last executing test programs: 1m4.349364647s ago: executing program 4 (id=1276): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x20000080) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b483", 0x20, 0x11, 0x0, 0x0) 54.005116715s ago: executing program 4 (id=1276): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x20000080) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b483", 0x20, 0x11, 0x0, 0x0) 43.62902598s ago: executing program 4 (id=1276): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x20000080) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b483", 0x20, 0x11, 0x0, 0x0) 28.104617169s ago: executing program 4 (id=1276): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x20000080) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b483", 0x20, 0x11, 0x0, 0x0) 18.160437699s ago: executing program 4 (id=1276): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x20000080) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b483", 0x20, 0x11, 0x0, 0x0) 6.577063545s ago: executing program 4 (id=1276): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x20000080) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b483", 0x20, 0x11, 0x0, 0x0) 3.605460132s ago: executing program 0 (id=1938): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0xb, 0x70bd26}, 0x14}, 0x1, 0x0, 0xf0ff, 0xc000}, 0x0) 3.452255394s ago: executing program 0 (id=1942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x801, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0xa2, &(0x7f00000003c0)={0x0, 0x0}}, 0x10) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040)={r1}, 0xc) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010"], 0x78}}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r5, &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r2) 2.207626192s ago: executing program 0 (id=1944): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xd, 0xa, 0x0, 0x2, 0x0, 0xc708, 0x25dfdbff}, 0x10}}, 0xbde7b3584c529954) (async) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xd, 0xa, 0x0, 0x2, 0x0, 0xc708, 0x25dfdbff}, 0x10}}, 0xbde7b3584c529954) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 2.111131154s ago: executing program 2 (id=1946): socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x80000001, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x5e, &(0x7f0000000040)=ANY=[@ANYBLOB="e331104953fdffffffffffff86dd60cb653e00283a01fe800000000000000000000000000000fe8000000000000000000000000000aa8900907800000000fc010000000000000000000000000000fc0100000000000000000000000000003948ff29b4f675b616290400000000000000647bbc74aaf021fdf1a7d7e5ac9115a00c2c6f6e2203476a639fdc8535ba638ba7a2f6340d103f05f9c75b607fafea469c0869e85319b1aedd580bb0005f3b8b76fb219f00792b97776e24f5229b0c6c30ed233c92f275537fb958a8a8c76866ff03ef2de5bc0e345720997113f9b5447a7a534db68c0a1f0ee22a45f7bb0409c155d62b2d2abddfe3a59bf30628f4e33026c02e9177ac69601415200f000000000000009070df6b677750005e7c2b3111e44d769b9b408bb3"], 0x0) 1.927349458s ago: executing program 0 (id=1948): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000003240)=0x401, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003280)=@newtaction={0x320, 0x30, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{0x30c, 0x1, [@m_skbedit={0xec, 0x18, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xffe0}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0x85, 0x6, "de616dd9ce3b892bb6fafca061bed3e644dcf9151f4527045657b89def02bb9cad6c62f8293cff1e7df3eb0803889f2fd92b151ed17ab9f17c47463bf4e7afe47ab1d24292b0103cbbc15977a51c0ae02a168eca666c86a6321ae76cba859e771aa7894ab8f8d473fc2af5fc18fb9399fdbb44bce22ac4c64feea69890f61ef4f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0xe8, 0xc, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xa67, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xd3e}}]}, {0xa1, 0x6, "0f617356f0a663079ab7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224484cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51cc59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc1619"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0xf4, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xc7, 0x6, "4d11ef01da7337625695ddc3d5012aa6f3638794346943b9ee757a1a4ac5f8ce5f6016d63b9db431952a32c8ea295bd8bea222698ce859490fd8784037c47670d89010426411cce59038883b69db801c8d08e1d6ea90e03c637d4dc6a17cefee6540c36dba3573d039f7b6e9fb810ecdc039c3105f3423c721e04c7b057f85097c23a753a9cfb0eba5c78b15b4a0e5f89bc641b2235362854abfebfb57a426bf306580cc2256480cbf19f986ae8b2d5687490f7bed376257d883102637b753edd13a61"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x40, 0x13, 0x0, 0x0, {{0xb}, {0x4}, {0x13, 0x6, "d85d43b7ea4d845296355f34717527"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x320}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000fee000)=0x3fa, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073110b86000000008510000002"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan0\x00'}) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="38010000100001000000000000000000ac141400000000000000000000000000ac14140000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) unshare(0x400) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x17, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x3, &(0x7f0000000140)={r7, 0x0, 0x0}, 0x20) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)="765bcd38561c816ddded30bba4fac4e9ba7b38e2616597b9bed89a01f06a31167c9fb9326ca68647e88c0373380a358a9e75936060b4874bff203b8bae389e1797614528e188392a57f6df7e49f1adb4f178fde87fc7fe18f4bb873a52093590ab096151342679cc2264098c7508a0a5b397cb885d94bf21", 0x78, 0x40, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @empty, 0x80000001}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'tunl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x7800, 0x8, 0x6, 0x8000, {{0x31, 0x4, 0x1, 0x0, 0xc4, 0x68, 0x0, 0x5, 0x2f, 0x0, @private=0xa010101, @rand_addr=0x64010102, {[@ssrr={0x89, 0x27, 0x3a, [@local, @rand_addr=0x64010100, @multicast2, @loopback, @empty, @multicast1, @rand_addr=0x64010100, @broadcast, @multicast1]}, @timestamp={0x44, 0xc, 0x3e, 0x0, 0x8, [0x0, 0x1]}, @end, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0x96, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2a}, @local, @dev={0xac, 0x14, 0x14, 0x1b}, @empty, @multicast1, @multicast1]}, @timestamp={0x44, 0x10, 0x69, 0x0, 0x8, [0x401, 0x37c7b961, 0x5]}, @generic={0x44, 0x12, "84a15ac6b6b30a00c0a4e4c3d4710116"}, @cipso={0x86, 0x34, 0x0, [{0x1, 0x6, "b22d3e86"}, {0x3c72fea90d65d305, 0x5, "1448a2"}, {0x5, 0x12, "cc21c7e5585b1e55fc57d2fdbda62e4a"}, {0x2, 0xd, "756982f6f8c06e40734733"}, {0x7, 0x2}, {0x2, 0x2}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'gretap0\x00', &(0x7f0000000500)={'syztnl0\x00', r9, 0x10, 0x7831, 0x10001, 0xfffffbff, {{0x61, 0x4, 0x2, 0x14, 0x184, 0x40, 0x0, 0x61, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x26}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x9d, [@dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x38}, @multicast2, @rand_addr=0x64010101, @broadcast, @empty]}, @timestamp_prespec={0x44, 0x54, 0x8, 0x3, 0x1, [{@remote, 0xa}, {@private=0xa010100, 0x1ff}, {@empty, 0xb10}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast2, 0x6}, {@loopback, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8001}, {@loopback, 0x6647}]}, @rr={0x7, 0x13, 0x9c, [@multicast2, @empty, @remote, @private=0xa010100]}, @cipso={0x86, 0x4f, 0x3, [{0x5, 0x12, "0feac7c223b263cee9086a5d5e28cf77"}, {0x1, 0xa, "43cae95fa72fb2e1"}, {0x5, 0x11, "f018c27ac6daa9b3e047f56587a31b"}, {0x2, 0xc, "0f0c46a37ee605c89f8e"}, {0x6, 0x6, "09db0b04"}, {0x6, 0xa, "fcfca3bed4401251"}]}, @generic={0x83, 0xa, "617935e2d7fa221e"}, @cipso={0x86, 0x53, 0x3, [{0x1, 0xc, "6dc100d685d12373ceae"}, {0x0, 0x9, "2d1b7e68cae2d3"}, {0x5, 0xb, "c3af45703a5830b920"}, {0x5, 0xb, "bf84e500c6326461ee"}, {0x2, 0xd, "02d85d3886518dfbcb88ad"}, {0x7, 0xd, "76d3bec8be731ec38e8ca8"}, {0x5, 0x8, "db77856bbd41"}]}, @timestamp_addr={0x44, 0x3c, 0x3d, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x7}, {@empty, 0xedf6}, {@rand_addr=0x64010100, 0xfffff800}, {@loopback, 0x4}, {@multicast2, 0xcfe}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x5}, {@local, 0x6}]}]}}}}}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000100000000000000000000000000000002000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0100000003000000000000000000697036677265300000000000000000007465616d30000000000000000000000076657468305f746f5f626f6e6400000076657468305f746f5f626f6e64000000aaaaaaaaaa0000000000000024ffffffffff0000000000000000f0000000f0000000200100006c696d697400000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000000000000000000000636c7573746572000000f3ffffff00000000000000000000000000000000000010000000000000000000000000000000000000000000000041554449540000000000000000000000000000000000000000000000000000000800000000000000004493000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0100000011000000000000000000766c616e3000000000000000000000006c6f0000000000000000000000000000726f736530000000000000000000000062726964676530000000000000000000ffffffffffff000000000000aaaaaaaaaa0000000000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800"/592]}, 0x2c8) 1.818368405s ago: executing program 2 (id=1950): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe965}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x424b}]}, {0x4}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}]}, 0x48}}, 0x0) 1.636001415s ago: executing program 1 (id=1952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x12, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x22, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1.522440254s ago: executing program 2 (id=1954): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.522265474s ago: executing program 3 (id=1955): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.425387089s ago: executing program 1 (id=1956): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@local, 0x0, r4}) 1.366554799s ago: executing program 3 (id=1957): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000001c0), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}], 0x20}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000940)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x80, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40009) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000680)={0x1e4, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x3}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x8}]}}]}, 0x4c}}, 0x24000000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xec67ba842dbbc0d2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r7, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="18", 0x1, 0x0, &(0x7f00000000c0)={0x11, 0x8, r10, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000bc0)=@getspdinfo={0x14, 0x25, 0x1}, 0x14}}, 0x0) socket(0x10, 0x5, 0xffff) 1.248262601s ago: executing program 2 (id=1958): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="850000009a000000040000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write(r1, &(0x7f00000000c0)="bcbbeacbc2535f986cf1a76055f6b42c4f083e793590a2dd16ea19b50142", 0x1e) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x24}}, 0x0) getsockopt(r1, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) r4 = socket$nl_crypto(0x10, 0x3, 0x15) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0x68, 0x10, 0x503, 0x2070bd2d, 0x4000000, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_GRE_LINK={0x8, 0x1, r6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xb}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x68}, 0x1, 0x0, 0x0, 0x2004c012}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x1c, 0x43, 0x9, 0xffffffff, 0x25dfdbfd, {0x1}, [@nested={0x6, 0x4, 0x0, 0x1, [@generic='fM']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c0}, 0x0) sendmsg$nl_crypto(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@alg={0xe0, 0x10, 0x1, 0x0, 0x0, {{'drbg_pr_hmac_sha384\x00'}}}, 0xe0}}, 0x0) write(r0, &(0x7f0000000300)="6a8b63bd33", 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'tunl0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r9, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x13, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5}]}]}]}, 0x38}}, 0x0) getsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x34, 0x18, 0x400, 0x70bd2d, 0x25dfdbfa, {0x2, 0x0, 0x0, 0xe0, 0x0, 0x0, 0x0, 0x0, 0x3000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x8}}]}, 0x34}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 1.153579182s ago: executing program 3 (id=1959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}, 0x1, 0x0, 0xc00e}, 0x0) 1.13073918s ago: executing program 1 (id=1960): socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x80000001, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x5e, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0) 937.3921ms ago: executing program 3 (id=1961): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff17043a73dbde08004500005c0000000000019078ac000001ac1414aa05009078e00a00e0400000000000000000840000ac1414aa00000000830300070300442400000000000000000800ac1414aa00000000e0000002000000000000000000ffff000000"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="090400000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340001010101a7011de2080026006c09000008009f0007"], 0x38}, 0x1, 0x0, 0x0, 0x10091}, 0x0) 838.644379ms ago: executing program 0 (id=1962): r0 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x3f, &(0x7f0000000bc0)}}], 0x1, 0x10000, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 805.629387ms ago: executing program 1 (id=1963): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e7, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000180)=0x80, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bind$unix(r1, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000122000000000000000002"], 0x1c}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}}) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r5, &(0x7f0000000380)='G', 0x0}, 0x20) ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000000)="faa1b438ad9e0e5a44542d9caed74104752b6fd41bd7a2d20e05decf0228c651d511cb59b90c098d60ec2a85e599286e2600b88dabbe381d48f17c4463cbd5bc23406e2e9137b7654a0c00b86ca392f3f11b636cf201bcde5a547b40de8ec5343dda0d8cbdb3d711498784a15c7ebbce619933a2ccdd08104922bdf5cb0666ab97288718238ae63e276ce21f826de52fca5c813a6afc02a4ce0318ba9bd2b4f2042bd202d65bcddc89ddeccdbc2eacaf183c91483c77ba63641080e6c08a6cc36c6271b062f0153d3be75de109b23e515d64cfe23566c9bb0a7d808b0aaddd274ee68ddbdbb61cb5685dcde0a7") syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 732.112551ms ago: executing program 3 (id=1964): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 601.169948ms ago: executing program 0 (id=1965): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x80, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x4a, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0xe803, [0x3e8, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}}}}}}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="85000000350000009c0000000000000025000000fffffff19500000d000000004bea11fade2d6950bdaebf39f5d5e2c5dec1e666c3a573"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r6 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f0000000080)=[{r4, 0x4450}, {r0}, {r6, 0x223}], 0x3, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180), 0x8) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x21, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x70, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x14d0a}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7}]}, 0x70}}, 0x0) 567.46368ms ago: executing program 2 (id=1966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x891}, 0x80c4) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmsg(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000000540)=""/248, 0xf8}], 0x2}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="b955389b57"], 0xb4}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000c040) 566.635826ms ago: executing program 3 (id=1967): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r2 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x80000000, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x24}}, 0x0) (fail_nth: 8) 489.872742ms ago: executing program 2 (id=1968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) accept(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) unshare(0x24020400) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2903fc36b4000000ffff01000000015c9c6e00"/31], 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r11, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, r9, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8880}, 0x4000040) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r6, 