb5f132e R08: 0000000000000000 R09: 0000000000000000 [ 154.041356][T10052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.049318][T10052] R13: 0000000000000000 R14: 00007f5ecb735f80 R15: 00007ffe8c408a78 [ 154.057289][T10052] [ 154.060554][T10052] Kernel Offset: disabled [ 154.064868][T10052] Rebooting in 86400 seconds..