0x108, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000940)={0x184, 0x0, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_WANTED={0x108, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xfb, 0x5, "2937bebae9c5e5706099053bf2110377acff6cbdfe819325ad0e3ce30bb3ecefcb9aff15d9d782676d659ae0a496489142b26dfb4a5f188c0b4f19952b19c93e1cee848547e975eb487e1e4adac7ebd03832ffe361a7fbaab6351e81278a1f76ac5f83bfd22d83301f097436251843a2bb841740f1510d7aa83c280365e140c0027846f7cfb5c72aa8ff7793a62962a281dce295a87cc549f5245e08d8bd07f1dbd8a2439b830f9932f18ffb086a70bec13e34620bdc5da8a55011d2b1afac4bd65142d03beb98a080694c36d997960109c591900dabc8f807106d22320a76b19c7469deb026539b56219d99dbe9a4205a6f16d0cb1fac"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}]}, 0x184}}, 0x0) r13 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r13, 0x41009432, &(0x7f00000001c0)="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") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f0000000300)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32, @ANYBLOB="800202000a000200577f0000aabb000020000e"], 0x48}}, 0x0) r14 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r15 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r15, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="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"/340, @ANYRESHEX=0x0, @ANYBLOB="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"], 0x44}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 473.553068ms ago: executing program 1 (id=1969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x12, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x2c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x4000000}}, 0x54}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 0s ago: executing program 1 (id=1970): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='xprt_reserve\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@local, 0x0, r4}) kernel console output (not intermixed with test programs): ttributes in process `syz.1.1056'. [ 162.533145][ T8915] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1059'. [ 162.774375][ T8922] FAULT_INJECTION: forcing a failure. [ 162.774375][ T8922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.787932][ T8922] CPU: 0 UID: 0 PID: 8922 Comm: syz.0.1061 Not tainted 6.13.0-rc7-syzkaller-00118-gd640627663bf #0 [ 162.798667][ T8922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 162.808772][ T8922] Call Trace: [ 162.812090][ T8922] [ 162.813556][ T8926] netlink: 'syz.3.1060': attribute type 10 has an invalid length. [ 162.815074][ T8922] dump_stack_lvl+0x241/0x360 [ 162.815119][ T8922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.832975][ T8922] ? __pfx__printk+0x10/0x10 [ 162.836944][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1062'. [ 162.837599][ T8922] ? __pfx_lock_release+0x10/0x10 [ 162.851514][ T8922] should_fail_ex+0x3b0/0x4e0 [ 162.856253][ T8922] _copy_from_iter+0x1e9/0x1c20 [ 162.861158][ T8922] ? __virt_addr_valid+0x183/0x530 [ 162.866330][ T8922] ? __alloc_skb+0x28f/0x440 [ 162.870968][ T8922] ? __pfx__copy_from_iter+0x10/0x10 [ 162.875537][ T8927] netlink: 'syz.2.1062': attribute type 3 has an invalid length. [ 162.876282][ T8922] ? __virt_addr_valid+0x183/0x530 [ 162.889153][ T8922] ? __virt_addr_valid+0x183/0x530 [ 162.894321][ T8922] ? __virt_addr_valid+0x45f/0x530 [ 162.899491][ T8922] ? __phys_addr_symbol+0x2f/0x70 [ 162.904599][ T8922] ? __check_object_size+0x47a/0x730 [ 162.909956][ T8922] netlink_sendmsg+0x73d/0xcb0 [ 162.914796][ T8922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.920138][ T8922] ? aa_sock_msg_perm+0x91/0x160 [ 162.925132][ T8922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.930477][ T8922] __sock_sendmsg+0x221/0x270 [ 162.935214][ T8922] ____sys_sendmsg+0x52a/0x7e0 [ 162.940035][ T8922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.945372][ T8922] ? __fget_files+0x2a/0x410 [ 162.950028][ T8922] ? __fget_files+0x2a/0x410 [ 162.954672][ T8922] __sys_sendmsg+0x269/0x350 [ 162.959353][ T8922] ? __pfx_lock_release+0x10/0x10 [ 162.964430][ T8922] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.969611][ T8922] ? __pfx_vfs_write+0x10/0x10 [ 162.974469][ T8922] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 162.980848][ T8922] ? do_syscall_64+0x100/0x230 [ 162.985682][ T8922] ? do_syscall_64+0xb6/0x230 [ 162.990415][ T8922] do_syscall_64+0xf3/0x230 [ 162.994979][ T8922] ? clear_bhb_loop+0x35/0x90 [ 162.999715][ T8922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.005647][ T8922] RIP: 0033:0x7fc524385d29 [ 163.010088][ T8922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.029728][ T8922] RSP: 002b:00007fc5251ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.038182][ T8922] RAX: ffffffffffffffda RBX: 00007fc524575fa0 RCX: 00007fc524385d29 [ 163.046185][ T8922] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000003 [ 163.054185][ T8922] RBP: 00007fc5251ac090 R08: 0000000000000000 R09: 0000000000000000 [ 163.062176][ T8922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.070167][ T8922] R13: 0000000000000000 R14: 00007fc524575fa0 R15: 00007ffd61a97558 [ 163.078166][ T8922] [ 163.103036][ T8926] team0: Device hsr_slave_0 failed to register rx_handler [ 163.313098][ T8936] sch_fq: defrate 0 ignored. [ 163.373334][ T8941] infiniband syz0: set active [ 163.415703][ T8941] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 163.494996][ T5839] lo speed is unknown, defaulting to 1000 [ 163.499492][ T8945] netlink: 'syz.0.1068': attribute type 6 has an invalid length. [ 163.532879][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 163.552414][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1069'. [ 163.784177][ T8956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'. [ 163.845215][ T8961] FAULT_INJECTION: forcing a failure. [ 163.845215][ T8961] name failslab, interval 1, probability 0, space 0, times 0 [ 163.874660][ T8961] CPU: 1 UID: 0 PID: 8961 Comm: syz.2.1074 Not tainted 6.13.0-rc7-syzkaller-00118-gd640627663bf #0 [ 163.885434][ T8961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 163.895534][ T8961] Call Trace: [ 163.898854][ T8961] [ 163.901825][ T8961] dump_stack_lvl+0x241/0x360 [ 163.906568][ T8961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.911815][ T8961] ? __pfx__printk+0x10/0x10 [ 163.916480][ T8961] should_fail_ex+0x3b0/0x4e0 [ 163.921214][ T8961] should_failslab+0xac/0x100 [ 163.925941][ T8961] ? skb_clone+0x20c/0x390 [ 163.930400][ T8961] kmem_cache_alloc_noprof+0x70/0x380 [ 163.935814][ T8961] skb_clone+0x20c/0x390 [ 163.940084][ T8961] __netlink_deliver_tap+0x3cc/0x7f0 [ 163.945409][ T8961] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.950620][ T8961] netlink_deliver_tap+0x19d/0x1b0 [ 163.955779][ T8961] netlink_unicast+0x7c4/0x990 [ 163.960560][ T8961] ? __pfx_netlink_unicast+0x10/0x10 [ 163.965860][ T8961] ? __virt_addr_valid+0x45f/0x530 [ 163.970994][ T8961] ? __phys_addr_symbol+0x2f/0x70 [ 163.976037][ T8961] ? __check_object_size+0x47a/0x730 [ 163.981340][ T8961] netlink_sendmsg+0x8e4/0xcb0 [ 163.986128][ T8961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.991432][ T8961] ? aa_sock_msg_perm+0x91/0x160 [ 163.996387][ T8961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.001685][ T8961] __sock_sendmsg+0x221/0x270 [ 164.006385][ T8961] ____sys_sendmsg+0x52a/0x7e0 [ 164.011179][ T8961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.016477][ T8961] ? __fget_files+0x2a/0x410 [ 164.021085][ T8961] ? __fget_files+0x2a/0x410 [ 164.025720][ T8961] __sys_sendmsg+0x269/0x350 [ 164.030324][ T8961] ? __pfx_lock_release+0x10/0x10 [ 164.035367][ T8961] ? __pfx___sys_sendmsg+0x10/0x10 [ 164.040507][ T8961] ? __pfx_vfs_write+0x10/0x10 [ 164.045317][ T8961] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 164.051660][ T8961] ? do_syscall_64+0x100/0x230 [ 164.056471][ T8961] ? do_syscall_64+0xb6/0x230 [ 164.061191][ T8961] do_syscall_64+0xf3/0x230 [ 164.065733][ T8961] ? clear_bhb_loop+0x35/0x90 [ 164.070433][ T8961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.076362][ T8961] RIP: 0033:0x7f8fd1f85d29 [ 164.080793][ T8961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.100498][ T8961] RSP: 002b:00007f8fd2d9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.109016][ T8961] RAX: ffffffffffffffda RBX: 00007f8fd2175fa0 RCX: 00007f8fd1f85d29 [ 164.117017][ T8961] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000003 [ 164.125018][ T8961] RBP: 00007f8fd2d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 164.132998][ T8961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.140980][ T8961] R13: 0000000000000000 R14: 00007f8fd2175fa0 R15: 00007fff09d70528 [ 164.148979][ T8961] [ 164.338665][ T8971] netlink: 'syz.2.1079': attribute type 1 has an invalid length. [ 164.518030][ T8979] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 164.764116][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1085'. [ 164.899156][ T8998] FAULT_INJECTION: forcing a failure. [ 164.899156][ T8998] name failslab, interval 1, probability 0, space 0, times 0 [ 164.911947][ T8998] CPU: 1 UID: 0 PID: 8998 Comm: syz.1.1089 Not tainted 6.13.0-rc7-syzkaller-00118-gd640627663bf #0 [ 164.922853][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 164.932960][ T8998] Call Trace: [ 164.936284][ T8998] [ 164.939257][ T8998] dump_stack_lvl+0x241/0x360 [ 164.943999][ T8998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.949376][ T8998] ? __pfx__printk+0x10/0x10 [ 164.954042][ T8998] should_fail_ex+0x3b0/0x4e0 [ 164.958798][ T8998] should_failslab+0xac/0x100 [ 164.963543][ T8998] ? skb_clone+0x20c/0x390 [ 164.968021][ T8998] kmem_cache_alloc_noprof+0x70/0x380 [ 164.973466][ T8998] skb_clone+0x20c/0x390 [ 164.977765][ T8998] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 164.983025][ T8998] dev_queue_xmit_nit+0x249/0xca0 [ 164.988107][ T8998] ? dev_queue_xmit_nit+0x2b/0xca0 [ 164.993274][ T8998] ? validate_xmit_skb+0x9b8/0xff0 [ 164.998442][ T8998] dev_hard_start_xmit+0x15f/0x7d0 [ 165.003612][ T8998] ? __pfx_validate_xmit_skb+0x10/0x10 [ 165.009139][ T8998] __dev_queue_xmit+0x1b73/0x3f50 [ 165.014229][ T8998] ? kasan_save_track+0x51/0x80 [ 165.019142][ T8998] ? ____sys_sendmsg+0x52a/0x7e0 [ 165.024148][ T8998] ? __dev_queue_xmit+0x2f4/0x3f50 [ 165.029331][ T8998] ? __pfx___dev_queue_xmit+0x10/0x10 [ 165.034790][ T8998] ? __copy_skb_header+0x437/0x5b0 [ 165.039993][ T8998] ? __asan_memcpy+0x40/0x70 [ 165.044640][ T8998] ? __copy_skb_header+0x437/0x5b0 [ 165.049819][ T8998] ? __skb_clone+0x454/0x6c0 [ 165.054479][ T8998] ? skb_clone+0x240/0x390 [ 165.058970][ T8998] __netlink_deliver_tap+0x56b/0x7f0 [ 165.059500][ T9001] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 165.064300][ T8998] ? netlink_deliver_tap+0x2e/0x1b0 [ 165.064338][ T8998] netlink_deliver_tap+0x19d/0x1b0 [ 165.064366][ T8998] netlink_unicast+0x7c4/0x990 [ 165.064398][ T8998] ? __pfx_netlink_unicast+0x10/0x10 [ 165.064432][ T8998] ? __virt_addr_valid+0x45f/0x530 [ 165.064463][ T8998] ? __phys_addr_symbol+0x2f/0x70 [ 165.105825][ T8998] ? __check_object_size+0x47a/0x730 [ 165.111181][ T8998] netlink_sendmsg+0x8e4/0xcb0 [ 165.116017][ T8998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.121382][ T8998] ? aa_sock_msg_perm+0x91/0x160 [ 165.126384][ T8998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.131722][ T8998] __sock_sendmsg+0x221/0x270 [ 165.136482][ T8998] ____sys_sendmsg+0x52a/0x7e0 [ 165.141325][ T8998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.146686][ T8998] ? __fget_files+0x2a/0x410 [ 165.151349][ T8998] ? __fget_files+0x2a/0x410 [ 165.156024][ T8998] __sys_sendmsg+0x269/0x350 [ 165.160689][ T8998] ? __pfx_lock_release+0x10/0x10 [ 165.165782][ T8998] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.170974][ T8998] ? __pfx_vfs_write+0x10/0x10 [ 165.175833][ T8998] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.182225][ T8998] ? do_syscall_64+0x100/0x230 [ 165.187056][ T8998] ? do_syscall_64+0xb6/0x230 [ 165.191803][ T8998] do_syscall_64+0xf3/0x230 [ 165.196368][ T8998] ? clear_bhb_loop+0x35/0x90 [ 165.201101][ T8998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.207056][ T8998] RIP: 0033:0x7f6455b85d29 [ 165.211519][ T8998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.231182][ T8998] RSP: 002b:00007f64569f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.239656][ T8998] RAX: ffffffffffffffda RBX: 00007f6455d75fa0 RCX: 00007f6455b85d29 [ 165.247696][ T8998] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000003 [ 165.255718][ T8998] RBP: 00007f64569f4090 R08: 0000000000000000 R09: 0000000000000000 [ 165.263747][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.271794][ T8998] R13: 0000000000000000 R14: 00007f6455d75fa0 R15: 00007fff150e1678 [ 165.279847][ T8998] [ 165.361308][ T9008] netlink: 'syz.4.1092': attribute type 1 has an invalid length. [ 165.617533][ T9019] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 165.665141][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1099'. [ 165.901925][ T9041] FAULT_INJECTION: forcing a failure. [ 165.901925][ T9041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.930204][ T9041] CPU: 0 UID: 0 PID: 9041 Comm: syz.3.1104 Not tainted 6.13.0-rc7-syzkaller-00118-gd640627663bf #0 [ 165.940973][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 165.951102][ T9041] Call Trace: [ 165.954433][ T9041] [ 165.957429][ T9041] dump_stack_lvl+0x241/0x360 [ 165.962172][ T9041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.967439][ T9041] ? __pfx__printk+0x10/0x10 [ 165.972093][ T9041] ? snprintf+0xda/0x120 [ 165.976413][ T9041] should_fail_ex+0x3b0/0x4e0 [ 165.981162][ T9041] _copy_to_user+0x31/0xb0 [ 165.985635][ T9041] simple_read_from_buffer+0xca/0x150 [ 165.991073][ T9041] proc_fail_nth_read+0x1e9/0x250 [ 165.996161][ T9041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.001768][ T9041] ? rw_verify_area+0x55e/0x6f0 [ 166.006660][ T9041] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 166.012262][ T9041] vfs_read+0x1fc/0xb70 [ 166.016470][ T9041] ? __pfx___mutex_lock+0x10/0x10 [ 166.021561][ T9041] ? __pfx_vfs_read+0x10/0x10 [ 166.026291][ T9041] ? __fget_files+0x2a/0x410 [ 166.030939][ T9041] ? __fget_files+0x395/0x410 [ 166.035680][ T9041] ? __fget_files+0x2a/0x410 [ 166.040344][ T9041] ksys_read+0x18f/0x2b0 [ 166.044644][ T9041] ? __pfx_ksys_read+0x10/0x10 [ 166.049463][ T9041] ? do_syscall_64+0x100/0x230 [ 166.054305][ T9041] ? do_syscall_64+0xb6/0x230 [ 166.059053][ T9041] do_syscall_64+0xf3/0x230 [ 166.063717][ T9041] ? clear_bhb_loop+0x35/0x90 [ 166.068454][ T9041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.074411][ T9041] RIP: 0033:0x7fb27338473c [ 166.079049][ T9041] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 166.098730][ T9041] RSP: 002b:00007fb2711f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.107219][ T9041] RAX: ffffffffffffffda RBX: 00007fb273575fa0 RCX: 00007fb27338473c [ 166.115254][ T9041] RDX: 000000000000000f RSI: 00007fb2711f60a0 RDI: 0000000000000004 [ 166.123287][ T9041] RBP: 00007fb2711f6090 R08: 0000000000000000 R09: 0000000000000000 [ 166.131316][ T9041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.139358][ T9041] R13: 0000000000000000 R14: 00007fb273575fa0 R15: 00007ffd625d4c08 [ 166.147404][ T9041] [ 166.567598][ T5845] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 166.577431][ T5845] Bluetooth: hci0: command 0x080f tx timeout [ 166.766059][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1110'. [ 166.841564][ T9062] infiniband syz0: set active [ 166.888071][ T9062] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 166.963887][ T51] lo speed is unknown, defaulting to 1000 [ 167.930029][ T9094] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1123'. [ 168.100871][ T9101] infiniband syz0: set active [ 168.122327][ T9101] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 168.183622][ T5880] lo speed is unknown, defaulting to 1000 [ 168.461840][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1132'. [ 168.686187][ T9124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1135'. [ 168.707630][ T9124] netlink: 'syz.1.1135': attribute type 3 has an invalid length. [ 168.738046][ T9124] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.748490][ T9124] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.758334][ T9124] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.767778][ T9124] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.124506][ T9135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.199689][ T9140] openvswitch: netlink: Multiple metadata blocks provided [ 169.869703][ T9166] tipc: Enabled bearer , priority 30 [ 169.909182][ T9168] tipc: Enabling of bearer rejected, already enabled [ 170.319919][ T9021] syz.0.1098: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 170.338933][ T5880] IPVS: starting estimator thread 0... [ 170.339293][ T9021] CPU: 0 UID: 0 PID: 9021 Comm: syz.0.1098 Not tainted 6.13.0-rc7-syzkaller-00118-gd640627663bf #0 [ 170.355139][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 170.365266][ T9021] Call Trace: [ 170.368587][ T9021] [ 170.371551][ T9021] dump_stack_lvl+0x241/0x360 [ 170.376280][ T9021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.381537][ T9021] ? __pfx__printk+0x10/0x10 [ 170.386182][ T9021] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 170.392666][ T9021] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 170.399230][ T9021] warn_alloc+0x278/0x410 [ 170.403604][ T9021] ? __pfx_warn_alloc+0x10/0x10 [ 170.408507][ T9021] ? translate_table+0x174/0x2260 [ 170.413580][ T9021] ? __get_vm_area_node+0x1c8/0x2d0 [ 170.418829][ T9021] ? __get_vm_area_node+0x25c/0x2d0 [ 170.424096][ T9021] __vmalloc_node_range_noprof+0x62f/0x1380 [ 170.430040][ T9021] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 170.435848][ T9021] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 170.442232][ T9021] ? rcu_is_watching+0x15/0xb0 [ 170.447046][ T9021] ? trace_kmalloc+0x1f/0xd0 [ 170.451681][ T9021] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 170.457315][ T9021] ? __kvmalloc_node_noprof+0x72/0x190 [ 170.462806][ T9021] __kvmalloc_node_noprof+0x142/0x190 [ 170.468194][ T9021] ? translate_table+0x174/0x2260 [ 170.473325][ T9021] translate_table+0x174/0x2260 [ 170.478209][ T9021] ? __pfx_translate_table+0x10/0x10 [ 170.483513][ T9021] ? __might_fault+0xaa/0x120 [ 170.488209][ T9021] ? __pfx_lock_release+0x10/0x10 [ 170.493259][ T9021] ? __virt_addr_valid+0x183/0x530 [ 170.498398][ T9021] ? __might_fault+0xaa/0x120 [ 170.503112][ T9021] ? __might_fault+0xc6/0x120 [ 170.507805][ T9021] ? _copy_from_user+0x99/0xc0 [ 170.512591][ T9021] ? copy_from_sockptr_offset+0x6b/0xb0 [ 170.518181][ T9021] do_ipt_set_ctl+0xe3d/0x1250 [ 170.522966][ T9021] ? __pfx___mutex_trylock_common+0x10/0x10 [ 170.528884][ T9021] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 170.534107][ T9021] ? __pfx_lock_release+0x10/0x10 [ 170.539151][ T9021] ? rcu_is_watching+0x15/0xb0 [ 170.543986][ T9021] ? trace_contention_end+0x3c/0x120 [ 170.549317][ T9021] ? __mutex_unlock_slowpath+0x21e/0x790 [ 170.554978][ T9021] ? __pfx___mutex_lock+0x10/0x10 [ 170.560059][ T9021] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 170.566071][ T9021] ? aa_sk_perm+0x96d/0xab0 [ 170.570601][ T9021] ? __pfx_aa_sk_perm+0x10/0x10 [ 170.575481][ T9021] nf_setsockopt+0x295/0x2c0 [ 170.580092][ T9021] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 170.586007][ T9021] do_sock_setsockopt+0x3af/0x720 [ 170.591053][ T9021] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 170.596641][ T9021] ? __fget_files+0x395/0x410 [ 170.601341][ T9021] ? __fget_files+0x2a/0x410 [ 170.605952][ T9021] __x64_sys_setsockopt+0x1ee/0x280 [ 170.611166][ T9021] do_syscall_64+0xf3/0x230 [ 170.615718][ T9021] ? clear_bhb_loop+0x35/0x90 [ 170.620407][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.626319][ T9021] RIP: 0033:0x7fc524385d29 [ 170.630753][ T9021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.650408][ T9021] RSP: 002b:00007fc5251ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 170.658843][ T9021] RAX: ffffffffffffffda RBX: 00007fc524575fa0 RCX: 00007fc524385d29 [ 170.666848][ T9021] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 170.674829][ T9021] RBP: 00007fc524401b08 R08: 0000000000000300 R09: 0000000000000000 [ 170.682810][ T9021] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.690791][ T9021] R13: 0000000000000000 R14: 00007fc524575fa0 R15: 00007ffd61a97558 [ 170.698794][ T9021] [ 170.719247][ T9184] IPVS: using max 20 ests per chain, 48000 per kthread [ 170.734558][ T9021] Mem-Info: [ 170.737754][ T9021] active_anon:6752 inactive_anon:0 isolated_anon:0 [ 170.737754][ T9021] active_file:1605 inactive_file:38290 isolated_file:0 [ 170.737754][ T9021] unevictable:768 dirty:35 writeback:0 [ 170.737754][ T9021] slab_reclaimable:10609 slab_unreclaimable:100059 [ 170.737754][ T9021] mapped:31525 shmem:4287 pagetables:685 [ 170.737754][ T9021] sec_pagetables:0 bounce:0 [ 170.737754][ T9021] kernel_misc_reclaimable:0 [ 170.737754][ T9021] free:1321383 free_pcp:1490 free_cma:0 [ 170.861620][ T9021] Node 0 active_anon:27208kB inactive_anon:0kB active_file:6420kB inactive_file:153084kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126000kB dirty:240kB writeback:0kB shmem:15612kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11620kB pagetables:2840kB sec_pagetables:0kB all_unreclaimable? no [ 171.004565][ T9021] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 171.101062][ T9021] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.150133][ T9206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1165'. [ 171.161667][ T9205] pimreg: entered allmulticast mode [ 171.170652][ T9205] pimreg: left allmulticast mode [ 171.179299][ T9021] lowmem_reserve[]: 0 2465 2466 0 0 [ 171.203863][ T9021] Node 0 DMA32 free:1371188kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:27168kB inactive_anon:0kB active_file:6420kB inactive_file:152256kB unevictable:1536kB writepending:240kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:1192kB local_pcp:392kB free_cma:0kB [ 171.268516][ T9208] raw_sendmsg: syz.2.1166 forgot to set AF_INET. Fix it! [ 171.322723][ T9021] lowmem_reserve[]: 0 0 0 0 0 [ 171.338236][ T9021] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 171.375588][ T9211] netlink: 'syz.3.1168': attribute type 1 has an invalid length. [ 171.395130][ T9214] netlink: 'syz.3.1168': attribute type 1 has an invalid length. [ 171.431320][ T9021] lowmem_reserve[]: 0 0 0 0 0 [ 171.451082][ T9021] Node 1 Normal free:3903908kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 171.484099][ T9021] lowmem_reserve[]: 0 0 0 0 0 [ 171.488969][ T9021] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 171.501856][ T9021] Node 0 DMA32: 109*4kB (UM) 224*8kB (UME) 145*16kB (UME) 96*32kB (UME) 71*64kB (UME) 21*128kB (UME) 28*256kB (UM) 84*512kB (UM) 51*1024kB (UM) 32*2048kB (UME) 293*4096kB (UM) = 1382916kB [ 171.521041][ T9021] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 171.533278][ T9021] Node 1 Normal: 189*4kB (UE) 62*8kB (UME) 42*16kB (UME) 197*32kB (UME) 86*64kB (UME) 26*128kB (UME) 19*256kB (UME) 12*512kB (UME) 5*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3903908kB [ 171.552274][ T9021] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 171.561927][ T9021] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 171.571473][ T9021] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 171.581215][ T9021] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 171.590856][ T9021] 41354 total pagecache pages [ 171.595953][ T9021] 0 pages in swap cache [ 171.600159][ T9021] Free swap = 124996kB [ 171.604675][ T9021] Total swap = 124996kB [ 171.608866][ T9021] 2097051 pages RAM [ 171.613859][ T9021] 0 pages HighMem/MovableOnly [ 171.618916][ T9021] 427007 pages reserved [ 171.623469][ T9021] 0 pages cma reserved [ 172.250017][ T9239] netlink: 'syz.0.1179': attribute type 1 has an invalid length. [ 172.785139][ T9258] netlink: 'syz.0.1187': attribute type 1 has an invalid length. [ 172.830736][ T9258] netlink: 'syz.0.1187': attribute type 2 has an invalid length. [ 173.266106][ T9279] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1195'. [ 173.295653][ T9279] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1195'. [ 173.857835][ T9308] bridge_slave_0: default FDB implementation only supports local addresses [ 173.875792][ T9306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1205'. [ 174.006870][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1207'. [ 174.165789][ T9319] netlink: 'syz.4.1210': attribute type 1 has an invalid length. [ 174.206651][ T9321] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.305110][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 174.324050][ T9329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 174.333108][ T9329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1214'. [ 174.344290][ T9329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1214'. [ 174.374183][ T9326] netlink: 'syz.1.1212': attribute type 1 has an invalid length. [ 174.463252][ T9334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1215'. [ 174.486859][ T9335] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1217'. [ 174.507875][ T9334] netlink: 'syz.4.1215': attribute type 3 has an invalid length. [ 174.531901][ T9334] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.541571][ T9334] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.551320][ T9334] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.561144][ T9334] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 174.660273][ T9341] gretap0: entered promiscuous mode [ 174.668492][ T9341] macvtap1: entered promiscuous mode [ 174.681543][ T9341] macvtap1: entered allmulticast mode [ 174.696785][ T9341] gretap0: entered allmulticast mode [ 174.730188][ T9351] x_tables: duplicate underflow at hook 3 [ 174.737534][ T9351] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 175.138482][ T9372] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 175.171444][ T9372] ax25_connect(): syz.1.1230 uses autobind, please contact jreuter@yaina.de [ 175.236334][ T9381] FAULT_INJECTION: forcing a failure. [ 175.236334][ T9381] name failslab, interval 1, probability 0, space 0, times 0 [ 175.255608][ T9381] CPU: 1 UID: 0 PID: 9381 Comm: syz.4.1233 Not tainted 6.13.0-rc7-syzkaller-00118-gd640627663bf #0 [ 175.266358][ T9381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 175.276542][ T9381] Call Trace: [ 175.279961][ T9381] [ 175.282933][ T9381] dump_stack_lvl+0x241/0x360 [ 175.287764][ T9381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.293026][ T9381] ? __pfx__printk+0x10/0x10 [ 175.297674][ T9381] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 175.303713][ T9381] ? __pfx___might_resched+0x10/0x10 [ 175.309036][ T9381] should_fail_ex+0x3b0/0x4e0 [ 175.313761][ T9381] should_failslab+0xac/0x100 [ 175.318456][ T9381] kmem_cache_alloc_node_noprof+0x77/0x380 [ 175.324282][ T9381] ? __alloc_skb+0x1c3/0x440 [ 175.328885][ T9381] ? register_lock_class+0x102/0x980 [ 175.334188][ T9381] __alloc_skb+0x1c3/0x440 [ 175.338615][ T9381] ? __pfx_register_lock_class+0x10/0x10 [ 175.344269][ T9381] ? __pfx___alloc_skb+0x10/0x10 [ 175.349251][ T9381] ? ima_match_policy+0x100/0x2230 [ 175.354380][ T9381] ? __lock_acquire+0x1397/0x2100 [ 175.359424][ T9381] alloc_skb_with_frags+0xc3/0x820 [ 175.364582][ T9381] sock_alloc_send_pskb+0x91a/0xa60 [ 175.369813][ T9381] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 175.375566][ T9381] ? __pfx_validate_chain+0x10/0x10 [ 175.380792][ T9381] ? __pfx_validate_chain+0x10/0x10 [ 175.386019][ T9381] ? dev_get_by_index+0x23/0x2d0 [ 175.390977][ T9381] packet_sendmsg+0x3fe8/0x6a40 [ 175.395864][ T9381] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 175.401380][ T9381] ? __pfx___might_resched+0x10/0x10 [ 175.406697][ T9381] ? __pfx_packet_sendmsg+0x10/0x10 [ 175.411910][ T9381] ? aa_sk_perm+0x96d/0xab0 [ 175.416441][ T9381] ? __pfx_aa_sk_perm+0x10/0x10 [ 175.421312][ T9381] ? __import_iovec+0x590/0x870 [ 175.426180][ T9381] ? aa_sock_msg_perm+0x91/0x160 [ 175.431130][ T9381] ? __pfx_packet_sendmsg+0x10/0x10 [ 175.436337][ T9381] __sock_sendmsg+0x221/0x270 [ 175.441034][ T9381] ____sys_sendmsg+0x52a/0x7e0 [ 175.445822][ T9381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.451135][ T9381] ? __fget_files+0x2a/0x410 [ 175.455747][ T9381] ? __fget_files+0x2a/0x410 [ 175.460365][ T9381] __sys_sendmmsg+0x36a/0x720 [ 175.465087][ T9381] ? __pfx___sys_sendmmsg+0x10/0x10 [ 175.470325][ T9381] ? __pfx_lock_release+0x10/0x10 [ 175.475368][ T9381] ? kstrtouint_from_user+0x128/0x190 [ 175.480785][ T9381] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 175.486699][ T9381] ? ksys_write+0x22a/0x2b0 [ 175.491211][ T9381] ? __pfx_lock_release+0x10/0x10 [ 175.496260][ T9381] ? vfs_write+0x730/0xd30 [ 175.500692][ T9381] ? __mutex_unlock_slowpath+0x21e/0x790 [ 175.506378][ T9381] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 175.512386][ T9381] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 175.518732][ T9381] ? do_syscall_64+0x100/0x230 [ 175.523521][ T9381] __x64_sys_sendmmsg+0xa0/0xb0 [ 175.528393][ T9381] do_syscall_64+0xf3/0x230 [ 175.532918][ T9381] ? clear_bhb_loop+0x35/0x90 [ 175.537618][ T9381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.543534][ T9381] RIP: 0033:0x7fc5af985d29 [ 175.547964][ T9381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.567591][ T9381] RSP: 002b:00007fc5b06f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 175.576024][ T9381] RAX: ffffffffffffffda RBX: 00007fc5afb75fa0 RCX: 00007fc5af985d29 [ 175.584008][ T9381] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 000000000000000b [ 175.591993][ T9381] RBP: 00007fc5b06f0090 R08: 0000000000000000 R09: 0000000000000000 [ 175.599979][ T9381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.607964][ T9381] R13: 0000000000000000 R14: 00007fc5afb75fa0 R15: 00007ffc82696cf8 [ 175.616056][ T9381] [ 175.945234][ T9399] tipc: Failed to remove unknown binding: 66,1,1/0:435420639/435420641 [ 175.951707][ T9397] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 175.976921][ T9403] netlink: 'syz.4.1242': attribute type 21 has an invalid length. [ 175.986416][ T9403] netlink: 'syz.4.1242': attribute type 4 has an invalid length. [ 176.161504][ T9401] team_slave_0: entered promiscuous mode [ 176.167667][ T9401] team_slave_1: entered promiscuous mode [ 176.193568][ T9401] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 176.725679][ T9439] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 176.749163][ T9441] validate_nla: 4 callbacks suppressed [ 176.749188][ T9441] netlink: 'syz.0.1255': attribute type 12 has an invalid length. [ 176.786827][ T9443] FAULT_INJECTION: forcing a failure. [ 176.786827][ T9443] name failslab, interval 1, probability 0, space 0, times 0 [ 176.820304][ T9443] CPU: 1 UID: 0 PID: 9443 Comm: syz.3.1256 Not tainted 6.13.0-rc7-syzkaller-00118-gd640627663bf #0 [ 176.831068][ T9443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 176.841154][ T9443] Call Trace: [ 176.844459][ T9443] [ 176.847406][ T9443] dump_stack_lvl+0x241/0x360 [ 176.852112][ T9443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.857389][ T9443] ? __pfx__printk+0x10/0x10 [ 176.862115][ T9443] should_fail_ex+0x3b0/0x4e0 [ 176.866836][ T9443] should_failslab+0xac/0x100 [ 176.871548][ T9443] ? skb_clone+0x20c/0x390 [ 176.875985][ T9443] kmem_cache_alloc_noprof+0x70/0x380 [ 176.881385][ T9443] skb_clone+0x20c/0x390 [ 176.885648][ T9443] __netlink_deliver_tap+0x3cc/0x7f0 [ 176.890982][ T9443] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.896196][ T9443] netlink_deliver_tap+0x19d/0x1b0 [ 176.901329][ T9443] netlink_unicast+0x7c4/0x990 [ 176.906139][ T9443] ? __pfx_netlink_unicast+0x10/0x10 [ 176.911448][ T9443] ? __virt_addr_valid+0x45f/0x530 [ 176.916579][ T9443] ? __phys_addr_symbol+0x2f/0x70 [ 176.921899][ T9443] ? __check_object_size+0x47a/0x730 [ 176.927294][ T9443] netlink_sendmsg+0x8e4/0xcb0 [ 176.932083][ T9443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.937400][ T9443] ? aa_sock_msg_perm+0x91/0x160 [ 176.942354][ T9443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.947652][ T9443] __sock_sendmsg+0x221/0x270 [ 176.952351][ T9443] ____sys_sendmsg+0x52a/0x7e0 [ 176.957169][ T9443] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.962468][ T9443] ? __fget_files+0x2a/0x410 [ 176.967086][ T9443] ? __fget_files+0x2a/0x410 [ 176.971708][ T9443] __sys_sendmsg+0x269/0x350 [ 176.976315][ T9443] ? __pfx_lock_release+0x10/0x10 [ 176.981390][ T9443] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.986530][ T9443] ? __pfx_vfs_write+0x10/0x10 [ 176.991329][ T9443] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.997696][ T9443] ? do_syscall_64+0x100/0x230 [ 177.002486][ T9443] ? do_syscall_64+0xb6/0x230 [ 177.007187][ T9443] do_syscall_64+0xf3/0x230 [ 177.011717][ T9443] ? clear_bhb_loop+0x35/0x90 [ 177.016406][ T9443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.022328][ T9443] RIP: 0033:0x7fb273385d29 [ 177.026797][ T9443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.046429][ T9443] RSP: 002b:00007fb2711f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.054897][ T9443] RAX: ffffffffffffffda RBX: 00007fb273575fa0 RCX: 00007fb273385d29 [ 177.062889][ T9443] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 177.070882][ T9443] RBP: 00007fb2711f6090 R08: 0000000000000000 R09: 0000000000000000 [ 177.078883][ T9443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.086878][ T9443] R13: 0000000000000000 R14: 00007fb273575fa0 R15: 00007ffd625d4c08 [ 177.094889][ T9443] [ 177.254636][ T9450] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20002 [ 177.331612][ T5880] IPVS: starting estimator thread 0... [ 177.431784][ T9458] IPVS: using max 19 ests per chain, 45600 per kthread [ 177.635883][ T9476] netlink: 'syz.3.1264': attribute type 41 has an invalid length. [ 177.973790][ T9495] FAULT_INJECTION: forcing a failure. [ 177.973790][ T9495] name failslab, interval 1, probability 0, space 0, times 0 [ 177.992519][ T9494] netlink: 'syz.1.1270': attribute type 1 has an invalid length. [ 178.014930][ T9495] CPU: 1 UID: 0 PID: 9495 Comm: syz.2.1271 Not tainted 6.13.0-rc7-syzkaller-00118-gd640627663bf #0 [ 178.025701][ T9495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 178.035809][ T9495] Call Trace: [ 178.039133][ T9495] [ 178.042092][ T9495] dump_stack_lvl+0x241/0x360 [ 178.046813][ T9495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.052070][ T9495] ? __pfx__printk+0x10/0x10 [ 178.056706][ T9495] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 178.062720][ T9495] ? __pfx___might_resched+0x10/0x10 [ 178.068051][ T9495] should_fail_ex+0x3b0/0x4e0 [ 178.072770][ T9495] should_failslab+0xac/0x100 [ 178.077905][ T9495] kmem_cache_alloc_node_noprof+0x77/0x380 [ 178.083759][ T9495] ? __alloc_skb+0x1c3/0x440 [ 178.088370][ T9495] __alloc_skb+0x1c3/0x440 [ 178.092808][ T9495] ? __pfx___alloc_skb+0x10/0x10 [ 178.097792][ T9495] netlink_dump+0x239/0xe10 [ 178.102313][ T9495] ? __mutex_lock+0x37f/0xee0 [ 178.107039][ T9495] ? __pfx_netlink_dump+0x10/0x10 [ 178.112100][ T9495] ? __pfx_lock_acquire+0x10/0x10 [ 178.117149][ T9495] __netlink_dump_start+0x5a2/0x790 [ 178.122368][ T9495] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 178.128372][ T9495] rtnetlink_rcv_msg+0xb3d/0xcf0 [ 178.133334][ T9495] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 178.138929][ T9495] ? __pfx_rtnl_dumpit+0x10/0x10 [ 178.143909][ T9495] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 178.149939][ T9495] ? ref_tracker_free+0x643/0x7e0 [ 178.154998][ T9495] netlink_rcv_skb+0x1e3/0x430 [ 178.159781][ T9495] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 178.165284][ T9495] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.170610][ T9495] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.175832][ T9495] netlink_unicast+0x7f6/0x990 [ 178.180634][ T9495] ? __pfx_netlink_unicast+0x10/0x10 [ 178.185945][ T9495] ? __virt_addr_valid+0x45f/0x530 [ 178.191080][ T9495] ? __phys_addr_symbol+0x2f/0x70 [ 178.196121][ T9495] ? __check_object_size+0x47a/0x730 [ 178.201431][ T9495] netlink_sendmsg+0x8e4/0xcb0 [ 178.206224][ T9495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.211616][ T9495] ? aa_sock_msg_perm+0x91/0x160 [ 178.216576][ T9495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.221879][ T9495] __sock_sendmsg+0x221/0x270 [ 178.226588][ T9495] ____sys_sendmsg+0x52a/0x7e0 [ 178.231376][ T9495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.236719][ T9495] ? __fget_files+0x2a/0x410 [ 178.241332][ T9495] ? __fget_files+0x2a/0x410 [ 178.245968][ T9495] __sys_sendmsg+0x269/0x350 [ 178.250572][ T9495] ? __pfx_lock_release+0x10/0x10 [ 178.255628][ T9495] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.260767][ T9495] ? __pfx_vfs_write+0x10/0x10 [ 178.265566][ T9495] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 178.271923][ T9495] ? do_syscall_64+0x100/0x230 [ 178.276720][ T9495] ? do_syscall_64+0xb6/0x230 [ 178.281421][ T9495] do_syscall_64+0xf3/0x230 [ 178.285953][ T9495] ? clear_bhb_loop+0x35/0x90 [ 178.290737][ T9495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.296647][ T9495] RIP: 0033:0x7f8fd1f85d29 [ 178.301097][ T9495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.320745][ T9495] RSP: 002b:00007f8fd2d9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.329280][ T9495] RAX: ffffffffffffffda RBX: 00007f8fd2175fa0 RCX: 00007f8fd1f85d29 [ 178.337284][ T9495] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 178.345275][ T9495] RBP: 00007f8fd2d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 178.353252][ T9495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.361320][ T9495] R13: 0000000000000000 R14: 00007f8fd2175fa0 R15: 00007fff09d70528 [ 178.369404][ T9495] [ 178.449539][ T9494] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 178.471073][ T9497] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 178.527355][ T9497] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 178.535636][ T9497] gretap1: entered promiscuous mode [ 178.540921][ T9497] gretap1: entered allmulticast mode [ 178.619246][ T9507] __nla_validate_parse: 15 callbacks suppressed [ 178.619269][ T9507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1275'. [ 178.664033][ T9507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1275'. [ 178.703854][ T9507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1275'. [ 178.724221][ T9507] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1275'. [ 178.962423][ T9518] netlink: 'syz.0.1278': attribute type 1 has an invalid length. [ 179.019830][ T5845] Bluetooth: hci4: link tx timeout [ 179.027778][ T5845] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.058195][ T9517] sctp: [Deprecated]: syz.3.1280 (pid 9517) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.058195][ T9517] Use struct sctp_sack_info instead [ 179.255977][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 179.267211][ T5143] Bluetooth: hci4: link tx timeout [ 179.272491][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 179.279788][ T5143] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 179.287384][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 179.289289][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 179.312486][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 179.320440][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 179.364621][ T9526] lo speed is unknown, defaulting to 1000 [ 179.486063][ T9529] batman_adv: batadv0: Adding interface: dummy0 [ 179.492605][ T9529] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.518764][ T9529] batman_adv: batadv0: Interface activated: dummy0 [ 179.651506][ T9526] chnl_net:caif_netlink_parms(): no params data found [ 179.762842][ T9526] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.771116][ T9526] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.779375][ T9526] bridge_slave_0: entered allmulticast mode [ 179.791214][ T9526] bridge_slave_0: entered promiscuous mode [ 179.810409][ T9526] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.818050][ T9526] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.834048][ T9526] bridge_slave_1: entered allmulticast mode [ 179.841153][ T9526] bridge_slave_1: entered promiscuous mode [ 179.877410][ T9540] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.885903][ T9540] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.894229][ T9540] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.902714][ T9540] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.962903][ T9526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.987864][ T9526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.048796][ T9526] team0: Port device team_slave_0 added [ 180.082315][ T9526] team0: Port device team_slave_1 added [ 180.169917][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.184307][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.217308][ T9526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.231245][ T9548] IPv6: Can't replace route, no match found [ 180.245806][ T9526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.260015][ T9526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.295445][ T9526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.381252][ T9551] veth0: entered promiscuous mode [ 180.403913][ T9552] lo: entered promiscuous mode [ 180.408974][ T9552] lo: left promiscuous mode [ 180.425622][ T9552] veth0: left promiscuous mode [ 180.535919][ T9526] hsr_slave_0: entered promiscuous mode [ 180.573290][ T9526] hsr_slave_1: entered promiscuous mode [ 180.593152][ T9526] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.614242][ T9526] Cannot create hsr debugfs directory [ 180.636972][ T9567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1293'. [ 180.655336][ T9567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1293'. [ 180.666079][ T9567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1293'. [ 180.676064][ T9567] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1293'. [ 180.878099][ T9575] bridge0: port 3(gretap0) entered disabled state [ 180.933973][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'. [ 180.942910][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'. [ 181.047804][ T9526] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.053905][ T5845] Bluetooth: hci4: command 0x0405 tx timeout [ 181.088916][ T9526] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.128205][ T9581] sctp: [Deprecated]: syz.3.1298 (pid 9581) Use of int in max_burst socket option. [ 181.128205][ T9581] Use struct sctp_assoc_value instead [ 181.259881][ T9526] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.291244][ T9526] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.384043][ T5840] Bluetooth: hci1: command tx timeout [ 181.516081][ T9526] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.553960][ T9526] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.605210][ T9592] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.695483][ T9526] team0: Port device netdevsim0 removed [ 181.714187][ T9526] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 181.754795][ T9526] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.807640][ T9611] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.846487][ T9616] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.990607][ T9526] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.007213][ T9526] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 182.066603][ T9526] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.088177][ T9526] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.287206][ T9526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.332694][ T9526] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.350617][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.357891][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.402844][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.410111][ T8000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.692113][ T9653] netlink: 'syz.3.1323': attribute type 1 has an invalid length. [ 182.785834][ T9653] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 182.896334][ T9653] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 182.920753][ T9653] bond0: (slave batadv1): Enslaving as a backup interface with an up link [ 182.963229][ T9526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.020885][ T9668] tap0: tun_chr_ioctl cmd 1074025676 [ 183.033129][ T9668] tap0: owner set to 0 [ 183.241353][ T9526] veth0_vlan: entered promiscuous mode [ 183.281253][ T9526] veth1_vlan: entered promiscuous mode [ 183.355289][ T9526] veth0_macvtap: entered promiscuous mode [ 183.393075][ T9526] veth1_macvtap: entered promiscuous mode [ 183.444596][ T5840] Bluetooth: hci1: command tx timeout [ 183.456584][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.474792][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.485390][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.501322][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.524398][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.540741][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.551280][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.562486][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.578387][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.616270][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.628053][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.638627][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.649715][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.660367][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.671465][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.682074][ T9526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.695709][ T9526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.715482][ T9526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.768062][ T9526] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.778370][ T9526] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.795240][ T9526] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.807817][ T9526] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.929865][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.947247][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.008738][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.028541][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.322781][ T9717] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 184.855990][ T9739] __nla_validate_parse: 6 callbacks suppressed [ 184.856013][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1350'. [ 184.943765][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1350'. [ 184.952903][ T9739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1350'. [ 185.108918][ T9743] syzkaller0: entered promiscuous mode [ 185.118134][ T9743] syzkaller0: entered allmulticast mode [ 185.132549][ T9753] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 185.153892][ T9753] syzkaller0: Linktype set failed because interface is up [ 185.162917][ T2994] syzkaller0: tun_net_xmit 48 [ 185.181790][ T9750] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20000 [ 185.330308][ T9760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1359'. [ 185.514886][ T9766] syzkaller1: entered promiscuous mode [ 185.528781][ T9766] syzkaller1: entered allmulticast mode [ 185.628319][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1362'. [ 185.982946][ T9772] netlink: 'syz.1.1363': attribute type 1 has an invalid length. [ 185.992625][ T9772] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1363'. [ 187.718817][ T9777] ax25_connect(): syz.3.1365 uses autobind, please contact jreuter@yaina.de [ 187.725609][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1366'. [ 187.743494][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1366'. [ 187.938723][ T9028] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.162661][ T9028] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.310249][ T9028] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.407101][ T9801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.436505][ T9028] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.639100][ T9028] bridge_slave_1: left allmulticast mode [ 188.646556][ T9028] bridge_slave_1: left promiscuous mode [ 188.658675][ T9028] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.670999][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.682586][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.691305][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.700968][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.712018][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 188.722063][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 188.731659][ T9028] bridge_slave_0: left allmulticast mode [ 188.742260][ T9028] bridge_slave_0: left promiscuous mode [ 188.767918][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.329703][ T9028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.343346][ T9028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.362032][ T9028] bond0 (unregistering): Released all slaves [ 189.753612][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1386'. [ 189.764427][ T9806] lo speed is unknown, defaulting to 1000 [ 189.898808][ T9831] bridge_slave_0: default FDB implementation only supports local addresses [ 190.230381][ T9848] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 190.395310][ T9028] hsr_slave_0: left promiscuous mode [ 190.396566][ T9851] sctp: [Deprecated]: syz.3.1391 (pid 9851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.396566][ T9851] Use struct sctp_sack_info instead [ 190.417695][ T9028] hsr_slave_1: left promiscuous mode [ 190.430090][ T9028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.456562][ T9028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.478583][ T9028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.486923][ T9028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.522297][ T9857] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1393'. [ 190.535154][ T9028] veth1_macvtap: left promiscuous mode [ 190.543580][ T9028] veth0_macvtap: left promiscuous mode [ 190.557739][ T9028] veth1_vlan: left promiscuous mode [ 190.563283][ T9028] veth0_vlan: left promiscuous mode [ 190.824485][ T5845] Bluetooth: hci1: command tx timeout [ 191.158532][ T9028] team0 (unregistering): Port device team_slave_1 removed [ 191.204705][ T9028] team0 (unregistering): Port device team_slave_0 removed [ 191.686759][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 191.759441][ T9806] chnl_net:caif_netlink_parms(): no params data found [ 191.850967][ T9864] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 192.045673][ T9806] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.052850][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.124642][ T9806] bridge_slave_0: entered allmulticast mode [ 192.171055][ T9806] bridge_slave_0: entered promiscuous mode [ 192.216270][ T9806] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.244855][ T9806] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.252178][ T9806] bridge_slave_1: entered allmulticast mode [ 192.255468][ T9879] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1402'. [ 192.283979][ T9806] bridge_slave_1: entered promiscuous mode [ 192.376154][ T9886] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 192.387394][ T9886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.456593][ T9806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.480450][ T9806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.665061][ T9806] team0: Port device team_slave_0 added [ 192.678683][ T9896] netlink: 'syz.0.1407': attribute type 1 has an invalid length. [ 192.689517][ T9806] team0: Port device team_slave_1 added [ 192.705212][ T9896] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1407'. [ 192.784814][ T9899] netlink: 'syz.1.1408': attribute type 4 has an invalid length. [ 192.885995][ T5845] Bluetooth: hci1: command tx timeout [ 192.904781][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.912044][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.940822][ T9806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.953807][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.960841][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.986900][ T9806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.170176][ T9806] hsr_slave_0: entered promiscuous mode [ 193.236316][ T9806] hsr_slave_1: entered promiscuous mode [ 193.265008][ T9806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.272667][ T9806] Cannot create hsr debugfs directory [ 193.674768][ T9935] IPVS: Unknown mcast interface: macvlan0 [ 194.137140][ T9806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.157124][ T9806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.208032][ T9806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.246117][ T9806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.313384][ T9956] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1432'. [ 194.464537][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 194.499022][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 194.511681][ T9806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.550076][ T9968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1435'. [ 194.565151][ T9968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1435'. [ 194.593129][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1435'. [ 194.641269][ T9806] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.718395][ T9028] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.725600][ T9028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.832024][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.839319][ T9028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.963928][ T5845] Bluetooth: hci1: command tx timeout [ 194.976891][ T9806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.995380][ T9978] netlink: 'syz.1.1441': attribute type 1 has an invalid length. [ 195.003223][ T9978] netlink: 'syz.1.1441': attribute type 2 has an invalid length. [ 195.076381][ T9978] netlink: 'syz.1.1441': attribute type 1 has an invalid length. [ 195.111100][ T9978] netlink: 'syz.1.1441': attribute type 2 has an invalid length. [ 195.464366][ T9806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.062859][ T9806] veth0_vlan: entered promiscuous mode [ 196.108257][ T9806] veth1_vlan: entered promiscuous mode [ 196.171001][ T9806] veth0_macvtap: entered promiscuous mode [ 196.197414][ T9806] veth1_macvtap: entered promiscuous mode [ 196.235223][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.262619][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.272913][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.284012][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.294438][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.305451][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.315733][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.326721][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.337864][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.349962][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.360752][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.370919][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.381755][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.391894][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.402682][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.412868][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.423395][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.436003][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.480571][T10037] bridge_slave_0: default FDB implementation only supports local addresses [ 196.506311][ T9806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.516131][ T9806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.525236][ T9806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.535294][ T9806] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.739375][T10052] __nla_validate_parse: 3 callbacks suppressed [ 196.739400][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1463'. [ 196.761561][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.784295][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.817848][T10051] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1462'. [ 196.870775][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.884807][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.045681][ T5845] Bluetooth: hci1: command tx timeout [ 197.202676][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1469'. [ 197.474427][T10091] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1475'. [ 197.555091][T10096] block nbd2: not configured, cannot reconfigure [ 197.803177][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 198.006538][T10117] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.128711][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'. [ 198.218925][T10125] netlink: 'syz.2.1484': attribute type 3 has an invalid length. [ 198.264939][T10125] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1484'. [ 198.385850][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.414371][T10130] 8021q: VLANs not supported on ipvlan1 [ 198.467901][T10130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'. [ 198.467901][T10129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1486'. [ 198.905505][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.068023][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1494'. [ 199.086568][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.122943][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 199.134704][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.155213][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.164789][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.172562][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 199.187709][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.216501][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.263506][T10159] lo speed is unknown, defaulting to 1000 [ 199.434584][ T35] bridge_slave_1: left allmulticast mode [ 199.440464][ T35] bridge_slave_1: left promiscuous mode [ 199.464962][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.478336][ T35] bridge_slave_0: left allmulticast mode [ 199.494359][ T35] bridge_slave_0: left promiscuous mode [ 199.500224][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.957586][T10174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 200.151204][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.188984][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.204930][ T35] bond0 (unregistering): Released all slaves [ 200.465728][T10185] netlink: 'syz.3.1506': attribute type 3 has an invalid length. [ 201.007229][T10159] chnl_net:caif_netlink_parms(): no params data found [ 201.137875][ T35] hsr_slave_0: left promiscuous mode [ 201.174410][ T35] hsr_slave_1: left promiscuous mode [ 201.196260][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.212377][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.237192][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.254768][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.279656][ T35] veth1_macvtap: left promiscuous mode [ 201.286216][ T35] veth0_macvtap: left promiscuous mode [ 201.291956][ T35] veth1_vlan: left promiscuous mode [ 201.297562][ T5143] Bluetooth: hci1: command tx timeout [ 201.297624][ T35] veth0_vlan: left promiscuous mode [ 201.818628][T10236] netlink: 'syz.0.1519': attribute type 3 has an invalid length. [ 201.846262][ T5143] Bluetooth: hci3: command 0x0406 tx timeout [ 201.854932][ T5143] Bluetooth: hci0: command 0x080f tx timeout [ 201.861899][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 201.989769][T10241] __nla_validate_parse: 3 callbacks suppressed [ 201.989786][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1520'. [ 202.086945][ T35] team0 (unregistering): Port device team_slave_1 removed [ 202.132000][ T35] team0 (unregistering): Port device team_slave_0 removed [ 202.629398][T10218] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.911078][T10218] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.974006][T10249] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.982882][T10249] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.991893][T10249] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.000700][T10249] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.050142][T10249] vxlan0: entered promiscuous mode [ 203.061137][T10249] vxlan0: entered allmulticast mode [ 203.146106][T10262] x_tables: duplicate underflow at hook 1 [ 203.154554][T10262] x_tables: duplicate underflow at hook 2 [ 203.169873][T10218] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.198438][T10159] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.206187][T10159] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.213460][T10159] bridge_slave_0: entered allmulticast mode [ 203.222100][T10159] bridge_slave_0: entered promiscuous mode [ 203.311373][T10159] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.333925][T10159] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.342401][T10159] bridge_slave_1: entered allmulticast mode [ 203.361107][T10159] bridge_slave_1: entered promiscuous mode [ 203.375573][ T5845] Bluetooth: hci1: command tx timeout [ 203.422046][T10218] team0: Port device netdevsim0 removed [ 203.440268][T10218] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.481007][T10270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'. [ 203.566575][T10159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.609301][T10218] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.639601][T10159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.666977][T10218] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.751907][T10279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1529'. [ 203.769101][T10218] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.788866][T10159] team0: Port device team_slave_0 added [ 203.803378][T10218] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.815687][T10159] team0: Port device team_slave_1 added [ 203.894462][T10159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.901780][T10159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.912816][T10282] syz.1.1529 uses old SIOCAX25GETINFO [ 203.928327][T10281] netlink: 'syz.3.1530': attribute type 3 has an invalid length. [ 203.958070][T10282] netlink: 'syz.1.1529': attribute type 2 has an invalid length. [ 203.969003][T10284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1531'. [ 203.986127][T10159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.010178][T10159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.031914][T10159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.081744][T10159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.123280][T10284] lo speed is unknown, defaulting to 1000 [ 204.162377][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 204.175935][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1533'. [ 204.254900][T10159] hsr_slave_0: entered promiscuous mode [ 204.274869][T10159] hsr_slave_1: entered promiscuous mode [ 204.292600][T10159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.324374][T10159] Cannot create hsr debugfs directory [ 204.659646][T10299] 9: renamed from ipvlan1 [ 204.841574][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1531'. [ 205.050108][T10310] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 205.444363][ T5845] Bluetooth: hci1: command tx timeout [ 205.549943][T10159] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 205.582222][T10159] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 205.583415][T10332] netlink: 'syz.2.1543': attribute type 3 has an invalid length. [ 205.632010][T10159] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 205.681219][T10159] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 205.771290][T10336] netlink: 'syz.3.1544': attribute type 3 has an invalid length. [ 205.832192][T10338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1545'. [ 205.951979][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'. [ 205.986434][T10344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.013373][T10344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.206564][T10159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.241405][T10159] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.279954][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.287173][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.319410][ T8000] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.326707][ T8000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.672131][T10159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.716977][T10374] netlink: 'syz.2.1557': attribute type 3 has an invalid length. [ 206.786909][T10379] block nbd0: not configured, cannot reconfigure [ 206.986988][T10386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1560'. [ 207.143545][T10159] veth0_vlan: entered promiscuous mode [ 207.213447][T10159] veth1_vlan: entered promiscuous mode [ 207.307159][T10159] veth0_macvtap: entered promiscuous mode [ 207.336208][T10159] veth1_macvtap: entered promiscuous mode [ 207.363359][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.405182][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.437028][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.471548][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.500687][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.512432][T10409] xt_l2tp: v2 doesn't support IP mode [ 207.522355][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.534857][ T5836] Bluetooth: hci1: command tx timeout [ 207.548743][T10159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.580253][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.595348][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.607307][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.619209][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.630230][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.641840][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.653180][T10159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.665599][T10159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.677848][T10159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.695413][T10414] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 207.708455][T10159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.723207][T10159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.735278][T10159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.744783][T10159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.899520][ T8002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.932996][ T8002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.977870][ T8000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.987533][ T8000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.220007][T10427] tipc: Enabling of bearer rejected, failed to enable media [ 208.346262][T10432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1572'. [ 208.794611][ T9028] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.911143][ T9028] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.202304][ T9028] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.592061][ T9028] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.777231][ T9028] bridge_slave_1: left allmulticast mode [ 209.793051][ T9028] bridge_slave_1: left promiscuous mode [ 209.831195][ T9028] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.857575][ T9028] bridge_slave_0: left allmulticast mode [ 209.863304][ T9028] bridge_slave_0: left promiscuous mode [ 209.884014][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.061657][T10480] netlink: 'syz.3.1591': attribute type 1 has an invalid length. [ 210.072813][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 210.092058][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.100982][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.124770][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.135059][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.143013][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.183419][T10484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1591'. [ 210.745177][ T9028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.763814][ T9028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.775704][ T9028] bond0 (unregistering): Released all slaves [ 210.817618][T10480] bond2: entered promiscuous mode [ 210.828729][T10480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.926955][T10483] 8021q: adding VLAN 0 to HW filter on device bond2 [ 210.934987][T10483] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 210.945485][T10483] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 210.957681][T10483] bond2: (slave ip6gre1): making interface the new active one [ 210.991840][T10483] ip6gre1: entered promiscuous mode [ 211.000433][T10483] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 211.016863][T10491] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1594'. [ 211.321399][T10484] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 211.332615][T10484] ip6gre1: left promiscuous mode [ 211.348262][T10484] bond2 (unregistering): Released all slaves [ 211.487790][T10481] lo speed is unknown, defaulting to 1000 [ 212.255647][ T5845] Bluetooth: hci1: command tx timeout [ 212.337731][ T9028] hsr_slave_0: left promiscuous mode [ 212.362149][ T9028] hsr_slave_1: left promiscuous mode [ 212.369576][ T9028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.378127][ T9028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.387041][ T9028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.395435][ T9028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.421176][ T9028] veth1_macvtap: left promiscuous mode [ 212.427499][ T9028] veth0_macvtap: left promiscuous mode [ 212.433114][ T9028] veth1_vlan: left promiscuous mode [ 212.440398][ T9028] veth0_vlan: left promiscuous mode [ 212.991640][ T9028] team0 (unregistering): Port device team_slave_1 removed [ 213.052917][ T9028] team0 (unregistering): Port device team_slave_0 removed [ 213.560093][T10481] chnl_net:caif_netlink_parms(): no params data found [ 213.832800][T10481] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.840800][T10481] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.860110][T10481] bridge_slave_0: entered allmulticast mode [ 213.868216][T10481] bridge_slave_0: entered promiscuous mode [ 213.905071][T10481] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.915310][T10481] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.922619][T10481] bridge_slave_1: entered allmulticast mode [ 213.932460][T10481] bridge_slave_1: entered promiscuous mode [ 213.941872][T10541] tipc: Enabled bearer , priority 0 [ 214.046601][T10481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.066452][T10555] netlink: 'syz.1.1611': attribute type 29 has an invalid length. [ 214.082302][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1611'. [ 214.128163][T10541] syzkaller0: entered promiscuous mode [ 214.134402][T10541] syzkaller0: entered allmulticast mode [ 214.140617][T10541] tipc: Resetting bearer [ 214.149494][T10481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.194356][T10540] tipc: Resetting bearer [ 214.334213][ T5845] Bluetooth: hci1: command tx timeout [ 214.841160][T10561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1615'. [ 215.039787][ T974] tipc: Node number set to 1 [ 216.413941][ T5845] Bluetooth: hci1: command tx timeout [ 216.567776][T10540] tipc: Disabling bearer [ 216.592607][T10561] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1615'. [ 216.636670][T10481] team0: Port device team_slave_0 added [ 216.695375][T10481] team0: Port device team_slave_1 added [ 216.782976][T10575] netlink: 'syz.0.1620': attribute type 4 has an invalid length. [ 216.837991][T10481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.845913][T10577] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1621'. [ 216.857100][T10481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.887963][T10481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.929759][T10481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.940708][T10481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.969776][T10481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.984668][T10580] tipc: Started in network mode [ 216.989589][T10580] tipc: Node identity 526058142e2d, cluster identity 4711 [ 217.017278][T10580] tipc: Enabled bearer , priority 0 [ 217.120113][T10572] syzkaller0: entered promiscuous mode [ 217.126224][T10572] syzkaller0: entered allmulticast mode [ 217.132600][T10572] tipc: Resetting bearer [ 217.156375][T10570] tipc: Resetting bearer [ 217.789499][T10595] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 218.138363][ T5880] tipc: Node number set to 2085443604 [ 218.494100][ T5845] Bluetooth: hci1: command tx timeout [ 219.230687][T10570] tipc: Disabling bearer [ 219.308211][T10606] netlink: 1256 bytes leftover after parsing attributes in process `syz.3.1627'. [ 219.417076][T10481] hsr_slave_0: entered promiscuous mode [ 219.433040][T10481] hsr_slave_1: entered promiscuous mode [ 219.454957][T10481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.462588][T10481] Cannot create hsr debugfs directory [ 219.491547][T10612] netlink: 'syz.3.1628': attribute type 1 has an invalid length. [ 219.552675][T10619] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1630'. [ 219.591703][T10612] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 219.773323][T10629] netlink: 'syz.2.1632': attribute type 4 has an invalid length. [ 219.821063][T10632] netlink: 'syz.2.1632': attribute type 4 has an invalid length. [ 220.049694][T10645] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1638'. [ 220.602944][T10481] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.657355][T10481] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.697970][T10481] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.750008][T10481] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.942837][T10481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.965181][T10481] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.989296][T10683] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1651'. [ 221.036107][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.043283][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.085536][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.092712][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.190412][T10481] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.224607][T10481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.277005][T10698] netlink: 'syz.0.1654': attribute type 1 has an invalid length. [ 221.294570][T10698] netlink: 'syz.0.1654': attribute type 4 has an invalid length. [ 221.326606][T10698] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.1654'. [ 221.722501][T10481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.045774][T10739] netlink: 892 bytes leftover after parsing attributes in process `syz.0.1666'. [ 222.130352][T10481] veth0_vlan: entered promiscuous mode [ 222.171330][T10481] veth1_vlan: entered promiscuous mode [ 222.234325][T10481] veth0_macvtap: entered promiscuous mode [ 222.262602][T10481] veth1_macvtap: entered promiscuous mode [ 222.317477][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.331081][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.342649][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.353732][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.364231][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.375141][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.387705][T10481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.397478][T10714] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 222.425055][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.462210][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.485805][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.503561][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.526274][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.546425][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.557596][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.577652][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.593094][T10481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.653180][T10481] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.683351][T10481] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.692614][T10481] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.711807][T10481] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.881280][T10761] dvmrp8: entered allmulticast mode [ 222.922037][T10760] dvmrp8: left allmulticast mode [ 222.923845][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.944389][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.027965][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.048180][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.413555][T10783] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1682'. [ 223.466182][T10787] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1684'. [ 223.636396][T10797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1688'. [ 223.718633][T10801] x_tables: duplicate underflow at hook 3 [ 223.728630][T10800] x_tables: duplicate underflow at hook 3 [ 223.791044][T10801] x_tables: duplicate underflow at hook 1 [ 223.890132][T10811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1692'. [ 224.141686][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.166670][T10821] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 224.174154][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.179080][T10822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.238832][ T9028] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.658176][ T9028] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.819711][ T9028] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.872067][ T9028] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.174579][ T9028] bridge_slave_1: left allmulticast mode [ 225.181520][ T9028] bridge_slave_1: left promiscuous mode [ 225.200953][ T9028] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.249838][T10844] netlink: 'syz.3.1704': attribute type 1 has an invalid length. [ 225.272531][T10844] __nla_validate_parse: 2 callbacks suppressed [ 225.272627][T10844] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1704'. [ 225.385005][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.419948][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.428965][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.430556][ T9028] bridge_slave_0: left allmulticast mode [ 225.443750][ T9028] bridge_slave_0: left promiscuous mode [ 225.450094][ T9028] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.480495][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.490842][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 225.499792][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.901369][ T9028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.915177][ T9028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.931256][ T9028] bond0 (unregistering): Released all slaves [ 226.142583][T10847] lo speed is unknown, defaulting to 1000 [ 226.165407][ T29] audit: type=1107 audit(1737441929.178:2): pid=10857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ai?\vL9Etzk}pP~l' [ 226.191943][T10862] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1708'. [ 226.570573][T10878] tc_dump_action: action bad kind [ 226.575792][T10879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.618737][T10882] vxcan0: tx drop: invalid da for name 0x0000000000000004 [ 226.940079][ T9028] hsr_slave_0: left promiscuous mode [ 226.966477][ T9028] hsr_slave_1: left promiscuous mode [ 226.972796][ T9028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.981436][ T9028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.025561][ T9028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.033323][ T9028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.072861][ T9028] veth1_macvtap: left promiscuous mode [ 227.088825][ T9028] veth0_macvtap: left promiscuous mode [ 227.099044][ T9028] veth1_vlan: left promiscuous mode [ 227.111648][ T9028] veth0_vlan: left promiscuous mode [ 227.282363][T10903] netlink: 'syz.0.1719': attribute type 10 has an invalid length. [ 227.527285][ T5845] Bluetooth: hci1: command tx timeout [ 227.647316][ T9028] team0 (unregistering): Port device team_slave_1 removed [ 227.699864][ T9028] team0 (unregistering): Port device team_slave_0 removed [ 228.171894][T10847] chnl_net:caif_netlink_parms(): no params data found [ 228.188365][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 228.315280][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1722'. [ 228.339553][T10906] bridge_slave_1: left allmulticast mode [ 228.354663][T10906] bridge_slave_1: left promiscuous mode [ 228.365172][T10906] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.405699][T10906] bridge_slave_0: left allmulticast mode [ 228.442956][T10906] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.793939][T10925] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 228.840534][T10934] netlink: 'syz.3.1728': attribute type 1 has an invalid length. [ 228.852168][T10847] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.860405][T10847] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.868451][T10847] bridge_slave_0: entered allmulticast mode [ 228.876178][T10847] bridge_slave_0: entered promiscuous mode [ 228.928820][T10934] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.937239][T10847] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.945099][T10847] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.952436][T10847] bridge_slave_1: entered allmulticast mode [ 228.960841][T10847] bridge_slave_1: entered promiscuous mode [ 229.005339][T10930] gretap2: entered promiscuous mode [ 229.013256][T10930] bond2: (slave gretap2): making interface the new active one [ 229.031335][T10930] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 229.128522][T10847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.173141][T10941] wg2: entered promiscuous mode [ 229.192769][T10941] wg2: entered allmulticast mode [ 229.217820][T10847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.317321][T10847] team0: Port device team_slave_0 added [ 229.337302][T10847] team0: Port device team_slave_1 added [ 229.416636][T10847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.433279][T10847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.477248][T10847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.499159][T10847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.515633][T10847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.576968][T10847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.604699][ T5845] Bluetooth: hci1: command tx timeout [ 229.640358][T10961] vlan0: entered promiscuous mode [ 229.664781][T10961] vlan0: entered allmulticast mode [ 229.669989][T10961] hsr_slave_1: entered allmulticast mode [ 229.744809][T10847] hsr_slave_0: entered promiscuous mode [ 229.759695][T10847] hsr_slave_1: entered promiscuous mode [ 229.773082][T10847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.781764][T10847] Cannot create hsr debugfs directory [ 230.136384][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1743'. [ 230.387413][T10997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1748'. [ 230.548393][T10847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 230.559980][T11004] netlink: 'syz.0.1751': attribute type 3 has an invalid length. [ 230.573466][T10847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 230.586930][T10847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 230.597968][T11005] ebt_limit: overflow, try lower: 570423552/2483027968 [ 230.618216][T10847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 230.815826][T10847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.857831][T10847] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.891365][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.898606][ T8000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.951991][ T7994] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.959232][ T7994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.125644][T11016] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 231.317993][T11030] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 231.412669][T10847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.584940][T11042] netlink: 'syz.3.1762': attribute type 3 has an invalid length. [ 231.685054][ T5845] Bluetooth: hci1: command tx timeout [ 232.046382][T10847] veth0_vlan: entered promiscuous mode [ 232.060301][T10847] veth1_vlan: entered promiscuous mode [ 232.090101][T10847] veth0_macvtap: entered promiscuous mode [ 232.100975][T10847] veth1_macvtap: entered promiscuous mode [ 232.128056][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.139713][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.150489][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.161511][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.172329][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.183474][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.195595][T10847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.218451][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.230092][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.240801][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.252441][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.263313][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.274447][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.285286][T10847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.296072][T10847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.307191][T10847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.318846][T10847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.328295][T10847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.338151][T10847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.348052][T10847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.554927][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.565188][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.630454][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.656731][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.387617][T11121] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20000 [ 233.870455][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 233.894534][T11144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1793'. [ 233.919032][T11144] netlink: 'syz.3.1793': attribute type 5 has an invalid length. [ 234.092116][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1797'. [ 234.232615][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.792101][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.228394][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.421307][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.474400][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.505239][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.538305][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.632547][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.714694][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 235.725522][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.830825][T11180] lo speed is unknown, defaulting to 1000 [ 235.996320][ T52] bridge_slave_1: left allmulticast mode [ 236.002174][ T52] bridge_slave_1: left promiscuous mode [ 236.011336][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.020134][T11204] netlink: 'syz.3.1814': attribute type 32 has an invalid length. [ 236.029561][T11204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1814'. [ 236.085248][ T52] bridge_slave_0: left allmulticast mode [ 236.090973][ T52] bridge_slave_0: left promiscuous mode [ 236.097999][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.551963][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.566441][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.584743][ T52] bond0 (unregistering): Released all slaves [ 236.607353][T11204] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 236.824674][T11221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1818'. [ 236.835703][T11221] netlink: 'syz.3.1818': attribute type 3 has an invalid length. [ 236.996927][T11226] FAULT_INJECTION: forcing a failure. [ 236.996927][T11226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.015980][T11223] netlink: 'syz.1.1819': attribute type 1 has an invalid length. [ 237.026782][T11223] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1819'. [ 237.060742][T11230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.062697][T11226] CPU: 1 UID: 0 PID: 11226 Comm: syz.2.1820 Not tainted 6.13.0-rc7-syzkaller-00118-gd640627663bf #0 [ 237.080713][T11226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 237.090812][T11226] Call Trace: [ 237.094131][T11226] [ 237.097118][T11226] dump_stack_lvl+0x241/0x360 [ 237.101855][T11226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.107087][T11226] ? __pfx__printk+0x10/0x10 [ 237.111715][T11226] ? __pfx_lock_release+0x10/0x10 [ 237.116783][T11226] should_fail_ex+0x3b0/0x4e0 [ 237.121520][T11226] _copy_from_user+0x2f/0xc0 [ 237.126136][T11226] copy_msghdr_from_user+0xae/0x680 [ 237.131361][T11226] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 237.137226][T11226] ? __fget_files+0x2a/0x410 [ 237.141961][T11226] ? __fget_files+0x2a/0x410 [ 237.146589][T11226] __sys_sendmsg+0x209/0x350 [ 237.151244][T11226] ? __pfx_lock_release+0x10/0x10 [ 237.156295][T11226] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.161441][T11226] ? __pfx_vfs_write+0x10/0x10 [ 237.166257][T11226] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.172647][T11226] ? do_syscall_64+0x100/0x230 [ 237.177453][T11226] ? do_syscall_64+0xb6/0x230 [ 237.182160][T11226] do_syscall_64+0xf3/0x230 [ 237.186686][T11226] ? clear_bhb_loop+0x35/0x90 [ 237.191384][T11226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.197302][T11226] RIP: 0033:0x7f8fd1f85d29 [ 237.201737][T11226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.221364][T11226] RSP: 002b:00007f8fd2d9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.229824][T11226] RAX: ffffffffffffffda RBX: 00007f8fd2175fa0 RCX: 00007f8fd1f85d29 [ 237.237808][T11226] RDX: 0000000024040004 RSI: 0000000020000000 RDI: 0000000000000003 [ 237.245790][T11226] RBP: 00007f8fd2d9c090 R08: 0000000000000000 R09: 0000000000000000 [ 237.253770][T11226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.261749][T11226] R13: 0000000000000000 R14: 00007f8fd2175fa0 R15: 00007fff09d70528 [ 237.269744][T11226] [ 237.296193][T11232] atomic_op ffff88805dfec198 conn xmit_atomic 0000000000000000 [ 237.323000][T11235] netlink: 'syz.0.1824': attribute type 1 has an invalid length. [ 237.342213][T11235] netlink: 'syz.0.1824': attribute type 10 has an invalid length. [ 237.350556][T11235] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1824'. [ 237.476765][T11247] siw: device registration error -23 [ 237.675961][T11254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1829'. [ 237.719046][T11180] chnl_net:caif_netlink_parms(): no params data found [ 237.774045][ T5845] Bluetooth: hci1: command tx timeout [ 237.861403][T11257] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1831'. [ 237.915058][ T52] hsr_slave_0: left promiscuous mode [ 237.927922][ T52] hsr_slave_1: left promiscuous mode [ 237.943135][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.951726][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.960271][T11266] sctp: [Deprecated]: syz.2.1833 (pid 11266) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.960271][T11266] Use struct sctp_sack_info instead [ 237.981183][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.990446][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.026905][ T52] veth1_macvtap: left promiscuous mode [ 238.032505][ T52] veth0_macvtap: left promiscuous mode [ 238.053034][ T52] veth1_vlan: left promiscuous mode [ 238.059482][ T52] veth0_vlan: left promiscuous mode [ 238.600182][ T52] team0 (unregistering): Port device team_slave_1 removed [ 238.650640][ T52] team0 (unregistering): Port device team_slave_0 removed [ 239.282891][T11279] lo speed is unknown, defaulting to 1000 [ 239.377022][T11180] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.401760][T11180] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.445673][T11180] bridge_slave_0: entered allmulticast mode [ 239.464418][T11180] bridge_slave_0: entered promiscuous mode [ 239.489638][T11180] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.513405][T11180] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.544664][T11180] bridge_slave_1: entered allmulticast mode [ 239.552203][T11180] bridge_slave_1: entered promiscuous mode [ 239.715007][T11180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.738956][T11180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.751257][T11304] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 239.844040][ T5845] Bluetooth: hci1: command tx timeout [ 239.956996][T11307] v: renamed from veth1_virt_wifi (while UP) [ 239.991306][T11180] team0: Port device team_slave_0 added [ 240.000115][T11180] team0: Port device team_slave_1 added [ 240.041221][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1845'. [ 240.167870][T11180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.189569][T11180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.222788][T11180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.238396][T11180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.251500][T11180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.278913][T11180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.309516][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1847'. [ 240.391880][T11180] hsr_slave_0: entered promiscuous mode [ 240.427371][T11180] hsr_slave_1: entered promiscuous mode [ 240.446233][T11180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.459917][T11180] Cannot create hsr debugfs directory [ 240.887387][T11341] xt_nat: multiple ranges no longer supported [ 240.928544][T11343] netlink: 'syz.3.1854': attribute type 10 has an invalid length. [ 240.980806][T11345] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1854'. [ 241.042659][T11343] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 241.204565][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1858'. [ 241.235704][T11360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1858'. [ 241.399230][T11180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 241.440777][T11180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 241.475721][T11180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 241.527692][T11180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 241.623389][T11376] netlink: 'syz.0.1863': attribute type 1 has an invalid length. [ 241.662287][T11380] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1865'. [ 241.712076][T11376] bond5: entered promiscuous mode [ 241.727626][T11376] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.770659][T11376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'. [ 241.783444][T11180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.845839][T11384] 8021q: adding VLAN 0 to HW filter on device bond5 [ 241.853209][T11384] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 241.864699][T11384] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 241.878296][T11384] bond5: (slave ip6gre1): making interface the new active one [ 241.886564][T11384] ip6gre1: entered promiscuous mode [ 241.893199][T11384] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 241.923908][ T5845] Bluetooth: hci1: command tx timeout [ 242.118064][T11376] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 242.127131][T11376] ip6gre1: left promiscuous mode [ 242.135532][T11376] bond5 (unregistering): Released all slaves [ 242.174069][T11400] macvlan0: entered promiscuous mode [ 242.274856][T11180] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.284329][T11404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 242.321687][T11399] macvlan0: left promiscuous mode [ 242.337619][ T2994] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.344881][ T2994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.380653][ T9028] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.387836][ T9028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.415256][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'. [ 242.434863][T11409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1872'. [ 242.845610][T11180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.924576][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1877'. [ 243.165836][T11442] batadv_slave_0: entered promiscuous mode [ 243.181004][T11442] trusted_key: syz.0.1881 sent an empty control message without MSG_MORE. [ 243.280657][T11180] veth0_vlan: entered promiscuous mode [ 243.321299][T11450] netlink: 'syz.3.1883': attribute type 3 has an invalid length. [ 243.402501][T11180] veth1_vlan: entered promiscuous mode [ 243.450171][T11180] veth0_macvtap: entered promiscuous mode [ 243.459854][T11180] veth1_macvtap: entered promiscuous mode [ 243.475952][T11180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.486497][T11180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.496784][T11180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.507524][T11180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.517736][T11180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.528783][T11180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.539904][T11180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.550020][T11180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.560825][T11180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.570963][T11180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.581725][T11180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.591817][T11180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.602945][T11180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.613434][T11180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.624426][T11180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.636355][T11180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.692952][T11180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.703275][T11180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.727335][T11180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.750897][T11180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.940398][ T8000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.971599][ T8000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.004899][ T5845] Bluetooth: hci1: command tx timeout [ 244.040125][ T2994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.081104][ T2994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.102623][T11481] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1892'. [ 244.536562][T11499] tls_set_device_offload: netdev not found [ 244.683534][T11499] IPVS: Unknown mcast interface: syzkaller0 [ 244.696604][T11512] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 244.860506][T11520] pimreg: entered allmulticast mode [ 244.996411][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1905'. [ 245.005669][T11527] netlink: 'syz.0.1905': attribute type 3 has an invalid length. [ 245.025304][T11528] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1906'. [ 245.040290][T11528] netlink: 'syz.3.1906': attribute type 6 has an invalid length. [ 245.051650][T11528] netlink: 'syz.3.1906': attribute type 5 has an invalid length. [ 245.306689][T11538] nbd: socks must be embedded in a SOCK_ITEM attr [ 245.519806][T11546] netlink: 'syz.3.1911': attribute type 3 has an invalid length. [ 245.673130][T11540] netlink: 'syz.2.1909': attribute type 4 has an invalid length. [ 245.909451][ T2994] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.393042][ T2994] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.472441][ T2994] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.494900][ T5845] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 246.548417][ T2994] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.632399][ T2994] bridge_slave_1: left allmulticast mode [ 246.639350][ T2994] bridge_slave_1: left promiscuous mode [ 246.645499][ T2994] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.656827][ T2994] bridge_slave_0: left allmulticast mode [ 246.662522][ T2994] bridge_slave_0: left promiscuous mode [ 246.668422][ T2994] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.185457][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.200286][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.218185][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.278396][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.287825][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 247.296417][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.647459][ T2994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.662065][ T2994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.673343][ T2994] bond0 (unregistering): Released all slaves [ 247.739468][T11587] lo speed is unknown, defaulting to 1000 [ 248.574387][ T2994] hsr_slave_0: left promiscuous mode [ 248.634427][ T2994] hsr_slave_1: left promiscuous mode [ 248.642406][ T2994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.654427][ T2994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.696174][ T2994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.739356][ T2994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.804522][ T2994] veth1_macvtap: left promiscuous mode [ 248.810293][ T2994] veth0_macvtap: left promiscuous mode [ 248.816627][ T2994] veth1_vlan: left promiscuous mode [ 248.822580][ T2994] veth0_vlan: left promiscuous mode [ 249.378379][ T5845] Bluetooth: hci1: command tx timeout [ 249.422320][ T2994] team0 (unregistering): Port device team_slave_1 removed [ 249.470046][ T2994] team0 (unregistering): Port device team_slave_0 removed [ 249.924486][T11636] infiniband syz0: set active [ 249.929817][T11636] infiniband syz0: set active [ 250.034559][ T5884] lo speed is unknown, defaulting to 1000 [ 250.125828][ T5912] lo speed is unknown, defaulting to 1000 [ 250.159092][T11587] chnl_net:caif_netlink_parms(): no params data found [ 250.289864][T11667] __nla_validate_parse: 5 callbacks suppressed [ 250.289887][T11667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1945'. [ 250.529097][T11587] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.573249][T11587] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.587103][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1952'. [ 250.606637][T11587] bridge_slave_0: entered allmulticast mode [ 250.633345][T11587] bridge_slave_0: entered promiscuous mode [ 250.757141][T11587] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.771697][T11587] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.789328][T11587] bridge_slave_1: entered allmulticast mode [ 250.823216][T11587] bridge_slave_1: entered promiscuous mode [ 250.967860][T11587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.000671][T11587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.156617][T11587] team0: Port device team_slave_0 added [ 251.179441][T11587] team0: Port device team_slave_1 added [ 251.373006][T11587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.411593][T11587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.450653][ T5845] Bluetooth: hci1: command tx timeout [ 251.514642][T11587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.563689][T11726] netlink: 'syz.1.1963': attribute type 5 has an invalid length. [ 251.587025][T11587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.605965][T11587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.632361][T11587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.851434][T11736] FAULT_INJECTION: forcing a failure. [ 251.851434][T11736] name failslab, interval 1, probability 0, space 0, times 0 [ 251.874591][T11736] CPU: 1 UID: 0 PID: 11736 Comm: syz.3.1967 Not tainted 6.13.0-rc7-syzkaller-00118-gd640627663bf #0 [ 251.885443][T11736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 251.895524][T11736] Call Trace: [ 251.898817][T11736] [ 251.901770][T11736] dump_stack_lvl+0x241/0x360 [ 251.906488][T11736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.911708][T11736] ? __pfx__printk+0x10/0x10 [ 251.916333][T11736] ? __kmalloc_noprof+0xb5/0x4c0 [ 251.921314][T11736] ? __pfx___might_resched+0x10/0x10 [ 251.926631][T11736] should_fail_ex+0x3b0/0x4e0 [ 251.931355][T11736] should_failslab+0xac/0x100 [ 251.936070][T11736] __kmalloc_noprof+0xdd/0x4c0 [ 251.940878][T11736] ? kobject_rename+0xf2/0x410 [ 251.945679][T11736] kobject_rename+0xf2/0x410 [ 251.950544][T11736] ? __pfx_kobject_rename+0x10/0x10 [ 251.955773][T11736] ? sysfs_rename_link_ns+0x182/0x1c0 [ 251.961164][T11736] device_rename+0x16a/0x200 [ 251.965966][T11736] cfg802154_switch_netns+0x202/0x3d0 [ 251.971358][T11736] nl802154_wpan_phy_netns+0x13d/0x210 [ 251.976852][T11736] genl_rcv_msg+0xb14/0xec0 [ 251.981498][T11736] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.986604][T11736] ? __pfx_lock_acquire+0x10/0x10 [ 251.991686][T11736] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 251.997182][T11736] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 252.003313][T11736] ? __pfx_nl802154_post_doit+0x10/0x10 [ 252.008874][T11736] ? __pfx___might_resched+0x10/0x10 [ 252.014233][T11736] netlink_rcv_skb+0x1e3/0x430 [ 252.019027][T11736] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.024081][T11736] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.029441][T11736] genl_rcv+0x28/0x40 [ 252.033566][T11736] netlink_unicast+0x7f6/0x990 [ 252.038376][T11736] ? __pfx_netlink_unicast+0x10/0x10 [ 252.043712][T11736] ? __virt_addr_valid+0x45f/0x530 [ 252.048875][T11736] ? __phys_addr_symbol+0x2f/0x70 [ 252.053936][T11736] ? __check_object_size+0x47a/0x730 [ 252.059250][T11736] netlink_sendmsg+0x8e4/0xcb0 [ 252.064064][T11736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.069366][T11736] ? aa_sock_msg_perm+0x91/0x160 [ 252.074346][T11736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.079681][T11736] __sock_sendmsg+0x221/0x270 [ 252.084409][T11736] ____sys_sendmsg+0x52a/0x7e0 [ 252.089228][T11736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.094558][T11736] ? __fget_files+0x2a/0x410 [ 252.099200][T11736] ? __fget_files+0x2a/0x410 [ 252.103851][T11736] __sys_sendmsg+0x269/0x350 [ 252.108535][T11736] ? __pfx_lock_release+0x10/0x10 [ 252.113612][T11736] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.118804][T11736] ? __pfx_vfs_write+0x10/0x10 [ 252.123647][T11736] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.130018][T11736] ? do_syscall_64+0x100/0x230 [ 252.134838][T11736] ? do_syscall_64+0xb6/0x230 [ 252.139578][T11736] do_syscall_64+0xf3/0x230 [ 252.144145][T11736] ? clear_bhb_loop+0x35/0x90 [ 252.148906][T11736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.154857][T11736] RIP: 0033:0x7fb273385d29 [ 252.159305][T11736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.178943][T11736] RSP: 002b:00007fb2711f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.187406][T11736] RAX: ffffffffffffffda RBX: 00007fb273575fa0 RCX: 00007fb273385d29 [ 252.195422][T11736] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 0000000000000004 [ 252.203423][T11736] RBP: 00007fb2711f6090 R08: 0000000000000000 R09: 0000000000000000 [ 252.211415][T11736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.219421][T11736] R13: 0000000000000000 R14: 00007fb273575fa0 R15: 00007ffd625d4c08 [ 252.227447][T11736] [ 252.239448][T11736] ------------[ cut here ]------------ [ 252.246022][T11736] WARNING: CPU: 1 PID: 11736 at net/ieee802154/core.c:258 cfg802154_switch_netns+0x3c7/0x3d0 [ 252.257534][T11736] Modules linked in: [ 252.261514][T11736] CPU: 1 UID: 0 PID: 11736 Comm: syz.3.1967 Not tainted 6.13.0-rc7-syzkaller-00118-gd640627663bf #0 [ 252.272991][T11736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 252.284129][T11736] RIP: 0010:cfg802154_switch_netns+0x3c7/0x3d0 [ 252.290409][T11736] Code: e1 07 38 c1 7c 92 48 89 ef e8 f5 1d 8a f6 eb 88 e8 3e b4 23 f6 e9 66 fe ff ff e8 34 b4 23 f6 e9 5c fe ff ff e8 2a b4 23 f6 90 <0f> 0b 90 e9 4e fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 252.310948][T11736] RSP: 0018:ffffc900031f73c8 EFLAGS: 00010293 [ 252.318215][T11736] RAX: ffffffff8b7bce46 RBX: 00000000fffffff4 RCX: ffff88807b390000 [ 252.326942][T11736] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 252.335524][T11736] RBP: ffff888027654198 R08: ffffffff8b7bcc90 R09: 1ffffffff2854b11 [ 252.343531][T11736] R10: dffffc0000000000 R11: fffffbfff2854b12 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 252.352565][T11736] R13: 0000000000000000 R14: ffff888027654078 R15: dffffc0000000000 [ 252.361283][T11736] FS: 00007fb2711f66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 252.370965][T11736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.378166][T11736] CR2: 000000110c382e66 CR3: 0000000052340000 CR4: 00000000003526f0 [ 252.386297][T11736] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.394644][T11736] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 252.402683][T11736] Call Trace: [ 252.407425][T11736] [ 252.410572][T11736] ? __warn+0x165/0x4d0 [ 252.415605][T11736] ? cfg802154_switch_netns+0x3c7/0x3d0 [ 252.421210][T11736] ? report_bug+0x2b3/0x500 [ 252.426354][T11736] ? cfg802154_switch_netns+0x3c7/0x3d0 [ 252.431931][T11736] ? handle_bug+0x60/0x90 [ 252.437263][T11736] ? exc_invalid_op+0x1a/0x50 [ 252.441983][T11736] ? asm_exc_invalid_op+0x1a/0x20 [ 252.447676][T11736] ? cfg802154_switch_netns+0x210/0x3d0 [ 252.453360][T11736] ? cfg802154_switch_netns+0x3c6/0x3d0 [ 252.459604][T11736] ? cfg802154_switch_netns+0x3c7/0x3d0 [ 252.466189][T11736] ? cfg802154_switch_netns+0x3c6/0x3d0 [ 252.471789][T11736] nl802154_wpan_phy_netns+0x13d/0x210 [ 252.477961][T11736] genl_rcv_msg+0xb14/0xec0 [ 252.482525][T11736] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.488318][T11736] ? __pfx_lock_acquire+0x10/0x10 [ 252.493927][T11736] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 252.499450][T11736] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 252.506741][T11736] ? __pfx_nl802154_post_doit+0x10/0x10 [ 252.512533][T11736] ? __pfx___might_resched+0x10/0x10 [ 252.518652][T11736] netlink_rcv_skb+0x1e3/0x430 [ 252.523470][T11736] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.529210][T11736] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.535703][T11736] genl_rcv+0x28/0x40 [ 252.539745][T11736] netlink_unicast+0x7f6/0x990 [ 252.545413][T11736] ? __pfx_netlink_unicast+0x10/0x10 [ 252.550770][T11736] ? __virt_addr_valid+0x45f/0x530 [ 252.556073][T11736] ? __phys_addr_symbol+0x2f/0x70 [ 252.561165][T11736] ? __check_object_size+0x47a/0x730 [ 252.567434][T11736] netlink_sendmsg+0x8e4/0xcb0 [ 252.572274][T11736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.578273][T11736] ? aa_sock_msg_perm+0x91/0x160 [ 252.583271][T11736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.589247][T11736] __sock_sendmsg+0x221/0x270 [ 252.594974][T11736] ____sys_sendmsg+0x52a/0x7e0 [ 252.599808][T11736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.605832][T11736] ? __fget_files+0x2a/0x410 [ 252.610489][T11736] ? __fget_files+0x2a/0x410 [ 252.615945][T11736] __sys_sendmsg+0x269/0x350 [ 252.620612][T11736] ? __pfx_lock_release+0x10/0x10 [ 252.626849][T11736] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.632034][T11736] ? __pfx_vfs_write+0x10/0x10 [ 252.637546][T11736] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.644561][T11736] ? do_syscall_64+0x100/0x230 [ 252.649399][T11736] ? do_syscall_64+0xb6/0x230 [ 252.654938][T11736] do_syscall_64+0xf3/0x230 [ 252.659506][T11736] ? clear_bhb_loop+0x35/0x90 [ 252.664386][T11736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.670341][T11736] RIP: 0033:0x7fb273385d29 [ 252.675471][T11736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.696205][T11736] RSP: 002b:00007fb2711f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.705311][T11736] RAX: ffffffffffffffda RBX: 00007fb273575fa0 RCX: 00007fb273385d29 [ 252.713509][T11736] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 0000000000000004 [ 252.722522][T11736] RBP: 00007fb2711f6090 R08: 0000000000000000 R09: 0000000000000000 [ 252.731553][T11736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.740189][T11736] R13: 0000000000000000 R14: 00007fb273575fa0 R15: 00007ffd625d4c08 [ 252.748886][T11736] [ 252.751960][T11736] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 252.759270][T11736] CPU: 1 UID: 0 PID: 11736 Comm: syz.3.1967 Not tainted 6.13.0-rc7-syzkaller-00118-gd640627663bf #0 [ 252.770069][T11736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 252.780175][T11736] Call Trace: [ 252.783494][T11736] [ 252.786470][T11736] dump_stack_lvl+0x241/0x360 [ 252.791196][T11736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.796448][T11736] ? __pfx__printk+0x10/0x10 [ 252.801073][T11736] ? _printk+0xd5/0x120 [ 252.805258][T11736] ? __init_begin+0x41000/0x41000 [ 252.810345][T11736] ? vscnprintf+0x5d/0x90 [ 252.814706][T11736] panic+0x349/0x880 [ 252.818618][T11736] ? __warn+0x174/0x4d0 [ 252.822789][T11736] ? __pfx_panic+0x10/0x10 [ 252.827249][T11736] __warn+0x344/0x4d0 [ 252.831249][T11736] ? cfg802154_switch_netns+0x3c7/0x3d0 [ 252.836816][T11736] report_bug+0x2b3/0x500 [ 252.841183][T11736] ? cfg802154_switch_netns+0x3c7/0x3d0 [ 252.846745][T11736] handle_bug+0x60/0x90 [ 252.850923][T11736] exc_invalid_op+0x1a/0x50 [ 252.855446][T11736] asm_exc_invalid_op+0x1a/0x20 [ 252.860325][T11736] RIP: 0010:cfg802154_switch_netns+0x3c7/0x3d0 [ 252.866494][T11736] Code: e1 07 38 c1 7c 92 48 89 ef e8 f5 1d 8a f6 eb 88 e8 3e b4 23 f6 e9 66 fe ff ff e8 34 b4 23 f6 e9 5c fe ff ff e8 2a b4 23 f6 90 <0f> 0b 90 e9 4e fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 252.886110][T11736] RSP: 0018:ffffc900031f73c8 EFLAGS: 00010293 [ 252.892209][T11736] RAX: ffffffff8b7bce46 RBX: 00000000fffffff4 RCX: ffff88807b390000 [ 252.900194][T11736] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 252.908174][T11736] RBP: ffff888027654198 R08: ffffffff8b7bcc90 R09: 1ffffffff2854b11 [ 252.916160][T11736] R10: dffffc0000000000 R11: fffffbfff2854b12 R12: 0000000000000000 [ 252.924158][T11736] R13: 0000000000000000 R14: ffff888027654078 R15: dffffc0000000000 [ 252.932177][T11736] ? cfg802154_switch_netns+0x210/0x3d0 [ 252.937744][T11736] ? cfg802154_switch_netns+0x3c6/0x3d0 [ 252.943316][T11736] ? cfg802154_switch_netns+0x3c6/0x3d0 [ 252.948896][T11736] nl802154_wpan_phy_netns+0x13d/0x210 [ 252.954393][T11736] genl_rcv_msg+0xb14/0xec0 [ 252.958943][T11736] ? __pfx_genl_rcv_msg+0x10/0x10 [ 252.964013][T11736] ? __pfx_lock_acquire+0x10/0x10 [ 252.969055][T11736] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 252.974647][T11736] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 252.980643][T11736] ? __pfx_nl802154_post_doit+0x10/0x10 [ 252.986205][T11736] ? __pfx___might_resched+0x10/0x10 [ 252.991509][T11736] netlink_rcv_skb+0x1e3/0x430 [ 252.996293][T11736] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.001339][T11736] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.006668][T11736] genl_rcv+0x28/0x40 [ 253.010684][T11736] netlink_unicast+0x7f6/0x990 [ 253.015498][T11736] ? __pfx_netlink_unicast+0x10/0x10 [ 253.020811][T11736] ? __virt_addr_valid+0x45f/0x530 [ 253.025951][T11736] ? __phys_addr_symbol+0x2f/0x70 [ 253.031002][T11736] ? __check_object_size+0x47a/0x730 [ 253.036316][T11736] netlink_sendmsg+0x8e4/0xcb0 [ 253.041109][T11736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.046419][T11736] ? aa_sock_msg_perm+0x91/0x160 [ 253.051374][T11736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.056675][T11736] __sock_sendmsg+0x221/0x270 [ 253.061380][T11736] ____sys_sendmsg+0x52a/0x7e0 [ 253.066174][T11736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.071473][T11736] ? __fget_files+0x2a/0x410 [ 253.076086][T11736] ? __fget_files+0x2a/0x410 [ 253.080713][T11736] __sys_sendmsg+0x269/0x350 [ 253.085322][T11736] ? __pfx_lock_release+0x10/0x10 [ 253.090365][T11736] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.095499][T11736] ? __pfx_vfs_write+0x10/0x10 [ 253.100297][T11736] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.106650][T11736] ? do_syscall_64+0x100/0x230 [ 253.111435][T11736] ? do_syscall_64+0xb6/0x230 [ 253.116146][T11736] do_syscall_64+0xf3/0x230 [ 253.120697][T11736] ? clear_bhb_loop+0x35/0x90 [ 253.125388][T11736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.131308][T11736] RIP: 0033:0x7fb273385d29 [ 253.135729][T11736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.155347][T11736] RSP: 002b:00007fb2711f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.163776][T11736] RAX: ffffffffffffffda RBX: 00007fb273575fa0 RCX: 00007fb273385d29 [ 253.171768][T11736] RDX: 0000000000000000 RSI: 0000000020000f40 RDI: 0000000000000004 [ 253.179742][T11736] RBP: 00007fb2711f6090 R08: 0000000000000000 R09: 0000000000000000 [ 253.187717][T11736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.195700][T11736] R13: 0000000000000000 R14: 00007fb273575fa0 R15: 00007ffd625d4c08 [ 253.203791][T11736] [ 253.207208][T11736] Kernel Offset: disabled [ 253.211615][T11736] Rebooting in 86400 seconds..